last executing test programs: 25.229913452s ago: executing program 1 (id=539): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e", @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0xc34db6ec9f8c2bed) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0xd3, 0x80) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xfe2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x48, &(0x7f0000000100)=r5, 0x120) (async) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) 25.228732754s ago: executing program 1 (id=541): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) (async) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x101) 25.169057508s ago: executing program 1 (id=543): r0 = syz_clone(0x45008600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e07070514"], 0xa) (async) syz_emit_vhci(&(0x7f0000002380)=ANY=[@ANYBLOB="02c8b018001400050018061000ed5574dc9c68d5ab025a13070006000562eb5e798bfaa261372588a0f9976fa5689054aa61d671379716eb31da956d966be71bc82eec5869168e8f95c03e306cc1a52d77634675fbc1f600000000000000a51fc6857be1ef11c1f287ea2a0d9c149c8f756b402ae109a23a1f19d00a632511e5c92797cef7", @ANYRESOCT=r0], 0x1d) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0) (async) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={0x0, 0x0}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040200072ddcd898cf3fd720ca29f1826501"], 0x6) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) (async) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x3ff, 0x44c342) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, &(0x7f00000022c0)) (async) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) write$FUSE_LK(r2, &(0x7f0000000180)={0x28, 0xffffffffffffffda, 0x0, {{0x2, 0xb7, 0x2, r6}}}, 0x28) (async) ptrace(0x10, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) (async) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r7, &(0x7f0000000240)={0x78, 0x0, r8, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r9}}}, 0x78) (async) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000040)={0x14}, 0x14) syz_clone3(&(0x7f00000026c0)={0x200102200, &(0x7f0000002300)=0xffffffffffffffff, &(0x7f0000002340), &(0x7f0000002440), {0x3c}, &(0x7f0000002480)=""/235, 0xeb, &(0x7f0000002580)=""/231, &(0x7f0000002680)=[0x0, 0x0, 0x0, r6], 0x4}, 0x58) process_madvise(r10, &(0x7f0000003b80)=[{&(0x7f0000002740)="46b07249995289698f92467dcf0934b4d359418633080f9c501801a68695bc3c7fa5dc88253221265d6ae0ec26f409ce97c158ed227910459d8960cc05bf4e4d49d55dbc10ec4a38da9aef0d4301ec5e336e4ed916199f84a1a069754f278cc3a3df0c1cb332629f086b6b72da871212ad5c368055459ffec7558f08231aaed6bdbb10d16e99b946976f353b23858fe878ba94d0f4d37552e9bf304b904ff8c4430bdcc18abb60bdf72e79d5c4025b01af58b2371e4d66a82ac3f1bf57e8b9efad2402e19785b9a5b58462a9fb4d8956d61063e250364f55b56d80bc4b4f", 0xde}, {&(0x7f0000002840)="8b92f9fa4aae7a1c3121e93662de51cf0183161393491e5816fd1ad9bbcfdc9b8655c8252430eb39b3d46613dc2b53f45a7d040323a35fc38b7aa18c1ac12ee2dc6af0e110f665112db5697c31971650381becce0d9df51fbf563f66b1efac2fcee7", 0x62}, {&(0x7f00000028c0)="1080ea0619b4766796c084e1ec49edeb82b7cf45820bd671ed45c8", 0x1b}, {&(0x7f0000002900)="6fd757d0f0634696ecb26e02be64d573cf34695540706941c56a668d50c6855546dbc080edd81781900e45bc73d157a046d9d9e327a011705a3c55994c9ecb799a1b6b444ad3f914b7701244a36b87888c09821af887e2b48037056b632af0bd32571a923352b9f208fb29c9e2b992e5160042990b95681f0b383d6dffb4ef9ef0dc5a2a0bc8386a73cfdc8b072a85a1f13fbf0f1c527294a9190ff02357c950d1a18f380fb7920c2924ee1ebeb2f3e9fe65c6efa2cde561c6e2d1f3a39eb292fe77478e00ab8488f823c805b3bab957b843c8ab373209af2349aa8875", 0xdd}, {&(0x7f0000002a00)}, {&(0x7f0000002a40)="b934f55f30aa0024bad82d73b41d93e5f1edfae681aa4745dc71f62b869b7654114915c351", 0x25}, {&(0x7f0000002a80)="c19f09d030e67e74a8e8f10acc2ba8efeda79aedfaa5f15ac7c0215c8f36cf38fd4fa8b3a7", 0x25}, {&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="a1f70dc0f776117b1beb3cd335dc880150022717a0a86d38fe3842dfb9b37832753613ad7cd2", 0x26}, {&(0x7f0000003b00)="b99ccba3c079b7f1368ff50fd264068b19e0a4890e8a31299a4c81e06f8802aef7622c89fce100804bd61e2bdca8e7f486907f1b4cf27a0f03b4e0ada365c1284f", 0x41}], 0xa, 0xf, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) r11 = fanotify_init(0x1, 0x101000) fanotify_mark(r11, 0x8, 0xc0000009, 0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00') (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='esdfs\x00', 0x10, 0x0) 25.049998282s ago: executing program 1 (id=546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x5, {{0x2, 0x4e20, @empty}}, 0x1, 0x1, [{{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x110) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce1925", 0x5a}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f70", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="353a35d6094e4e", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="252caf3a209539dd4482324da34840047e322d094abd47ba796c5909ccd4e0046bb1cecbad790873c1e322ec988526e2dde59e7ff8a900c525297eea9df0d0bf652b6c78f435436a6ea7fef2d9effe14ba9d43db9cc558c50b7957a51d7e5bdec3a04a8df3113927462bd0027d86c1cc9fa13a3092e8bb88406aba1359947e1e77921c434c5046", 0x87}], 0x1}}], 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) 24.980622228s ago: executing program 1 (id=548): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x80000000, @remote, 0x4}}, 0x1, 0x100, 0x0, 0x3, 0x6}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvfrom(r1, &(0x7f0000000100)=""/218, 0xda, 0x12001, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x80) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) lremovexattr(0x0, &(0x7f0000001400)=ANY=[@ANYRESOCT]) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="fa9d", 0x2}], 0x1) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xc, 0xb, 0x2, @generic=0x2, 0x2, 0x7, 0x8b}) ioctl$VT_OPENQRY(r0, 0x4bfb, &(0x7f00000002c0)) 24.610802033s ago: executing program 1 (id=554): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) 24.550563222s ago: executing program 32 (id=554): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) 2.911384331s ago: executing program 0 (id=865): setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "a1247e656185daf8", "dc785cc972c08778894439109fd9573f", "af42e9f1", "2c2e9f32bb40bd2d"}, 0x28) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0xb, 0x6, {0x80, @struct={0x1, 0x7}, 0x0, 0xff, 0x9, 0x6, 0x8, 0x1, 0x9a, @struct={0x5, 0x6c74}, 0x2, 0xe72, [0xf, 0x7, 0x2, 0x6, 0x9, 0x4]}, {0x7, @struct={0xd5, 0xd}, 0x0, 0xa74, 0x7fffffffffffffff, 0xc8a4, 0x6, 0x7f, 0x8a, @struct={0x1, 0xb05}, 0x3, 0xffffffff, [0x6, 0x40, 0x8000, 0x6, 0x2, 0xfffffffffffffffd]}, {0xffffffffffffffff, @usage=0x2, 0x0, 0xe0cf, 0x7fffffffffffffff, 0x9, 0x8, 0x2, 0x28, @usage=0x3, 0x4, 0x2, [0xffffffffffffe000, 0x4, 0x3, 0xfffffffffffffffb, 0x5, 0x1]}, {0x1, 0x5, 0x7}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000480)={0x10, 0x0, {0x0, @struct={0x6, 0x80000000}, 0x0, 0x7, 0x6, 0xe, 0x8, 0x8, 0x80, @struct={0xfffff772, 0x1a5b40d9}, 0xe3, 0x3, [0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0x9]}, {0x4, @struct={0x4, 0x7}, 0x0, 0x800, 0x7ff, 0x7, 0x40000000000000, 0x9, 0x2, @usage=0x100, 0x0, 0x8, [0x10001, 0xffffffffffffffff, 0x9, 0x2, 0x7fff, 0x4]}, {0x7, @struct={0x5, 0xc14d}, r1, 0x8, 0xa, 0x6, 0x0, 0x1, 0x10, @usage=0x13a, 0x5, 0x55ebb454, [0x3, 0x10000, 0x27, 0xce, 0xfffffffffffffffc, 0x420]}, {0x8, 0x100, 0x4}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80308}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)=@getsa={0x110, 0x12, 0x100, 0x70bd2d, 0x25dfdbfd, {@in=@multicast1, 0x4d4, 0xa, 0x2b}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @algo_auth_trunc={0xd4, 0x14, {{'michael_mic\x00'}, 0x440, 0xa0, "f65097b70b9aab8aeaed7d29111726c4e40ac6034ab6129e300342be1ff61c7d62203427e173236ad3b5b2230a7a34c883ed236494834ef59a5b0fe5da3c557cc9e34f6d164c2fe83d24b66ad6247bf2442b5048a291f27a44143d3e330925ac6242870c340447dcbb85f715c91d9bc0d9238f149fb0f1dd62d84124b1e79d469881aef3e2d3c05e"}}]}, 0x110}, 0x1, 0x0, 0x0, 0x48880}, 0x40) sendto$inet(0xffffffffffffffff, &(0x7f0000000a80)="a0dffcaf8d6bcc32f8a8e6a13c5d5218a88fb701589ae603393b29ccb1cdd275fc56ccd02eafca12be985dc0125dd462df7356863a5f1d732d0cc0334a941b1e1eb3f82d4d7a7bfa74fa2b63fa836458f14457a007652f47c42843f0ab3e4bf30f9d8eb5e2dd166081e55e2d97c4de27657eb2bd5bfa2989045178770919d02938ef1b2296a5185bbb9ea875c7199e827953b0475c08aa4ebbe4a70047ba79b985b77149f17b3b8f79e3e92e9f1ac2dd6015055813a45626d35be885c4c6ce420440ff293b21a2daf0664b5b130723", 0xcf, 0x0, &(0x7f0000000b80)={0x2, 0x4e22, @broadcast}, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000bc0), 0x101882, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000c00)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000c40), 0x4) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000cc0), 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000d00)=0x8, 0x4) flistxattr(r0, &(0x7f0000000d40)=""/147, 0x93) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000f80)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001080)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) mount$9p_rdma(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80), 0x88004, &(0x7f0000001140)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x1}}, {@common=@cache_loose}], [{@subj_type={'subj_type', 0x3d, '/dev/video2\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@euid_eq={'euid', 0x3d, r5}}, {@uid_gt={'uid>', r6}}, {@measure}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x15}}, {@fowner_gt={'fowner>', r7}}]}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getpeername$inet(r0, &(0x7f00000013c0)={0x2, 0x0, @remote}, &(0x7f0000001400)=0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001440)={r2}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x48, 0x140d, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004041}, 0x4) accept4(r2, &(0x7f00000015c0)=@caif=@dbg, &(0x7f0000001640)=0x80, 0x0) socket$inet6(0xa, 0x3, 0x1ff) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000001680)={'team0\x00', @remote}) setxattr$security_ima(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), &(0x7f0000001740)=@sha1={0x1, "83d00f5b73a305c13e95e6429ff27efb79e4fa32"}, 0x15, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001780)={0x1, 0x7}) recvmsg$kcm(r2, &(0x7f0000001900)={&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001840)=""/104, 0x68}], 0x1}, 0x2140) 2.8416649s ago: executing program 0 (id=866): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f00007d3000/0x4000)=nil, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "26204c3a4a02b001f34bd7cc7992b4f5a1bf8be4be636c"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') close_range(r2, r2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004100), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_DIRENT(r3, &(0x7f0000004140)=ANY=[@ANYRESDEC=r3], 0x85) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 1.97146857s ago: executing program 0 (id=871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r0, 0x403, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 1.301415459s ago: executing program 0 (id=879): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0xf4240}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) setrlimit(0x6, &(0x7f0000000000)={0x0, 0x6}) (async) r1 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x4, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000300)) (async) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0x0) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000200)=',-\\\x00', &(0x7f0000000240)='^(!}\x00']}) 975.998217ms ago: executing program 3 (id=889): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$kcm(0x29, 0x7, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) fanotify_init(0x200, 0x40000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) io_uring_setup(0xb97, &(0x7f00000000c0)={0x0, 0x92d, 0x8, 0x1, 0x6a}) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x4) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000024c0)={{0x2, @addr=0x5}, "55571446bc1ba3c41cc922ce5c74b94d729010871567a522cec907e19cd30541", 0x1}) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000002900)={0x3d4, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x38c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "c64ecdd94bace9bcb9c402bc22265bb5e3303b8f8c438805866095881fdea8ca08af6145fb6337fb0153b60c3ea7999bcfa6b833e2c8a89940d00817eeaa3a8f0e3eceae54cd7228dcefb34cd6a07763f8836b50daffe50645db517095e880c088449146e0f8840af7a850d069851433ff455341b79c75317d579c646b695fd85f4d052a3964a213e96c7948cd9fd090bb8eb565e014b1d3b50b244c5980ac31a4aa79f068f3f56c52d598bca5352d2d3a5ca3c4b3ceb95ac5f611f4e6b65a330147c1521605478dcd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!#&\'*#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26e4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc30}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'fdinfo/4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1e0, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe98}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'fdinfo/4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '?*)@$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x114, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6ce}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd2, 0x2, 'fdinfo/4\x00\xc8\xa9J!5q^ BL4\xa3\xd1\xf6\xb5\x06\x05\xe3\xf6{)\xb7}U\xf1\vxX\x97\x90\xadQG3`\xe5J.U\xb7\xa8\xcd\xf6\xa6\xda\x9b\xb2\x14\xf8\x01&v~v\xf8\r\x9c\xdb\x17\xc0Dj\r\x9e\x80\x04\xd1m\xdb\n>\x92\xdcM8\x13\xd8\xcbL\x8a\xed\xcbX=\x10\x87L\xe3\a\xd9A\xe0\xdd\xda\n\xa5\x01\x86@\xa7\xe4r\xc4^o?j_\xf1\xefz\xb0\xf6\v\x03\xda\xbc*7\xe6f\xd6\x9e*\x8f\x957I=\x98FF\xec\xc7/b\xf5\xd0\xb4d\xbc\x98\xe9\xbd\x89c\xdfo4*\xe3s\xe5\x96o\f\x01\xcf\xee5\x12I\xcbEJ\x18\xe6\x8a-\x82I\xd5\xb2\xd2X\xb1\x0e:\xd8\xda5\xaes\xd6\xbe\"J\xf3\x16\xdd!v\x10\xec_\x101'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\xf9*{~-^-!-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'fdinfo/4\x00'}]}, {0x4}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x800}, 0x8011) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x118}, {&(0x7f0000000080)=ANY=[@ANYBLOB="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"/368], 0x178}], 0x2}, 0x0) 975.007125ms ago: executing program 4 (id=891): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_GET_STATUS64(r0, 0xc0001502, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/3:0:0:0\x00', 0x40002, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = getpid() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]}) syz_open_procfs(r2, &(0x7f0000000000)='net/netstat\x00') 860.221279ms ago: executing program 3 (id=893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @multicast1}, 0x40, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)='team0\x00', 0x7, 0x5, 0x800}) r4 = syz_open_dev$midi(&(0x7f0000000200), 0xffffffffffffffff, 0x181042) close(r4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x10000000000, {0x2, 0xff, 0x3}, 0xfe}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0xa40, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x4, 0xa2b9, 0x6, 0x4, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x7a, 0x558e0d31, 0x5, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x200005, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x77, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0x800000f1, 0x6, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x6, 0x1, 0x7fbf, 0x9, 0x0, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x5, 0x6, 0x7, 0x7, 0x1, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a0, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x8, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x209, 0x81, 0x7ff, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x4, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1002, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x271, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/122, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x2, 0x3, [0x1, 0x6, 0x4]}, 0xe) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffe, 0xffb, 0x2, 0x180, 0x7, 0x14, 0xf1, 0xffffffffbffffffc, 0x7fffffffffffe, 0x5, 0x5, 0xa, 0x0, 0x45, 0x800, 0xbdb], 0x3000, 0x1c4213}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r12 = dup(r11) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 859.81946ms ago: executing program 4 (id=894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syslog(0x2, &(0x7f0000000380)=""/195, 0xc3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x4}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(r3, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) 698.111588ms ago: executing program 2 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x0, @multicast1}}, 0xffff}, 0x90) sendto$inet6(r0, &(0x7f0000000080)="03", 0x1, 0x50, &(0x7f00000000c0)={0xa, 0x4e23, 0x4275, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7df}, 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, &(0x7f00000007c0)={'netdevsim0\x00', @local}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280), 0x0, 0x2, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000014c0)={0x0, r3, r2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r4) sendmsg$NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x1200) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r8, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000008, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x23, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, 0x40}) 531.298746ms ago: executing program 2 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053", @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000003c0)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x400002, r3}) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3e}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x401}]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x20000040) 421.90287ms ago: executing program 2 (id=899): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'nicvf0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffffffff8000}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="e6f8a989fed3"}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x21, &(0x7f0000000180)=[@in={0x2, 