last executing test programs: 2.973050285s ago: executing program 2 (id=872): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000240)=0xb700) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x400) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/42, 0x2a}], 0x1) 2.53205618s ago: executing program 3 (id=876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x16, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0x8, 0x5, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ldst={0x2, 0x1, 0x0, 0xa, 0x5, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380)={0x3, 0x6, 0x60000000, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000013c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001400)=[{0x0, 0x3, 0x6, 0xc}, {0x2, 0x2, 0xf, 0xa}], 0x10, 0x5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x3ff, 0x4c, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0xa873, 0x6}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000015c0)={r1, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x8000, 0x1}}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)=0x6) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) write(r5, &(0x7f0000000100)="9e", 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) socket$netlink(0x10, 0x3, 0x8000000004) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$9p_virtio(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x20248b1, &(0x7f0000000240)) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.231938155s ago: executing program 2 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000080)={@local, @private0={0xfc, 0x0, '\x00', 0x1}}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x80, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000700130001000000000000000000070000003b679b7ca10ebbadaf46cd7b9014e721970c32dcc8477fdb487a43ca37bda47a0000000000", @ANYRES32=r6, @ANYBLOB="00000000000000000c001a800800058004000680"], 0x2c}}, 0x8009004) 2.231687749s ago: executing program 2 (id=878): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff02, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011000a7401002a3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000003140000000000fbdbdf250900020073797a3200000000080041007278650014003300767863616e3100080000000000000049aff6ad91d6f1c8c050f59d000000"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 2.172679736s ago: executing program 2 (id=879): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f00000001c0)={0xb0, 0x16, 0xe, 0x28}) 1.602971776s ago: executing program 3 (id=883): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/llc/socket\x00') r2 = socket$netlink(0x10, 0x3, 0xbc20aa8243b9f30) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) (async) write$binfmt_script(r1, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='veth1_to_batadv\x00') bind$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.596342841s ago: executing program 3 (id=885): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x0) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [{0x9a3, 0x0, 0x2}, {0x361, 0x0, 0x1}, {0x811}, {0x2ab, 0x0, 0x83e}, {0x0, 0x0, 0xabb6}, {0x40f, 0x0, 0x1}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 1.531064276s ago: executing program 3 (id=888): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES8=r0], 0x15) r2 = dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x4, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x6, 0x0, 0x10]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xc2}]}}]}, 0xa4}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f00000002c0)={0x1, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000280)=0x800, 0x4) listen(r4, 0x1) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r9, r10, 0x2, 0x2}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) 1.460447732s ago: executing program 3 (id=890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x10, @empty, 0x100000}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x802ae, r3}) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/17, 0x11}, 0xfbffffff}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r5) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x12000021) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0xd48a, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mq_unlink(&(0x7f0000000000)='eth0\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.460049911s ago: executing program 1 (id=891): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x16, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0x8, 0x5, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ldst={0x2, 0x1, 0x0, 0xa, 0x5, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380)={0x3, 0x6, 0x60000000, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000013c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001400)=[{0x0, 0x3, 0x6, 0xc}, {0x2, 0x2, 0xf, 0xa}], 0x10, 0x5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x3ff, 0x4c, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0xa873, 0x6}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000015c0)={r1, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x8000, 