last executing test programs: 58.238786529s ago: executing program 3 (id=78): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x81, 0x4}, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 57.377741201s ago: executing program 3 (id=100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14050}, 0x200040c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 57.310222952s ago: executing program 3 (id=102): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x44200) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 57.200789654s ago: executing program 3 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090c32b0265ce2f8fd97a0f3699912b15b6122700d3e45663a351a6dc7916f18820cb9e55395135ce2588db0a66eac4528c42524728c95fc84a1d42e2fcbfc3d050029789c5b5295fa1d1c4fe7219326c347e1efb50dad85c86149029cf17b2d2db72dd0f686c3693b92dc88afb68f58a1b2f7ba25462c3abff75e03101224bdaabae51191f761d5b270071d713c9a62c34e5e2ef030046401ab389e4919611966d5bae35e6ec4af9e621e45c69f1fba7a6462eccf434e00ca26f89b7c70659fda00b8f7f1c6ecb0cb27dcef726d9d1807c3e96d02e73384ed02e37e18a329cfdfb8051c4a83e39f65284a67b68fc6ded7b7208dc5c637601aacc8154c684492cd2f68f69847c5374bb2d40019fbbf819d4a3b8d61695e5ec9f0f75da2d18d864cb8a5cefb9ad323614831e50d4bbf75d243a409e7ea50cf522cba97505fea0677acadcbb3c39c0e0c7cf48e83a12282c4d05b8c4d9f014b853d0326b12"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000240)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[r4], &(0x7f0000000340), 0x0, 0x300}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) setresgid(r5, r5, r5) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 57.119791477s ago: executing program 3 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x25, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x35, 0x25]}}]}) 54.630867425s ago: executing program 3 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%+9llu \x00'}, 0x20) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000dc0)={0xd, [0x400, 0x7fffffff, 0xfffffffe], [{0xd, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x7825, 0x8001, 0x0, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x4, 0xd}, {0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x6, 0x0, 0x1}, {0x3, 0xb, 0x1}, {0xfff, 0xfffffffe, 0x0, 0x1}, {0x315f, 0x5, 0x0, 0x0, 0x1}, {0x80f0, 0x54d, 0x0, 0x1, 0x1}, {0x200, 0x2, 0x0, 0x1, 0x0, 0x1}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)=r0}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@dev, 0x0}, &(0x7f0000000600)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) r10 = fsopen(&(0x7f0000000340)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#%::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pS \x00'}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r5}, 0x8) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="020000000400000008000000010000008000000050b13cebb5749d57bd930f7edba34a85429ed7f6a5405a62225325792be1bf89b2f3488aac770e700524c1677a638214fe5a4cbd48281cce3c6bb814c11fb85d7da932c2f2a11e0a00000000000000", @ANYRES32=r12, @ANYBLOB="bfa3487800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000400"/28], 0x50) r16 = memfd_secret(0x0) r17 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xb, 0x24, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186900000100000000000000070000008510000004000000186100000a000000000000000800000018160000", @ANYRES32=r5, @ANYBLOB="000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000003000000018230000a9cebefdeef3b70ff3a54ed3b38de3a893fdd767060884a75935c5f9a5e068e4838c5d5048b30421a1b0828506c0f86559fbbb30cd084019b8300eb68b4bb8fd1db282c0ab981c420dca2dec1e7d9417", @ANYRES32, @ANYBLOB="0000000004000000"], &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', r7, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x6, 0x400, 0xfe000000}, 0x10, r9, r0, 0x8, &(0x7f0000000a00)=[r11, r12, r13, 0xffffffffffffffff, r14, r15, r16, r17], &(0x7f0000000a40)=[{0x3, 0x2, 0x7, 0xc}, {0x3, 0x4, 0x0, 0x4}, {0x0, 0x1, 0xa, 0xa}, {0x0, 0x2, 0x10, 0xc}, {0x0, 0x1, 0x9, 0x7}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x5, 0xd, 0x7}, {0x3, 0x1, 0xb, 0x5}], 0x10, 0xc4}, 0x94) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="88450300000000002c00128009000100626f6e64000000001c000280050001000600000008000200", @ANYBLOB="0b70bbad431b9b18eed43ed8375d854d390705a56e6b3639c5b71e6d39abc64b6221cf6717b0230ef205711d8b3ad26056", @ANYBLOB="08001400"], 0x4c}, 0x1, 0x0, 0x0, 0x20000894}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_kthread_stop\x00', r0}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000100000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 54.602603648s ago: executing program 32 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%+9llu \x00'}, 0x20) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250701f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be3107b1351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be0800e900f8ffffff00"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000dc0)={0xd, [0x400, 0x7fffffff, 0xfffffffe], [{0xd, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x7825, 0x8001, 0x0, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x4, 0xd}, {0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x6, 0x0, 0x1}, {0x3, 0xb, 0x1}, {0xfff, 0xfffffffe, 0x0, 0x1}, {0x315f, 0x5, 0x0, 0x0, 0x1}, {0x80f0, 0x54d, 0x0, 0x1, 0x1}, {0x200, 0x2, 0x0, 0x1, 0x0, 0x1}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)=r0}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@dev, 0x0}, &(0x7f0000000600)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) r10 = fsopen(&(0x7f0000000340)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#%::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pS \x00'}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r5}, 0x8) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="020000000400000008000000010000008000000050b13cebb5749d57bd930f7edba34a85429ed7f6a5405a62225325792be1bf89b2f3488aac770e700524c1677a638214fe5a4cbd48281cce3c6bb814c11fb85d7da932c2f2a11e0a00000000000000", @ANYRES32=r12, @ANYBLOB="bfa3487800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000400"/28], 0x50) r16 = memfd_secret(0x0) r17 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xb, 0x24, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186900000100000000000000070000008510000004000000186100000a000000000000000800000018160000", @ANYRES32=r5, @ANYBLOB="000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000003000000018230000a9cebefdeef3b70ff3a54ed3b38de3a893fdd767060884a75935c5f9a5e068e4838c5d5048b30421a1b0828506c0f86559fbbb30cd084019b8300eb68b4bb8fd1db282c0ab981c420dca2dec1e7d9417", @ANYRES32, @ANYBLOB="0000000004000000"], &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', r7, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x6, 0x400, 0xfe000000}, 0x10, r9, r0, 0x8, &(0x7f0000000a00)=[r11, r12, r13, 0xffffffffffffffff, r14, r15, r16, r17], &(0x7f0000000a40)=[{0x3, 0x2, 0x7, 0xc}, {0x3, 0x4, 0x0, 0x4}, {0x0, 0x1, 0xa, 0xa}, {0x0, 0x2, 0x10, 0xc}, {0x0, 0x1, 0x9, 0x7}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x5, 0xd, 0x7}, {0x3, 0x1, 0xb, 0x5}], 0x10, 0xc4}, 0x94) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="88450300000000002c00128009000100626f6e64000000001c000280050001000600000008000200", @ANYBLOB="0b70bbad431b9b18eed43ed8375d854d390705a56e6b3639c5b71e6d39abc64b6221cf6717b0230ef205711d8b3ad26056", @ANYBLOB="08001400"], 0x4c}, 0x1, 0x0, 0x0, 0x20000894}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_kthread_stop\x00', r0}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000100000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.109749669s ago: executing program 1 (id=1212): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000e80)=[{&(0x7f0000000080)="c034bfde708b008e43fd787d58212193d45a", 0x12}, {&(0x7f0000000680)="39d4339a70a9da665f460b9bb01721b979a09d4a57091d6761460e98773f52328a1eb6009e21c7755e1acca5c7c97463631c662bb5133011c2775086c10425c5d5cb2a463789e1ad7daad17ed111bfd8cb4b9632bd7abbfbe48e3fd9ede6548e645eb46655d146ceea8ad7055e070eff142a5130fd0977a6381a060cba38e9da6773704429098dd6", 0x88}, {&(0x7f0000000940)="14a6790e0f4269f5e9db3d2891410cab3ee4b8c533f7d4c679b916374897a7cb02afa5e708f6ec36a9a66fd4ebd6077a29d6118273afea807341c0284cb58fc5cb881465b2357005c5a72f9eba0c46215723da0854ad4cf474bd869f7038bd54e38336b27f88435c58ee64316e4ca286c8df3cb91ba5c56923aabc842b85cb0f247d202f5612da77c3ef1c5d9393f1c70042ecb3e1dc3715265d5bd506369601bea6bd3d66e59ccabd739a257c965be14425b46b13220b56adbff7fe81220a060aa1c80930a7914fdf5b600c6d5c587a065f92732ecaf967a85383", 0xdb}, {&(0x7f00000007c0)="d03357347d5fcd5a281065ddaff636b51672a14b35b50615683e748835c9578a2143ca48ee9b5e6c9262ab4a9acecdcb4cf01bc118ef05a2b2e49eff5c2ebf76a890e703e24ac3ba34f27ec6637738e8db3c", 0x52}, {&(0x7f00000001c0)="7e3ff8a5d0041badf2ad7b4b40f7", 0xe}, {&(0x7f0000000a40)="18b45f7700c10ee9400fb32381a20be4166d5ea7f330723c9e0341a418dce764c69886bb31137882b33b42acd308ccfee30f15c66c3026f55d540307c57e3640a4f62f9184f90719ffe107dd9348d948e41e58da70134a8f7bb11336a9e51e15774cfec1ba19cf7463d9136f5277494452def21622930d9bcdaba81c15030424f714b04e53263d4f20a2b5de607f82514304db2bbf8836c76bb467f32b1d804cedcf6743beb270eb34286169ab9686b0e9ec1029af86a524555182bb3a6ac09918227b", 0xc3}, {&(0x7f0000000b40)="b8468bcfdaa705ce6eb4712996d899342b484c779dcbc22d80f0ba5139e5a218ba57124eb5817dcd5771af216e9b48500c3262c2c0e09bbdf60e93694ad6cd0e92542ac88158fa2f38112b8b25a3a0094fe5eb45eac8cafab01b26806347823059047eaaaf8089d1a11b5c9a5eff75474ac11a5a06445c78f0d5f4cf45bf6ddc0511cb64ce2dddd6", 0x88}, {&(0x7f0000000c00)="8e77a2d2442154ce8ea7d365a7ae8c7d55241d81a0b2059bc2d36a5a83ed72c2c441727e41b83fad202df6f28929c8cc953a4a0587c57ce76f3171fb52bd1fcabc7dd4f910aa69d4ebb1da5c81aed9641e7c9e1adce6c95a5c7b683518d0622925e48ea01a877621cb291f0f69d4ed9686b7cd9c49ac21bab032c6e1eed6d3bb24792952ea863a6896d6e549ced89e5b02797534fa4198a4a5f2a32a54a0afbbb4b9e23825eb9caae2820cb5fa2c25cbd732d379f74643e87935612bd172fc23fba7be5e03d7eade4b0c4ca0e9cb967dbdedd1ed3bd81cb038360589e3e9b6bed9640247df5e197a263b96836b1b64", 0xef}, {&(0x7f0000000d00)="ddc5d9bf82a9f597bd2b6bf62fce9aa049da1bcfb28d17a5c57c159a195f4f057764e12e626382b22876718cc4f9dbfc174ef4dd5008dc67eb4641e8b30b49807385f7c36c7aefcc01ffbf880cd7e25ca77b2b7c22d1eb77f7ef32926116f94d02cd0029a94adcc9442236c993f8bcf8ecb2656b617a6e93244d542d48ae27e69fa7708fea50343a7c9659ad26", 0x8d}], 0x9) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x48800) shutdown(r0, 0x1) 1.109288379s ago: executing program 1 (id=1214): pause() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000338000480340001800b0001006e756d67656e000024000280080004400000000408000340000000000800024000000007080001400000000e0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a415e011cb4d68226aee51f3340c6c57ba20390961999f6170c21901d6264021931ff1cae81f5fcc743fdf7a8aec6eb34d5a0bddcc89d6ae3f994f89050aa6de8f17d567ddbc8d1a8608140335882819309b3862951fc669c0b091dce5e1970c041c5514e3e7b7f05"], 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) semget$private(0x0, 0x4, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000bc0)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b4b, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.044671507s ago: executing program 4 (id=1218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 966.122522ms ago: executing program 0 (id=1221): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'gre0\x00'}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 900.390592ms ago: executing program 0 (id=1222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000e80)=[{&(0x7f0000000080)="c034bfde708b008e43fd787d58212193d45a", 0x12}, {&(0x7f0000000680)="39d4339a70a9da665f460b9bb01721b979a09d4a57091d6761460e98773f52328a1eb6009e21c7755e1acca5c7c97463631c662bb5133011c2775086c10425c5d5cb2a463789e1ad7daad17ed111bfd8cb4b9632bd7abbfbe48e3fd9ede6548e645eb46655d146ceea8ad7055e070eff142a5130fd0977a6381a060cba38e9da6773704429098dd6", 0x88}, {&(0x7f0000000940)="14a6790e0f4269f5e9db3d2891410cab3ee4b8c533f7d4c679b916374897a7cb02afa5e708f6ec36a9a66fd4ebd6077a29d6118273afea807341c0284cb58fc5cb881465b2357005c5a72f9eba0c46215723da0854ad4cf474bd869f7038bd54e38336b27f88435c58ee64316e4ca286c8df3cb91ba5c56923aabc842b85cb0f247d202f5612da77c3ef1c5d9393f1c70042ecb3e1dc3715265d5bd506369601bea6bd3d66e59ccabd739a257c965be14425b46b13220b56adbff7fe81220a060aa1c80930a7914fdf5b600c6d5c587a065f92732ecaf967a85383", 0xdb}, {&(0x7f00000007c0)="d03357347d5fcd5a281065ddaff636b51672a14b35b50615683e748835c9578a2143ca48ee9b5e6c9262ab4a9acecdcb4cf01bc118ef05a2b2e49eff5c2ebf76a890e703e24ac3ba34f27ec6637738e8db3c", 0x52}, {&(0x7f00000001c0)="7e3ff8a5d0041badf2ad7b4b40f7", 0xe}, {&(0x7f0000000a40)="18b45f7700c10ee9400fb32381a20be4166d5ea7f330723c9e0341a418dce764c69886bb31137882b33b42acd308ccfee30f15c66c3026f55d540307c57e3640a4f62f9184f90719ffe107dd9348d948e41e58da70134a8f7bb11336a9e51e15774cfec1ba19cf7463d9136f5277494452def21622930d9bcdaba81c15030424f714b04e53263d4f20a2b5de607f82514304db2bbf8836c76bb467f32b1d804cedcf6743beb270eb34286169ab9686b0e9ec1029af86a524555182bb3a6ac09918227b", 0xc3}, {&(0x7f0000000b40)="b8468bcfdaa705ce6eb4712996d899342b484c779dcbc22d80f0ba5139e5a218ba57124eb5817dcd5771af216e9b48500c3262c2c0e09bbdf60e93694ad6cd0e92542ac88158fa2f38112b8b25a3a0094fe5eb45eac8cafab01b26806347823059047eaaaf8089d1a11b5c9a5eff75474ac11a5a06445c78f0d5f4cf45bf6ddc0511cb64ce2dddd6", 0x88}, {&(0x7f0000000c00)="8e77a2d2442154ce8ea7d365a7ae8c7d55241d81a0b2059bc2d36a5a83ed72c2c441727e41b83fad202df6f28929c8cc953a4a0587c57ce76f3171fb52bd1fcabc7dd4f910aa69d4ebb1da5c81aed9641e7c9e1adce6c95a5c7b683518d0622925e48ea01a877621cb291f0f69d4ed9686b7cd9c49ac21bab032c6e1eed6d3bb24792952ea863a6896d6e549ced89e5b02797534fa4198a4a5f2a32a54a0afbbb4b9e23825eb9caae2820cb5fa2c25cbd732d379f74643e87935612bd172fc23fba7be5e03d7eade4b0c4ca0e9cb967dbdedd1ed3bd81cb038360589e3e9b6bed9640247df5e197a263b96836b1b64", 0xef}, {&(0x7f0000000d00)="ddc5d9bf82a9f597bd2b6bf62fce9aa049da1bcfb28d17a5c57c159a195f4f057764e12e626382b22876718cc4f9dbfc174ef4dd5008dc67eb4641e8b30b49807385f7c36c7aefcc01ffbf880cd7e25ca77b2b7c22d1eb77f7ef32926116f94d02cd0029a94adcc9442236c993f8bcf8ecb2656b617a6e93244d542d48ae27e69fa7708fea50343a7c9659ad26", 0x8d}], 0x9) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x48800) shutdown(r0, 0x1) 900.202386ms ago: executing program 0 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00", @ANYBLOB="4ccef139dc"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = socket$inet6(0xa, 0x2, 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000300)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000500)={0x3ff, 0x0, 0x4, {0x9, @raw_data="e63e09b33e64369d8dae60e1e6e735d73f64ea1b51edd82d923da428ca836d3295d0c9b12d3bb819c276dfe5003698b901165421f38b48f2e58e6d50f68960de10a1d05064227456803708d41adaff2023ccc507000000b81433647f5d5aee7df2e720448f2fbfc7684178ad817581d3180327796bbec48401556e4429464b7514dcc765288d05c22b02aec6e7cf0e0991b0d8c7bae62d5c2c67542265f7197d9d534aa3f543e7563ccc4bd3e3e7f137e4fd5538e16f7aa9f3b545ae927ed6afc98f34332d0d43d7"}, 0x9}) sendmsg$nl_route_sched(r9, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newtaction={0x12c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x118, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0xc8, 0x2, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x12c}}, 0x0) 900.068283ms ago: executing program 4 (id=1224): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r1, 0x2) listen(r1, 0x0) 850.114418ms ago: executing program 4 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r2, 0x0, r2) quotactl$Q_GETQUOTA(0xffffffff80000700, 0x0, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setresuid(r2, r4, 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x58, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x97d}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) 848.726359ms ago: executing program 4 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x3, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xfffffffffffffffe, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 778.974283ms ago: executing program 0 (id=1227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0x3f, 0x3f, &(0x7f0000000680)="b9ff05000000268cb88567f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f000000283700000441664aa6000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffed8, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r8, 0x0, &(0x7f0000000900)=""/4109}, 0x20) (async) r9 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$tun(r9, &(0x7f0000000280)={@val={0x0, 0x8809}, @val={0x2, 0x3, 0xfffc, 0x9, 0x1, 0x8}, @llc={@llc={0x80, 0x2, "b9"}}}, 0x11) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x8, 0x8, 0x7f, 0x800, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x4}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x23, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff81}, {}, {}, [@map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x6a}, @tail_call, @generic={0x5a, 0x5, 0x7, 0x200}, @map_fd={0x18, 0x9}, @alu={0x7, 0x0, 0x1, 0x0, 0x8, 0x2, 0xffffffffffffffff}, @tail_call, @jmp={0x5, 0x1, 0x0, 0x0, 0x3, 0x1, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000001ac0)=""/4096, 0x40f00, 0xa, '\x00', r3, @fallback=0x1f, r4, 0x8, &(0x7f0000000640)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x8, 0x8, 0x8}, 0x10, 0x0, r5, 0x0, &(0x7f00000007c0)=[r6, r8, r9, r10, r11], 0x0, 0x10, 0x5}, 0x94) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r12, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "7ea08680448ae1cd0313388152f6a5dcd36f82e3050721215ed97a9793ecd18a42"}}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="1f000100"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 32) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080020000100000080"], 0x48) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r14}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22) 609.960742ms ago: executing program 4 (id=1230): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000013c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 533.040217ms ago: executing program 4 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x593100, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='PHONEIN\nTREBLE \'M'], 0xa8) close(r2) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) read(r3, &(0x7f0000000040)=""/52, 0x34) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async, rerun: 64) readv(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001240000621000500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f7274"], 0x58}}, 0x0) 532.769525ms ago: executing program 0 (id=1234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x128, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xfb, 