0x0, @local}], 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x170, 0x1, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_PAYLOAD={0xf7, 0xa, "fc56b2cb8a62bbe5182d92702189014f666432848a50128d54300e64a3036cb766ba2f19e98e318c54070bd10e0f69f27c8becce523375ca3c67e87679e0a911674b0d9ebcd0095a8c91aedacc793907dc2594bd98be02f36fd426bde6efb5fab36deac266e23c77b4a9dabca2a94170c44e9fd3a12203abf6c9b2f8a188226512cc3f4a166864800967addfae999c5b244e3eaeaa93f68b69d4510d1ba7176c90f923e40a4e956ca9125d4b6b2842f379882a5a7fa25281fb856667ad716ee90fb163d6cdae9946021f5cef69c009a5547de5f7a813b002bb026635254cabe56fc3b10e164be05c1ad022c75f9d0edf16be89"}, @NFQA_CT={0x4}, @NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xf7, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x40, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x81}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x1}]}}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 418.69509ms ago: executing program 0 (id=900): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[], 0x48) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'amplc_pc263\x00', [0x4f27, 0x0, 0x10000, 0x4, 0x2, 0xcca, 0x2, 0x7, 0xa, 0x100, 0x2, 0x4, 0x1, 0x1, 0x64, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0xffffffff, 0x20001e58, 0x2000000b, 0xe69, 0x39, 0x8, 0x6, 0x0, 0xfffffff8]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x4010, r0, 0x0) 330.807734ms ago: executing program 4 (id=901): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x109a04, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20008810) r5 = socket(0x10, 0x2, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_RETRIES(r6, 0x701, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) sendto$inet6(r5, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 271.379682ms ago: executing program 4 (id=902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000001c0)=0xc) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000780)={0x1, r2}) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000280)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1000000) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001840)={0x50, 0x0, &(0x7f0000000680)=[@enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f0000000840)="c3"}) stat(0x0, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0x5, 0x8, 0x3) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r5, 0x0, 0x0, 0x40010011, 0x0, 0x0) 270.869879ms ago: executing program 2 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x400) (async, rerun: 32) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file1\x00') (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e5ffffffffffffff00006b00000008000300", @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="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"}) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000056eb000004000000100000000719d3c9c6639896be1dc8620eafec22b30e6b0350eb9e1777e66e4f0d3d6569304fcbb1dd660c03a22d4295f38531598cede5d9e233c3745c6b76b006c3f9de738cea09b21c2d596a096e0f15ad58d7439293ed4758a9026ec7c3a82b42ac1b1f9ba5412fa05e4e0f7a32eb57526b64d09085faf0fb16261424f74bfb6c78a091fa8669394e10d358e83cf02401650a9b6f431f88e594cc26e2905e0b0b341fda154a2cd47a6273d165f616141872844a854d275ba772a5fc1cd988b92e84a97f62414f88227fa8ef61ce", @ANYRES32, @ANYRES32=r5], 0x38}}, 0x0) (rerun: 32) 210.428967ms ago: executing program 2 (id=904): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000850000006d00000018113707", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x0, 0x0) init_module(0x0, 0x3f00, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="290200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000014591f2a1743f62ab1ca166b437fe3b0ca5769ca25770d91fb811eb0360ce38360a95bda847839953bfe2ed82fa4b4b44390fcc9a02d562b9c83a8b6af783c1c7a5a965197421247bb993c4f88496e70411802f595479c637811845c721b8601dae588047be8efc0cebc942a7701763fb064fa5dc8abacd37fa76fe3a6a92153d24bc8f9fe854f57855f8ae37804e0b6236e264e44da2dcdd936242393f7f150d685ad973c24e93d01dc949d26b14846771233fe378716bb5c86b3d3f7015d1ab1d175a44e94a72a8b"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3, @ANYRES16=r5], 0x4c}}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x380000, @loopback}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00086bbf8a64fddb6ccd26c5000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$inet(r7, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x2000c054) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 209.280935ms ago: executing program 4 (id=905): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@local, @in=@private=0xa010100, 0x2, 0x6, 0x10}}]}, 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x181000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x8000040400000000, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r9, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000a00008804c00670a24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db7174c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c0400008024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e14000200776730"], 0xec}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) 208.874756ms ago: executing program 2 (id=906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0x0, 0x9, 0x0, 0x0, 0x2, 0x3}, &(0x7f00000000c0)={0x89d, 0x557c, 0x8754, 0x1, 0x8000, 0x2, 0xfffffffffffffff9, 0x8}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0xc67, 0x3, 0xf722, 0x10001, 0x4}, &(0x7f0000000180), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5e2d6d5161ffdb78}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x9, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000540)={r4, 0x2, &(0x7f0000000440)=[0x8000, 0xf7dd], &(0x7f00000004c0)=[0x24, 0x0, 0x8001, 0xfffa, 0x7, 0x1, 0xfff], &(0x7f0000000500)=[0x8, 0xaa, 0xfff, 0x126, 0xb59, 0x30f, 0x3]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800181801"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r5}, 0x38) 147.007797ms ago: executing program 3 (id=907): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000812000/0x1000)=nil, &(0x7f0000624000/0x2000)=nil, 0x1000, 0x3, 0x2}) (async) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97A3A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml', 0x2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000003c0)={r6, 0xab}, 0x8) (async) ftruncate(r5, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) madvise(&(0x7f0000c65000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f00000002c0)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r7 = dup3(r3, r2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c0000100"/20], 0x3c}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) listen(0xffffffffffffffff, 0x8000) accept4$x25(r1, 0x0, 0x0, 0x80800) 146.073875ms ago: executing program 3 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed00080001"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x24040850) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/51) 72.038188ms ago: executing program 3 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt(r3, 0x84, 0x80, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}}}, 0x84) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000005c0)=@get={0x1, 0x0}) 22.052818ms ago: executing program 0 (id=910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=@polexpire={0xcc, 0x1b, 0xc8dbc5159e5c15d1, 0x0, 0x0, {{{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xcc}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=@polexpire={0xcc, 0x1b, 0xc8dbc5159e5c15d1, 0x0, 0x0, {{{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xcc}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x4, 'lblcr\x00', 0x0, 0xfffffff8}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x7, @pix={0x4, 0x6, 0x31363553, 0x0, 0xff800000, 0x50, 0x1, 0x3, 0x0, 0x3, 0x0, 0x1}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f00000000c0)=0x8, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.728623ms ago: executing program 3 (id=911): unshare(0x62000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2) landlock_create_ruleset(0x0, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000380)={0x2, 0x0, 0x7, 0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000280)={{0x2, 0x4e24, @loopback}, {0x306, @remote}, 0x28, {0x2, 0x4e20, @multicast1}, 'pimreg0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a", @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x1, 0xda, 0x1, 0x2f5fd0af, 0x0, [0x0, 0x10001, 0x1bc, 0x5]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x5a}, 0x20) r4 = socket(0x10, 0x803, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000aff0000", @ANYRES32=r6, @ANYBLOB="140002"], 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKFRAGET(r8, 0x1265, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000111400022bbd7000fcdbdf2508003e004a000100000008004f000200000008003e0003000000080001000200000008004b006200000008003e000500000008004f0002000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000016}, 0x8080) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000005600010028bd7000ffdb0000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000800) 0s ago: executing program 4 (id=912): r0 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x20000, 0x1000}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): denied { load_policy } for pid=6235 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 56.607832][ T6236] SELinux: policydb magic number 0x452bdf53 does not match expected magic number 0xf97cff8c [ 56.617517][ T6236] SELinux: failed to load policy [ 56.662660][ T40] audit: type=1400 audit(1758207848.097:208): avc: denied { execute } for pid=6237 comm="syz.3.52" name="file1" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.662844][ T6238] process 'syz.3.52' launched './file1' with NULL argv: empty string added [ 56.675931][ T40] audit: type=1400 audit(1758207848.117:209): avc: denied { execute_no_trans } for pid=6237 comm="syz.3.52" path="/7/file1" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.758552][ T40] audit: type=1400 audit(1758207848.197:210): avc: denied { setopt } for pid=6158 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.761174][ T6046] usb 6-1: USB disconnect, device number 2 [ 56.797851][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 56.803050][ T6246] tmpfs: Bad value for 'mpol' [ 56.917321][ T6252] block nbd0: Attempted send on invalid socket [ 56.919343][ T6252] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.922378][ T6252] block nbd0: Attempted send on invalid socket [ 56.925114][ T6252] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.927962][ T6252] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 56.931016][ T6252] block nbd0: Attempted send on invalid socket [ 56.932898][ T6252] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.936761][ T6252] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 56.940065][ T6252] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 56.942430][ T6252] UDF-fs: Scanning with blocksize 512 failed [ 56.945846][ T6252] block nbd0: Attempted send on invalid socket [ 56.947777][ T6252] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.950975][ T6252] block nbd0: Attempted send on invalid socket [ 56.952885][ T6252] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.955801][ T6252] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 56.958721][ T6252] block nbd0: Attempted send on invalid socket [ 56.960700][ T6252] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.963647][ T6252] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 56.966511][ T6252] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 56.968804][ T6252] UDF-fs: Scanning with blocksize 1024 failed [ 56.971640][ T6252] block nbd0: Attempted send on invalid socket [ 56.973649][ T6252] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.976521][ T6252] block nbd0: Attempted send on invalid socket [ 56.978397][ T6252] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.981309][ T6252] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 56.984964][ T6252] block nbd0: Attempted send on invalid socket [ 56.986857][ T6252] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.989699][ T6252] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 56.992751][ T6252] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 56.995105][ T6252] UDF-fs: Scanning with blocksize 2048 failed [ 56.997218][ T6252] block nbd0: Attempted send on invalid socket [ 56.999097][ T6252] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.002426][ T6252] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 57.005696][ T6252] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 57.008541][ T6252] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 57.010857][ T6252] UDF-fs: Scanning with blocksize 4096 failed [ 57.012723][ T6252] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 57.312616][ T6259] kvm: kvm [6258]: vcpu2, guest rIP: 0x8000000 Unhandled WRMSR(0x40000056) = 0x0 [ 57.395674][ T6265] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 57.396126][ T6264] IPVS: stopping master sync thread 6265 ... [ 57.685901][ T6295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.686643][ T6296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.709685][ T6298] warning: `syz.3.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.734270][ T5988] Bluetooth: hci3: command tx timeout [ 57.734329][ T5335] Bluetooth: hci0: command tx timeout [ 57.734354][ T5982] Bluetooth: hci2: command tx timeout [ 57.813308][ T5335] Bluetooth: hci1: command tx timeout [ 57.816104][ T6305] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 57.866886][ T6313] netlink: 'syz.1.76': attribute type 12 has an invalid length. [ 57.950812][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 58.070634][ T6343] Invalid source name [ 58.072047][ T6343] UBIFS error (pid: 6343): cannot open "ubifs", error -22 [ 58.204554][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'. [ 58.213067][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.264243][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 58.267870][ T6368] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 58.269661][ T6365] fuse: Bad value for 'group_id' [ 58.271901][ T6365] fuse: Bad value for 'group_id' [ 58.295334][ T6368] veth3: entered promiscuous mode [ 58.304413][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 58.307584][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 58.324073][ T6370] veth0_to_hsr: entered allmulticast mode [ 58.329645][ T6372] exFAT-fs (nullb0): invalid boot record signature [ 58.333101][ T6372] exFAT-fs (nullb0): failed to read boot sector [ 58.336625][ T6372] exFAT-fs (nullb0): failed to recognize exfat type [ 58.428143][ T6377] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 58.583212][ T53] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.611316][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.615857][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.619342][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.622836][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.626708][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.630217][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.636070][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.640503][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.647106][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.649704][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.652483][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.655906][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.658842][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.661988][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.666070][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.669276][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.672610][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.675909][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.679154][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.682343][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.686247][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.689464][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.692439][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.697766][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.701049][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.705046][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.707670][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.710159][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.712780][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.715620][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.718144][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.720810][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.724191][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.726953][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.729927][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.732567][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.735533][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.738567][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.742437][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.745906][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.748453][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.751976][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.756538][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.758908][ T53] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 58.762657][ T53] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 58.763029][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.766485][ T53] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.773479][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.773797][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.779703][ T6370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.779868][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.786082][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.787559][ T53] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.792816][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.796275][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.799519][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.808428][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.811260][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.814480][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.818265][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.820851][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.823439][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.826078][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.828987][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.832553][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.835462][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.840629][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.844816][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.847274][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.849695][ T6388] overlay: filesystem on ./bus not supported as upperdir [ 58.883289][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.000564][ T53] usb 7-1: USB disconnect, device number 3 [ 59.047219][ T10] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 59.050670][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.054930][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.061145][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 59.065049][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 59.068556][ T10] usb 6-1: Product: syz [ 59.070229][ T10] usb 6-1: Manufacturer: syz [ 59.072085][ T10] usb 6-1: SerialNumber: syz [ 59.076897][ T10] usb 6-1: config 0 descriptor?? [ 59.080965][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 59.084610][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 59.090121][ T10] usb 6-1: selecting invalid altsetting 0 [ 59.134559][ T6046] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.287700][ T6046] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 59.290981][ T6046] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.294187][ T6046] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.297755][ T6046] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 59.300467][ T6046] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 59.302935][ T6046] usb 8-1: Product: syz [ 59.304393][ T6046] usb 8-1: Manufacturer: syz [ 59.305820][ T6046] usb 8-1: SerialNumber: syz [ 59.308382][ T6046] usb 8-1: config 0 descriptor?? [ 59.312088][ T6046] hub 8-1:0.0: bad descriptor, ignoring hub [ 59.314089][ T6046] hub 8-1:0.0: probe with driver hub failed with error -5 [ 59.317741][ T6046] usb 8-1: selecting invalid altsetting 0 [ 59.514377][ T6395] /dev/sg0: Can't lookup blockdev [ 59.517828][ T6395] __nla_validate_parse: 3 callbacks suppressed [ 59.517837][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'. [ 59.523850][ T6395] openvswitch: netlink: Flow key attr not present in new flow. [ 59.539962][ T6408] pimreg: entered allmulticast mode [ 59.543419][ T6408] pimreg: left allmulticast mode [ 59.813290][ T5335] Bluetooth: hci0: command tx timeout [ 59.823383][ T5335] Bluetooth: hci2: command tx timeout [ 59.823643][ T5988] Bluetooth: hci3: command tx timeout [ 59.842085][ T6422] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.897164][ T5988] Bluetooth: hci1: command tx timeout [ 60.002632][ T6441] ======================================================= [ 60.002632][ T6441] WARNING: The mand mount option has been deprecated and [ 60.002632][ T6441] and is ignored by this kernel. Remove the mand [ 60.002632][ T6441] option from the mount to silence this warning. [ 60.002632][ T6441] ======================================================= [ 60.014278][ T6441] new mount options do not match the existing superblock, will be ignored [ 60.075969][ T6443] netlink: 'syz.2.114': attribute type 12 has an invalid length. [ 60.078868][ T6443] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.114'. [ 60.119457][ T6443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25088 sclass=netlink_route_socket pid=6443 comm=syz.2.114 [ 60.226248][ T6447] team0 (unregistering): Port device team_slave_0 removed [ 60.230998][ T6447] team0 (unregistering): Port device team_slave_1 removed [ 60.282048][ T6448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.116'. [ 60.855617][ T6456] binder: 6455:6456 ioctl 4018620d 0 returned -22 [ 61.773963][ T6463] __vm_enough_memory: pid: 6463, comm: syz.0.120, bytes: 21199769931776 not enough memory for the allocation [ 61.801151][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 61.801166][ T40] audit: type=1400 audit(2000000002.280:271): avc: denied { mounton } for pid=6462 comm="syz.0.120" path="/45/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.890090][ T40] audit: type=1400 audit(2000000002.370:272): avc: denied { mount } for pid=6471 comm="syz.0.122" name="/" dev="autofs" ino=11782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 61.902927][ T40] audit: type=1400 audit(2000000002.380:273): avc: denied { unmount } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 61.977983][ T40] audit: type=1400 audit(2000000002.460:274): avc: denied { create } for pid=6479 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.985300][ T40] audit: type=1400 audit(2000000002.460:275): avc: denied { write } for pid=6479 comm="syz.3.124" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 61.994792][ T40] audit: type=1400 audit(2000000002.460:276): avc: denied { open } for pid=6479 comm="syz.3.124" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 62.004619][ T40] audit: type=1400 audit(2000000002.460:277): avc: denied { ioctl } for pid=6479 comm="syz.3.124" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 62.015793][ T40] audit: type=1400 audit(2000000002.460:278): avc: denied { mount } for pid=6479 comm="syz.3.124" name="/" dev="ramfs" ino=12514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.023176][ T6375] usb 8-1: USB disconnect, device number 2 [ 62.024037][ T40] audit: type=1400 audit(2000000002.460:279): avc: denied { setopt } for pid=6479 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.032019][ T40] audit: type=1400 audit(2000000002.490:280): avc: denied { read } for pid=6479 comm="syz.3.124" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.092727][ T6490] netlink: zone id is out of range [ 62.108514][ T6490] netlink: set zone limit has 4 unknown bytes [ 62.457581][ T6496] netlink: 'syz.0.128': attribute type 12 has an invalid length. [ 62.460063][ T6496] netlink: 'syz.0.128': attribute type 29 has an invalid length. [ 62.462392][ T6496] netlink: 148 bytes leftover after parsing attributes in process `syz.0.128'. [ 62.465250][ T6496] netlink: 'syz.0.128': attribute type 2 has an invalid length. [ 62.467577][ T6496] netlink: 23 bytes leftover after parsing attributes in process `syz.0.128'. [ 62.576123][ T53] usb 6-1: USB disconnect, device number 3 [ 62.647827][ T6504] blk_print_req_error: 2 callbacks suppressed [ 62.647838][ T6504] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.653683][ T6504] FAT-fs (loop1): unable to read boot sector [ 62.716597][ T6506] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.720429][ T6506] FAT-fs (loop1): unable to read boot sector [ 62.978873][ T6512] random: crng reseeded on system resumption [ 62.984802][ T6512] Restarting kernel threads ... [ 62.987202][ T6512] Done restarting kernel threads. [ 62.991004][ T6513] Restarting kernel threads ... [ 62.993355][ T6513] Done restarting kernel threads. [ 63.283885][ T6534] affs: No valid root block on device nullb0 [ 63.299377][ T6536] IPVS: Error connecting to the multicast addr [ 63.340747][ T6541] netlink: 248 bytes leftover after parsing attributes in process `syz.0.140'. [ 63.391322][ T6549] tty tty4: ldisc open failed (-12), clearing slot 3 [ 63.525452][ T6560] netlink: 'syz.2.146': attribute type 15 has an invalid length. [ 63.552066][ T6563] netlink: 'syz.2.147': attribute type 3 has an invalid length. [ 63.600190][ T6565] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.610047][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 63.834774][ T6569] binder: 6568:6569 unknown command 1074003969 [ 63.837304][ T6569] binder: 6568:6569 ioctl c0306201 200000000080 returned -22 [ 63.981571][ T6576] netlink: 'syz.2.150': attribute type 142 has an invalid length. [ 64.307979][ T6600] PKCS8: Unsupported PKCS#8 version [ 64.342291][ T6602] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 64.370619][ T6607] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.418305][ T6611] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 64.472987][ T6132] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.622946][ T6132] usb 8-1: Using ep0 maxpacket: 16 [ 64.626783][ T6132] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.631282][ T6132] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.635636][ T6132] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 64.640839][ T6132] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 64.644879][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.648064][ T6132] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.654741][ T6132] usb 8-1: config 0 descriptor?? [ 64.802966][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 64.806243][ T24] usb 5-1: config 2 interface 0 has no altsetting 0 [ 64.810618][ T24] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 64.813972][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.816673][ T24] usb 5-1: Product: syz [ 64.818118][ T24] usb 5-1: Manufacturer: syz [ 64.819701][ T24] usb 5-1: SerialNumber: syz [ 65.087104][ T6132] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 65.089951][ T6132] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 65.092530][ T6132] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 65.096097][ T6132] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 65.098367][ T6132] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 65.119137][ T6132] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 65.154535][ T6132] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 65.157838][ T6132] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 65.266871][ T1340] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 65.268403][ T10] usb 8-1: USB disconnect, device number 3 [ 65.271611][ T1340] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 65.278345][ T1340] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 65.282752][ T1340] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 65.530751][ T6609] syz.0.163 (6609): drop_caches: 2 [ 65.549912][ T24] usb 5-1: USB disconnect, device number 2 [ 65.702869][ T6375] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 65.801560][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 65.855654][ T6375] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.859536][ T6375] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.874888][ T6375] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.878781][ T6375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.890473][ T6662] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 65.946337][ T6671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6671 comm=syz.2.181 [ 66.048627][ T6676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.052353][ T6676] FAT-fs (loop3): unable to read boot sector [ 66.090655][ T6375] usb 6-1: usb_control_msg returned -32 [ 66.092472][ T6375] usbtmc 6-1:16.0: can't read capabilities [ 66.449732][ T6710] sp0: Synchronizing with TNC [ 66.495399][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 66.645914][ T24] usb 6-1: USB disconnect, device number 4 [ 66.961749][ T6683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.964832][ T6683] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.970139][ T6683] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.975124][ T6683] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.977374][ T6683] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.980596][ T6683] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.983670][ T6683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.986016][ T6683] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.988910][ T6683] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.992037][ T6683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.996188][ T6683] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.000917][ T6683] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.084539][ T6731] mkiss: ax0: crc mode is auto. [ 67.238521][ T6739] cgroup2: Unknown parameter '' [ 67.275502][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 67.275514][ T40] audit: type=1400 audit(2000000007.750:354): avc: denied { ioctl } for pid=6742 comm="syz.2.202" path="socket:[12984]" dev="sockfs" ino=12984 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 67.387522][ T6747] sctp: [Deprecated]: syz.2.204 (pid 6747) Use of int in max_burst socket option deprecated. [ 67.387522][ T6747] Use struct sctp_assoc_value instead [ 67.393519][ T6748] sctp: [Deprecated]: syz.2.204 (pid 6748) Use of int in max_burst socket option deprecated. [ 67.393519][ T6748] Use struct sctp_assoc_value instead [ 67.400645][ T40] audit: type=1400 audit(2000000007.870:355): avc: denied { listen } for pid=6746 comm="syz.2.204" lport=42697 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.407860][ T40] audit: type=1400 audit(2000000007.870:356): avc: denied { listen } for pid=6746 comm="syz.2.204" lport=42697 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.445532][ T40] audit: type=1400 audit(2000000007.920:357): avc: denied { accept } for pid=6746 comm="syz.2.204" lport=42697 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.479608][ T40] audit: type=1400 audit(2000000007.950:358): avc: denied { append } for pid=6753 comm="syz.2.205" name="ubi_ctrl" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.487264][ T40] audit: type=1400 audit(2000000007.960:359): avc: denied { connect } for pid=6753 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.513413][ T6761] netlink: 152 bytes leftover after parsing attributes in process `syz.2.207'. [ 67.544121][ T6766] netlink: 2 bytes leftover after parsing attributes in process `syz.2.209'. [ 68.108355][ T40] audit: type=1400 audit(2000000008.580:360): avc: denied { remount } for pid=6791 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.108425][ T6792] binder: Binderfs stats mode cannot be changed during a remount [ 68.120431][ T6792] binder: Binderfs stats mode cannot be changed during a remount [ 68.187236][ T40] audit: type=1400 audit(2000000008.670:361): avc: denied { write } for pid=6804 comm="syz.3.222" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.189814][ T6801] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 68.195497][ T40] audit: type=1400 audit(2000000008.670:362): avc: denied { map } for pid=6804 comm="syz.3.222" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.242224][ T40] audit: type=1400 audit(2000000008.710:363): avc: denied { create } for pid=6793 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.269928][ T6801] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 68.293325][ T5988] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.381674][ T5988] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 68.441800][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 68.449374][ T6828] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.451587][ T6828] overlayfs: failed to set xattr on upper [ 68.454587][ T6828] overlayfs: ...falling back to redirect_dir=nofollow. [ 68.457036][ T6828] overlayfs: ...falling back to index=off. [ 68.459099][ T6828] overlayfs: ...falling back to uuid=null. [ 68.461515][ T6828] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 68.580408][ T6849] smc: net device bond0 applied user defined pnetid SYZ0 [ 68.585701][ T6851] smc: net device bond0 erased user defined pnetid SYZ0 [ 68.626690][ T6854] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.629902][ T6854] qnx4: unable to read the superblock [ 68.936625][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.242'. [ 68.941997][ T6872] trusted_key: syz.3.242 sent an empty control message without MSG_MORE. [ 69.015191][ T5988] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.015243][ T5335] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.015277][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.067571][ T6883] netlink: 172 bytes leftover after parsing attributes in process `syz.2.245'. [ 69.070644][ T6887] netlink: 172 bytes leftover after parsing attributes in process `syz.2.245'. [ 69.347862][ T6895] netlink: 3 bytes leftover after parsing attributes in process `syz.2.249'. [ 69.351166][ T6895] 0ªX¹¦À: renamed from caif0 [ 69.354601][ T6895] 0ªX¹¦À: entered allmulticast mode [ 69.356514][ T6895] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 69.889703][ T6921] smc: net device bond0 applied user defined pnetid SYZ0 [ 70.233658][ T6949] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.236669][ T6949] overlayfs: failed to set xattr on upper [ 70.239065][ T6949] overlayfs: ...falling back to redirect_dir=nofollow. [ 70.241860][ T6949] overlayfs: ...falling back to index=off. [ 70.245031][ T6949] overlayfs: ...falling back to uuid=null. [ 70.247548][ T6949] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 70.377068][ T5335] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.391461][ T6966] netlink: 'syz.2.260': attribute type 21 has an invalid length. [ 70.395672][ T6966] netlink: 156 bytes leftover after parsing attributes in process `syz.2.260'. [ 70.642653][ T6132] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.806978][ T6132] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.811562][ T6132] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.814771][ T6132] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.817336][ T6132] usb 