0x1}}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)=0x6) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) write(r5, &(0x7f0000000100)="9e", 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) socket$netlink(0x10, 0x3, 0x8000000004) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$9p_virtio(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x20248b1, &(0x7f0000000240)) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.352969057s ago: executing program 1 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x460242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0x428, &(0x7f0000000180)={0x0, 0x0, 0x2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e22, 0x80, @local, 0x8000}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x54}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50, 0xffffffffffffffff, 0xffffe000) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/121, 0x79) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000080)={[0xeeef0000, 0xdddd1000, 0x8000000, 0x2], 0x3, 0x20, 0x8}) 1.12855865s ago: executing program 3 (id=893): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) r1 = socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x5, 0x32314152, 0x3, 0x20000000, 0x6, 0x0, 0x4006, 0x1, 0x4, 0x1, 0x4}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2100) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x70, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x3f, 0x0, 0x67, 0x5, 0x9, 0xc, 0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, {[@lsrr={0x83, 0xf, 0xd9, [@multicast2, @multicast1, @private=0xa010101]}, @rr={0x7, 0x13, 0xc, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @private=0xa010101]}, @cipso={0x86, 0xa, 0x1, [{0x1, 0x4, "530f"}]}]}}, "b819f7704f53"}}}}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0xe4, 0xda}}, 0x30) 890.568736ms ago: executing program 1 (id=895): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000019080), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0xb, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x26) fcntl$notify(r3, 0x402, 0x3f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setresuid(0x0, 0xee00, 0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000340)={0x0, 0x3, 0x0, &(0x7f0000000480)=[{}, {}, {}], 0x5, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000100)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={r5, &(0x7f0000000180), &(0x7f00000003c0)}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f00000001c0)={0x1, 0x7, 0x3, 0x1, @msf={0xe, 0x2, 0xf5}}) r7 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xfa55, 0x800, 0x7, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440045}], 0x100000000000011a) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) 889.097392ms ago: executing program 0 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20300, 0x202}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 887.914094ms ago: executing program 1 (id=897): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_REG_RULES={0x128, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb6cf}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf79b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x452}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xee}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf43}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff3d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x31c4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff6}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x150}}, 0x8010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400), 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fb00030000fb"], 0x830200) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000100000000000000001e000000a0d6d94500c6a1809e6ea9c4997c9ad3764174cee9a4d332b2562e0000000000000000000000f04b9ca9e19c6cd52f45cbc527b462aac02d1be1d94d363a036f6aa692b07981b0ffb51c637f0e2eb0ba95f444a006267f27d07841d7b5669e801a1bbc05b48d0b6634fa799c254a065c8d46fe7b33b60cd6"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r5, 0x0, 0x0, 0x4}, 0x20) accept4$netrom(r3, &(0x7f0000000280)={{}, [@null, @default, @rose, @null, @default, @netrom, @rose]}, &(0x7f0000000480)=0x48, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@gettaction={0x14, 0x32, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 812.173506ms ago: executing program 0 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000079000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000300)="baa000b09db3b30f38f187be0a0fc7981000f30f5254f8f30f0926660f32f20f1ad0660f38002f6c26ded5", 0x2b}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0xfefc, {0x7, 0x1}, {0xad, 0x2}, @ramp={0x3, 0xfbe, {0x15ea, 0x5, 0x41, 0x3}}}) (async) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000001c0)=@x86={0x8d, 0x81, 0x97, 0x0, 0x58f2, 0x80, 0x40, 0x5, 0x7, 0x6, 0x4, 0xe, 0x0, 0x2000009, 0x9ef7, 0x4, 0x1, 0x3, 0xf, '\x00', 0x4, 0xac34}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x58) 811.87153ms ago: executing program 2 (id=899): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff0a, 0x0) (async) ioctl$FS_IOC_GETVERSION(r1, 