0x6, "77280ee22b3cb086d088d40059da0c45b174a63b1aaa1a20c5026cddb32e9ae3d2498a43dcb40be92ffe3dad79ff9bef3f7d60760cafb27a38aaf563899e078e6ea07dee630d3e65c78033b34916a01f7d87a181ffbc537858316ef182ff1eab83787ca2c60ed4370d4f0baf2d0dc520114cbf1019d95bf9365c939bd739e10905bb1bd196be3d6bc05acae85175971dbb1e0fb06f8b78b4e3975b01a9215b2fddf75836fced33293145ae56b2ea73911f14ea0d7456e25cf00632f1d9af0e6b1a9e8b684fe769f79f218633b95452fc5011bf2625bdaff70c98f2ee250368de0a43155ba3a20ff4bade141bb61a824cf6b098d94043f0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1a4}}, 0x0) 470.102127ms ago: executing program 0 (id=1236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r2, r2, 0x0, 0xc3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0f05660f38804259c4c121eec00f229f660f7f95000000000f109a000000660fe5e766ba200066ed66baf80cb86a342288ef66bafc0cb001ee66b897000f00d8", 0x40}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000240)={0x5, 0xc, {0x0}, {0xffffffffffffffff}, 0x7, 0x1}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={'\x00', 0x5, 0xd, 0xd19, 0x8001, 0x4000006, r4}) syz_open_procfs(r5, &(0x7f0000000200)='net/sctp\x00') r6 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) io_uring_enter(r6, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f00000003c0), 0x0}, 0x20) r8 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x400001, 0x0) read$snddsp(r9, &(0x7f0000000180)=""/8, 0x8) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="150000010000ff097b000008003950323030302e4c09852dae06d8e22cb1f42e0ca4df5cffd8f369b4b580000000000000000000000000000000b75c289645dfc6a5801de30b64088fedbbcf4d99c31b3112ca57ca7d331a2cf164812681d411879e464ce6979589f8077a4aa32430eb17f0125cf86a44e0cdf9912f7a7ac489421becf2e2ca037b0d3b484d3a75cae04985ca7a22012369dcb5c6e7579e87c401df43889914239ba9cd7788e2e81f9ca300"/188], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18, 0xfffffffffffffff5}, 0x18) r13 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000000)=0xc59f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) write$FUSE_DIRENTPLUS(r12, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r9, @ANYRES64=r7, @ANYRES32=r9, @ANYBLOB="a03f", @ANYRES32=r13], 0x10) write$FUSE_DIRENTPLUS(r12, &(0x7f0000000280)=ANY=[], 0xa8) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000000c0), 0x2220008, &(0x7f0000000400)=ANY=[@ANYBLOB="f3dc1b258586e275ef8889453a1f61", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',cache=readahead,version=9p2000.u,cache=loose,cache=readahead,\x00']) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r8, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x600, 0xffffffff}, {0x2, 0x7fff}, {0x0, 0xffff}, {0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x42}, {}, {}, {0x0, 0x89}, {0x0, 0x10200000}], 0x10}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 310.302952ms ago: executing program 2 (id=1238): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_access(r1, 0x0, 0xfffffffffffffc2d) read(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000006a00040026bd7000fbdbdf25020000000000000008000a000200000008000500", @ANYRES32=r8, @ANYBLOB="0800b0455dc9cdb0dc6f5da1f3c7cf17c3314f23cf8cd400bcc421c871f710f2d2eb6412877b292974868add847d93173c82eaf00b580345e47b3f83d7b7400fc0284eb1e0601f2a23fc4f8a13e830773a9e590746f3209dec18415eec7c090f88c581f5fdefef", @ANYRES32=r8, @ANYBLOB="04000b00"], 0x3c}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000040), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r10, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) ioctl$PPPOEIOCDFWD(r10, 0xb101, 0x0) tkill(r9, 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xef}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000000000001800000000000000001000000e0000000200000000000000180000000000000004000000030000000200000000000000180000000000000008000000ff03000002000000000000001800000000000000bd0c00005a0a000002000000000000001800000000000000040000000080000002000000000000001800000000000000840e00000700000001000000000000003e0000000000000066410f602a7c0066b808010f00d0470f01f866baa000b088ee36430f07f0ff0b410faf4c31640f01c444db5046c302000000000000001800000000000000000000000100000001000000000000006b000000000000003640dff66666460fa7c0262e0fe01479660f38812b0f01c1b9800000c00f3235000100000f30430f01c566b8ad000f00d048b8688a7677000000000f23c80f21f835040020000f23f8b998000040b8c9000000ba000000000f30c3020000000000000018000000000000000a080000ff0f00000100000000000000590000000000000040cb6465653e6565660f3a16e40b66ba4300b000ee66470f38820d59000000670fc728b8010000000f01d966450f3881b96d070000440f09c4e18ddf4ac0c423ad79b36c00c0fe9cc30200000000003f00001800000000000000060000000900000001000000000000006500000000000000b805000000b9008000000f01c10f18d3400f80a1ab0000360f73d18d0f6e3fc4e1edd3ae7462717866baf80cb8984a3080ef66bafc0cb8777a0000ef36f30fc7b45d4300000066b853000f00d8b9ab0a00000f32c302000000000000001800000000000000060000000100000002000000000000001800000000000000070000000500000000000000000000001800000000000000000000000000000000000000000000001800000000000000030000000000000001000000000000007c000000000000002e6564430f00d248b807000000000000000f23c00f21f835000003000f23f84f0fc7592fb9800000c00f3235004000000f30440f01c3c744240081000000c74424025c7e0000ff1c24f3430f7ee4430f01c266baf80cb83ac5848cef66bafc0c66edc4e1f81786da07925ec302000000000000001800000000000000060000000200000000000000000000001800000000000000240000000000000001000000000000005800000000000000660f388125c6b053e866dd7580470f009b00000000640fac72e400f39048b854b10000000000000f23d80f21f835800000200f23f866b835018ed0440f09450f18c866400f2c28c30200000000000000180000000000000005000000030000"], 0x3bb}) ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000180)={0x11, 0x2, 0x2}) 308.63349ms ago: executing program 2 (id=1239): r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f0000000040)={r1}) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) (rerun: 32) r2 = signalfd4(r1, &(0x7f00000000c0)={[0x7]}, 0x8, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0xff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xcd50}, {0x6, 0x11, 0xfffc}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0xffffff5b}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) (async) r4 = syz_io_uring_complete(0x0) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x42c, 0x3f3, 0x2, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x24, [0xe, 0x2, 0xd, 0x10, 0x3, 0xfffff1ff, 0x2, 0x1000, 0x2, 0x9, 0x9, 0x5, 0xfffffff8, 0xab70, 0x5, 0x4, 0x80000001, 0x9, 0xffff9965, 0x5, 0x3, 0xfffffff6, 0x5, 0x800, 0x2, 0x0, 0x5, 0x7, 0xfffffff8, 0x7ff, 0x10, 0xfffff0fe, 0x401, 0x3, 0x7, 0x90, 0xfffff4db, 0x3, 0xaa2, 0x1, 0x1173, 0xe, 0xbf, 0x6, 0x7, 0x1, 0xd48d, 0x81, 0x2, 0x4, 0x2, 0x7, 0x0, 0x80000001, 0xe6, 0xc4, 0x3, 0x1, 0x0, 0x749, 0xfffffff4, 0x3ff, 0xfff, 0xffff], [0xffffffff, 0x3, 0xa0000000, 0x1, 0x8000, 0xe, 0x8, 0x83, 0x17b7, 0x9, 0x4, 0x8, 0x2, 0x81, 0x7, 0x10, 0x0, 0x101, 0x9, 0x400, 0x0, 0x6000, 0x5, 0x9, 0xd8, 0xf, 0x8, 0x4, 0x6, 0x80000000, 0x6, 0x3ff, 0x7ade5a56, 0xfffffffa, 0xd, 0x2, 0x4, 0x7, 0xeea, 0x2, 0xcaa, 0x8, 0x8, 0xe67, 0x3, 0x4, 0x7f, 0x6, 0xfffffff9, 0x7, 0x2, 0x8, 0x2, 0x3, 0xaf, 0xfffffffa, 0x5, 0x2, 0x10000, 0x5, 0x8, 0x1, 0x2, 0x7fffffff], [0xfffffffd, 0x9, 0x3, 0x3e, 0x3, 0x1, 0x81, 0x6, 0x7ebe6339, 0x5, 0x6, 0x2, 0xff, 0xc, 0x4, 0x10000, 0x3, 0x10, 0xe39, 0x200, 0x4, 0x4, 0x7, 0x3, 0xffffffff, 0x7fffffff, 0x6, 0x9, 0x9, 0x7, 0x5, 0xffff, 0x3, 0x2, 0x8, 0x3, 0x6, 0x5, 0x20000000, 0x26880000, 0x354c, 0x6, 0x1000, 0x9, 0xfffffff8, 0x2, 0x4, 0x9d, 0x80000001, 0x6, 0x4, 0x0, 0x452, 0x4, 0x8, 0x6, 0x2, 0x2, 0x80000001, 0x2ba6, 0x80000000, 0x7, 0x3, 0x9], [0x7, 0xd4, 0x7, 0x7f, 0x9, 0x0, 0x8, 0x3, 0x6, 0x9, 0x2, 0x8, 0x7, 0x9, 0x9, 0xfffffff2, 0x8, 0x3ff, 0x85, 0x8dc, 0xa, 0xf, 0xb, 0x4, 0x6, 0x1, 0x4, 0x0, 0x10, 0x100000, 0x7, 0xe42, 0x100, 0x30, 0xfffffffe, 0x7, 0x3, 0x200, 0x1, 0x5, 0x9, 0xc9, 0x0, 0x5, 0x401, 0x7, 0x7, 0x4, 0x7, 0x4ae, 0x2, 0x2, 0x7, 0xf122, 0x10001, 0x5, 0xd0000000, 0x1ff, 0x9, 0x9, 0x0, 0x7fffffff, 0x1000, 0x5], 0xb, ['+.\x00', 'devlink\x00']}, ["", "", "", "", "", ""]}, 0x42c}}, 0x800c001) (async) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002840)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f0000002940)=0xe8) write$FUSE_ATTR(r0, &(0x7f0000002980)={0x78, 0x0, r5, {0x0, 0xb, 0x0, {0x5, 0x1ff, 0x200, 0x6, 0x100000000, 0x5, 0x5, 0x5, 0x6, 0x3d40b41f337a3978, 0x0, r9, 0xee01, 0x0, 0x80000000}}}, 0x78) (async, rerun: 64) r10 = accept4$tipc(r1, &(0x7f0000002a00)=@name, &(0x7f0000002a40)=0x10, 0x80000) (rerun: 64) pread64(r10, &(0x7f0000002a80)=""/4096, 0x1000, 0x800) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000003a80)) (async) ioctl$int_in(r2, 0xa8a4, &(0x7f0000003ac0)=0x8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003b00)={{{@in6=@mcast1, @in6=@remote, 0x4e20, 0x9a, 0x4e23, 0x4, 0x2, 0x80, 0x0, 0x3a, r8, r6}, {0x400, 0xfffffffffffffff8, 0x7, 0x25e, 0xcb200000000000, 0x5, 0x6, 0x8}, {0x1, 0x9b, 0x9, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x1, 0x6, 0x4, 0x0, 0x8}}, 0xe8) (async) sendmsg$netlink(r0, &(0x7f0000003e40)={&(0x7f0000003c00)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000003e00)=[{&(0x7f0000003c40)={0x6c, 0x1f, 0x414968eb77b51d57, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x11e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="5e7ef91f95db8db4e783a85ddaebb9cc50b024817256d2c3de0ab8d56551821c996b9f973a93cb140bf0f4d196e7b7536d10d69a434d73ddb66f07be8a9d3f4af8b23e316c69e56ee1a777fbbb03b2656036"]}, 0x6c}, {&(0x7f0000003cc0)={0x140, 0x3f, 0x8, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x2f, 0x0, 0x0, @uid=r6}, @nested={0xc, 0xdf, 0x0, 0x1, [@nested={0x4, 0x6f}, @nested={0x4, 0x11f}]}, @typed={0x8, 0x145, 0x0, 0x0, @pid=r7}, @generic="6a820fe662bda3cc0b1e12447844851dc0371db8c8907d096ee26295919fb329ceb5759b0f8c9d2d4b47142565fabaead88b36be5b190b6185e2b19ba8465ca5566e1ade324e7558d408157fab6c28d71363584eb903695b5c925f8d74f21af4c9280d769d54b96c808f1e1f6dbbcf206ffeb5d0177ff73bee3b78701045495096eac9e248d87383255f51ec43f3746addf865864bdb8064b53e6b39e3c1cd8f3e7ea586bd5f385626a70a240ee883e9db4f4dd5ef87f1b3213739afffc522bf82165b03555769ae0f4e0736369e2d88ffa41fbab455525c5b6e", @nested={0x28, 0xfe, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @uid=r9}, @typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xe3}, @nested={0x4, 0x11c}]}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x8, 0x16, 0x0, 0x1, [@typed={0x4, 0x43}]}]}, 0x140}], 0x2}, 0x8001) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000003e80)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r11, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x40, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff90}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) syz_genetlink_get_family_id$SEG6(&(0x7f0000003fc0), r1) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004040), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000004380)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004080)={0x29c, r12, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x918}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff742f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb51}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xda}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc37}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2876, @local, 0xcd5}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4d94}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb68}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d0) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async, rerun: 32) ioctl$VT_DISALLOCATE(r2, 0x5608) (async, rerun: 32) ioctl$KVM_RUN(r1, 0xae80, 0x0) r13 = socket$isdn(0x22, 0x3, 0x24) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000004400)=@o_path={&(0x7f00000043c0)='./file0\x00', r2, 0x4000, r13}, 0x18) 230.411532ms ago: executing program 2 (id=1240): setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffeb, 0xfff3}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x13a5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 229.731137ms ago: executing program 2 (id=1241): unshare(0x68040200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4180, 0x0) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x3, 0x220c1) close_range(r0, r1, 0x2) 160.545011ms ago: executing program 1 (id=1242): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001280)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x8, 0xe}, {0x2, 0x4}}}, 0x24}}, 0x0) 160.151013ms ago: executing program 1 (id=1243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000e80)=[{&(0x7f0000000080)="c034bfde708b008e43fd787d58212193d45a", 0x12}, {&(0x7f0000000680)="39d4339a70a9da665f460b9bb01721b979a09d4a57091d6761460e98773f52328a1eb6009e21c7755e1acca5c7c97463631c662bb5133011c2775086c10425c5d5cb2a463789e1ad7daad17ed111bfd8cb4b9632bd7abbfbe48e3fd9ede6548e645eb46655d146ceea8ad7055e070eff142a5130fd0977a6381a060cba38e9da6773704429098dd6", 0x88}, {&(0x7f0000000940)="14a6790e0f4269f5e9db3d2891410cab3ee4b8c533f7d4c679b916374897a7cb02afa5e708f6ec36a9a66fd4ebd6077a29d6118273afea807341c0284cb58fc5cb881465b2357005c5a72f9eba0c46215723da0854ad4cf474bd869f7038bd54e38336b27f88435c58ee64316e4ca286c8df3cb91ba5c56923aabc842b85cb0f247d202f5612da77c3ef1c5d9393f1c70042ecb3e1dc3715265d5bd506369601bea6bd3d66e59ccabd739a257c965be14425b46b13220b56adbff7fe81220a060aa1c80930a7914fdf5b600c6d5c587a065f92732ecaf967a85383", 0xdb}, {&(0x7f00000007c0)="d03357347d5fcd5a281065ddaff636b51672a14b35b50615683e748835c9578a2143ca48ee9b5e6c9262ab4a9acecdcb4cf01bc118ef05a2b2e49eff5c2ebf76a890e703e24ac3ba34f27ec6637738e8db3c", 0x52}, {&(0x7f00000001c0)="7e3ff8a5d0041badf2ad7b4b40f7", 0xe}, {&(0x7f0000000a40)="18b45f7700c10ee9400fb32381a20be4166d5ea7f330723c9e0341a418dce764c69886bb31137882b33b42acd308ccfee30f15c66c3026f55d540307c57e3640a4f62f9184f90719ffe107dd9348d948e41e58da70134a8f7bb11336a9e51e15774cfec1ba19cf7463d9136f5277494452def21622930d9bcdaba81c15030424f714b04e53263d4f20a2b5de607f82514304db2bbf8836c76bb467f32b1d804cedcf6743beb270eb34286169ab9686b0e9ec1029af86a524555182bb3a6ac09918227b", 0xc3}, {&(0x7f0000000b40)="b8468bcfdaa705ce6eb4712996d899342b484c779dcbc22d80f0ba5139e5a218ba57124eb5817dcd5771af216e9b48500c3262c2c0e09bbdf60e93694ad6cd0e92542ac88158fa2f38112b8b25a3a0094fe5eb45eac8cafab01b26806347823059047eaaaf8089d1a11b5c9a5eff75474ac11a5a06445c78f0d5f4cf45bf6ddc0511cb64ce2dddd6", 0x88}, {&(0x7f0000000c00)="8e77a2d2442154ce8ea7d365a7ae8c7d55241d81a0b2059bc2d36a5a83ed72c2c441727e41b83fad202df6f28929c8cc953a4a0587c57ce76f3171fb52bd1fcabc7dd4f910aa69d4ebb1da5c81aed9641e7c9e1adce6c95a5c7b683518d0622925e48ea01a877621cb291f0f69d4ed9686b7cd9c49ac21bab032c6e1eed6d3bb24792952ea863a6896d6e549ced89e5b02797534fa4198a4a5f2a32a54a0afbbb4b9e23825eb9caae2820cb5fa2c25cbd732d379f74643e87935612bd172fc23fba7be5e03d7eade4b0c4ca0e9cb967dbdedd1ed3bd81cb038360589e3e9b6bed9640247df5e197a263b96836b1b64", 0xef}, {&(0x7f0000000d00)="ddc5d9bf82a9f597bd2b6bf62fce9aa049da1bcfb28d17a5c57c159a195f4f057764e12e626382b22876718cc4f9dbfc174ef4dd5008dc67eb4641e8b30b49807385f7c36c7aefcc01ffbf880cd7e25ca77b2b7c22d1eb77f7ef32926116f94d02cd0029a94adcc9442236c993f8bcf8ecb2656b617a6e93244d542d48ae27e69fa7708fea50343a7c9659ad26", 0x8d}, {0x0}], 0xa) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x48800) shutdown(r0, 0x1) 158.227442ms ago: executing program 2 (id=1244): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x74a849580afd22a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc9}, 0x48) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000013c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 99.313124ms ago: executing program 1 (id=1245): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0x7, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x1, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0xc, 0x7, 0x7}, {0xeeef0000, 0x6}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x1de, &(0x7f0000000000)={0x0, 0xc3a6, 0x80, 0x2, 0x3cb}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000000100)={0x7}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r6, r4, 0x0, 0x20000023893) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2860014, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@ignoreqv}, {@cache_none}, {@cache_readahead}, {@ignoreqv}], [{@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x62, 0x62, 0x66, 0x37, 0x63, 0x38], 0x2d, [0x31, 0x66, 0x38, 0x38], 0x2d, [0x39, 0x61, 0x62, 0x35], 0x2d, [0x62, 0x36, 0x31, 0x64], 0x2d, [0x32, 0x33, 0x63, 0x33, 0xa1f7c07dd1d4be0e, 0x66, 0x31, 0x38]}}}, {@euid_gt={'euid>', 0xee00}}]}}) write$binfmt_misc(r7, &(0x7f0000000000)="0748f37a65d1e6a8f9e24fed816e8c8d9daf77d556d3ccc38790a3a419ed014c6bbf8c9a46cfaa868261a83f96703a90f7fa3dde3db8aa8062df2d7996f1cc68629bda4d61367f42dc2bef57fd3d529f784d07197a998e2e0d5e9c0d738bc44b91f316c9d48c138511218adee1cd9297bb7e5cc07366d1f0aae589768d71260156fc4b8dafff6195ef2c3fb5cc3965940ad62b0873a00db52d58d011ed526b87b04a0c5ecadfd1f204d5", 0xaa) 97.770006ms ago: executing program 2 (id=1246): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0xef49) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_getanyicast={0x14, 0x3e, 0x8, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x0) 0s ago: executing program 1 (id=1247): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xa) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xc5, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x8, 0x2}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0}) close_range(r1, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x204001, 0x0) 0s ago: executing program 1 (id=1248): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r2, 0x1001) listen(r1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$inet6(r2, &(0x7f0000000180)="8cecd325e96a021e2648dbecbc1eab1cf41034b49656d574b47b64763ba3fc43162bb1fb09000000461bf7a6f6458dc333c167c0611346160965cb70c460ae46988a206743ecb7bd527bbe04d54a1fef1dbed9989f3ebb7f9dc7e4ee5aeb7e29063b10168944eda0a7f8c6d8e5516320b9b92612b7b276234f615716b6385f849357b65a00000004000000006f546d0f10890c5f031164ddcaf27e2be93ced5ed7e38c4b6a79c2774e2937f89fb3f6fb6f", 0xb1, 0x4000080, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r3) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000240)={0x4, 0x4, 0x3, 0xff, 0xff, 0x6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r2}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) recvmmsg(r6, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}, 0x1028}], 0x1, 0x122, 0x0) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x405, 0x12f00, 0x10000003, 0x5, 0xcc7, 0xfff, 0x0, 0x40009, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000404, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) kernel console output (not intermixed with test programs): uncated to 1048576 [ 58.641913][ T6419] syz.1.99: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 58.649762][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.1.99 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 58.649778][ T6419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.649785][ T6419] Call Trace: [ 58.649789][ T6419] [ 58.649793][ T6419] dump_stack_lvl+0x16c/0x1f0 [ 