8-1: Product: syz [ 70.818709][ T6132] usb 8-1: Manufacturer: syz [ 70.820133][ T6132] usb 8-1: SerialNumber: syz [ 70.823824][ T6132] usb 8-1: config 0 descriptor?? [ 71.092576][ T5335] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.102638][ T5335] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.104993][ T5335] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.177491][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.180279][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.231977][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.236366][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.245426][ T53] usb 8-1: USB disconnect, device number 4 [ 71.304654][ T7009] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 71.307644][ T7009] overlayfs: missing 'lowerdir' [ 71.352873][ T7011] __nla_validate_parse: 2 callbacks suppressed [ 71.352883][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.272'. [ 71.587751][ T7014] Invalid ELF header magic: != ELF [ 71.817616][ T7028] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 71.821502][ T7028] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 71.866461][ T7036] 9pnet_fd: p9_fd_create_unix (7036): problem connecting socket: ./file0: -111 [ 71.942034][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 71.962783][ T7045] nftables ruleset with unbound set [ 71.980502][ T7042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.283'. [ 71.984462][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'. [ 71.987676][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'. [ 72.111584][ T7056] openvswitch: netlink: Flow actions attr not present in new flow. [ 72.150602][ T7058] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 72.326650][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 72.326664][ T40] audit: type=1400 audit(2000000012.800:409): avc: denied { setopt } for pid=7073 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 72.330961][ T7074] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7074 comm=syz.0.291 [ 72.354092][ T7074] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 72.361314][ T7074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.365908][ T7074] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 72.369709][ T7074] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 72.370264][ T7078] QAT: Stopping all acceleration devices. [ 72.372654][ T7074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.291'. [ 72.372812][ T7074] batadv0: entered promiscuous mode [ 72.372829][ T7074] batadv0: entered allmulticast mode [ 72.385341][ T7074] bond0: (slave batadv0): Releasing backup interface [ 72.392502][ T7074] bridge0: port 3(batadv0) entered blocking state [ 72.395083][ T7074] bridge0: port 3(batadv0) entered disabled state [ 72.426477][ T7083] sctp: [Deprecated]: syz.1.296 (pid 7083) Use of int in maxseg socket option. [ 72.426477][ T7083] Use struct sctp_assoc_value instead [ 72.462522][ T5988] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.467093][ T7087] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 72.496129][ T7087] bridge0: port 3(batadv0) entered disabled state [ 72.514180][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 72.514989][ T7087] bridge_slave_0: left allmulticast mode [ 72.519403][ T7087] bridge_slave_0: left promiscuous mode [ 72.521497][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.530831][ T7087] bridge_slave_1: left allmulticast mode [ 72.534872][ T7087] bridge_slave_1: left promiscuous mode [ 72.536847][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.540224][ T7095] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 72.540682][ T7091] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.550373][ T7087] bond0: (slave bond_slave_0): Releasing backup interface [ 72.561945][ T7087] bond0: (slave bond_slave_1): Releasing backup interface [ 72.573014][ T7087] team0: Port device team_slave_0 removed [ 72.579154][ T7087] team0: Port device team_slave_1 removed [ 72.581439][ T7087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.584965][ T7087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.590018][ T7087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.592428][ T7087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.602832][ T7095] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 72.640156][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.646640][ T7095] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.723738][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 72.801603][ T7105] batadv_slave_0: entered promiscuous mode [ 72.838155][ T7105] batadv_slave_0: left promiscuous mode [ 73.049911][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.303'. [ 73.067510][ T40] audit: type=1400 audit(2000000013.540:410): avc: denied { ioctl } for pid=6992 comm="syz.2.266" path="socket:[14616]" dev="sockfs" ino=14616 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.125967][ T7115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7115 comm=syz.1.303 [ 73.132097][ T7115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=7115 comm=syz.1.303 [ 73.172511][ T5335] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.174942][ T5335] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.178026][ T5988] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.233602][ T7125] i2c i2c-1: Invalid block write size 34 [ 73.280947][ T40] audit: type=1326 audit(2000000013.750:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.2.306" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f328718eba9 code=0x0 [ 73.365017][ T7137] Bluetooth: MGMT ver 1.23 [ 73.429551][ T40] audit: type=1400 audit(2000000013.900:412): avc: denied { relabelfrom } for pid=7147 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.433413][ T7148] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 73.450076][ T40] audit: type=1400 audit(2000000013.900:413): avc: denied { relabelto } for pid=7147 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.518714][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 73.614017][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.620124][ T7165] bond0: (slave rose0): Enslaving as an active interface with an up link [ 73.646487][ T7165] bond0: (slave rose0): Releasing backup interface [ 73.699959][ T7176] SELinux: security policydb version 17 (MLS) not backwards compatible [ 73.703832][ T7176] SELinux: failed to load policy [ 73.730098][ T7179] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 73.732609][ T7179] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 73.783595][ T40] audit: type=1400 audit(2000000014.250:414): avc: denied { getopt } for pid=7184 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.948043][ T40] audit: type=1400 audit(2000000014.420:415): avc: denied { read } for pid=7200 comm="syz.0.323" path="socket:[13892]" dev="sockfs" ino=13892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.181429][ T7224] macvlan2: entered promiscuous mode [ 74.184370][ T7224] macvlan2: entered allmulticast mode [ 74.189999][ T7224] fuse: Unknown parameter '' [ 74.196083][ T7224] usb usb8: usbfs: process 7224 (syz.2.325) did not claim interface 0 before use [ 74.284220][ T40] audit: type=1400 audit(2000000014.750:416): avc: denied { wake_alarm } for pid=7227 comm="syz.2.326" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.438630][ T40] audit: type=1326 audit(2000000014.910:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.0.327" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1de3b8eba9 code=0x0 [ 74.515044][ T7101] Set syz1 is full, maxelem 65536 reached [ 74.565196][ T40] audit: type=1400 audit(2000000015.040:418): avc: denied { setopt } for pid=7246 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.675046][ T7245] netlink: 'syz.3.330': attribute type 10 has an invalid length. [ 74.686533][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.692910][ T7245] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 75.183518][ T7287] input: syz1 as /devices/virtual/input/input6 [ 75.242001][ T7295] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 75.412355][ T5335] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 75.422404][ T5335] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.905206][ T7327] cgroup: Unknown subsys name 'cpuset' [ 76.147790][ T7338] binder: 7337:7338 ioctl c0306201 0 returned -14 [ 76.390803][ T7361] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 76.433421][ T7361] bond1: (slave geneve2): making interface the new active one [ 76.438098][ T7361] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 76.444992][ T1241] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.448051][ T1241] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.451654][ T1241] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.454982][ T1241] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.472508][ T7361] __nla_validate_parse: 5 callbacks suppressed [ 76.472519][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'. [ 76.479697][ T7361] bond1: entered promiscuous mode [ 76.481506][ T7361] geneve2: entered promiscuous mode [ 76.483908][ T7361] bond1: entered allmulticast mode [ 76.486300][ T7361] geneve2: entered allmulticast mode [ 76.495294][ T7361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.500864][ T7377] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.369'. [ 76.548650][ T7377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7377 comm=syz.3.369 [ 76.638013][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.640538][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.746690][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.758869][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.760956][ T7374] binder: 7288:7374 unknown command 0 [ 76.764138][ T7374] binder: 7288:7374 ioctl c0306201 200000000300 returned -22 [ 76.939192][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.945391][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.949276][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.953698][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.092842][ T7407] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 77.095643][ T7407] bond0: (slave wlan1): Opening slave failed [ 77.103207][ T7407] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 77.136592][ T7409] program syz.2.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.140166][ T7409] ata1.00: invalid transfer count 0 [ 77.143882][ T7409] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'. [ 77.147596][ T7409] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'. [ 77.198834][ T7411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7411 comm=syz.1.377 [ 81.416617][ T2052] cfg80211: failed to load regulatory.db [ 92.143697][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 92.154783][ T7443] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 92.184308][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 92.184322][ T40] audit: type=1400 audit(2000000032.661:442): avc: denied { mounton } for pid=7447 comm="syz.1.387" path="/97/file0" dev="gadgetfs" ino=8028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 92.202382][ T40] audit: type=1400 audit(2000000032.681:443): avc: denied { unmount } for pid=5984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 92.207333][ T7448] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 92.232111][ T40] audit: type=1400 audit(2000000032.711:444): avc: denied { unmount } for pid=5974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 92.317765][ T7459] pim6reg: entered allmulticast mode [ 92.373129][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 92.375917][ T7469] netlink: 'syz.1.398': attribute type 7 has an invalid length. [ 92.378271][ T7469] netlink: 'syz.1.398': attribute type 8 has an invalid length. [ 92.381857][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 92.395386][ T40] audit: type=1400 audit(2000000032.871:445): avc: denied { setopt } for pid=7465 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.409567][ T7452] syzkaller0: entered promiscuous mode [ 92.413071][ T7452] syzkaller0: entered allmulticast mode [ 92.420589][ T7469] gretap0: entered promiscuous mode [ 92.424548][ T7469] batadv_slave_1: entered promiscuous mode [ 92.427753][ T7469] gretap0: left promiscuous mode [ 92.430410][ T7469] batadv_slave_1: left promiscuous mode [ 92.458844][ T7452] hfs: unable to load iocharset "io#harset0" [ 92.566013][ T7474] hfsplus: unable to find HFS+ superblock [ 92.575098][ T7474] overlay: Unknown parameter 'smackfsroot' [ 92.653873][ T40] audit: type=1400 audit(2000000033.131:446): avc: denied { mounton } for pid=7477 comm="syz.1.400" path="/103/file0" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.660278][ T7478] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.672741][ T40] audit: type=1400 audit(2000000033.151:447): avc: denied { watch watch_reads } for pid=7479 comm="syz.2.401" path="/88" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.715534][ T7482] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 92.867302][ T40] audit: type=1800 audit(2000000033.341:448): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.386" name="/" dev="fuse" ino=3 res=0 errno=0 [ 92.994451][ T40] audit: type=1400 audit(2000000033.471:449): avc: denied { bind } for pid=7489 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.387388][ T7482] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 93.394277][ T7485] vlan2: entered promiscuous mode [ 93.399793][ T7485] bridge0: entered promiscuous mode [ 93.420468][ T7487] netlink: 96 bytes leftover after parsing attributes in process `syz.1.402'. [ 93.466371][ T40] audit: type=1400 audit(2000000033.941:450): avc: denied { bind } for pid=7498 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.473012][ T40] audit: type=1400 audit(2000000033.941:451): avc: denied { listen } for pid=7498 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.531880][ T7502] Bluetooth: Invalid esc byte 0xe8 [ 93.637844][ T1241] Bluetooth: (null): Invalid header checksum [ 93.644440][ T1146] Bluetooth: (null): Invalid header checksum [ 93.742514][ T1241] Bluetooth: (null): Invalid header checksum [ 93.767813][ T7515] netlink: 76 bytes leftover after parsing attributes in process `syz.2.410'. [ 93.851711][ T46] Bluetooth: (null): Invalid header checksum [ 93.973291][ T1146] Bluetooth: (null): Invalid header checksum [ 94.094387][ T1146] Bluetooth: (null): Invalid header checksum [ 94.193118][ T7538] cgroup: No subsys list or none specified [ 94.211935][ T46] Bluetooth: (null): Invalid header checksum [ 94.238632][ T5335] Bluetooth: hci3: unexpected event 0x07 length: 23 < 255 [ 94.247276][ T7542] netdevsim netdevsim2: Direct firmware load for . [ 94.247276][ T7542] failed with error -2 [ 94.251005][ T7542] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 94.251005][ T7542] [ 94.292773][ T7543] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 94.448612][ T7559] ip6tnl1: entered promiscuous mode [ 94.450517][ T7559] ip6tnl1: entered allmulticast mode [ 94.819246][ T7575] tipc: Started in network mode [ 94.821047][ T7575] tipc: Node identity b65e00d012b, cluster identity 4711 [ 94.823512][ T7575] tipc: Enabled bearer , priority 0 [ 94.826458][ T7575] geneve0: entered allmulticast mode [ 94.835207][ T7575] tipc: Resetting bearer [ 94.837888][ T7575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 94.869660][ T7574] tipc: Disabling bearer [ 95.213872][ T7605] ªªªªªªœ6: renamed from wg2 [ 95.421322][ T6039] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.591264][ T6039] usb 6-1: Using ep0 maxpacket: 8 [ 95.595133][ T6039] usb 6-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 95.599131][ T6039] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 201, using maximum allowed: 30 [ 95.603559][ T6039] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 95.608534][ T6039] usb 6-1: config 0 interface 0 has no altsetting 0 [ 95.611234][ T6039] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 95.611474][ T2304] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 95.614678][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.623219][ T6039] usb 6-1: config 0 descriptor?? [ 95.763270][ T2304] usb 8-1: config 1 interface 0 altsetting 136 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.767312][ T2304] usb 8-1: config 1 interface 0 has no altsetting 0 [ 95.771721][ T2304] usb 8-1: New USB device found, idVendor=046d, idProduct=402d, bcdDevice= 0.40 [ 95.775486][ T2304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.778766][ T2304] usb 8-1: Product: à ‡ [ 95.780526][ T2304] usb 8-1: Manufacturer: 䶎è°áž—﷎㉫stﻑ夤羥屮ã»í‡¾ä¾¾á©»î§½è”’ç‘齯뻤í¾êŸï´¨ë¸ä‘³æ®§âŠ¥ï™©è¸âƒëŽ„԰鞥뼂톯筠ã•ä®ºé­¯ë¢¿è³²ê¢¿å®¿àª¶Æ¤á£©á†Ÿë½åµç¯§ïˆ”ﳆ拨႞ꆃ㩹㼋痗늼칼愾떅巛选腘㶥汳꬗툦⽨鶹㬮ᦵ還錔쯛煀늴쥹㈟ഉ헚ïžãŒœï’¤ï£°à´µ [ 95.790348][ T2304] usb 8-1: SerialNumber: С [ 96.001824][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.005508][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.082225][ T6039] usb 6-1: string descriptor 0 read error: -71 [ 96.086700][ T6039] usb 6-1: USB disconnect, device number 5 [ 96.215072][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.217929][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.233075][ T2304] usbhid 8-1:1.0: can't add hid device: -71 [ 96.235378][ T2304] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 96.238912][ T2304] usb 8-1: USB disconnect, device number 5 [ 96.767163][ T7654] openvswitch: netlink: Message has 24 unknown bytes. [ 96.769554][ T7654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.801496][ T7654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1304 sclass=netlink_route_socket pid=7654 comm=syz.1.453 [ 97.016178][ T7662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=7662 comm=syz.1.456 [ 97.106791][ T7670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=7670 comm=syz.3.459 [ 97.120902][ T7667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5122 sclass=netlink_tcpdiag_socket pid=7667 comm=syz.1.458 [ 97.194890][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 97.194901][ T40] audit: type=1400 audit(2000000037.672:476): avc: denied { getopt } for pid=7672 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.203786][ T40] audit: type=1400 audit(2000000037.672:477): avc: denied { read } for pid=7672 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.299834][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 97.320483][ T7682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'. [ 97.325492][ T40] audit: type=1400 audit(2000000037.802:478): avc: denied { getopt } for pid=7681 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.343625][ T40] audit: type=1400 audit(2000000037.822:479): avc: denied { ioctl } for pid=7684 comm="syz.0.465" path="socket:[19652]" dev="sockfs" ino=19652 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.380540][ T7689] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 97.388203][ T40] audit: type=1326 audit(2000000037.872:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.466" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1de3b8eba9 code=0x0 [ 97.394200][ T7689] Bluetooth: MGMT ver 1.23 [ 97.398487][ T7689] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 97.647743][ T40] audit: type=1326 audit(2000000038.122:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.472" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a5558eba9 code=0x0 [ 97.687174][ T7710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7710 comm=syz.3.473 [ 97.991059][ T6039] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 98.143703][ T6039] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.148408][ T6039] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 98.153361][ T6039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 443, setting to 64 [ 98.157769][ T6039] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.164978][ T6039] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 98.168757][ T6039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.172180][ T6039] usb 6-1: Product: syz [ 98.173901][ T6039] usb 6-1: Manufacturer: syz [ 98.175848][ T6039] usb 6-1: SerialNumber: syz [ 98.179855][ T6039] usb 6-1: config 0 descriptor?? [ 98.182496][ T7711] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.189058][ T6039] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input8 [ 98.355791][ T40] audit: type=1400 audit(2000000038.832:482): avc: denied { mounton } for pid=7721 comm="syz.0.477" path=2F70726F632F3431382F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026533401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 98.521018][ T40] audit: type=1400 audit(2000000038.992:483): avc: denied { execute } for pid=7730 comm="syz.0.481" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 98.567294][ T40] audit: type=1400 audit(2000000039.042:484): avc: denied { setopt } for pid=7732 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.569880][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 98.590027][ T7733] netlink: 96 bytes leftover after parsing attributes in process `syz.0.482'. [ 98.592885][ T7736] Bluetooth: Invalid esc byte 0xe8 [ 98.672954][ T7744] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 98.676634][ T7744] VFS: Can't find a romfs filesystem on dev nullb0. [ 98.676634][ T7744] [ 98.733979][ T40] audit: type=1400 audit(2000000039.212:485): avc: denied { create } for pid=7747 comm="syz.0.486" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.734671][ T7748] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 98.749446][ T7748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.281000][ T6039] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 99.462124][ T6039] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.465264][ T6039] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.468466][ T6039] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.471462][ T6039] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.475893][ T6039] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.478677][ T6039] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.481538][ T6039] usb 8-1: Product: syz [ 99.482954][ T6039] usb 8-1: Manufacturer: syz [ 99.488700][ T6039] cdc_wdm 8-1:1.0: skipping garbage [ 99.490351][ T6039] cdc_wdm 8-1:1.0: skipping garbage [ 99.492627][ T6039] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 99.773253][ T6039] usb 8-1: USB disconnect, device number 6 [ 99.952111][ T7777] input: syz1 as /devices/virtual/input/input9 [ 100.075186][ T7779] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 100.665347][ T6039] usb 6-1: USB disconnect, device number 6 [ 100.912270][ T7807] ip6gre1: entered allmulticast mode [ 101.037453][ T7817] netlink: 'syz.3.509': attribute type 2 has an invalid length. [ 101.040377][ T7817] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 101.115157][ T7829] : entered promiscuous mode [ 101.487760][ T7834] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.515'. [ 101.567762][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 101.810469][ T7846] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 101.814605][ T7846] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 101.911711][ T7854] ./cgroup: Can't lookup blockdev [ 102.769901][ T7882] netlink: 'syz.1.526': attribute type 4 has an invalid length. [ 102.770069][ T7881] netlink: 'syz.1.526': attribute type 4 has an invalid length. [ 102.851032][ T7894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.530'. [ 102.854221][ T7895] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 103.044790][ T7906] bridge_slave_0: left allmulticast mode [ 103.046635][ T7906] bridge_slave_0: left promiscuous mode [ 103.048471][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.054186][ T7906] bridge_slave_1: left allmulticast mode [ 103.055993][ T7906] bridge_slave_1: left promiscuous mode [ 103.057817][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.066053][ T7906] bond0: (slave bond_slave_0): Releasing backup interface [ 103.073126][ T7906] bond0: (slave bond_slave_1): Releasing backup interface [ 103.082059][ T7906] team0: Port device team_slave_0 removed [ 103.089399][ T7906] team0: Port device team_slave_1 removed [ 103.093198][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.096425][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.100889][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.104031][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.112343][ T7906] bond0: (slave wlan1): Releasing backup interface [ 103.117273][ T7906] bond1: (slave geneve2): Releasing active interface [ 103.119461][ T7906] geneve2: left promiscuous mode [ 103.121371][ T7906] geneve2: left allmulticast mode [ 103.140863][ T6189] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.144627][ T6189] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.149210][ T6189] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.152955][ T6189] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.367853][ T7914] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.372098][ T7914] efs: cannot read volume header [ 103.413341][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 103.416965][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 103.664876][ T7921] 9pnet_fd: p9_fd_create_unix (7921): problem connecting socket: ./file0: -111 [ 103.838970][ T5335] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 103.841646][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 103.841659][ T40] audit: type=1400 audit(2000000044.322:504): avc: denied { map } for pid=7934 comm="syz.1.543" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.852222][ T5335] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 103.857016][ T7938] erofs (device loop2): cannot find valid erofs superblock [ 103.864833][ T7938] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 103.952147][ T40] audit: type=1400 audit(2000000044.432:505): avc: denied { read append } for pid=7951 comm="syz.2.547" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 104.107976][ T7955] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 104.113290][ T7955] SELinux: failed to load policy [ 104.151676][ T7957] input: syz1 as /devices/virtual/input/input10 [ 104.240517][ T40] audit: type=1400 audit(2000000044.712:506): avc: denied { listen } for pid=7958 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 104.337830][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.432823][ T40] audit: type=1400 audit(2000000044.912:507): avc: denied { execute } for pid=7971 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 104.442806][ T40] audit: type=1400 audit(2000000044.912:508): avc: denied { execute_no_trans } for pid=7971 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 104.452195][ T40] audit: type=1400 audit(2000000044.922:509): avc: denied { execmem } for pid=7971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 104.470942][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.510452][ T7973] kvm: pic: single mode not supported [ 104.514981][ T7973] kvm: pic: non byte write [ 104.519409][ T7973] kvm: pic: non byte write [ 104.522397][ T7973] kvm: pic: non byte read [ 104.525018][ T7973] kvm: pic: non byte read [ 104.527796][ T7973] kvm: pic: non byte read [ 104.530322][ T7973] kvm: pic: non byte read [ 104.532939][ T7973] kvm: pic: non byte read [ 104.535285][ T7973] kvm: pic: non byte read [ 104.537769][ T7973] kvm: pic: non byte read [ 104.540137][ T7973] kvm: pic: non byte read [ 104.542614][ T7973] kvm: pic: non byte read [ 104.544741][ T7973] kvm: pic: non byte read [ 104.577481][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.587784][ T5988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.591382][ T5988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.594401][ T5988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.598428][ T5988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.604502][ T5988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.625651][ T7979] mkiss: ax0: crc mode is auto. [ 104.679535][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.690468][ T40] audit: type=1800 audit(2000000045.162:510): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.558" name="/" dev="9p" ino=2 res=0 errno=0 [ 104.814377][ T7976] chnl_net:caif_netlink_parms(): no params data found [ 104.815400][ T7987] kAFS: unparsable volume name [ 104.873422][ T7989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.561'. [ 104.879476][ T7989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.925116][ T40] audit: type=1400 audit(2000000045.402:511): avc: denied { write } for pid=7990 comm="syz.2.562" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.926412][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 104.948163][ T40] audit: type=1400 audit(2000000045.422:512): avc: denied { mounton } for pid=7984 comm="syz.3.559" path="/proc/433/task" dev="proc" ino=21084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 104.991696][ T40] audit: type=1400 audit(2000000045.472:513): avc: denied { read } for pid=7994 comm="syz.2.563" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.993790][ T7998] program syz.2.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.006860][ T7998] netlink: zone id is out of range [ 105.009084][ T7998] netlink: zone id is out of range [ 105.032352][ T7998] netlink: set zone limit has 4 unknown bytes [ 105.189548][ T60] bond0 (unregistering): Released all slaves [ 105.190362][ T8009] xt_socket: unknown flags 0xe4 [ 105.220682][ T840] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 105.258410][ T60] bond1 (unregistering): Released all slaves [ 105.281726][ T8000] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 105.285152][ T8000] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 105.289740][ T8000] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 105.323346][ T1124] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 105.328775][ T1124] sr 2:0:0:0: [sr0] tag#22 Sense Key : Illegal Request [current] [ 105.338157][ T1124] sr 2:0:0:0: [sr0] tag#22 Add. Sense: Invalid command operation code [ 105.338964][ T8124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28782 sclass=netlink_route_socket pid=8124 comm=syz.2.566 [ 105.341817][ T1124] sr 2:0:0:0: [sr0] tag#22 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 105.341843][ T1124] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 105.342046][ T1124] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 105.349054][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 105.371157][ T840] usb 8-1: Using ep0 maxpacket: 8 [ 105.385054][ T60] tipc: Left network mode [ 105.385374][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.388656][ T840] usb 8-1: config 0 interface 0 has no altsetting 0 [ 105.391746][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.394494][ T840] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 105.394628][ T8124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28782 sclass=netlink_route_socket pid=8124 comm=syz.2.566 [ 105.394860][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 105.397559][ T7976] bridge_slave_0: entered allmulticast mode [ 105.399029][ T7976] bridge_slave_0: entered promiscuous mode [ 105.408768][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.414089][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.422306][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.425507][ T7976] bridge_slave_1: entered allmulticast mode [ 105.428925][ T7976] bridge_slave_1: entered promiscuous mode [ 105.429348][ T840] usb 8-1: config 0 descriptor?? [ 105.454245][ T8215] netlink: 'syz.0.567': attribute type 32 has an invalid length. [ 105.484825][ T8215] netlink: 112 bytes leftover after parsing attributes in process `syz.0.567'. [ 105.487537][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.492874][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.496032][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.500212][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.505949][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.509356][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.512687][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.517248][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.520815][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.524817][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.528741][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.534033][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.536537][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.539105][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.543112][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.546313][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.549311][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.553458][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.556500][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.559821][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.564787][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.567960][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.572035][ T5988] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 105.582188][ T7976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.587720][ T7976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.659117][ T840] usbhid 8-1:0.0: can't add hid device: -71 [ 105.664212][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 105.669411][ T840] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 105.678299][ T7976] team0: Port device team_slave_0 added [ 105.678603][ T840] usb 8-1: USB disconnect, device number 7 [ 105.693268][ T7976] team0: Port device team_slave_1 added [ 105.806137][ T60] hsr_slave_0: left promiscuous mode [ 105.806734][ T8621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.576'. [ 105.811590][ T60] hsr_slave_1: left promiscuous mode [ 105.837194][ T60] veth1_macvtap: left promiscuous mode [ 105.839146][ T60] veth0_macvtap: left promiscuous mode [ 105.841722][ T60] veth1_vlan: left promiscuous mode [ 105.843577][ T60] veth0_vlan: left promiscuous mode [ 106.620744][ T5988] Bluetooth: hci2: command tx timeout [ 106.989473][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.992744][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.004174][ T7976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.028502][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.032628][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.043145][ T7976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.143795][ T7976] hsr_slave_0: entered promiscuous mode [ 107.145947][ T7976] hsr_slave_1: entered promiscuous mode [ 107.295811][ T8939] kvm: kvm [8882]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 107.373883][ T7976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.379181][ T7976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.384277][ T7976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.388391][ T7976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.432425][ T7976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.447387][ T7976] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.453938][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.456806][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.464381][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.466609][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.592942][ T7976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.750162][ T7976] veth0_vlan: entered promiscuous mode [ 107.756546][ T7976] veth1_vlan: entered promiscuous mode [ 107.786265][ T7976] veth0_macvtap: entered promiscuous mode [ 107.793605][ T7976] veth1_macvtap: entered promiscuous mode [ 107.809931][ T7976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.821995][ T7976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.847173][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.850557][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.859467][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.870896][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.955814][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.959265][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.997183][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.999683][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.126441][ T9103] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.129882][ T9103] overlayfs: conflicting options: userxattr,metacopy=on [ 108.134191][ T9104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.137699][ T9104] overlayfs: conflicting options: userxattr,metacopy=on [ 108.194497][ T9107] nbd_handle_cmd: 2 callbacks suppressed [ 108.194516][ T9107] block nbd4: Attempted send on invalid socket [ 108.211170][ T9107] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 108.217005][ T9107] XFS (nbd4): SB validate failed with error -5. [ 108.358011][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 108.363308][ T9133] netlink: 3 bytes leftover after parsing attributes in process `syz.4.599'. [ 108.453024][ T9149] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 108.456623][ T9149] netlink: 224 bytes leftover after parsing attributes in process `syz.2.602'. [ 108.690631][ T5988] Bluetooth: hci2: command tx timeout [ 108.805507][ T9176] dummy0: left promiscuous mode [ 108.809099][ T9176] batadv0: left promiscuous mode [ 108.811468][ T9176] batadv0: left allmulticast mode [ 108.916804][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 108.916821][ T40] audit: type=1400 audit(2000000049.392:533): avc: denied { associate } for pid=9174 comm="syz.0.607" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.931785][ T9176] ip6gre1: left promiscuous mode [ 108.948566][ T9177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.961106][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.966076][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.970190][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.197972][ T40] audit: type=1400 audit(2000000049.672:534): avc: denied { getattr } for pid=9188 comm="syz.3.609" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.352289][ T9195] binder: 9193:9195 ioctl 80685600 200000000080 returned -22 [ 109.473167][ T9204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.477942][ T9204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.613040][ T40] audit: type=1400 audit(2000000050.092:535): avc: denied { ioctl } for pid=9225 comm="syz.4.615" path="socket:[21866]" dev="sockfs" ino=21866 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.625151][ T40] audit: type=1400 audit(2000000050.092:536): avc: denied { write } for pid=9225 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.710654][ T29] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 109.864213][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.868276][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.868613][ T9235] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=255 sclass=netlink_xfrm_socket pid=9235 comm=syz.4.617 [ 109.870168][ T40] audit: type=1400 audit(2000000050.342:537): avc: denied { ioctl } for pid=9234 comm="syz.4.617" path="socket:[23677]" dev="sockfs" ino=23677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.873579][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.873599][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.905147][ T40] audit: type=1400 audit(2000000050.382:538): avc: denied { setopt } for pid=9234 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.974337][ T9239] syz.4.617 (9239): /proc/9234/oom_adj is deprecated, please use /proc/9234/oom_score_adj instead. [ 110.079618][ T29] usb 7-1: usb_control_msg returned -32 [ 110.081112][ T9244] veth1_to_batadv: entered promiscuous mode [ 110.082299][ T29] usbtmc 7-1:16.0: can't read capabilities [ 110.302758][ T40] audit: type=1400 audit(2000000050.782:539): avc: denied { setopt } for pid=9265 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.435139][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 110.436432][ T9280] tmpfs: Bad value for 'mpol' [ 110.441083][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 110.666488][ T9299] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 110.690467][ T40] audit: type=1400 audit(2000000051.162:540): avc: denied { bind } for pid=9290 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.691909][ T9291] netlink: 'syz.3.628': attribute type 4 has an invalid length. [ 110.701564][ T9291] netlink: 'syz.3.628': attribute type 4 has an invalid length. [ 110.719202][ T9305] netlink: 272 bytes leftover after parsing attributes in process `syz.4.630'. [ 110.780394][ T5988] Bluetooth: hci2: command tx timeout [ 111.012790][ T9327] netlink: 40 bytes leftover after parsing attributes in process `syz.4.633'. [ 111.699564][ T40] audit: type=1400 audit(2000000052.172:541): avc: denied { create } for pid=9344 comm="syz.3.637" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.709101][ T40] audit: type=1400 audit(2000000052.182:542): avc: denied { link } for pid=9344 comm="syz.3.637" name="file1" dev="tmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.117219][ T9390] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.648'. [ 112.117259][ T9391] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.648'. [ 112.469664][ T29] usb 7-1: USB disconnect, device number 4 [ 112.518572][ T9446] program syz.3.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.522525][ T9446] ata1.00: non-matching transfer count (0/2304) [ 112.542806][ T9444] 9pnet: Could not find request transport: virti¸”Ê [ 112.554005][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 112.598853][ T9460] batadv1: entered promiscuous mode [ 112.739397][ T9489] 9pnet_fd: Insufficient options for proto=fd [ 112.846269][ T9504] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 112.860438][ T5988] Bluetooth: hci2: command tx timeout [ 112.871978][ T9509] rdma_op ffff88802cbfa9f0 conn xmit_rdma 0000000000000000 [ 112.947883][ T9513] overlay: ./bus is not a directory [ 112.957819][ T9515] unknown channel width for channel at 909000KHz? [ 113.562118][ T9546] __nla_validate_parse: 1 callbacks suppressed [ 113.562136][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 113.688331][ T9550] overlayfs: statfs failed on './file0' [ 113.718081][ T9553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9553 comm=syz.0.680 [ 113.727834][ T9553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5121 sclass=netlink_tcpdiag_socket pid=9553 comm=syz.0.680 [ 113.835432][ T9565] tmpfs: Cannot change global quota limit on remount [ 114.022005][ T9597] futex_wake_op: syz.4.686 tries to shift op by 32; fix this program [ 114.070235][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 114.077376][ T9607] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.083284][ T9607] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 114.087121][ T9607] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.091004][ T9607] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 114.148347][ T9622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=9622 comm=syz.0.691 [ 114.230147][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 114.240732][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 114.240742][ T40] audit: type=1400 audit(2000000054.723:556): avc: denied { map } for pid=9633 comm="syz.4.695" path="socket:[23343]" dev="sockfs" ino=23343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 114.241189][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 114.260582][ T29] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 114.265473][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.268776][ T29] usb 8-1: Product: syz [ 114.271383][ T29] usb 8-1: Manufacturer: syz [ 114.273450][ T29] usb 8-1: SerialNumber: syz [ 114.280353][ T40] audit: type=1400 audit(2000000054.753:557): avc: denied { read } for pid=9627 comm="syz.2.693" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 114.284661][ T29] usb 8-1: config 0 descriptor?? [ 114.287448][ T40] audit: type=1400 audit(2000000054.753:558): avc: denied { open } for pid=9627 comm="syz.2.693" path="/138/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 114.296782][ T29] hub 8-1:0.0: bad descriptor, ignoring hub [ 114.296805][ T29] hub 8-1:0.0: probe with driver hub failed with error -5 [ 114.306028][ T29] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 114.315381][ T9640] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.319626][ T9640] block device autoloading is deprecated and will be removed. [ 114.326794][ T40] audit: type=1400 audit(2000000054.813:559): avc: denied { ioctl } for pid=9627 comm="syz.2.693" path="/138/file0/file0" dev="fuse" ino=2 ioctlcmd=0x930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 114.462709][ T40] audit: type=1400 audit(2000000054.943:560): avc: denied { write } for pid=9660 comm="syz.0.699" name="bus" dev="9p" ino=71827869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.469957][ T40] audit: type=1400 audit(2000000054.943:561): avc: denied { open } for pid=9660 comm="syz.0.699" path="/198/file0/bus" dev="9p" ino=71827869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.477543][ T40] audit: type=1400 audit(2000000054.943:562): avc: denied { read } for pid=9660 comm="syz.0.699" name="bus" dev="9p" ino=71827869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.484752][ T40] audit: type=1800 audit(2000000054.943:563): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.699" name="bus" dev="9p" ino=71827869 res=0 errno=0 [ 114.599935][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.697'. [ 114.613338][ T40] audit: type=1400 audit(2000000055.093:564): avc: denied { firmware_load } for pid=9669 comm="syz.0.701" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 114.634555][ T9670] syz.0.701 (9670) used greatest stack depth: 19752 bytes left [ 114.840607][ T9679] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 114.947477][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 115.016955][ T9694] veth0_irt_wifi: renamed from macvlan0 [ 115.219147][ T40] audit: type=1400 audit(2000000055.693:565): avc: denied { execute } for pid=9721 comm="syz.0.713" dev="hugetlbfs" ino=23466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 115.322234][ T9742] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 115.336163][ T9742] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.347988][ T1340] usb 8-1: USB disconnect, device number 8 [ 115.375579][ T9742] netlink: 184 bytes leftover after parsing attributes in process `syz.4.715'. [ 115.378956][ T9742] xt_socket: unknown flags 0xd0 [ 115.454854][ T9755] 9pnet_virtio: no channels available for device syz [ 115.492915][ T9759] cgroup: fork rejected by pids controller in /syz0 [ 116.150243][ T5335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.154591][ T5335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.158594][ T5335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.164100][ T5335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.167614][ T5335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.220034][ T2304] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 116.360106][ T2304] usb 8-1: device descriptor read/64, error -71 [ 116.600013][ T2304] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 116.631706][ T6189] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 116.637663][ T6189] bond0 (unregistering): Released all slaves [ 116.724329][ T9784] chnl_net:caif_netlink_parms(): no params data found [ 116.730169][ T2304] usb 8-1: device descriptor read/64, error -71 [ 116.841737][ T2304] usb usb8-port1: attempt power cycle [ 116.856356][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.859208][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.861830][ T9784] bridge_slave_0: entered allmulticast mode [ 116.864503][ T9784] bridge_slave_0: entered promiscuous mode [ 116.869762][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.872319][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.874614][ T9784] bridge_slave_1: entered allmulticast mode [ 116.877172][ T9784] bridge_slave_1: entered promiscuous mode [ 116.954027][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.959529][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.967041][ T6189] hsr_slave_0: left promiscuous mode [ 116.969117][ T6189] hsr_slave_1: left promiscuous mode [ 117.191301][ T2304] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 117.213289][ T2304] usb 8-1: device descriptor read/8, error -71 [ 117.239981][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 117.400075][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 117.403243][ T29] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.406183][ T29] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.408901][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.412848][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.416572][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.419639][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.424509][ T29] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.427441][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.437279][ T29] usb 9-1: config 0 descriptor?? [ 117.462017][ T2304] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 117.486113][ T2304] usb 8-1: device descriptor read/8, error -71 [ 117.592906][ T2304] usb usb8-port1: unable to enumerate USB device [ 117.647974][ T29] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.654397][ T29] usb 9-1: USB disconnect, device number 2 [ 117.672953][ T29] usblp0: removed [ 118.137420][ T9784] team0: Port device team_slave_0 added [ 118.147248][ T9784] team0: Port device team_slave_1 added [ 118.183255][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 118.194847][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.197111][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.205465][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.209643][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.212598][ T5335] Bluetooth: hci1: command tx timeout [ 118.215574][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.228578][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.303460][ T9784] hsr_slave_0: entered promiscuous mode [ 118.305622][ T9784] hsr_slave_1: entered promiscuous mode [ 118.307642][ T9784] debugfs: 'hsr0' already exists in 'hsr' [ 118.309525][ T9784] Cannot create hsr debugfs directory [ 118.349923][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 118.355171][ T29] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.358072][ T29] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.364240][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.369567][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.371868][T10742] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.375579][T10742] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 118.377383][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.378629][T10742] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.383467][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.385947][T10742] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 118.389880][ T29] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.389901][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.400022][ T29] usb 9-1: config 0 descriptor?? [ 118.606277][ T29] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 118.789380][T10867] kvm: Disabled LAPIC found during irq injection [ 118.793338][T10867] netlink: 'syz.2.732': attribute type 17 has an invalid length. [ 118.796282][T10867] netlink: 5 bytes leftover after parsing attributes in process `syz.2.732'. [ 118.799634][T10867] macvtap0: entered allmulticast mode [ 118.801588][T10867] veth0_macvtap: entered allmulticast mode [ 118.804139][T10867] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 118.861422][ C1] usblp0: nonzero read bulk status received: -71 [ 118.865918][T10236] usblp0: error -71 reading from printer [ 118.865970][ T29] usb 9-1: USB disconnect, device number 3 [ 118.917923][ T9784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.931582][ T9784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.938116][ T9784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.944845][ T9784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.958100][T10901] pimreg: entered allmulticast mode [ 118.988430][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.003742][ T9784] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.012037][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.014286][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.021649][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.023943][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.074659][T10235] usblp0: removed [ 119.093443][ T5335] Bluetooth: hci0: unexpected event for opcode 0x041b [ 119.147349][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.179256][ T9784] veth0_vlan: entered promiscuous mode [ 119.185532][ T9784] veth1_vlan: entered promiscuous mode [ 119.199173][ T9784] veth0_macvtap: entered promiscuous mode [ 119.203454][ T9784] veth1_macvtap: entered promiscuous mode [ 119.214295][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.225788][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.228373][T10933] program syz.3.739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.232438][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.235737][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.238133][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.241938][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.292147][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.295159][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.317786][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.320874][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.455604][T10953] kvm: kvm [10952]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 119.460387][T10953] kvm: kvm [10952]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 119.479522][T10953] kvm: kvm [10952]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 119.500611][T10953] kvm: kvm [10952]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 119.504686][T10953] kvm: kvm [10952]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 