0xff0a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$binfmt_register(r5, &(0x7f0000008280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x38, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) r8 = syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f062e0f09f20f11b84900baf80c66b80ed9738666efbafc0cb8b41fefd9f666b8080000000f23d00f21f866353000000c0f23f8260fc7b5000166b9a00d00000f32d9fd0f01c5", 0x47}], 0x1, 0x2, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f062e0f09f20f11b84900baf80c66b80ed9738666efbafc0cb8b41fefd9f666b8080000000f23d00f21f866353000000c0f23f8260fc7b5000166b9a00d00000f32d9fd0f01c5", 0x47}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@dev, 0x0, 0x0, 0x4e24, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0xb6, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 811.141317ms ago: executing program 1 (id=900): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x16, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0x8, 0x5, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ldst={0x2, 0x1, 0x0, 0xa, 0x5, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000013c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001400)=[{0x0, 0x3, 0x6, 0xc}, {0x2, 0x2, 0xf, 0xa}], 0x10, 0x5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x3ff, 0x4c, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0xa873, 0x6}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000015c0)={r1, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x8000, 0x1}}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)=0x6) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) write(r5, &(0x7f0000000100)="9e", 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) socket$netlink(0x10, 0x3, 0x8000000004) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$9p_virtio(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x20248b1, &(0x7f0000000240)) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 727.858527ms ago: executing program 0 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_newnexthop={0x18, 0x68, 0x521}, 0x18}}, 0x4020054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x24108, 0x28079}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x2c80, 0x0) 726.231495ms ago: executing program 0 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x38}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x38}}, 0x20000000) (async) 662.320203ms ago: executing program 1 (id=903): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x54, 0x9, 0x1, 0x1, 0x8, 0xe787, "3dd7ac1f23fe1730fd28b3c935d1b8274f12eebf93020c83688e17184cbee87c7d2abf586423890fa44c26691ee82c9834b9bb6dffc7ccd95037cabfd9987d0c61d3a253c39666d1f8ea0c3ec2a5d870ba206cbb"}}, 0x16c) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='vfat\x00', 0x1000001, &(0x7f0000000240)='!,]}\x00') recvmsg$can_bcm(r0, &(0x7f00000008c0)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/110, 0x6e}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/114, 0x72}, {&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f0000000700)=""/198, 0xc6}], 0x7, &(0x7f0000000880)=""/42, 0x2a}, 0x12020) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close_range(r1, r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x335, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0xe0, 0x78, [{{0x9, 0x4, 0x0, 0x70, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x1192, 0x3, 0x1, {0x22, 0x7fd}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0x89, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x28}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0xfb, 0xa, 0xb0, 0x40, 0xa0}, 0x1ae, &(0x7f0000000980)={0x5, 0xf, 0x1ae, 0x6, [@generic={0xd5, 0x10, 0xa, "ca942637a2d6f407422d598a92c31191c075b66eed2700f564b8a8850deac8050fe316c0584ae26e5a3f91b44406ba58a1b42a42a2f36b86594a41b9806eba77eca2357ffb91f330de627a6988727351fac0a8f6c96825c40a8bdf062b263489a76549b6251b853463e4c6a05d0e7365c4d988391afc56abfcaee994b1891a8fcbc44e62af5ed978a2ebf49692f00d7758e1a999ea2253735ea54a082b653268b1e8d0270468c7966f7cef82c1d72b2ec810ec0789e0701fc77237b508f897b4c6ae1d212570a366b23bcdf534de8f1d1235"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "97c6c82b5baec214df99344e6fc0d686"}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0xc0, 0xf000, 0x3ff, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2e1c92a77410c7453787a2521fe68dd8"}, @generic={0x91, 0x10, 0x3, "f12b2df7b9da88aa37fdbfdae5f87670ef4c3ebdeab7ced4e5d7575bdc718d250fead30e84e6f97acfef26f1c3752ab02aa81def640659afab289e36c3dcdc7afedd4552f810cdb22d280cf3a4f689bf05f901d3644aad18a03163edcc3dfc55785a530c55212f52f64fc3884a91e593a53da2d0837c0f053dcd5a9aac43881066c71219a41cb111da6ab0b5ebb6"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x31, 0xf0, 0x4372}]}, 0x6, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x380a}}, {0x84, &(0x7f0000000bc0)=@string={0x84, 0x3, "5eed6ecd0481f9a8b67862b539b38a0b2b17adf4dd541569c981b1130433e98bbb10a45930406af4a9eafaaee4757e1c2e89c989fa7cd3ba5b58d7aee545a410745a2c6162639404d06fe3588019ef049c9884975970110a7db2ecdf085110ef70aadade9a8935fc1fe9207c93833a55e7a2d0e48aa96cfb379af2ae2dd37bc7b2f9"}}, {0xcb, &(0x7f0000000c80)=@string={0xcb, 