58.649815][ T6419] warn_alloc+0x248/0x3a0 [ 58.649833][ T6419] ? __pfx_warn_alloc+0x10/0x10 [ 58.649866][ T6419] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 58.649883][ T6419] ? __vmalloc_node_noprof+0xad/0xf0 [ 58.649901][ T6419] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 58.649920][ T6419] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 58.649937][ T6419] ? __lock_acquire+0x622/0x1c90 [ 58.649948][ T6419] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 58.649963][ T6419] ? __alloc_pages_noprof+0xb/0x1b0 [ 58.649979][ T6419] ? ___kmalloc_large_node+0x84/0x1e0 [ 58.649995][ T6419] __kvmalloc_node_noprof+0x30a/0x620 [ 58.650011][ T6419] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 58.650026][ T6419] ? net_generic+0xea/0x2a0 [ 58.650039][ T6419] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 58.650057][ T6419] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 58.650071][ T6419] hashlimit_mt_check_common+0x8bb/0x1460 [ 58.650089][ T6419] hashlimit_mt_check+0x71/0x90 [ 58.650103][ T6419] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 58.650117][ T6419] xt_check_match+0x286/0xa50 [ 58.650131][ T6419] ? mem_cgroup_css_alloc+0xd12/0x1e80 [ 58.650147][ T6419] ? __pfx_xt_check_match+0x10/0x10 [ 58.650163][ T6419] ? pcpu_alloc_noprof+0x1f5/0x1470 [ 58.650209][ T6419] ? xt_find_match+0x1f6/0x290 [ 58.650226][ T6419] find_check_entry.constprop.0+0x34e/0xa20 [ 58.650246][ T6419] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 58.650265][ T6419] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.650284][ T6419] ? kfree+0x2b4/0x4d0 [ 58.650297][ T6419] ? translate_table+0xc0e/0x17b0 [ 58.650313][ T6419] translate_table+0xd0b/0x17b0 [ 58.650333][ T6419] ? __pfx_translate_table+0x10/0x10 [ 58.650356][ T6419] do_ip6t_set_ctl+0x570/0xb00 [ 58.650370][ T6419] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 58.650386][ T6419] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 58.650402][ T6419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 58.650420][ T6419] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 58.650435][ T6419] nf_setsockopt+0x8d/0xf0 [ 58.650448][ T6419] ipv6_setsockopt+0x135/0x170 [ 58.650463][ T6419] rawv6_setsockopt+0xc2/0x510 [ 58.650476][ T6419] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 58.650488][ T6419] ? selinux_socket_setsockopt+0x6a/0x80 [ 58.650503][ T6419] ? sock_common_setsockopt+0x2e/0xf0 [ 58.650516][ T6419] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 58.650530][ T6419] do_sock_setsockopt+0xf0/0x1d0 [ 58.650544][ T6419] __sys_setsockopt+0x1a0/0x230 [ 58.650563][ T6419] __x64_sys_setsockopt+0xbd/0x160 [ 58.650579][ T6419] ? do_syscall_64+0x91/0x4c0 [ 58.650588][ T6419] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.650604][ T6419] do_syscall_64+0xcd/0x4c0 [ 58.650615][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.650627][ T6419] RIP: 0033:0x7f816118e9a9 [ 58.650636][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.650646][ T6419] RSP: 002b:00007f8161f51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 58.650657][ T6419] RAX: ffffffffffffffda RBX: 00007f81613b5fa0 RCX: 00007f816118e9a9 [ 58.650664][ T6419] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 58.650670][ T6419] RBP: 00007f8161210d69 R08: 00000000000005c0 R09: 0000000000000000 [ 58.650676][ T6419] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 58.650682][ T6419] R13: 0000000000000000 R14: 00007f81613b5fa0 R15: 00007ffd59280f48 [ 58.650696][ T6419] [ 58.650734][ T6419] Mem-Info: [ 58.729521][ T6431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.730605][ T5952] Bluetooth: hci1: ACL packet too small [ 58.734803][ T6419] active_anon:15830 inactive_anon:0 isolated_anon:0 [ 58.734803][ T6419] active_file:12661 inactive_file:40584 isolated_file:0 [ 58.734803][ T6419] unevictable:1768 dirty:5 writeback:0 [ 58.734803][ T6419] slab_reclaimable:11589 slab_unreclaimable:69627 [ 58.734803][ T6419] mapped:31236 shmem:9608 pagetables:1215 [ 58.734803][ T6419] sec_pagetables:298 bounce:0 [ 58.734803][ T6419] kernel_misc_reclaimable:0 [ 58.734803][ T6419] free:445409 free_pcp:21198 free_cma:0 [ 58.803991][ T6419] Node 0 active_anon:71380kB inactive_anon:0kB active_file:54316kB inactive_file:162140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:132748kB dirty:20kB writeback:0kB shmem:42832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12720kB pagetables:4788kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB [ 58.817272][ T6419] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 58.827451][ T6419] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 58.836172][ T6419] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 58.838068][ T6419] Node 0 DMA32 free:150016kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76464kB inactive_anon:0kB active_file:54316kB inactive_file:162140kB unevictable:3536kB writepending:20kB present:2080628kB managed:1264296kB mlocked:0kB bounce:0kB free_pcp:64232kB local_pcp:7020kB free_cma:0kB [ 58.848374][ T6419] lowmem_reserve[]: 0 0 0 0 0 [ 58.849939][ T6419] Node 1 Normal free:1603748kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:196kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:18504kB local_pcp:6748kB free_cma:0kB [ 58.859887][ T6419] lowmem_reserve[]: 0 0 0 0 0 [ 58.862288][ T6419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 58.866444][ T6419] Node 0 DMA32: 1*4kB (U) 1*8kB (U) 288*16kB (UE) 14*32kB (U) 34*64kB (UM) 187*128kB (UM) 33*256kB (UME) 20*512kB (M) 5*1024kB (UM) 2*2048kB (UM) 21*4096kB (M) = 145100kB [ 58.871780][ T6419] Node 1 Normal: 5*4kB (UE) 26*8kB (UE) 14*16kB (UME) 15*32kB (UE) 10*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (U) 2*2048kB (ME) 389*4096kB (M) = 1603748kB [ 58.877884][ T6419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.881420][ T6419] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 58.884245][ T6013] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 58.884267][ T6013] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 58.888935][ T6419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.892001][ T6419] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 58.894962][ T6419] 69503 total pagecache pages [ 58.896573][ T6419] 0 pages in swap cache [ 58.898000][ T6419] Free swap = 124996kB [ 58.899388][ T6419] Total swap = 124996kB [ 58.900736][ T6419] 1048443 pages RAM [ 58.901973][ T6419] 0 pages HighMem/MovableOnly [ 58.903507][ T6419] 283040 pages reserved [ 58.904933][ T6419] 0 pages cma reserved [ 59.595203][ T5952] Bluetooth: hci2: command tx timeout [ 59.893214][ T6460] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 60.011809][ T54] usb 7-1: USB disconnect, device number 2 [ 60.029325][ T54] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 60.080085][ T6476] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 60.082658][ T6476] __nla_validate_parse: 4 callbacks suppressed [ 60.082665][ T6476] netlink: 2 bytes leftover after parsing attributes in process `syz.0.118'. [ 60.096499][ T6476] team0: entered promiscuous mode [ 60.098100][ T6476] team_slave_0: entered promiscuous mode [ 60.100023][ T6476] team_slave_1: entered promiscuous mode [ 60.101985][ T6476] bridge0: port 3(team0) entered blocking state [ 60.115462][ T6476] bridge0: port 3(team0) entered disabled state [ 60.117527][ T6476] team0: entered allmulticast mode [ 60.119155][ T6476] team_slave_0: entered allmulticast mode [ 60.120921][ T6476] team_slave_1: entered allmulticast mode [ 60.127950][ T6476] bridge0: port 3(team0) entered blocking state [ 60.130080][ T6476] bridge0: port 3(team0) entered forwarding state [ 60.252974][ T6488] random: crng reseeded on system resumption [ 60.474775][ T6099] vhci_hcd: vhci_device speed not set [ 60.632133][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 60.635303][ T6514] netlink: 'syz.2.128': attribute type 30 has an invalid length. [ 60.637815][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 60.697332][ T6369] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.846861][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 60.855920][ T6369] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 60.858458][ T6369] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 60.861530][ T6369] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 60.870564][ T6369] usb 5-1: config 1 has no interface number 1 [ 60.872511][ T6369] usb 5-1: too many endpoints for config 1 interface 3 altsetting 8: 250, using maximum allowed: 30 [ 60.876066][ T6369] usb 5-1: config 1 interface 3 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 60.880079][ T6369] usb 5-1: config 1 interface 3 has no altsetting 0 [ 60.887928][ T6369] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.890781][ T6369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.893235][ T6369] usb 5-1: Product: â°Š [ 60.895861][ T6369] usb 5-1: SerialNumber: Ї [ 60.953730][ T6013] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 60.955732][ T6013] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 61.108611][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 61.128554][ T6369] usb 5-1: 0:2 : does not exist [ 61.141233][ T6369] hub 5-1:1.3: Invalid hub with more than one config or interface [ 61.143764][ T6369] hub 5-1:1.3: probe with driver hub failed with error -22 [ 61.147568][ T6369] usb 5-1: USB disconnect, device number 2 [ 61.207859][ T6542] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 61.210509][ T6542] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 61.213619][ T6542] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 61.513990][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.517865][ T5962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.520478][ T5962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.524219][ T5962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.527176][ T5962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.536470][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.540613][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.543132][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.546630][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.549358][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.642599][ T6545] chnl_net:caif_netlink_parms(): no params data found [ 61.652074][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 61.652087][ T40] audit: type=1400 audit(1752923345.423:321): avc: denied { append } for pid=6553 comm="syz.1.140" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.662291][ T40] audit: type=1400 audit(1752923345.423:322): avc: denied { map } for pid=6553 comm="syz.1.140" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.674822][ T40] audit: type=1400 audit(1752923345.423:323): avc: denied { execute } for pid=6553 comm="syz.1.140" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.727667][ T40] audit: type=1400 audit(1752923345.503:324): avc: denied { setopt } for pid=6558 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.755354][ T40] audit: type=1400 audit(1752923345.533:325): avc: denied { bind } for pid=6565 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.769698][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.772261][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.774910][ T6545] bridge_slave_0: entered allmulticast mode [ 61.777582][ T6545] bridge_slave_0: entered promiscuous mode [ 61.780729][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.782943][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.785274][ T6545] bridge_slave_1: entered allmulticast mode [ 61.788728][ T6545] bridge_slave_1: entered promiscuous mode [ 61.794592][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.826395][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.828672][ T6566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.831333][ T6566] bridge_slave_1: left allmulticast mode [ 61.833250][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.841983][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.847308][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.870718][ T6573] IPVS: length: 184 != 24 [ 61.894343][ T6545] team0: Port device team_slave_0 added [ 61.897668][ T6545] team0: Port device team_slave_1 added [ 61.930457][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.932699][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.940687][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.944837][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.947094][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.956532][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.977460][ T40] audit: type=1326 audit(1752923345.753:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816118e9a9 code=0x7ff00000 [ 61.984501][ T40] audit: type=1326 audit(1752923345.753:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816118e9a9 code=0x7ff00000 [ 61.991514][ T40] audit: type=1326 audit(1752923345.753:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816118e9a9 code=0x7ff00000 [ 61.998477][ T40] audit: type=1326 audit(1752923345.753:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816118e9a9 code=0x7ff00000 [ 62.007855][ T40] audit: type=1326 audit(1752923345.753:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816118e9a9 code=0x7ff00000 [ 62.020643][ T6545] hsr_slave_0: entered promiscuous mode [ 62.022875][ T6545] hsr_slave_1: entered promiscuous mode [ 62.024958][ T6545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.027363][ T6545] Cannot create hsr debugfs directory [ 62.137347][ T6581] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 62.150880][ T6545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.155250][ T6545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.159479][ T6545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.163565][ T6545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.205878][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.216008][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.222321][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.224556][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.230961][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.233173][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.341433][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.463800][ T6545] veth0_vlan: entered promiscuous mode [ 62.468334][ T6545] veth1_vlan: entered promiscuous mode [ 62.482793][ T6545] veth0_macvtap: entered promiscuous mode [ 62.487364][ T6545] veth1_macvtap: entered promiscuous mode [ 62.496986][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.502852][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.508331][ T6545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.511101][ T6545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.514801][ T6545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.517494][ T6545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.550322][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.563480][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.582051][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.593687][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.743554][ T6606] Invalid source name [ 62.746771][ T6606] UBIFS error (pid: 6606): cannot open "ubifs", error -22 [ 62.749037][ T6606] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 62.753634][ T6606] PKCS7: Only support pkcs7_signedData type [ 62.875187][ T6623] bridge0: port 3(team0) entered disabled state [ 62.877265][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.879798][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.884940][ T6623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 62.889513][ T6623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 63.173721][ T6369] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.344864][ T6369] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 63.348464][ T6369] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.351992][ T6369] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.356276][ T6369] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 63.362295][ T6369] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 63.366012][ T6369] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 63.368799][ T6369] usb 7-1: Manufacturer: syz [ 63.371762][ T6369] usb 7-1: config 0 descriptor?? [ 63.594242][ T5952] Bluetooth: hci3: command tx timeout [ 63.721533][ T6645] netlink: 'syz.0.162': attribute type 9 has an invalid length. [ 63.781104][ T6369] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 63.784507][ T6648] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 63.787850][ T6648] VFS: Can't find a romfs filesystem on dev nullb0. [ 63.787850][ T6648] [ 63.807125][ T6369] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 63.834435][ T53] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 63.855364][ T6622] comedi comedi3: reset error (fatal) [ 63.985622][ T53] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.990112][ T53] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.994696][ T53] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.003930][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.008362][ T6643] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 64.014095][ T53] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.002133][ T6659] 9pnet_virtio: no channels available for device syz [ 65.011820][ T6659] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 65.012119][ T6660] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.028761][ T6660] evm: overlay not supported [ 65.393114][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.472659][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.554404][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.632357][ T6678] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 65.635959][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 65.673760][ T5952] Bluetooth: hci3: command tx timeout [ 65.674533][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.731469][ T6689] netlink: 124 bytes leftover after parsing attributes in process `syz.2.177'. [ 65.770775][ T6689] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 65.794219][ T46] bridge_slave_1: left allmulticast mode [ 65.798322][ T46] bridge_slave_1: left promiscuous mode [ 65.800717][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.808408][ T46] bridge_slave_0: left allmulticast mode [ 65.810096][ T46] bridge_slave_0: left promiscuous mode [ 65.811831][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.877760][ T53] usb 7-1: USB disconnect, device number 3 [ 66.159505][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.165566][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.169179][ T46] bond0 (unregistering): Released all slaves [ 66.235813][ T46] tipc: Disabling bearer [ 66.241250][ T46] tipc: Left network mode [ 66.463189][ T46] hsr_slave_0: left promiscuous mode [ 66.465775][ T46] hsr_slave_1: left promiscuous mode [ 66.467836][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.470226][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.473226][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.476162][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.494251][ T46] veth1_macvtap: left promiscuous mode [ 66.496132][ T46] veth0_macvtap: left promiscuous mode [ 66.497965][ T46] veth1_vlan: left promiscuous mode [ 66.499677][ T46] veth0_vlan: left promiscuous mode [ 66.617657][ T6099] usb 9-1: USB disconnect, device number 2 [ 66.805727][ T5962] Bluetooth: hci4: sending frame failed (-49) [ 66.809281][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 66.871596][ T40] kauditd_printk_skb: 33012 callbacks suppressed [ 66.871608][ T40] audit: type=1326 audit(1752923350.643:33343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.2.182" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f126738e9a9 code=0x0 [ 67.032904][ T6727] random: crng reseeded on system resumption [ 67.045964][ T40] audit: type=1400 audit(1752923350.823:33344): avc: denied { ioctl } for pid=6726 comm="syz.0.184" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.071403][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 67.139692][ T46] team0 (unregistering): Port device team_slave_1 removed [ 67.165397][ T6734] netlink: 189996 bytes leftover after parsing attributes in process `syz.0.185'. [ 67.189176][ T46] team0 (unregistering): Port device team_slave_0 removed [ 67.595050][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 67.681025][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 67.690885][ T40] audit: type=1400 audit(1752923351.463:33345): avc: denied { append } for pid=6737 comm="syz.4.186" path="/file0/blkio.bfq.io_queued" dev="9p" ino=36047874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.711603][ T40] audit: type=1400 audit(1752923351.483:33346): avc: denied { accept } for pid=6744 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 67.763971][ T5952] Bluetooth: hci3: command tx timeout [ 67.792980][ T6754] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 67.794512][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 67.801540][ T6763] netlink: 'syz.4.192': attribute type 20 has an invalid length. [ 67.806428][ T40] audit: type=1400 audit(1752923351.583:33347): avc: denied { write } for pid=6752 comm="syz.1.190" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.809944][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 67.818390][ T6763] netlink: 'syz.4.192': attribute type 20 has an invalid length. [ 67.827772][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 67.831238][ T6763] netlink: 'syz.4.192': attribute type 20 has an invalid length. [ 67.907038][ T6778] program syz.1.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.941488][ T6783] block nbd4: shutting down sockets [ 67.947036][ T6772] netlink: 108 bytes leftover after parsing attributes in process `syz.4.195'. [ 67.951430][ T40] audit: type=1400 audit(1752923351.723:33348): avc: denied { create } for pid=6782 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.959064][ T40] audit: type=1400 audit(1752923351.723:33349): avc: denied { listen } for pid=6782 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.999042][ T40] audit: type=1400 audit(1752923351.773:33350): avc: denied { mounton } for pid=6790 comm="syz.4.199" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 68.000085][ T6791] xt_hashlimit: max too large, truncated to 1048576 [ 68.009653][ T6791] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 68.071103][ T40] audit: type=1400 audit(1752923351.843:33351): avc: denied { create } for pid=6788 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 68.350129][ T40] audit: type=1400 audit(1752923352.123:33352): avc: denied { getopt } for pid=6809 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.737167][ T6844] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 68.741434][ T6844] overlayfs: overlapping lowerdir path [ 68.748928][ T6836] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 68.778146][ T6849] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 69.116036][ T6879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6879 comm=syz.4.218 [ 69.185418][ T6885] sp0: Synchronizing with TNC [ 69.192123][ T6887] tipc: Enabling of bearer rejected, media not registered [ 69.385015][ T6894] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 69.555055][ T6916] bond2: entered promiscuous mode [ 69.606496][ T6925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.668549][ T6930] openvswitch: netlink: Unknown nsh attribute 0 [ 69.670593][ T6930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.682332][ T6930] ipvlan2: entered promiscuous mode [ 69.687053][ T6930] bridge0: port 4(ipvlan2) entered blocking state [ 69.689181][ T6930] bridge0: port 4(ipvlan2) entered disabled state [ 69.691366][ T6930] ipvlan2: entered allmulticast mode [ 69.693025][ T6930] bridge0: entered allmulticast mode [ 69.704812][ T6930] ipvlan2: left allmulticast mode [ 69.706492][ T6930] bridge0: left allmulticast mode [ 69.833824][ T5952] Bluetooth: hci3: command tx timeout [ 69.841257][ T6941] input: syz1 as /devices/virtual/input/input8 [ 70.335050][ T6981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.338018][ T6981] IPv6: NLM_F_CREATE should be set when creating new route [ 70.342998][ T6981] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 70.347343][ T6981] lo: entered allmulticast mode [ 70.351867][ T6981] tunl0: entered allmulticast mode [ 70.355694][ T6981] gre0: entered allmulticast mode [ 70.361090][ T6981] gretap0: entered allmulticast mode [ 70.365827][ T6981] erspan0: entered allmulticast mode [ 70.370029][ T6981] ip_vti0: entered allmulticast mode [ 70.372697][ T6981] ip6_vti0: entered allmulticast mode [ 70.374174][ T6983] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 70.376014][ T6981] sit0: entered allmulticast mode [ 70.381120][ T6981] ip6tnl0: entered allmulticast mode [ 70.384114][ T6981] ip6gre0: entered allmulticast mode [ 70.387311][ T6981] syz_tun: entered allmulticast mode [ 70.390603][ T6981] ip6gretap0: entered allmulticast mode [ 70.394466][ T6981] bridge0: entered allmulticast mode [ 70.396698][ T6981] vcan0: entered allmulticast mode [ 70.401244][ T6981] bond0: entered allmulticast mode [ 70.402961][ T6981] bond_slave_0: entered allmulticast mode [ 70.404889][ T6981] bond_slave_1: entered allmulticast mode [ 70.410822][ T6981] dummy0: entered allmulticast mode [ 70.418787][ T6981] nlmon0: entered allmulticast mode [ 70.421525][ T6981] caif0: entered allmulticast mode [ 70.423499][ T6981] batadv0: entered allmulticast mode [ 70.427559][ T6981] vxcan0: entered allmulticast mode [ 70.429875][ T6981] vxcan1: entered allmulticast mode [ 70.432558][ T6981] veth0: entered allmulticast mode [ 70.436412][ T6981] veth1: entered allmulticast mode [ 70.440896][ T6981] wg0: entered allmulticast mode [ 70.450889][ T6981] wg1: entered allmulticast mode [ 70.459732][ T6981] wg2: entered allmulticast mode [ 70.465995][ T6981] veth0_to_bridge: entered allmulticast mode [ 70.473576][ T6981] veth1_to_bridge: entered allmulticast mode [ 70.481065][ T6981] veth0_to_bond: entered allmulticast mode [ 70.485135][ T6981] veth1_to_bond: entered allmulticast mode [ 70.489920][ T6981] veth0_to_team: entered allmulticast mode [ 70.495395][ T6981] veth1_to_team: entered allmulticast mode [ 70.500544][ T6981] veth0_to_batadv: entered allmulticast mode [ 70.504290][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.507241][ T6981] batadv_slave_0: entered allmulticast mode [ 70.511617][ T6981] veth1_to_batadv: entered allmulticast mode [ 70.514943][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.518500][ T6981] batadv_slave_1: entered allmulticast mode [ 70.522807][ T6981] xfrm0: entered allmulticast mode [ 70.528307][ T6981] veth0_to_hsr: entered allmulticast mode [ 70.532040][ T6981] hsr_slave_0: entered allmulticast mode [ 70.535424][ T6981] veth1_to_hsr: entered allmulticast mode [ 70.538919][ T6981] hsr_slave_1: entered allmulticast mode [ 70.542671][ T6981] hsr0: entered allmulticast mode [ 70.547355][ T6981] veth1_virt_wifi: entered allmulticast mode [ 70.551462][ T6981] veth0_virt_wifi: entered allmulticast mode [ 70.556981][ T6981] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 70.560104][ T6981] veth1_vlan: entered allmulticast mode [ 70.563533][ T6981] veth0_vlan: entered allmulticast mode [ 70.570713][ T6981] vlan0: entered allmulticast mode [ 70.572448][ T6981] vlan1: entered allmulticast mode [ 70.575592][ T6981] macvlan0: entered allmulticast mode [ 70.579550][ T6981] macvlan1: entered allmulticast mode [ 70.582372][ T6981] ipvlan0: entered allmulticast mode [ 70.584213][ T6981] ipvlan1: entered allmulticast mode [ 70.586555][ T6981] veth1_macvtap: entered allmulticast mode [ 70.590039][ T6981] veth0_macvtap: entered allmulticast mode [ 70.593533][ T6981] macvtap0: entered allmulticast mode [ 70.597137][ T6981] macsec0: entered allmulticast mode [ 70.600581][ T6981] geneve0: entered allmulticast mode [ 70.604152][ T6981] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.606965][ T6981] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.609743][ T6981] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.612524][ T6981] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.617772][ T6981] geneve1: entered allmulticast mode [ 70.621893][ T6981] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 70.627469][ T6981] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 70.631926][ T6981] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 70.637368][ T6981] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 70.641131][ T6981] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 70.643468][ T6981] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 70.645874][ T6981] bridge1: entered allmulticast mode [ 70.647758][ T6981] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 70.650319][ T6981] bond1: entered allmulticast mode [ 70.652561][ T6981] bond2: left promiscuous mode [ 70.654776][ T6981] bond2: entered allmulticast mode [ 70.722497][ T7007] mac80211_hwsim hwsim5 `ëÿÿ: renamed from wlan1 [ 70.793144][ T7019] ptrace attach of "/syz-executor exec"[5946] was attempted by ""[7019] [ 70.867222][ T7030] __nla_validate_parse: 8 callbacks suppressed [ 70.867234][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 70.872652][ T6003] IPVS: starting estimator thread 0... [ 70.887612][ T7033] syz.2.260: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 70.962314][ T7030] hsr_slave_0 (unregistering): left promiscuous mode [ 70.978180][ T7046] macvlan2: entered promiscuous mode [ 70.979860][ T7046] macvlan2: entered allmulticast mode [ 70.981707][ T7046] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 70.984333][ T7035] IPVS: using max 42 ests per chain, 100800 per kthread [ 71.052513][ T7062] netem: invalid attributes len -22 [ 71.054319][ T7062] netem: change failed [ 71.059367][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 71.072629][ T6369] libceph: connect (1)[b::]:6789 error -101 [ 71.074963][ T6369] libceph: mon0 (1)[b::]:6789 connect error [ 71.118453][ T7069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.122027][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.125790][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.126703][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 71.131394][ T7070] nbd: illegal input index 1879048192 [ 71.135475][ T7070] trusted_key: encrypted_key: master key parameter '' is invalid [ 71.228958][ T7083] overlayfs: failed to clone upperpath [ 71.243410][ T7085] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 71.312783][ C2] Illegal XDP return value 16128 on prog (id 32) dev syz_tun, expect packet loss! [ 71.318555][ T7095] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3, id = 0 [ 71.319053][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 71.326298][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.276'. [ 71.334637][ T6369] libceph: connect (1)[b::]:6789 error -101 [ 71.336631][ T6369] libceph: mon0 (1)[b::]:6789 connect error [ 71.423199][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 71.476672][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 71.514969][ T7111] netlink: 48 bytes leftover after parsing attributes in process `syz.4.283'. [ 71.517815][ T7111] tc_dump_action: action bad kind [ 71.569967][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 71.573549][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 71.583641][ T7117] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.587815][ T7117] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.591086][ T7117] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.594775][ T7117] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.836539][ T7144] bond1: entered promiscuous mode [ 71.845236][ T6369] libceph: connect (1)[b::]:6789 error -101 [ 71.847277][ T6369] libceph: mon0 (1)[b::]:6789 connect error [ 71.850380][ T7147] macvlan0: entered promiscuous mode [ 71.870249][ T7149] cgroup: noprefix used incorrectly [ 71.889225][ T7064] ceph: No mds server is up or the cluster is laggy [ 71.996932][ T7159] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.077503][ T46] Bluetooth: (null): Invalid header checksum [ 72.079685][ T46] Bluetooth: (null): Invalid header checksum [ 72.170192][ T7167] kvm: user requested TSC rate below hardware speed [ 72.282608][ T7178] warning: `syz.4.303' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.295257][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 72.295266][ T40] audit: type=1400 audit(1752923356.073:33398): avc: denied { getopt } for pid=7179 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.365523][ T7180] befs: (nullb0): No write support. Marking filesystem read-only [ 72.368730][ T7180] befs: (nullb0): invalid magic header [ 72.412289][ T7197] 9pnet_virtio: no channels available for device syz [ 72.420223][ T7199] 9pnet_virtio: no channels available for device syz [ 72.436452][ T7202] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 72.445231][ T7202] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 72.493892][ T7209] vivid-007: ================= START STATUS ================= [ 72.496395][ T7209] vivid-007: Generate PTS: true [ 72.498018][ T7209] vivid-007: Generate SCR: true [ 72.499501][ T7209] tpg source WxH: 320x240 (Y'CbCr) [ 72.501042][ T7209] tpg field: 1 [ 72.502216][ T7209] tpg crop: (0,0)/320x240 [ 72.503606][ T7209] tpg compose: (0,0)/320x240 [ 72.505306][ T7209] tpg colorspace: 8 [ 72.506595][ T7209] tpg transfer function: 0/0 [ 72.508076][ T7209] tpg Y'CbCr encoding: 0/0 [ 72.509477][ T7209] tpg quantization: 0/0 [ 72.510790][ T7209] tpg RGB range: 0/2 [ 72.512242][ T7209] vivid-007: ================== END STATUS ================== [ 72.515561][ T40] audit: type=1400 audit(1752923356.283:33399): avc: denied { ioctl } for pid=7210 comm="syz.1.313" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 72.533758][ T6099] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 72.541842][ T40] audit: type=1400 audit(1752923356.313:33400): avc: denied { write } for pid=7210 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.590899][ T7216] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 72.671792][ T40] audit: type=1400 audit(1752923356.443:33401): avc: denied { create } for pid=7225 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 72.685731][ T6099] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.690764][ T6099] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.694442][ T6099] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.697307][ T6099] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 72.700710][ T6099] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 72.705426][ T6099] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.708384][ T6099] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.710837][ T6099] usb 9-1: Product: syz [ 72.712139][ T6099] usb 9-1: Manufacturer: syz [ 72.719099][ T6099] cdc_wdm 9-1:1.0: skipping garbage [ 72.720773][ T6099] cdc_wdm 9-1:1.0: skipping garbage [ 72.723835][ T6099] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 72.725810][ T6099] cdc_wdm 9-1:1.0: Unknown control protocol [ 72.742933][ T7228] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 72.833493][ T40] audit: type=1400 audit(1752924380.605:33402): avc: denied { write } for pid=7243 comm="syz.2.321" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.921641][ T40] audit: type=1400 audit(1752924380.695:33403): avc: denied { read write } for pid=7177 comm="syz.4.303" name="cdc-wdm0" dev="devtmpfs" ino=2923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 72.930526][ T40] audit: type=1400 audit(1752924380.695:33404): avc: denied { open } for pid=7177 comm="syz.4.303" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 72.953458][ T7267] program syz.2.324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.957220][ T7267] ata1.00: invalid service action 31 [ 72.961274][ T40] audit: type=1400 audit(1752924380.735:33405): avc: denied { connect } for pid=7269 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.972783][ T7273] openvswitch: netlink: IPv6 tunnel dst address is zero [ 72.976838][ T7270] bridge_slave_0: left allmulticast mode [ 72.978569][ T7270] bridge_slave_0: left promiscuous mode [ 72.980385][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.987020][ T7270] bond0: (slave bond_slave_0): Releasing backup interface [ 72.991364][ T7270] bond0: (slave bond_slave_1): Releasing backup interface [ 73.001443][ T7270] team0: Port device team_slave_0 removed [ 73.008424][ T7270] team0: Port device team_slave_1 removed [ 73.010600][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.012995][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.017817][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.020140][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.038222][ T7277] team0: Mode changed to "activebackup" [ 73.048935][ T7270] vlan0: entered promiscuous mode [ 73.066348][ T7270] team0: Port device vlan0 added [ 73.069884][ T7270] tipc: Started in network mode [ 73.071403][ T7270] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 73.073593][ T7270] tipc: Enabled bearer , priority 0 [ 73.076534][ T40] audit: type=1400 audit(1752924380.855:33406): avc: denied { ioctl } for pid=7269 comm="syz.1.328" path="socket:[13306]" dev="sockfs" ino=13306 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.093634][ T7283] bond2: entered promiscuous mode [ 73.095979][ T7283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.111613][ T7283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.115407][ T7283] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 73.119308][ T7283] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 73.201583][ T40] audit: type=1400 audit(1752924380.975:33407): avc: denied { ioctl } for pid=7300 comm="syz.0.335" path="socket:[15152]" dev="sockfs" ino=15152 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.238941][ T7308] x_tables: duplicate underflow at hook 1 [ 73.256401][ T7308] macvtap1: entered allmulticast mode [ 73.259038][ T7308] batman_adv: batadv0: Adding interface: macvtap1 [ 73.261094][ T7308] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.269276][ T7308] batman_adv: batadv0: Interface activated: macvtap1 [ 73.296198][ T7312] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 73.298791][ T7311] syz.2.339: attempt to access beyond end of device [ 73.298791][ T7311] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 73.305243][ T7311] gfs2: error -5 reading superblock [ 73.388233][ T6369] usb 9-1: USB disconnect, device number 3 [ 73.400470][ T7327] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.403271][ T7327] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.406449][ T7327] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.409013][ T7327] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.412277][ T7327] vxlan0: entered promiscuous mode [ 73.695383][ T6003] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 73.823726][ T6003] usb 6-1: device descriptor read/64, error -71 [ 74.063815][ T6003] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 74.174132][ T7366] tipc: Started in network mode [ 74.175712][ T7366] tipc: Node identity 2, cluster identity 4711 [ 74.177868][ T7366] tipc: Node number set to 2 [ 74.193889][ T6003] usb 6-1: device descriptor read/64, error -71 [ 74.204465][ T836] tipc: Node number set to 11578026 [ 74.240944][ T7372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7372 comm=syz.2.358 [ 74.304879][ T6003] usb usb6-port1: attempt power cycle [ 74.404468][ T7382] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 74.414287][ T7393] pim6reg: entered allmulticast mode [ 74.552266][ T7405] openvswitch: netlink: Key type 2064 is out of range max 32 [ 74.643756][ T6003] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 74.675035][ T6003] usb 6-1: device descriptor read/8, error -71 [ 74.678050][ T7408] usb usb9: usbfs: process 7408 (syz.4.370) did not claim interface 0 before use [ 74.709575][ T7412] fuse: Bad value for 'user_id' [ 74.711155][ T7412] fuse: Bad value for 'user_id' [ 74.769790][ T7414] ip6gretap1: entered promiscuous mode [ 74.771557][ T7414] ip6gretap1: entered allmulticast mode [ 74.913938][ T6003] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 74.938442][ T6003] usb 6-1: device descriptor read/8, error -71 [ 74.971290][ T7438] netlink: 'syz.0.381': attribute type 4 has an invalid length. [ 74.976220][ T7438] netlink: 'syz.0.381': attribute type 4 has an invalid length. [ 75.044661][ T6003] usb usb6-port1: unable to enumerate USB device [ 75.082997][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.087944][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.090632][ T7447] batman_adv: batadv0: Interface deactivated: macvtap1 [ 75.092868][ T7447] batman_adv: batadv0: Removing interface: macvtap1 [ 75.437299][ T7463] macvlan1: left allmulticast mode [ 75.439097][ T7463] netlink: 'syz.0.391': attribute type 2 has an invalid length. [ 75.519065][ T7469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7469 comm=syz.0.394 [ 75.523323][ T7469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.423395][ T7498] overlayfs: failed to resolve 'cgroup': -2 [ 76.508259][ T7509] 9pnet_virtio: no channels available for device 127.0.0.1 [ 76.511574][ T7510] __nla_validate_parse: 37 callbacks suppressed [ 76.511583][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 76.520709][ T7510] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.523464][ T7510] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.527370][ T7510] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.530048][ T7510] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.536367][ T7510] vxlan0: entered promiscuous mode [ 76.561021][ T7516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=58 sclass=netlink_tcpdiag_socket pid=7516 comm=syz.2.410 [ 76.567764][ T7516] loop2: detected capacity change from 0 to 7 [ 76.575912][ T5951] Dev loop2: unable to read RDB block 7 [ 76.578287][ T5951] loop2: unable to read partition table [ 76.580171][ T5951] loop2: partition table beyond EOD, truncated [ 76.589450][ T7516] Dev loop2: unable to read RDB block 7 [ 76.591249][ T7516] loop2: unable to read partition table [ 76.593111][ T7516] loop2: partition table beyond EOD, truncated [ 76.595622][ T7520] netlink: 64 bytes leftover after parsing attributes in process `syz.0.411'. [ 76.597253][ T7516] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 76.692733][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 76.731027][ T7534] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 76.746332][ T7537] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 76.897567][ T6099] IPVS: starting estimator thread 0... [ 76.938647][ T7563] random: crng reseeded on system resumption [ 76.983852][ T7558] IPVS: using max 42 ests per chain, 100800 per kthread [ 76.986282][ T7565] 9pnet_virtio: no channels available for device syz [ 76.995143][ T7563] overlayfs: missing 'workdir' [ 77.024724][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 77.146428][ T7585] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 77.229083][ T7596] SELinux: Context system_u:object_r:dhcpc_var_run_t:s0 is not valid (left unmapped). [ 77.238629][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 77.241473][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 77.245006][ T7601] netlink: 'syz.2.439': attribute type 19 has an invalid length. [ 77.250680][ T7601] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 77.361524][ T7611] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 [ 77.401123][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 77.593810][ T54] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.723840][ T54] usb 7-1: device descriptor read/64, error -71 [ 77.905277][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.906991][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.908626][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.910280][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.911908][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.913561][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.921891][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.923588][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.925359][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.927020][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.928658][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.930304][ T7618] tmpfs: Unknown parameter 'ÿÿ' [ 77.963875][ T54] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 77.965155][ T7622] xt_hashlimit: size too large, truncated to 1048576 [ 78.057412][ T7630] overlayfs: missing 'lowerdir' [ 78.066199][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 78.069025][ T7630] netlink: 'syz.0.450': attribute type 13 has an invalid length. [ 78.071435][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 78.113754][ T54] usb 7-1: device descriptor read/64, error -71 [ 78.136517][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 78.136528][ T40] audit: type=1400 audit(1752924385.915:33447): avc: denied { accept } for pid=7639 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.224486][ T54] usb usb7-port1: attempt power cycle [ 78.236540][ T7655] input: syz0 as /devices/virtual/input/input9 [ 78.256311][ T40] audit: type=1400 audit(1752924386.035:33448): avc: denied { map } for pid=7654 comm="syz.1.456" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 78.265057][ T40] audit: type=1400 audit(1752924386.035:33449): avc: denied { execute } for pid=7654 comm="syz.1.456" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 78.306802][ T40] audit: type=1400 audit(1752924386.085:33450): avc: denied { getopt } for pid=7659 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.575686][ T54] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 78.596197][ T54] usb 7-1: device descriptor read/8, error -71 [ 78.774463][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.853765][ T54] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 78.875468][ T54] usb 7-1: device descriptor read/8, error -71 [ 78.928156][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.931562][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 78.935700][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.943186][ T40] audit: type=1400 audit(1752924386.715:33451): avc: denied { module_request } for pid=7691 comm="syz.0.464" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.943211][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 78.953968][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 78.956522][ T9] usb 6-1: Product: syz [ 78.957959][ T9] usb 6-1: Manufacturer: syz [ 78.959427][ T9] usb 6-1: SerialNumber: syz [ 78.982657][ T40] audit: type=1400 audit(1752924386.755:33452): avc: denied { listen } for pid=7691 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 78.994660][ T54] usb usb7-port1: unable to enumerate USB device [ 79.171327][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 79.183554][ T9] usb 6-1: USB disconnect, device number 6 [ 79.187663][ T7724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7724 comm=syz.0.469 [ 79.201585][ T9] usblp0: removed [ 79.330816][ T40] audit: type=1400 audit(1752924387.105:33453): avc: denied { read write } for pid=7740 comm="syz.1.473" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.349551][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x3 [ 79.352168][ T40] audit: type=1400 audit(1752924387.105:33454): avc: denied { open } for pid=7740 comm="syz.1.473" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.360341][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x3 [ 79.362692][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.365763][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.368173][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.370586][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.372911][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.376004][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.378465][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.380766][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.383261][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.389876][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.393744][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.396109][ T836] hid-generic 00A0:800008:0003.0003: unknown main item tag 0x0 [ 79.401635][ T7749] delete_channel: no stack [ 79.403226][ T40] audit: type=1326 audit(1752924387.175:33455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="syz.0.477" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedf578e9a9 code=0x0 [ 79.414606][ T836] hid-generic 00A0:800008:0003.0003: hidraw1: HID v0.05 Device [syz1] on syz0 [ 79.454803][ T7742] netlink: 'syz.1.473': attribute type 11 has an invalid length. [ 79.457245][ T7742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.473'. [ 79.525711][ T7761] netlink: 'syz.1.479': attribute type 7 has an invalid length. [ 79.665383][ T7767] usb usb4: usbfs: interface 0 claimed by hub while 'syz.1.480' sets config #0 [ 80.121122][ T40] audit: type=1400 audit(1752924387.895:33456): avc: denied { setopt } for pid=7794 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.472969][ T7806] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 80.773743][ T6014] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 80.924933][ T6014] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 80.928732][ T6014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.931989][ T6014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.935194][ T6014] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 80.939865][ T6014] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 80.942624][ T6014] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 80.945282][ T6014] usb 7-1: Manufacturer: syz [ 80.949372][ T6014] usb 7-1: config 0 descriptor?? [ 81.284616][ T7820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.355886][ T837] cfg80211: failed to load regulatory.db [ 81.357385][ T6014] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 81.368383][ T6014] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 81.958594][ T7842] netlink: 'syz.0.495': attribute type 29 has an invalid length. [ 81.961195][ T7843] netlink: 'syz.0.495': attribute type 29 has an invalid length. [ 81.964847][ T7842] __nla_validate_parse: 2 callbacks suppressed [ 81.964857][ T7842] netlink: 564 bytes leftover after parsing attributes in process `syz.0.495'. [ 82.279266][ T7864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.390637][ T7879] cgroup2: Unknown parameter 'euid' [ 82.452795][ T7880] cgroup2: Unknown parameter 'euid' [ 82.552570][ T7884] 9pnet_virtio: no channels available for device syz [ 82.558611][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 82.783262][ T7893] ipt_rpfilter: unknown options [ 82.788062][ T7893] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 82.791190][ T7893] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 83.224549][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 83.224560][ T40] audit: type=1400 audit(1752924391.005:33460): avc: denied { mount } for pid=7897 comm="syz.2.513" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 83.237033][ T40] audit: type=1400 audit(1752924391.015:33461): avc: denied { remount } for pid=7897 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 83.294099][ T40] audit: type=1400 audit(1752924391.065:33462): avc: denied { create } for pid=7901 comm="syz.0.515" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.294941][ T7902] o2cb: This node has not been configured. [ 83.300314][ T40] audit: type=1400 audit(1752924391.075:33463): avc: denied { associate } for pid=7901 comm="syz.0.515" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.302089][ T7902] o2cb: Cluster check failed. Fix errors before retrying. [ 83.310866][ T7902] (syz.0.515,7902,0):user_dlm_register:674 ERROR: status = -22 [ 83.313238][ T7902] (syz.0.515,7902,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 83.350445][ T7906] netlink: 68 bytes leftover after parsing attributes in process `syz.0.516'. [ 83.466370][ T6014] usb 7-1: USB disconnect, device number 8 [ 83.572338][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803793e000: rx timeout, send abort [ 83.590966][ T40] audit: type=1400 audit(1752924391.365:33464): avc: denied { read } for pid=5342 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 83.597796][ T40] audit: type=1400 audit(1752924391.365:33465): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.606090][ T40] audit: type=1400 audit(1752924391.365:33466): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.612479][ T40] audit: type=1400 audit(1752924391.365:33467): avc: denied { add_name } for pid=5342 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.618948][ T40] audit: type=1400 audit(1752924391.365:33468): avc: denied { create } for pid=5342 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.625411][ T40] audit: type=1400 audit(1752924391.365:33469): avc: denied { append open } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.761974][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 83.878862][ T7957] ipt_ECN: cannot use operation on non-tcp rule [ 84.007020][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 84.075657][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803793e000: abort rx timeout. Force session deactivation [ 84.123725][ T6369] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.180060][ T7990] xt_hashlimit: size too large, truncated to 1048576 [ 84.217901][ T5952] Bluetooth: hci3: ACL packet too small [ 84.263767][ T6369] usb 6-1: device descriptor read/64, error -71 [ 84.367029][ T7997] random: crng reseeded on system resumption [ 84.383247][ T7946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.528'. [ 84.522151][ T8008] 9pnet_virtio: no channels available for device syz [ 84.775453][ T8026] binder: 8024:8026 ioctl c0306201 200000000540 returned -22 [ 84.936344][ T8030] overlayfs: failed to clone upperpath [ 84.940130][ T8030] overlayfs: failed to clone lowerpath [ 84.969641][ T8033] netlink: 'syz.0.556': attribute type 9 has an invalid length. [ 85.025956][ T8040] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 85.211547][ T8061] overlayfs: failed to clone upperpath [ 85.213397][ T8054] kvm: kvm [8053]: vcpu2, guest rIP: 0x2f Unhandled WRMSR(0x40000012) = 0x0 [ 85.352562][ T8071] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 85.378972][ T8074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8074 comm=syz.2.569 [ 85.382826][ T8075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8075 comm=syz.2.569 [ 85.383265][ T8074] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 85.426977][ T8082] netlink: 144 bytes leftover after parsing attributes in process `syz.0.570'. [ 85.496845][ T8072] 9pnet: Could not find request transport: võirtio [ 85.683851][ T6369] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 85.836131][ T6369] usb 7-1: unable to get BOS descriptor or descriptor too short [ 85.839578][ T6369] usb 7-1: not running at top speed; connect to a high speed hub [ 85.843467][ T6369] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.848127][ T6369] usb 7-1: config 1 interface 0 has no altsetting 0 [ 85.852466][ T6369] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.855756][ T6369] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.858606][ T6369] usb 7-1: Product: syz [ 85.859889][ T6369] usb 7-1: Manufacturer: syz [ 85.861312][ T6369] usb 7-1: SerialNumber: syz [ 86.055079][ T8106] /dev/sr0: Can't open blockdev [ 86.094839][ T6369] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 86.101200][ T6369] usb 7-1: USB disconnect, device number 9 [ 86.434674][ T8130] team0: Device gtp0 is of different type [ 86.586814][ T8135] netlink: 68 bytes leftover after parsing attributes in process `syz.4.587'. [ 86.647684][ T5952] Bluetooth: hci3: ACL packet too small [ 87.153892][ T6003] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 87.201702][ T8189] "syz.1.598" (8189) uses obsolete ecb(arc4) skcipher [ 87.246555][ T5952] Bluetooth: hci3: ACL packet too small [ 87.306180][ T6003] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.309902][ T6003] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.313056][ T6003] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.318740][ T6003] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 87.322130][ T6003] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 