119.527675][T10953] kvm_intel: kvm [10952]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 119.911899][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 119.911916][ T40] audit: type=1400 audit(2000000060.393:578): avc: denied { read } for pid=10973 comm="syz.2.744" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 119.921583][ T40] audit: type=1400 audit(2000000060.393:579): avc: denied { open } for pid=10973 comm="syz.2.744" path="/150/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 119.942056][ T40] audit: type=1400 audit(2000000060.393:580): avc: denied { ioctl } for pid=10973 comm="syz.2.744" path="/150/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 120.035208][ T40] audit: type=1400 audit(2000000060.513:581): avc: denied { connect } for pid=10979 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 120.213938][T10985] netlink: 'syz.2.746': attribute type 16 has an invalid length. [ 120.216447][T10985] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.746'. [ 120.300795][ T5335] Bluetooth: hci1: command tx timeout [ 120.421176][T11002] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 120.440641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.583570][T11010] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 120.588449][T11010] Error validating options; rc = [-22] [ 120.622727][ T40] audit: type=1400 audit(2000000061.103:582): avc: denied { connect } for pid=11013 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.627228][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.669981][ T40] audit: type=1400 audit(2000000061.143:583): avc: denied { setattr } for pid=11015 comm="syz.2.755" name="/" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.867277][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.756'. [ 120.883103][T11033] binder: 11031:11033 ioctl c0306201 2000000192c0 returned -14 [ 120.898684][T11033] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 120.901006][T11033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.906367][T11033] vhci_hcd vhci_hcd.0: Device attached [ 120.913236][T11036] netlink: 'syz.2.759': attribute type 25 has an invalid length. [ 121.053000][T11058] No source specified [ 121.066979][ T40] audit: type=1400 audit(2000000061.543:584): avc: denied { append } for pid=11059 comm="syz.2.763" path="/164/file0/cpuset.effective_cpus" dev="9p" ino=71827945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.140480][ T6039] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 121.169913][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 121.329948][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 121.336412][ T29] usb 9-1: config 0 has no interfaces? [ 121.338811][ T29] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 121.344426][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.351590][ T29] usb 9-1: config 0 descriptor?? [ 121.483350][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 121.556369][T11035] usb 45-1: recv xbuf, 0 [ 121.557689][T11033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.558990][ T29] usb 9-1: USB disconnect, device number 4 [ 121.563570][ T75] vhci_hcd: stop threads [ 121.565630][ T75] vhci_hcd: release socket [ 121.568090][ T75] vhci_hcd: disconnect device [ 121.590379][T11087] syzkaller1: entered promiscuous mode [ 121.592455][T11087] syzkaller1: entered allmulticast mode [ 121.595706][ T40] audit: type=1400 audit(2000000062.073:585): avc: denied { create } for pid=11084 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 121.604515][ T40] audit: type=1400 audit(2000000062.073:586): avc: denied { write } for pid=11084 comm="syz.3.766" path="socket:[24555]" dev="sockfs" ino=24555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 121.631274][ T6039] vhci_hcd: vhci_device speed not set [ 121.952662][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.769'. [ 121.988726][T11104] Illegal XDP return value 2049 on prog (id 144) dev syz_tun, expect packet loss! [ 121.994957][ T40] audit: type=1400 audit(2000000062.473:587): avc: denied { write } for pid=11103 comm="syz.2.770" path="socket:[26392]" dev="sockfs" ino=26392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 122.038073][T11110] netlink: 'syz.2.773': attribute type 10 has an invalid length. [ 122.047630][T11110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.052626][T11110] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 122.106033][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 122.109112][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 122.112221][T11117] netlink: 'syz.4.775': attribute type 12 has an invalid length. [ 122.113626][T11114] bond0: entered promiscuous mode [ 122.116622][T11114] bond_slave_0: entered promiscuous mode [ 122.119049][T11114] bond_slave_1: entered promiscuous mode [ 122.124101][T11114] batadv0: entered promiscuous mode [ 122.128640][T11114] bond0: left promiscuous mode [ 122.131323][T11114] bond_slave_0: left promiscuous mode [ 122.133993][T11114] bond_slave_1: left promiscuous mode [ 122.136717][T11114] batadv0: left promiscuous mode [ 122.160909][T11127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 122.187861][T11127] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 122.194790][T11127] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 122.240095][T11141] vlan2: entered promiscuous mode [ 122.242200][T11141] bridge0: entered promiscuous mode [ 122.256302][ T1144] Bluetooth: hci4: Frame reassembly failed (-84) [ 122.259184][ T1144] Bluetooth: hci4: Frame reassembly failed (-84) [ 122.298556][T11151] afs: Unknown parameter 'dynŒ¶”u?â[ߦ>¬ÑT4fÆ1Ûç¥K;rɈ7ïìÍðÖÃå•ÄxLî}:' [ 122.304743][T11138] ./cgroup: Can't lookup blockdev [ 122.370085][ T5988] Bluetooth: hci1: command tx timeout [ 122.377599][T11163] futex_wake_op: syz.0.782 tries to shift op by 32; fix this program [ 122.413403][T11174] netlink: 'syz.4.784': attribute type 3 has an invalid length. [ 122.419881][T11174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.784'. [ 122.512915][T11182] overlay: Unknown parameter 'fsuuid' [ 122.561755][T11187] befs: (nullb0): No write support. Marking filesystem read-only [ 122.567257][T11187] befs: (nullb0): invalid magic header [ 122.664712][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 123.124332][T11272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=11272 comm=syz.3.801 [ 123.130617][ T5988] Bluetooth: hci0: ISO packet too small [ 123.642789][ T5988] Bluetooth: hci0: unexpected event for opcode 0x080f [ 123.732305][T11321] sctp: [Deprecated]: syz.3.812 (pid 11321) Use of int in max_burst socket option. [ 123.732305][T11321] Use struct sctp_assoc_value instead [ 123.768327][T11327] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 123.791165][T11327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.833239][T11327] bond1: (slave veth3): Enslaving as an active interface with a down link [ 123.844981][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.849152][T11327] bond1: (slave team0): making interface the new active one [ 123.854346][T11327] team0: entered promiscuous mode [ 123.856080][T11327] team_slave_0: entered promiscuous mode [ 123.858254][T11327] team_slave_1: entered promiscuous mode [ 123.860999][T11327] bond1: (slave team0): Enslaving as an active interface with an up link [ 123.902355][T11433] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 123.915460][T11433] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.921035][T11432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.942961][T11438] __nla_validate_parse: 2 callbacks suppressed [ 123.942972][T11438] netlink: 696 bytes leftover after parsing attributes in process `syz.3.820'. [ 123.984162][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 124.051816][T11440] team0 (unregistering): Port device team_slave_0 removed [ 124.055208][T11440] team0 (unregistering): Port device team_slave_1 removed [ 124.289891][ T5988] Bluetooth: hci4: command 0x1003 tx timeout [ 124.290628][ T5335] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 124.413949][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.831'. [ 124.418259][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.831'. [ 124.418466][T11520] QAT: Stopping all acceleration devices. [ 124.423011][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.831'. [ 124.424014][T11520] QAT: Stopping all acceleration devices. [ 124.449762][ T5335] Bluetooth: hci1: command tx timeout [ 124.462031][T11527] ALSA: mixer_oss: invalid OSS volume '' [ 124.464027][T11526] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 124.476577][T11524] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 124.483444][T11526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.497197][T11526] bond2: (slave geneve2): making interface the new active one [ 124.500904][T11526] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 124.504237][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.507489][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.516652][T11526] bond2: entered promiscuous mode [ 124.518390][T11526] geneve2: entered promiscuous mode [ 124.521109][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.524795][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.592348][T11577] kvm: user requested TSC rate below hardware speed [ 124.674841][T11584] netlink: 'syz.2.837': attribute type 27 has an invalid length. [ 124.733139][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.750972][T11584] 0ªX¹¦À: left allmulticast mode [ 124.802120][T11584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.812960][T11584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.818271][T11584] veth0_to_hsr: left allmulticast mode [ 124.873848][T11584] veth0_macvtap: left allmulticast mode [ 124.876340][T11584] macvtap0: left allmulticast mode [ 124.915606][T11584] xfrm1: left promiscuous mode [ 124.917911][T11584] xfrm1: left allmulticast mode [ 124.926243][T11584] macvlan2: left promiscuous mode [ 124.928107][T11584] macvlan2: left allmulticast mode [ 124.935529][ T6189] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.938700][ T6189] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.941735][ T6189] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.944669][ T6189] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.070335][T11612] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 125.073402][T11612] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 125.076612][T11612] netlink: 500 bytes leftover after parsing attributes in process `syz.3.842'. [ 125.151705][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 125.154524][T11621] bridge: RTM_NEWNEIGH with invalid ether address [ 125.156921][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 125.160195][T11621] bridge: RTM_NEWNEIGH with invalid ether address [ 125.249795][T11633] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 125.252351][T11633] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 125.253623][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 125.253632][ T40] audit: type=1400 audit(2000000065.723:597): avc: denied { read append } for pid=11631 comm="syz.4.847" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.257149][T11633] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 125.265540][ T40] audit: type=1400 audit(2000000065.723:598): avc: denied { open } for pid=11631 comm="syz.4.847" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.277792][ T40] audit: type=1400 audit(2000000065.733:599): avc: denied { ioctl } for pid=11631 comm="syz.4.847" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.292191][ T40] audit: type=1400 audit(2000000065.773:600): avc: denied { accept } for pid=11638 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.294714][T11633] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 125.303035][T11633] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 125.312421][T11633] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.373809][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 125.376954][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.850'. [ 125.557920][T11647] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 125.562863][T11647] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 125.568776][T11647] overlayfs: overlapping lowerdir path [ 125.572329][T11665] netlink: 'syz.2.856': attribute type 11 has an invalid length. [ 125.581823][T11665] netlink: 'syz.2.856': attribute type 11 has an invalid length. [ 125.735934][T11676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.941645][T11697] netlink: 'syz.3.863': attribute type 2 has an invalid length. [ 125.944126][T11697] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 126.366622][ T40] audit: type=1400 audit(2000000066.843:601): avc: denied { create } for pid=11717 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.373877][ T40] audit: type=1400 audit(2000000066.843:602): avc: denied { connect } for pid=11717 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.219246][ T40] audit: type=1400 audit(2000000067.693:603): avc: denied { ioctl } for pid=11749 comm="syz.4.873" path="socket:[28388]" dev="sockfs" ino=28388 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.344888][T11766] overlay: Bad value for 'workdir' [ 127.673541][T11780] io-wq is not configured for unbound workers [ 127.714303][ T40] audit: type=1400 audit(2000000068.193:604): avc: denied { ioctl } for pid=11783 comm="syz.4.880" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 127.885604][ T40] audit: type=1400 audit(2000000068.363:605): avc: denied { append } for pid=11800 comm="syz.4.883" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.928447][ T6189] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.935984][ T6189] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.944179][ T6189] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.948852][ T6189] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.962953][ T40] audit: type=1400 audit(2000000068.443:606): avc: denied { bind } for pid=11803 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.162142][T11854] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 128.247785][T11869] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 128.558920][T11883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=11883 comm=syz.2.899 [ 128.560973][T11884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=11884 comm=syz.2.899 [ 128.568386][T11918] macvlan3: entered promiscuous mode [ 128.570020][T11920] comedi: valid board names for 8255 driver are: [ 128.570507][T11918] macvlan3: entered allmulticast mode [ 128.572706][T11920] 8255 [ 128.572714][T11920] comedi: valid board names for vmk80xx driver are: [ 128.575627][T11918] bond2: entered promiscuous mode [ 128.576846][T11920] vmk80xx [ 128.578667][T11918] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 128.580136][T11920] comedi: valid board names for usbduxsigma driver are: [ 128.580145][T11920] usbduxsigma [ 128.580150][T11920] comedi: valid board names for usbduxfast driver are: [ 128.580155][T11920] usbduxfast [ 128.580160][T11920] comedi: valid board names for usbdux driver are: [ 128.580165][T11920] usbdux [ 128.580169][T11920] comedi: valid board names for ni6501 driver are: [ 128.580174][T11920] ni6501 [ 128.580179][T11920] comedi: valid board names for dt9812 driver are: [ 128.580184][T11920] dt9812 [ 128.580188][T11920] comedi: valid board names for ni_labpc_cs driver are: [ 128.580194][T11920] ni_labpc_cs [ 128.606145][T11920] comedi: valid board names for ni_daq_700 driver are: [ 128.608585][T11920] ni_daq_700 [ 128.609757][T11920] comedi: valid board names for labpc_pci driver are: [ 128.611951][T11920] labpc_pci [ 128.612743][T11918] bond2: left promiscuous mode [ 128.613076][T11920] comedi: valid board names for adl_pci9118 driver are: [ 128.616826][T11920] pci9118dg [ 128.617993][T11920] pci9118hg [ 128.619041][T11920] pci9118hr [ 128.620136][T11920] comedi: valid board names for 8255_pci driver are: [ 128.622181][T11920] 8255_pci [ 128.623335][T11920] comedi: valid board names for s526 driver are: [ 128.625576][T11920] s526 [ 128.626500][T11920] comedi: valid board names for multiq3 driver are: [ 128.629131][T11920] multiq3 [ 128.630777][T11920] comedi: valid board names for pcmuio driver are: [ 128.633050][T11920] pcmuio48 [ 128.634367][T11920] pcmuio96 [ 128.635690][T11920] comedi: valid board names for pcmmio driver are: [ 128.637981][T11920] pcmmio [ 128.638985][T11920] comedi: valid board names for pcmda12 driver are: [ 128.641506][T11920] pcmda12 [ 128.642685][T11920] comedi: valid board names for pcmad driver are: [ 128.645229][T11920] pcmad12 [ 128.646605][T11920] pcmad16 [ 128.648037][T11920] comedi: valid board names for ni_labpc driver are: [ 128.650984][T11920] lab-pc-1200 [ 128.652627][T11920] lab-pc-1200ai [ 128.654073][T11920] lab-pc+ [ 128.655118][T11920] comedi: valid board names for atmio16 driver are: [ 128.657522][T11920] atmio16 [ 128.658833][T11920] atmio16d [ 128.660843][T11920] comedi: valid board names for ni_at_ao driver are: [ 128.663625][T11920] at-ao-6 [ 128.664917][T11920] at-ao-10 [ 128.666360][T11920] comedi: valid board names for ni_at_a2150 driver are: [ 128.670626][T11920] ni_at_a2150 [ 128.671865][T11920] comedi: valid board names for adq12b driver are: [ 128.674032][T11920] adq12b [ 128.675005][T11920] comedi: valid board names for mpc624 driver are: [ 128.677105][T11920] mpc624 [ 128.678082][T11920] comedi: valid board names for c6xdigio driver are: [ 128.680357][T11920] c6xdigio [ 128.681614][T11920] comedi: valid board names for aio_iiro_16 driver are: [ 128.683851][T11920] aio_iiro_16 [ 128.685017][T11920] comedi: valid board names for aio_aio12_8 driver are: [ 128.687284][T11920] aio_aio12_8 [ 128.688449][T11920] aio_ai12_8 [ 128.689934][T11920] aio_ao12_4 [ 128.691322][T11920] comedi: valid board names for fl512 driver are: [ 128.693558][T11920] fl512 [ 128.694475][T11920] comedi: valid board names for dmm32at driver are: [ 128.696580][T11920] dmm32at [ 128.697581][T11920] comedi: valid board names for dt282x driver are: [ 128.699756][T11920] dt2821 [ 