87.327010][ T6003] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.329684][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.332052][ T6003] usb 7-1: Product: syz [ 87.333401][ T6003] usb 7-1: Manufacturer: syz [ 87.337222][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 87.340445][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 87.342750][ T6003] cdc_wdm 7-1:1.0: skipping garbage [ 87.344827][ T6003] cdc_wdm 7-1:1.0: skipping garbage [ 87.353296][ T6003] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 87.356038][ T6003] cdc_wdm 7-1:1.0: Unknown control protocol [ 87.386633][ T54] IPVS: starting estimator thread 0... [ 87.493782][ T8206] IPVS: using max 42 ests per chain, 100800 per kthread [ 87.548647][ T6033] usb 7-1: USB disconnect, device number 10 [ 87.698653][ T8219] syz.4.606: attempt to access beyond end of device [ 87.698653][ T8219] loop4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 87.702815][ T8219] qnx4: unable to read the superblock [ 87.832326][ T5952] Bluetooth: hci3: ACL packet too small [ 88.024936][ T8237] openvswitch: netlink: IPv6 tunnel dst address is zero [ 88.184744][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 88.345981][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.348709][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.352342][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.355329][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 88.358865][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 88.364898][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.367633][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.370091][ T9] usb 7-1: Product: syz [ 88.371362][ T9] usb 7-1: Manufacturer: syz [ 88.377749][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 88.379664][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 88.394316][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 88.396280][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 88.581301][ T6014] usb 7-1: USB disconnect, device number 11 [ 88.615678][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 88.615693][ T40] audit: type=1400 audit(1752924396.395:33488): avc: denied { remount } for pid=8253 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.734086][ T5952] Bluetooth: hci3: ACL packet too small [ 88.842574][ T8261] 9pnet_virtio: no channels available for device syz [ 88.878367][ T40] audit: type=1326 audit(1752924396.655:33489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 88.885976][ T40] audit: type=1326 audit(1752924396.655:33490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 88.892536][ T40] audit: type=1326 audit(1752924396.655:33491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 88.899449][ T40] audit: type=1326 audit(1752924396.655:33492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 88.906341][ T40] audit: type=1326 audit(1752924396.655:33493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 88.913228][ T40] audit: type=1326 audit(1752924396.655:33494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 88.915643][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.621'. [ 88.922160][ T40] audit: type=1326 audit(1752924396.655:33495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 88.929630][ T40] audit: type=1326 audit(1752924396.655:33496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 88.936594][ T40] audit: type=1326 audit(1752924396.655:33497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.4.620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x7ff00000 [ 89.028632][ T8277] netlink: 52 bytes leftover after parsing attributes in process `syz.0.625'. [ 89.089004][ T8282] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 89.089004][ T8282] The task syz.1.626 (8282) triggered the difference, watch for misbehavior. [ 89.111092][ T8284] autofs: Bad value for 'fd' [ 89.159352][ T8290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.630'. [ 89.162832][ T8294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.630'. [ 89.368627][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 89.372672][ T8307] veth1_vlan: left promiscuous mode [ 89.379044][ T8307] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 89.382287][ T8307] netlink: 'syz.2.636': attribute type 2 has an invalid length. [ 89.904639][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.907077][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.012361][ T8322] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 90.036189][ T8322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.056323][ T8322] bond2: (slave veth3): Enslaving as an active interface with a down link [ 90.061361][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 90.067829][ T8322] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 90.071131][ T8322] bond2: (slave batadv1): making interface the new active one [ 90.074613][ T8322] batadv1: entered promiscuous mode [ 90.076523][ T8322] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 90.141516][ T8330] netlink: 'syz.0.645': attribute type 11 has an invalid length. [ 90.145427][ T8330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.645'. [ 90.394854][ T8353] bridge3: entered promiscuous mode [ 90.414109][ T8353] netlink: 'syz.0.655': attribute type 5 has an invalid length. [ 90.416503][ T8353] netlink: 'syz.0.655': attribute type 7 has an invalid length. [ 90.425638][ T8353] : entered promiscuous mode [ 90.451207][ T8363] 9pnet_fd: p9_fd_create_tcp (8363): problem connecting socket to 127.0.0.1 [ 90.476593][ T8359] block nbd1: shutting down sockets [ 90.675493][ T8395] binder: BINDER_SET_CONTEXT_MGR already set [ 90.677828][ T8395] binder: 8394:8395 ioctl 40046207 0 returned -16 [ 90.754210][ T8403] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 90.756614][ T8403] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 90.758973][ T8403] netlink: 610 bytes leftover after parsing attributes in process `syz.0.670'. [ 91.106007][ T8441] XFS (nullb0): Invalid superblock magic number [ 91.175279][ T8457] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 91.479992][ T8513] tipc: Enabled bearer , priority 10 [ 91.482965][ T8513] tipc: Enabling of bearer rejected, already enabled [ 91.526616][ T8519] netlink: 'syz.1.704': attribute type 12 has an invalid length. [ 91.652756][ T8537] xt_hashlimit: size too large, truncated to 1048576 [ 91.707578][ T8540] : renamed from bridge_slave_0 (while UP) [ 92.109505][ T8574] 9pnet_virtio: no channels available for device syz [ 92.495088][ T8590] syzkaller1: entered promiscuous mode [ 92.496916][ T8590] syzkaller1: entered allmulticast mode [ 92.697106][ T8598] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 92.800436][ T8606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8606 comm=syz.2.734 [ 92.808731][ T8606] __nla_validate_parse: 6 callbacks suppressed [ 92.808741][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.734'. [ 92.882745][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.926985][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.934376][ T6099] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 93.037166][ T8618] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 93.071821][ T8609] ======================================================= [ 93.071821][ T8609] WARNING: The mand mount option has been deprecated and [ 93.071821][ T8609] and is ignored by this kernel. Remove the mand [ 93.071821][ T8609] option from the mount to silence this warning. [ 93.071821][ T8609] ======================================================= [ 93.073739][ T6099] usb 6-1: device descriptor read/64, error -71 [ 93.082704][ T8609] 9pnet_virtio: no channels available for device syz [ 93.124378][ T8626] gretap1: entered promiscuous mode [ 93.344683][ T6099] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 93.493811][ T6099] usb 6-1: device descriptor read/64, error -71 [ 93.615589][ T6099] usb usb6-port1: attempt power cycle [ 93.678858][ T8652] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.963778][ T6099] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 93.966340][ T40] kauditd_printk_skb: 32869 callbacks suppressed [ 93.966352][ T40] audit: type=1400 audit(1752924401.745:66364): avc: denied { ioctl } for pid=8668 comm="syz.0.752" path="socket:[22846]" dev="sockfs" ino=22846 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.996047][ T6099] usb 6-1: device descriptor read/8, error -71 [ 94.029046][ T40] audit: type=1400 audit(1752924401.805:66365): avc: denied { read } for pid=8677 comm="syz.4.755" path="socket:[20972]" dev="sockfs" ino=20972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.243751][ T6099] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 94.264167][ T6099] usb 6-1: device descriptor read/8, error -71 [ 94.383973][ T6099] usb usb6-port1: unable to enumerate USB device [ 94.633910][ T6099] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 94.785515][ T6099] usb 7-1: not running at top speed; connect to a high speed hub [ 94.788886][ T6099] usb 7-1: config 1 interface 0 has no altsetting 0 [ 94.792365][ T6099] usb 7-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.40 [ 94.795243][ T6099] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.797641][ T6099] usb 7-1: Product: syz [ 94.798927][ T6099] usb 7-1: Manufacturer: syz [ 94.800335][ T6099] usb 7-1: SerialNumber: syz [ 95.012273][ T6099] usbhid 7-1:1.0: can't add hid device: -71 [ 95.014295][ T6099] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 95.018318][ T6099] usb 7-1: USB disconnect, device number 12 [ 95.710442][ T8702] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 95.739416][ T8705] netlink: 172 bytes leftover after parsing attributes in process `syz.1.762'. [ 95.742915][ T40] audit: type=1400 audit(1752924403.515:66366): avc: denied { nlmsg_read } for pid=8703 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.821624][ T40] audit: type=1400 audit(1752924403.595:66367): avc: denied { read } for pid=8722 comm="syz.2.767" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.860774][ T8727] netlink: 'syz.0.769': attribute type 11 has an invalid length. [ 95.887523][ T40] audit: type=1400 audit(1752924403.665:66368): avc: denied { map } for pid=8726 comm="syz.0.769" path="pipe:[6310]" dev="pipefs" ino=6310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 95.888824][ T8727] cgroup: Invalid name [ 95.895682][ T8723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.898682][ T8723] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.907048][ T8723] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.923192][ T8734] 9pnet_virtio: no channels available for device syz [ 95.933846][ T40] audit: type=1400 audit(1752924403.705:66369): avc: denied { read append } for pid=8735 comm="syz.2.771" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.941162][ T40] audit: type=1400 audit(1752924403.715:66370): avc: denied { open } for pid=8735 comm="syz.2.771" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.948686][ T40] audit: type=1400 audit(1752924403.715:66371): avc: denied { ioctl } for pid=8735 comm="syz.2.771" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.062244][ T40] audit: type=1400 audit(1752924403.835:66372): avc: denied { ioctl } for pid=8739 comm="syz.2.773" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 96.087719][ T40] audit: type=1400 audit(1752924403.865:66373): avc: denied { ioctl } for pid=8741 comm="syz.0.774" path="socket:[21081]" dev="sockfs" ino=21081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.785561][ T8754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.787846][ T8754] IPv6: NLM_F_CREATE should be set when creating new route [ 96.845519][ T8759] kvm: kvm [8758]: vcpu2, guest rIP: 0x2f Unhandled WRMSR(0x40000012) = 0x0 [ 96.925278][ T8772] macsec0: entered promiscuous mode [ 96.948408][ T8774] all: renamed from lo (while UP) [ 96.956353][ T8774] 9pnet_virtio: no channels available for device syz [ 96.972367][ T8777] overlayfs: failed to clone upperpath [ 97.004180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.006704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.009242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.023801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.026353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.183790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.340639][ T5952] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 97.383444][ T8806] netlink: 9428 bytes leftover after parsing attributes in process `syz.4.794'. [ 97.424094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.429357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.443780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.504434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.704618][ T8822] 9pnet_virtio: no channels available for device syz [ 98.050400][ T8846] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 98.121629][ T8858] TCP: TCP_TX_DELAY enabled [ 98.136555][ T8860] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 98.785075][ T8919] syz.4.830 (8919): /proc/8918/oom_adj is deprecated, please use /proc/8918/oom_score_adj instead. [ 98.868880][ T8928] Cannot find del_set index 1 as target [ 98.990626][ T8956] openvswitch: netlink: Missing key (keys=40, expected=100) [ 99.061677][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 99.061688][ T40] audit: type=1400 audit(1752924406.835:66383): avc: denied { map } for pid=8962 comm="syz.0.843" path="socket:[22263]" dev="sockfs" ino=22263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.062517][ T8963] netlink: 140 bytes leftover after parsing attributes in process `syz.0.843'. [ 99.063473][ T40] audit: type=1400 audit(1752924406.835:66384): avc: denied { read } for pid=8962 comm="syz.0.843" path="socket:[22263]" dev="sockfs" ino=22263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.129241][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 99.491934][ T40] audit: type=1400 audit(1752924407.265:66385): avc: denied { bind } for pid=8990 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.539216][ T40] audit: type=1400 audit(1752924407.315:66386): avc: denied { accept } for pid=9000 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.549231][ T9001] netlink: 'syz.4.853': attribute type 21 has an invalid length. [ 99.551575][ T9001] netlink: 128 bytes leftover after parsing attributes in process `syz.4.853'. [ 99.554427][ T9001] netlink: 'syz.4.853': attribute type 4 has an invalid length. [ 99.556702][ T9001] netlink: 'syz.4.853': attribute type 5 has an invalid length. [ 99.559036][ T9001] netlink: 3 bytes leftover after parsing attributes in process `syz.4.853'. [ 99.637899][ T9003] hub 2-0:1.0: USB hub found [ 99.639402][ T9003] hub 2-0:1.0: 2 ports detected [ 99.718973][ T40] audit: type=1400 audit(1752924407.495:66387): avc: denied { read } for pid=9008 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.749387][ T9013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.858'. [ 99.753050][ T9013] bridge0: left allmulticast mode [ 99.762781][ T9016] No source specified [ 99.765523][ T9016] overlayfs: failed to resolve './file0': -2 [ 99.767499][ T9017] overlayfs: failed to resolve './file0': -2 [ 99.857779][ T40] audit: type=1400 audit(1752924407.635:66388): avc: denied { firmware_load } for pid=9027 comm="syz.4.862" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 99.887420][ T9028] syz.4.862 (9028) used greatest stack depth: 19784 bytes left [ 99.906794][ T40] audit: type=1400 audit(1752924407.685:66389): avc: denied { create } for pid=9032 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 99.912599][ T40] audit: type=1400 audit(1752924407.685:66390): avc: denied { ioctl } for pid=9032 comm="syz.4.864" path="socket:[22382]" dev="sockfs" ino=22382 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 99.995170][ T40] audit: type=1326 audit(1752924407.775:66391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.4.864" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x0 [ 100.021238][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.024311][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.213732][ T836] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 100.367218][ T836] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 100.371260][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.374666][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.377566][ T836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 100.382311][ T836] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 100.385459][ T836] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 100.388599][ T836] usb 6-1: Manufacturer: syz [ 100.396051][ T836] usb 6-1: config 0 descriptor?? [ 100.711858][ T9052] netlink: 'syz.0.870': attribute type 10 has an invalid length. [ 100.714421][ T9052] netlink: 2 bytes leftover after parsing attributes in process `syz.0.870'. [ 100.717963][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.807926][ T836] usbhid 6-1:0.0: can't add hid device: -71 [ 100.809830][ T836] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 100.816242][ T836] usb 6-1: USB disconnect, device number 13 [ 101.343931][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 101.345079][ T40] audit: type=1400 audit(1752924409.123:66392): avc: denied { accept } for pid=9118 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.346976][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 101.355755][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.882'. [ 101.360416][ T9124] autofs: Unknown parameter '$' [ 101.384711][ T9129] overlayfs: missing 'lowerdir' [ 101.391620][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 101.397369][ T9129] netlink: 'syz.4.883': attribute type 13 has an invalid length. [ 101.403894][ T9106] batadv1: left promiscuous mode [ 101.491897][ T9137] netlink: 'syz.2.885': attribute type 13 has an invalid length. [ 101.494429][ T9137] macvtap0: entered promiscuous mode [ 101.497022][ T9137] macvtap0: refused to change device tx_queue_len [ 101.584281][ T9139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16394 sclass=netlink_route_socket pid=9139 comm=syz.2.886 [ 101.703066][ T9152] IPv6: addrconf: prefix option has invalid lifetime [ 101.706659][ T9152] IPv6: addrconf: prefix option has invalid lifetime [ 101.732956][ T9156] cgroup: Need name or subsystem set [ 101.891300][ T9168] nfs4: Bad value for 'source' [ 101.901478][ T9167] 9pnet_virtio: no channels available for device syz [ 101.916522][ T9168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.202093][ T9195] overlay: Unknown parameter 'uid' [ 102.368926][ T9201] 9pnet_fd: Insufficient options for proto=fd [ 102.372072][ T9201] (syz.4.906,9201,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 102.375363][ T9201] netlink: 'syz.4.906': attribute type 4 has an invalid length. [ 102.381656][ T9201] : renamed from bond0 (while UP) [ 102.414420][ T9203] 9pnet_virtio: no channels available for device syz [ 102.575909][ T9218] xt_hashlimit: size too large, truncated to 1048576 [ 102.872985][ T9244] trusted_key: syz.0.917 sent an empty control message without MSG_MORE. [ 102.974966][ T9195] overlayfs: statfs failed on './file0' [ 103.166332][ T9229] syz.1.913 (9229): drop_caches: 2 [ 103.427488][ T9280] block nbd2: not configured, cannot reconfigure [ 103.443729][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.760536][ T9296] syz.2.933: attempt to access beyond end of device [ 103.760536][ T9296] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 103.765449][ T9296] vxfs: unable to read disk superblock at 1 [ 103.767625][ T9296] syz.2.933: attempt to access beyond end of device [ 103.767625][ T9296] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 103.771609][ T9296] vxfs: unable to read disk superblock at 8 [ 103.773522][ T9296] vxfs: can't find superblock. [ 103.786910][ T9299] syz.2.933: attempt to access beyond end of device [ 103.786910][ T9299] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 103.790775][ T9299] vxfs: unable to read disk superblock at 1 [ 103.792916][ T9299] syz.2.933: attempt to access beyond end of device [ 103.792916][ T9299] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 103.804096][ T9299] vxfs: unable to read disk superblock at 8 [ 103.806087][ T9299] vxfs: can't find superblock. [ 103.885603][ T9310] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 103.976652][ T9328] tmpfs: Unknown parameter 'usrquotúÿinode_dardlimit' [ 104.046631][ T9338] 9pnet_virtio: no channels available for device syz [ 104.102436][ T9343] kvm: pic: non byte read [ 104.104343][ T9343] kvm: pic: non byte read [ 104.105993][ T9343] kvm: pic: non byte read [ 104.107614][ T9343] kvm: pic: non byte read [ 104.109252][ T9343] kvm: pic: non byte read [ 104.110914][ T9343] kvm: pic: non byte read [ 104.111124][ T9354] openvswitch: netlink: IP tunnel dst address not specified [ 104.112522][ T9343] kvm: pic: non byte read [ 104.116518][ T9343] kvm: pic: non byte read [ 104.118148][ T9343] kvm: pic: non byte read [ 104.119764][ T9343] kvm: pic: non byte read [ 104.149513][ T9359] __nla_validate_parse: 8 callbacks suppressed [ 104.149523][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.955'. [ 104.214126][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 104.226772][ T9372] netlink: 'syz.0.960': attribute type 10 has an invalid length. [ 104.230084][ T9372] hsr_slave_0: left promiscuous mode [ 104.232298][ T9372] hsr_slave_1: left promiscuous mode [ 104.240953][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 104.312967][ T9383] delete_channel: no stack [ 104.356251][ T9393] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.966'. [ 104.361462][ T9393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.966'. [ 104.429315][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 104.429326][ T40] audit: type=1400 audit(1752924412.203:66401): avc: denied { accept } for pid=9402 comm="syz.4.971" path="socket:[27044]" dev="sockfs" ino=27044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.569393][ T40] audit: type=1400 audit(1752924412.343:66402): avc: denied { setopt } for pid=9428 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.570591][ T9429] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=224 sclass=netlink_xfrm_socket pid=9429 comm=syz.2.981 [ 104.605516][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 104.680026][ T40] audit: type=1400 audit(1752924412.453:66403): avc: denied { lock } for pid=9438 comm="syz.4.987" path="socket:[27726]" dev="sockfs" ino=27726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 104.726525][ T5952] Bluetooth: hci3: ACL packet too small [ 104.845309][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'. [ 104.848102][ T9458] netlink: 'syz.1.993': attribute type 2 has an invalid length. [ 104.850423][ T9458] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 104.852697][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 104.915286][ T40] audit: type=1400 audit(1752924412.693:66404): avc: denied { setopt } for pid=9461 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.949170][ T9465] ip6gre1: entered promiscuous mode [ 104.956657][ T9465] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.073738][ T836] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 105.233788][ T836] usb 9-1: Using ep0 maxpacket: 8 [ 105.237346][ T836] usb 9-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 105.241317][ T836] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.244851][ T836] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 105.248903][ T836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.253595][ T836] usb 9-1: config 0 descriptor?? [ 105.524134][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.773847][ T9514] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 105.776496][ T9514] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.780286][ T9514] vhci_hcd vhci_hcd.0: Device attached [ 105.783398][ T9515] vhci_hcd: connection closed [ 105.783947][ T9104] vhci_hcd: stop threads [ 105.787852][ T9104] vhci_hcd: release socket [ 105.789512][ T9104] vhci_hcd: disconnect device [ 105.865655][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 105.990115][ T9532] loop6: detected capacity change from 0 to 524287999 [ 106.007992][ T9532] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1021'. [ 106.043090][ T9538] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 106.050933][ T9538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.171076][ T9554] input: syz1 as /devices/virtual/input/input12 [ 106.198874][ T9557] fuse: Bad value for 'user_id' [ 106.200404][ T9557] fuse: Bad value for 'user_id' [ 106.226383][ T40] audit: type=1800 audit(1752924414.003:66405): pid=9562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1033" name="nullb0" dev="tmpfs" ino=341 res=0 errno=0 [ 106.251411][ T40] audit: type=1400 audit(1752924414.023:66406): avc: denied { bind } for pid=9563 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.551639][ T40] audit: type=1400 audit(1752924414.323:66407): avc: denied { lock } for pid=9600 comm="syz.0.1047" path="socket:[27963]" dev="sockfs" ino=27963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 106.709086][ T9616] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 106.826407][ T9621] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 106.829080][ T9622] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 106.880788][ T9626] netlink: set zone limit has 4 unknown bytes [ 107.154627][ T40] audit: type=1400 audit(1752924414.933:66408): avc: denied { accept } for pid=9654 comm="syz.1.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.264405][ T54] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 107.416334][ T54] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.420371][ T54] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.425372][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.430385][ T9650] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.434615][ T54] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.489815][ T9668] kvm: kvm [9667]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0x2300200005 [ 107.517385][ T9668] kvm: kvm [9667]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0x2300200005 [ 107.520661][ T9668] kvm: kvm [9667]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0x2300200005 [ 107.536883][ T9668] kvm_intel: kvm [9667]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0x2300200005 [ 107.593987][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.781518][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.785419][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.817544][ T6003] usb 7-1: USB disconnect, device number 13 [ 107.840082][ T9] usb 9-1: USB disconnect, device number 4 [ 107.869128][ T9695] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 107.906101][ T40] audit: type=1400 audit(1752924415.683:66409): avc: denied { unmount } for pid=6545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 108.046348][ T9710] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 108.254395][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 108.403708][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 108.406674][ T9] usb 9-1: config 0 has an invalid interface number: 145 but max is 0 [ 108.409217][ T9] usb 9-1: config 0 has no interface number 0 [ 108.416796][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 108.419621][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.422885][ T9] usb 9-1: Product: syz [ 108.425945][ T9] usb 9-1: Manufacturer: syz [ 108.427416][ T9] usb 9-1: SerialNumber: syz [ 108.433309][ T9] usb 9-1: config 0 descriptor?? [ 108.436246][ T9] hub 9-1:0.145: bad descriptor, ignoring hub [ 108.438173][ T9] hub 9-1:0.145: probe with driver hub failed with error -5 [ 108.442634][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.145/input/input13 [ 108.577116][ T9779] tipc: Started in network mode [ 108.578691][ T9779] tipc: Node identity ac1414aa, cluster identity 4711 [ 108.581070][ T9779] tipc: Enabling of bearer rejected, failed to enable media [ 108.727893][ T9793] 9pnet_virtio: no channels available for device syz [ 108.908779][ T9813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9813 comm=syz.2.1100 [ 108.924847][ T9813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 108.937925][ T9813] vlan2: entered promiscuous mode [ 108.939553][ T9813] bond6: entered promiscuous mode [ 108.944783][ T40] audit: type=1400 audit(1752924416.723:66410): avc: denied { connect } for pid=9812 comm="syz.2.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.951117][ T9813] ip6tnl0: entered promiscuous mode [ 108.957448][ T9813] bond6: (slave ip6tnl0): refused to change device type [ 109.028173][ T9] usb 9-1: USB disconnect, device number 5 [ 109.173961][ T9] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 109.242454][ T9821] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 109.253943][ T9821] __nla_validate_parse: 11 callbacks suppressed [ 109.253953][ T9821] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1103'. [ 109.325573][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.329753][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.334970][ T9] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.338439][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 109.340162][ T9828] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 109.341752][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 109.345142][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 109.352316][ T9] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 109.356205][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.360689][ T9809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.364456][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 109.366563][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 109.369129][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 109.370720][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 109.373427][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 109.375542][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 109.484671][ T9837] binder: 9836:9837 ioctl c0306201 200000000540 returned -14 [ 109.575200][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 109.575216][ T40] audit: type=1400 audit(1752924417.343:66413): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.637006][ T9853] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1116'. [ 109.662416][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.664607][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.666868][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.668901][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.670978][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.673063][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.675203][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.677143][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1117'. [ 109.677260][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.677440][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.684635][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.686948][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.689068][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.691638][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.693690][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.696166][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.698235][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.700377][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 109.702452][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 109.732468][ T9861] Failed to initialize the IGMP autojoin socket (err -2) [ 109.771089][ T9865] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 109.774960][ T9865] program syz.2.1121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.857826][ T9873] binder: 9872:9873 ioctl c0306201 200000000640 returned -22 [ 109.894454][ T40] audit: type=1326 audit(1752924417.673:66414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.1119" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedf578e9a9 code=0xffff0000 [ 109.968045][ T9833] fuse: Unknown parameter 'gF7rou_®g}' [ 109.971413][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.005575][ T9880] program syz.2.1126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.006694][ T836] usb 9-1: USB disconnect, device number 6 [ 110.013308][ T9881] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1128'. [ 110.017910][ T9880] vlan1: entered promiscuous mode [ 110.020143][ T9880] vlan1: entered allmulticast mode [ 110.021894][ T9880] veth0_vlan: entered allmulticast mode [ 110.024251][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1127'. [ 110.076365][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.079576][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.082640][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.087769][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 110.088437][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.093633][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.096741][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.099664][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.102824][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.108133][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.110922][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.114098][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.116875][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.119808][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.122688][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.128259][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.131362][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.135446][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.137935][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.140308][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.142697][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.145451][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.147940][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.150453][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.152829][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.155492][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.157916][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.163464][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.167069][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.170091][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.171438][ T9900] vivid-000: disconnect [ 110.172997][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.173018][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.180796][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.184424][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.187387][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.190296][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.193347][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.196415][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.199485][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.202651][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.205998][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.208899][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.211803][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.216580][ T9] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 110.221828][ T9] hid-generic 0000:007F:FFFFFFFE.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 110.233573][ T9899] vivid-000: reconnect [ 110.275747][ T9908] fido_id[9908]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.349906][ T9917] input: syz1 as /devices/virtual/input/input14 [ 110.533178][ T9922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.796644][ T40] audit: type=1400 audit(1752924418.573:66415): avc: denied { map } for pid=9951 comm="syz.1.1147" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 110.992408][ T9957] binder: 9951:9957 ioctl c0306201 0 returned -14 [ 111.042050][ T9973] mmap: syz.2.1153 (9973) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.062675][ T9975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.139431][ T9985] Failed to initialize the IGMP autojoin socket (err -2) [ 111.273992][ T9988] Falling back ldisc for ttyS3. [ 111.385283][ T9100] Bluetooth: Error in BCSP hdr checksum [ 111.392101][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 111.412789][T10006] Bluetooth: MGMT ver 1.23 [ 111.414673][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 111.424753][T10006] efs: device does not support 512 byte blocks [ 111.426902][T10006] device does not support 512 byte blocks [ 111.426902][T10006] [ 111.645295][ T9105] Bluetooth: Error in BCSP hdr checksum [ 111.758849][T10008] cgroup: Bad value for 'name' [ 111.904624][ T9106] Bluetooth: Error in BCSP hdr checksum [ 112.165543][ T9099] Bluetooth: Error in BCSP hdr checksum [ 112.218283][T10022] netlink: 'syz.4.1169': attribute type 21 has an invalid length. [ 112.220734][T10022] netlink: 'syz.4.1169': attribute type 6 has an invalid length. [ 112.223149][T10022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1169'. [ 112.230191][T10022] Failed to initialize the IGMP autojoin socket (err -2) [ 112.297073][ T40] audit: type=1400 audit(1752924420.073:66416): avc: denied { getopt } for pid=10033 comm="syz.0.