128.700716][T11920] dt2821-f [ 128.701809][T11920] dt2821-g [ 128.702825][T11920] dt2823 [ 128.703858][T11920] dt2824-pgh [ 128.704918][T11920] dt2824-pgl [ 128.706155][T11920] dt2825 [ 128.707475][T11920] dt2827 [ 128.708707][T11920] dt2828 [ 128.710583][T11920] dt2829 [ 128.711620][T11920] dt21-ez [ 128.712715][T11920] dt23-ez [ 128.713980][T11920] dt24-ez [ 128.715009][T11920] dt24-ez-pgl [ 128.716128][T11920] comedi: valid board names for dt2817 driver are: [ 128.718173][T11920] dt2817 [ 128.719141][T11920] comedi: valid board names for dt2815 driver are: [ 128.721296][T11920] dt2815 [ 128.722252][T11920] comedi: valid board names for dt2814 driver are: [ 128.724323][T11920] dt2814 [ 128.725263][T11920] comedi: valid board names for dt2811 driver are: [ 128.727444][T11920] dt2811-pgh [ 128.728546][T11920] dt2811-pgl [ 128.729682][T11920] comedi: valid board names for dt2801 driver are: [ 128.731745][T11920] dt2801 [ 128.732683][T11920] comedi: valid board names for das6402 driver are: [ 128.734696][T11920] das6402-12 [ 128.735789][T11920] das6402-16 [ 128.736881][T11920] comedi: valid board names for das1800 driver are: [ 128.739353][T11920] das-1701st [ 128.740793][T11920] das-1701st-da [ 128.742122][T11920] das-1702st [ 128.743260][T11920] das-1702st-da [ 128.744390][T11920] das-1702hr [ 128.745442][T11920] das-1702hr-da [ 128.746621][T11920] das-1701ao [ 128.747780][T11920] das-1702ao [ 128.748935][T11920] das-1801st [ 128.750106][T11920] das-1801st-da [ 128.751291][T11920] das-1802st [ 128.752377][T11920] das-1802st-da [ 128.753558][T11920] das-1802hr [ 128.754678][T11920] das-1802hr-da [ 128.755915][T11920] das-1801hc [ 128.757081][T11920] das-1802hc [ 128.758191][T11920] das-1801ao [ 128.759427][T11920] das-1802ao [ 128.760517][T11920] comedi: valid board names for das800 driver are: [ 128.762564][T11920] das-800 [ 128.763632][T11920] cio-das800 [ 128.764738][T11920] das-801 [ 128.765636][T11920] cio-das801 [ 128.766669][T11920] das-802 [ 128.767707][T11920] cio-das802 [ 128.768782][T11920] cio-das802/16 [ 128.770093][T11920] comedi: valid board names for isa-das08 driver are: [ 128.772434][T11920] isa-das08 [ 128.773705][T11920] das08-pgm [ 128.774803][T11920] das08-pgh [ 128.775888][T11920] das08-pgl [ 128.776957][T11920] das08-aoh [ 128.778035][T11920] das08-aol [ 128.779157][T11920] das08-aom [ 128.780337][T11920] das08/jr-ao [ 128.781484][T11920] das08jr-16-ao [ 128.782646][T11920] pc104-das08 [ 128.783747][T11920] das08jr/16 [ 128.784803][T11920] comedi: valid board names for das16m1 driver are: [ 128.786859][T11920] das16m1 [ 128.787848][T11920] comedi: valid board names for dac02 driver are: [ 128.790049][T11920] dac02 [ 128.791075][T11920] comedi: valid board names for rti802 driver are: [ 128.793112][T11920] rti802 [ 128.794042][T11920] comedi: valid board names for rti800 driver are: [ 128.796058][T11920] rti800 [ 128.796999][T11920] rti815 [ 128.797939][T11920] comedi: valid board names for pcm3724 driver are: [ 128.800099][T11920] pcm3724 [ 128.801120][T11920] comedi: valid board names for pcl818 driver are: [ 128.803169][T11920] pcl818l [ 128.804154][T11920] pcl818h [ 128.805153][T11920] pcl818hd [ 128.806164][T11920] pcl818hg [ 128.807230][T11920] pcl818 [ 128.808173][T11920] pcl718 [ 128.809123][T11920] pcm3718 [ 128.810294][T11920] comedi: valid board names for pcl816 driver are: [ 128.812334][T11920] pcl816 [ 128.813288][T11920] pcl814b [ 128.814266][T11920] comedi: valid board names for pcl812 driver are: [ 128.816282][T11920] pcl812 [ 128.817216][T11920] pcl812pg [ 128.818217][T11920] acl8112pg [ 128.819374][T11920] acl8112dg [ 128.820410][T11920] acl8112hg [ 128.821447][T11920] a821pgl [ 128.822456][T11920] a821pglnda [ 128.823589][T11920] a821pgh [ 128.824547][T11920] a822pgl [ 128.825525][T11920] a822pgh [ 128.826503][T11920] a823pgl [ 128.827574][T11920] a823pgh [ 128.828762][T11920] pcl813 [ 128.829801][T11920] pcl813b [ 128.830879][T11920] acl8113 [ 128.832037][T11920] iso813 [ 128.833063][T11920] acl8216 [ 128.834213][T11920] a826pg [ 128.835131][T11920] comedi: valid board names for pcl730 driver are: [ 128.837231][T11920] pcl730 [ 128.838245][T11920] iso730 [ 128.839522][T11920] acl7130 [ 128.840576][T11920] pcm3730 [ 128.841565][T11920] pcl725 [ 128.842512][T11920] p8r8dio [ 128.843499][T11920] acl7225b [ 128.844481][T11920] p16r16dio [ 128.845513][T11920] pcl733 [ 128.846435][T11920] pcl734 [ 128.847374][T11920] opmm-1616-xt [ 128.848461][T11920] pearl-mm-p [ 128.849627][T11920] ir104-pbf [ 128.850896][T11920] comedi: valid board names for pcl726 driver are: [ 128.853164][T11920] pcl726 [ 128.854212][T11920] pcl727 [ 128.855323][T11920] pcl728 [ 128.856326][T11920] acl6126 [ 128.857530][T11920] acl6128 [ 128.858556][T11920] comedi: valid board names for pcl724 driver are: [ 128.860884][T11920] pcl724 [ 128.862100][T11920] pcl722 [ 128.863262][T11920] pcl731 [ 128.864495][T11920] acl7122 [ 128.865781][T11920] acl7124 [ 128.867157][T11920] pet48dio [ 128.868405][T11920] pcmio48 [ 128.869742][T11920] onyx-mm-dio [ 128.870963][T11920] comedi: valid board names for pcl711 driver are: [ 128.871466][T11945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11945 comm=syz.4.905 [ 128.873020][T11920] pcl711 [ 128.873027][T11920] pcl711b [ 128.878649][T11920] acl8112hg [ 128.879823][T11920] acl8112dg [ 128.880983][T11920] comedi: valid board names for amplc_pc263 driver are: [ 128.883651][T11920] pc263 [ 128.884689][T11920] comedi: valid board names for amplc_pc236 driver are: [ 128.886924][T11920] pc36at [ 128.887870][T11920] comedi: valid board names for amplc_dio200 driver are: [ 128.890380][T11920] pc212e [ 128.891370][T11920] pc214e [ 128.892322][T11920] pc215e [ 128.893275][T11920] pc218e [ 128.894224][T11920] pc272e [ 128.895188][T11920] comedi: valid board names for comedi_parport driver are: [ 128.897846][T11920] comedi_parport [ 128.899032][T11920] comedi: valid board names for comedi_test driver are: [ 128.901418][T11920] comedi_test [ 128.902537][T11920] comedi: valid board names for comedi_bond driver are: [ 128.904697][T11920] comedi_bond [ 128.943340][ T2304] IPVS: starting estimator thread 0... [ 128.995606][T11964] ------------[ cut here ]------------ [ 128.997442][T11964] WARNING: CPU: 0 PID: 11964 at arch/x86/kvm/x86.c:11563 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 129.000981][T11964] Modules linked in: [ 129.002507][T11964] CPU: 0 UID: 0 PID: 11964 Comm: syz.0.910 Not tainted syzkaller #0 PREEMPT(full) [ 129.007354][T11964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.010880][T11964] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 129.013024][T11964] Code: 0a 00 00 00 00 00 00 e8 1c 6a be 1e 31 ff 89 c5 89 c6 e8 94 f5 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 42 fa 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 34 fa 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 129.019162][T11964] RSP: 0018:ffffc9000fa3fc30 EFLAGS: 00010293 [ 129.021186][T11964] RAX: 0000000000000000 RBX: ffff8880544dd280 RCX: ffffffff814192bf [ 129.023733][T11964] RDX: ffff88802db80000 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 129.026263][T11964] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 129.028968][T11964] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880625fa000 [ 129.032055][T11964] R13: ffff8880544dd358 R14: 0000000000000000 R15: ffff8880544dd5b4 [ 129.034588][T11964] FS: 00007f2b185776c0(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 129.037413][T11964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.039593][T11964] CR2: 000000005200000c CR3: 00000000487ae000 CR4: 0000000000352ef0 [ 129.042129][T11964] Call Trace: [ 129.043314][T11964] [ 129.044277][T11964] kvm_vcpu_ioctl+0x5eb/0x1690 [ 129.045815][T11964] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 129.047496][T11964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.049434][T11964] ? do_vfs_ioctl+0x128/0x14f0 [ 129.051072][T11964] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 129.052739][T11964] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 129.054937][T11964] ? hook_file_ioctl_common+0x145/0x410 [ 129.056738][T11964] ? selinux_file_ioctl+0x180/0x270 [ 129.058441][T11964] ? selinux_file_ioctl+0xb4/0x270 [ 129.059368][T11971] IPVS: using max 42 ests per chain, 100800 per kthread [ 129.060189][T11964] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 129.064290][T11964] __x64_sys_ioctl+0x18e/0x210 [ 129.065831][T11964] do_syscall_64+0xcd/0x4e0 [ 129.067322][T11964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.069196][T11964] RIP: 0033:0x7f2b1778eba9 [ 129.070685][T11964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.076753][T11964] RSP: 002b:00007f2b18577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.079485][T11964] RAX: ffffffffffffffda RBX: 00007f2b179d6090 RCX: 00007f2b1778eba9 [ 129.081995][T11964] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 129.084516][T11964] RBP: 00007f2b17811e19 R08: 0000000000000000 R09: 0000000000000000 [ 129.087014][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.089634][T11964] R13: 00007f2b179d6128 R14: 00007f2b179d6090 R15: 00007ffd1af3c058 [ 129.092173][T11964] [ 129.093186][T11964] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.095490][T11964] CPU: 0 UID: 0 PID: 11964 Comm: syz.0.910 Not tainted syzkaller #0 PREEMPT(full) [ 129.098385][T11964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.101676][T11964] Call Trace: [ 129.102768][T11964] [ 129.103735][T11964] dump_stack_lvl+0x3d/0x1f0 [ 129.105184][T11964] vpanic+0x6e8/0x7a0 [ 129.106438][T11964] ? __pfx_vpanic+0x10/0x10 [ 129.107896][T11964] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 129.109687][T11964] panic+0xca/0xd0 [ 129.110871][T11964] ? __pfx_panic+0x10/0x10 [ 129.112342][T11964] ? check_panic_on_warn+0x1f/0xb0 [ 129.114032][T11964] check_panic_on_warn+0xab/0xb0 [ 129.115614][T11964] __warn+0xf6/0x3c0 [ 129.116866][T11964] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 129.118719][T11964] report_bug+0x3c3/0x580 [ 129.120129][T11964] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 129.122026][T11964] handle_bug+0x184/0x210 [ 129.123450][T11964] exc_invalid_op+0x17/0x50 [ 129.124913][T11964] asm_exc_invalid_op+0x1a/0x20 [ 129.126464][T11964] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 129.128519][T11964] Code: 0a 00 00 00 00 00 00 e8 1c 6a be 1e 31 ff 89 c5 89 c6 e8 94 f5 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 42 fa 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 34 fa 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 129.134540][T11964] RSP: 0018:ffffc9000fa3fc30 EFLAGS: 00010293 [ 129.136463][T11964] RAX: 0000000000000000 RBX: ffff8880544dd280 RCX: ffffffff814192bf [ 129.138980][T11964] RDX: ffff88802db80000 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 129.141476][T11964] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 129.144030][T11964] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880625fa000 [ 129.146517][T11964] R13: ffff8880544dd358 R14: 0000000000000000 R15: ffff8880544dd5b4 [ 129.149029][T11964] ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980 [ 129.150846][T11964] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 129.152738][T11964] kvm_vcpu_ioctl+0x5eb/0x1690 [ 129.154267][T11964] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 129.155951][T11964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.157842][T11964] ? do_vfs_ioctl+0x128/0x14f0 [ 129.159383][T11964] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 129.160990][T11964] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 129.163206][T11964] ? hook_file_ioctl_common+0x145/0x410 [ 129.164955][T11964] ? selinux_file_ioctl+0x180/0x270 [ 129.166611][T11964] ? selinux_file_ioctl+0xb4/0x270 [ 129.168267][T11964] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 129.169928][T11964] __x64_sys_ioctl+0x18e/0x210 [ 129.171475][T11964] do_syscall_64+0xcd/0x4e0 [ 129.173014][T11964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.174964][T11964] RIP: 0033:0x7f2b1778eba9 [ 129.176382][T11964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.182461][T11964] RSP: 002b:00007f2b18577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.185062][T11964] RAX: ffffffffffffffda RBX: 00007f2b179d6090 RCX: 00007f2b1778eba9 [ 129.187562][T11964] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 129.190048][T11964] RBP: 00007f2b17811e19 R08: 0000000000000000 R09: 0000000000000000 [ 129.192572][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.195091][T11964] R13: 00007f2b179d6128 R14: 00007f2b179d6090 R15: 00007ffd1af3c058 [ 129.197577][T11964] [ 129.199287][T11964] Kernel Offset: disabled [ 129.200653][T11964] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:05:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c115 RDI=ffffffff9b118160 RBP=ffffffff9b118120 RSP=ffffc9000fa3f5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b118120 R15=ffffffff8564c0b0 RIP=ffffffff8564c13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f2b185776c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d66b2000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=00000000487ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000ed1cb RBX=0000000000000001 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52ce9 RDI=ffffffff8c163380 RBP=ffffed1003bd8488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557f10e808 CR3=0000000032de2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04be800312080004 bdf80306080004bd f00306d7e2080004 bde80310080004bd ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82080004bea00300 080004be98030408 0004be900302fa08 0004be8803100800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8030e080004bec0 0304080004beb803 74b0080004beb003 0c080004bea80302 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06080004bfc80320 80080004bfc0030e 080004bfb80301bf e8080004bfb00314 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 da080004bfa80305 89e8080004bfa003 00080004bf98031f fffffda0080004bf ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90031e080004bf88 0306080004bf8003 0e080004bef80302 080004bef0030008 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004bee803120800 04bee00302080004 bed8031080080004 bed0030a080004be ZMM24=cf6b2a3bcf6b2a3b cf6b2a3bcf6b2a3b cf6b2a3bcf6b2a3b cf6b2a3bcf6b2a3b cf6b2a3bcf6b2a3b cf6b2a3bcf6b2a3b cf6b2a3bcf6b2a3b cf6b2a3bcf6b2a3b ZMM25=d4868fc4d4868fc4 d4868fc4d4868fc4 d4868fc4d4868fc4 d4868fc4d4868fc4 d4868fc4d4868fc4 d4868fc4d4868fc4 d4868fc4d4868fc4 d4868fc4d4868fc4 ZMM26=662bae63662bae63 662bae63662bae63 662bae63662bae63 662bae63662bae63 662bae63662bae63 662bae63662bae63 662bae63662bae63 662bae63662bae63 ZMM27=6ec709a06ec709a0 6ec709a06ec709a0 6ec709a06ec709a0 6ec709a06ec709a0 6ec709a06ec709a0 6ec709a06ec709a0 6ec709a06ec709a0 6ec709a06ec709a0 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=de040000de040000 de040000de040000 de040000de040000 de040000de040000 de040000de040000 de040000de040000 de040000de040000 de040000de040000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff822dc27d RDX=ffff88802d488000 RSI=ffffffff822dbf8a RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000f9bf760 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88801e013bf0 R13=0000000000000001 R14=0000000000000000 R15=00000000000003f3 RIP=ffffffff81bb9dc1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2b429d7dac CR3=0000000032fbb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f5d1882 000055558f5bc330 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f5d2344 000055558f5d1890 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060140be12100006 8080961000000406 0140be0010000108 000480e210000410 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080280032a100006 8080861000000406 0140be2e10000880 8080100076808004 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0015800300100002 8004040204c20030 656c69662f2e01ff ffffffffffffffef ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000806080149 a81ffffff7b01000 1580040100000208 0606017cda000ca4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 012a100006808080 10000004060140be 4010000380040808 0004b60800010000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0408060a016bbc00 080003b003000800 03a8034080080003 a003108080100003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9003000403800300 0800061000581000 060471c000080006 1000581000060171 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c00004000408000f ffffffffffff0401 0000000806080149 a81ffffff7b01000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c15a0 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8c163300 RDI=ffffffff8c163340 RBP=0000000000000002 RSP=ffffc90003caf898 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b94d2d0 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fb435d6c880 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558431854c18 CR3=00000000326d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000001000011 Opmask02=0000000001efffff Opmask03=0000000001041000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 322f6b636f6c622f 7665642f7379732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 303a3935322f6b63 6f6c622f7665642f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584318490c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfbbc7020 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4357f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000ff00ff000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326f742d52c23 73730cc7460c6fa3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737372b2 1f5c730073432c16 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f306e6f69676572 2f30737562646e2f 30303a3231303049 5043412f30303a53 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 306d656d702f6b63 6f6c622f302e3065 63617073656d616e 2f306e6f69676572 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30737562646e2f 30303a3231303049 5043412f30303a53 55425953584e4c2f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f007300305f65 6b69727473726500 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000