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.625116][T10044] /dev/sr0: Can't open blockdev [ 112.913358][T10051] mkiss: ax0: crc mode is auto. [ 112.926845][ T40] audit: type=1400 audit(1752924420.703:66417): avc: denied { ioctl } for pid=10050 comm="syz.1.1180" path="socket:[28871]" dev="sockfs" ino=28871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.930850][T10049] picdev_read: 77 callbacks suppressed [ 112.930874][T10049] kvm: pic: non byte read [ 112.940706][T10049] kvm: pic: non byte read [ 112.943336][T10049] kvm: pic: single mode not supported [ 112.943605][T10049] kvm: pic: non byte read [ 112.948361][T10049] kvm: pic: non byte read [ 112.950785][T10049] kvm: pic: level sensitive irq not supported [ 112.951032][T10049] kvm: pic: non byte read [ 112.955464][T10049] kvm: pic: level sensitive irq not supported [ 112.955701][T10049] kvm: pic: non byte read [ 112.960256][T10049] kvm: pic: non byte read [ 113.257663][ T40] audit: type=1400 audit(1752924421.033:66418): avc: denied { mount } for pid=10060 comm="syz.0.1184" name="/" dev="ramfs" ino=28964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.260330][T10061] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 113.265965][ T40] audit: type=1400 audit(1752924421.033:66419): avc: denied { mounton } for pid=10060 comm="syz.0.1184" path="/bus" dev="ramfs" ino=28967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 113.268062][T10061] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.278549][T10061] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 113.377610][ T837] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 113.433803][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.433870][ T5962] Bluetooth: hci4: command 0x1003 tx timeout [ 113.533911][ T837] usb 6-1: Using ep0 maxpacket: 8 [ 113.540524][ T837] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 113.544141][ T837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.547356][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.550433][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.553541][ T837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.558713][ T837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.561973][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.577294][ T40] audit: type=1400 audit(1752924421.353:66420): avc: denied { associate } for pid=10070 comm="syz.2.1188" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.715240][T10082] SELinux: ebitmap start bit (511) is not a multiple of the map unit size (64) [ 113.718624][T10082] SELinux: failed to load policy [ 113.769959][ T837] usb 6-1: usb_control_msg returned -32 [ 113.772154][ T837] usbtmc 6-1:16.0: can't read capabilities [ 113.782140][ T40] audit: type=1326 audit(1752924421.553:66421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.4.1192" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x0 [ 113.788972][ T40] audit: type=1326 audit(1752924421.553:66422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.4.1192" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf25f8e9a9 code=0x0 [ 114.124657][T10119] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 114.128719][T10055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10055 comm=syz.1.1181 [ 114.134708][ T6369] usb 6-1: USB disconnect, device number 14 [ 114.572708][T10141] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.606478][ T40] audit: type=1400 audit(1752924422.383:66423): avc: denied { setattr } for pid=10144 comm="syz.2.1201" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.614512][ T40] audit: type=1400 audit(1752924422.393:66424): avc: denied { getopt } for pid=10144 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.661972][T10151] __nla_validate_parse: 7 callbacks suppressed [ 114.661984][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 114.662069][ T40] audit: type=1400 audit(1752924422.433:66425): avc: denied { append } for pid=10150 comm="syz.2.1203" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.714033][T10158] program syz.1.1205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.741100][T10160] 9pnet_virtio: no channels available for device syz [ 114.746803][T10160] random: crng reseeded on system resumption [ 114.770800][ T40] audit: type=1400 audit(1752924422.543:66426): avc: denied { map } for pid=10159 comm="syz.2.1206" path="socket:[29979]" dev="sockfs" ino=29979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 114.891281][T10188] rtc_cmos 00:05: Alarms can be up to one day in the future [ 115.095902][ T40] audit: type=1400 audit(1752924422.873:66427): avc: denied { listen } for pid=10213 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.106471][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 115.111744][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 115.126362][T10219] netlink: 'syz.4.1225': attribute type 2 has an invalid length. [ 115.131998][T10219] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 115.136467][T10219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.139856][T10219] batadv_slave_0: entered allmulticast mode [ 115.215473][T10222] bridge_slave_0: left allmulticast mode [ 115.217440][T10222] bridge_slave_0: left promiscuous mode [ 115.219361][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.226804][T10222] bridge_slave_1: left allmulticast mode [ 115.228696][T10222] bridge_slave_1: left promiscuous mode [ 115.230540][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.236419][T10222] : (slave bond_slave_0): Releasing backup interface [ 115.240747][T10222] : (slave bond_slave_1): Releasing backup interface [ 115.252709][T10222] team0: Port device team_slave_0 removed [ 115.257787][T10222] team0: Port device team_slave_1 removed [ 115.259846][T10222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.263092][T10230] netlink: 'syz.4.1226': attribute type 10 has an invalid length. [ 115.264833][T10222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.275261][T10222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.295843][T10230] wlan1: mtu less than device minimum [ 115.297566][T10230] : (slave wlan1): Error -22 calling dev_set_mtu [ 115.398947][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1229'. [ 115.412789][ T5952] Bluetooth: hci3: ACL packet too small [ 115.475831][ T40] audit: type=1400 audit(1752924423.253:66428): avc: denied { read } for pid=10241 comm="syz.4.1233" path="socket:[30060]" dev="sockfs" ino=30060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.483875][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 115.490101][ T40] audit: type=1400 audit(1752924423.263:66429): avc: denied { lock } for pid=10245 comm="syz.2.1235" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=29224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.554515][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.557050][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.559676][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.562309][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.564855][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.567325][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.569780][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.572600][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.575063][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.577507][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.579875][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.582234][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.585040][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.587705][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.590448][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.593045][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.595512][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.598039][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.600740][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.603129][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.605676][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.608161][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.610878][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.613782][T10258] binder: 10257:10258 ioctl c0306201 200000000240 returned -11 [ 115.661416][T10264] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 115.677686][T10264] 8021q: adding VLAN 0 to HW filter on device bond8 [ 115.739290][T10272] netlink: 'syz.2.1240': attribute type 21 has an invalid length. [ 115.741890][T10272] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1240'. [ 115.746336][T10272] netlink: 'syz.2.1240': attribute type 4 has an invalid length. [ 115.748743][T10272] netlink: 'syz.2.1240': attribute type 5 has an invalid length. [ 115.751613][T10272] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1240'. [ 115.778310][T10274] Failed to initialize the IGMP autojoin socket (err -2) [ 115.893909][T10284] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.931993][T10288] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 115.995541][T10291] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 115.997997][T10291] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.010672][T10291] hpfs: hpfs_map_sector(): read error [ 116.038379][ T40] audit: type=1400 audit(1752924423.813:66430): avc: denied { write } for pid=10293 comm="syz.1.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.044877][T10294] ------------[ cut here ]------------ [ 116.046805][T10294] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:180:9 [ 116.049593][T10294] shift exponent 1029 is too large for 32-bit type 'int' [ 116.052541][T10294] CPU: 3 UID: 0 PID: 10294 Comm: syz.1.1248 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 116.052564][T10294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.052576][T10294] Call Trace: [ 116.052584][T10294] [ 116.052592][T10294] dump_stack_lvl+0x16c/0x1f0 [ 116.052647][T10294] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 116.052680][T10294] aio_iiro_16_attach.cold+0x19/0x1e [ 116.052697][T10294] comedi_device_attach+0x3b0/0x900 [ 116.052720][T10294] do_devconfig_ioctl+0x1a7/0x580 [ 116.052733][T10294] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 116.052754][T10294] ? find_held_lock+0x2b/0x80 [ 116.052772][T10294] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 116.052791][T10294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.052805][T10294] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 116.052820][T10294] ? do_vfs_ioctl+0x523/0x1a60 [ 116.052835][T10294] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.052853][T10294] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 116.052872][T10294] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 116.052893][T10294] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.052915][T10294] ? hook_file_ioctl_common+0x145/0x410 [ 116.052932][T10294] ? selinux_file_ioctl+0x180/0x270 [ 116.052949][T10294] ? selinux_file_ioctl+0xb4/0x270 [ 116.052966][T10294] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 116.052981][T10294] __x64_sys_ioctl+0x18e/0x210 [ 116.052996][T10294] do_syscall_64+0xcd/0x4c0 [ 116.053008][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.053019][T10294] RIP: 0033:0x7f816118e9a9 [ 116.053029][T10294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.053040][T10294] RSP: 002b:00007f8161f51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.053050][T10294] RAX: ffffffffffffffda RBX: 00007f81613b5fa0 RCX: 00007f816118e9a9 [ 116.053057][T10294] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 116.053064][T10294] RBP: 00007f8161210d69 R08: 0000000000000000 R09: 0000000000000000 [ 116.053070][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.053076][T10294] R13: 0000000000000000 R14: 00007f81613b5fa0 R15: 00007ffd59280f48 [ 116.053089][T10294] [ 116.053093][T10294] ---[ end trace ]--- [ 116.130306][T10294] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 116.132485][T10294] CPU: 3 UID: 0 PID: 10294 Comm: syz.1.1248 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 116.136608][T10294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.140805][T10294] Call Trace: [ 116.141887][T10294] [ 116.142812][T10294] dump_stack_lvl+0x3d/0x1f0 [ 116.144245][T10294] panic+0x71c/0x800 [ 116.145498][T10294] ? __pfx_panic+0x10/0x10 [ 116.147265][T10294] ? __pfx__printk+0x10/0x10 [ 116.149088][T10294] check_panic_on_warn+0xab/0xb0 [ 116.150918][T10294] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 116.152862][T10294] aio_iiro_16_attach.cold+0x19/0x1e [ 116.154554][T10294] comedi_device_attach+0x3b0/0x900 [ 116.156677][T10294] do_devconfig_ioctl+0x1a7/0x580 [ 116.158663][T10294] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 116.160361][T10294] ? find_held_lock+0x2b/0x80 [ 116.161810][T10294] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 116.163471][T10294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.165348][T10294] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 116.167136][T10294] ? do_vfs_ioctl+0x523/0x1a60 [ 116.168631][T10294] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.170211][T10294] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 116.172216][T10294] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 116.174237][T10294] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.176974][T10294] ? hook_file_ioctl_common+0x145/0x410 [ 116.179276][T10294] ? selinux_file_ioctl+0x180/0x270 [ 116.181442][T10294] ? selinux_file_ioctl+0xb4/0x270 [ 116.183624][T10294] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 116.186075][T10294] __x64_sys_ioctl+0x18e/0x210 [ 116.188083][T10294] do_syscall_64+0xcd/0x4c0 [ 116.189993][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.192420][T10294] RIP: 0033:0x7f816118e9a9 [ 116.194275][T10294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.201147][T10294] RSP: 002b:00007f8161f51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.203769][T10294] RAX: ffffffffffffffda RBX: 00007f81613b5fa0 RCX: 00007f816118e9a9 [ 116.206322][T10294] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 116.208832][T10294] RBP: 00007f8161210d69 R08: 0000000000000000 R09: 0000000000000000 [ 116.211322][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.213785][T10294] R13: 0000000000000000 R14: 00007f81613b5fa0 R15: 00007ffd59280f48 [ 116.216546][T10294] [ 116.218255][T10294] Kernel Offset: disabled [ 116.219650][T10294] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:09:59 Registers: info registers vcpu 0 CPU#0 RAX=000000000014a05f RBX=0000000000000000 RCX=ffffffff8b866c99 RDX=0000000000000000 RSI=ffffffff8de2fd99 RDI=ffffffff8c157260 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a93d50 R15=0000000000000000 RIP=ffffffff8b8657ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555b2f4808 CR3=000000004fa53000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd56ff2f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000004778cde7a8 RBX=ffff88806a523a00 RCX=00000000000006e0 RDX=0000000000000047 RSI=ffff88806a523a00 RDI=0000000000053374 RBP=0000000000053374 RSP=ffffc90003397b18 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=0000000000000019 R15=ffff88806a527c80 RIP=ffffffff81684535 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555573131500 ffffffff 00c00000 GS =0000 ffff8880d6822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006140 CR3=000000003135b000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000006 DR2=0000000000000007 DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557317cbb0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557314af50 000055557314ae90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555573144498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555573152b84 0000555573152700 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080049a800336964 656d6f632f766564 2f01ffffffffffff ffffe50802800324 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080003e0033ffe08 0003d803338e0800 03d0030a080003c8 0302808080860800 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004880302080004 800304080003f803 0480080003f00320 8092080003e80300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004b00300080004 a803078796080004 a0030c0800049803 0208000490030208 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080004d003029208 0004c80308808090 88080004c0030608 0004b8030d919208 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010380040889a390 8008000100000008 06060112a6000800 05a0031ffffffff0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800059803018080 8080080005900304 8c08000588031008 0005800378080004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f80339d2080004f0 0316080004e80304 8080f9ac080004e0 0300080004d8031f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffa080004d0 030292080004c803 0880809088080004 c00306080004b803 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000103be3 RBX=0000000000000002 RCX=ffffffff8b866c99 RDX=0000000000000000 RSI=ffffffff8de2fd99 RDI=ffffffff8c157260 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90a93d50 R15=0000000000000000 RIP=ffffffff8b8657ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6922000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8161174740 CR3=00000000555c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd56ff090 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedf5811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a39c1fe8e2 8877cda99b231499 8843df01c4879e57 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7c6b5dc69230122 7aca8549e0ca753a 4d483b0d7b03cae2 f2ec1b4289c47a7a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f91f9cde0446af8 5c12f017eb3024a3 4a7a07f8899597e6 4c469e8711d48126 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8164f12c1a337dca 57ca12311bc3994d cfbbed8f08640be3 1d80a5c6df459628 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a3e65 RDI=ffffffff9b0b7e20 RBP=ffffffff9b0b7de0 RSP=ffffc900060af4e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b0b7de0 R15=ffffffff855a3e00 RIP=ffffffff855a3e8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8161f516c0 ffffffff 00c00000 GS =0000 ffff8880d6a22000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8161ee7d60 CR3=000000002bd53000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000580b DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040002 Opmask01=0000000001000001 Opmask02=0000000082fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8161211d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8161211d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8161211d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8161211d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8161211de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8161211ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8161386488 00007f8161386480 00007f8161386478 00007f8161386450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d4552555341454d 5f434c00454e4f48 50454c45545f434c 0053534552444441 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f434c00454d414e 5f434c0052455041 505f434c00534547 415353454d5f434c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000