0x3, "55912181b936e70722526fa599ae663de6b00a2dbf71ed7599c9a9aa9361425046a684c8ebac4ecdfe18f9ba1c13cd132a9811b9dac64935cd333421c302bd7e72e3e61fd92dd7f22c55cc0e3115ad64d44a4be2c39dad3f7e3587229c702537a46b67bf1d97a6af805b776d328528faf906bc8a8ce8a05ec6802157063dad866b20e0847ec588e02b89e23f5e8e9476b9afb1af10167be8d1ab309cbb13a618220b9ea711cf253a0191cc79933b92a9d730bcd546a871f95518507cf8895f81395ffc2424314327ff"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001000)={0x24, &(0x7f0000000e80)={0x40, 0x3, 0x84, {0x84, 0x21, "b62c13abae416c4384ef08651dd9ea8a07a083033477599b71b133be3d45cd136054d89b418eefae99e9834daeb1efc28fcc8a6d6574945eb4579f566c7d5ba5436daf8002ef3eb4dd6cb56f9bfa3035c679e8e8e00dd6433ddac2b9d7ca2b508f7ddf5dc0f9c69a5bede2c3652c25e7bfdf83f41b24baa3ee945045e39601f7ed97"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x143c}}, &(0x7f0000000f80)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "8cacf92d"}]}}, &(0x7f0000000fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0x9, 0x1, {0x22, 0xd9c}}}}, &(0x7f0000001240)={0x2c, &(0x7f0000001040)={0x20, 0x31, 0x53, "8b464ec1946e271e06c37beef11cbef5dfa6e8c74c70de44e9e9903bfc8a3cc5bc9fca164357f7bb0305fd9fe6b293e4f470c5805ee48278189593ff15c7c195582a62a2fea5ad9d4e32851f73993e511a8918"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001140)={0x20, 0x1, 0x9b, "a735294c8c2ff42d56cd0a0a6d228a7224d5ae05fda4f184b3695866a52fcbdfc62b650f04bee5a56831098c3674ce6c94b418895e9c7874b0fd55d6eb2f7e6b8aad1bb8cc6bb6423e7575b568049da71842776df4b96f1b2c7d6e9bf94c3347392f841da28161a053f8c20fb6d10b9bc19641691ac8da8208b8c2cf6e61f8ebe1d88e6edbfecefb53f04686c076933951a2ee81f06e1f5cd5f59b"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0x4}}) sendto$inet6(r0, &(0x7f0000001280)="3fcbc58448b70a97433d67e656b139559c8f26443fbaa3646de3e296f8861724651a654a379a5e34698a701e806b30596cd49c4e629e42110d8f4e42b0c4d7d81040fb0dd39b60c043675591bd1baa0d77548aa92debd1f397885907", 0x5c, 0x80, &(0x7f0000001300)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000002640)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002600)={&(0x7f0000001380)={0x1268, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x1108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "2cf420ed87b5965ccc7bfcaee2d807289973f132eb197e9d3dc4e1ecbd6d788aa2ba2bc830263f43eebcccb88a897b867eb5910d0ac37a4d86cb94df63eab7e1e4bdfa8abb7dbace955ec37a1208afd91d9294eaa0319734a3e5c9487d4bdaaca191142d9e1914b780143171a7d8c0e8644d588952e78b31c298d70f6b925476ab3761e0809235fe"}, @TIPC_NLA_NODE_ID={0x62, 0x3, "3fb7a8ba090c4028019954048ccbdaeb60de17457e9ad3d8d7b72ef366f80fd3d8af3823320741b7653a4f37e5dd73f39587f156a302938864b22e8dfbf2f3ab55c30807cb0470a0610cb02d763dbb077a10b7885a42b797238d5dd264e7"}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa3c}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1268}, 0x1, 0x0, 0x0, 0x20000851}, 0x4004080) syz_usb_control_io(r3, &(0x7f0000002880)={0x2c, &(0x7f0000002680)={0x40, 0x24, 0xcd, {0xcd, 0x8, "367346687825b1226c23b20f56961c3797cbb69f58cb217000993db3d52431a6f9192fec7c23889d5ad3eca4a96a4e5ca4c3162c1ceeede4bd33abfb01c1b7d430c5621d0100c4c8fbeed0c06d6574220e776131d4221015f4f58e01c21ca93aa8af2ac2873a66c225af77a9f397bf1154a5acd8b575362895c6015b7ed3fc3559b4c879229aad1f2093e40c37cf3e26137aeef8e20bec677c5d5cd0dc66d22c25956c9e4e41540711d73c185b20ef0b9f3e724d74bdee5e753e548abc0362ca76c700c108a0a3821b8d88"}}, &(0x7f0000002780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000027c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x9, 0x144}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "1ef02f72c6e6ec23390ce04732f35dc5"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "71a6576f3231f6670237e4ed06bdf037"}]}}, &(0x7f0000002800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x6, 0x8, "fa4cc44f", "a5f2b219"}}, &(0x7f0000002840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x3, 0x4, 0x4, 0x40, 0xb3f}}}, &(0x7f0000002cc0)={0x84, &(0x7f00000028c0)={0x40, 0xd, 0x17, "bbb25346228b21487cde40635a1377a13bc453213cf779"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0xab}, &(0x7f0000002980)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000029c0)={0x20, 0x0, 0x8, {0x4, 0x20, [0xf780]}}, &(0x7f0000002a00)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000002a40)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002a80)={0x40, 0xb, 0x2, "a413"}, &(0x7f0000002ac0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002b00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002b40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002b80)={0x40, 0x19, 0x2, "3e99"}, &(0x7f0000002bc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000002c00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000002c40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000002c80)={0x40, 0x21, 0x1, 0xc}}) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000002d80)={0x5, 0x9, 0x4, 0x4, 0x1}) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000002dc0)={0x3000, 0x2000}) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002e00), 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000003240)={0x14, &(0x7f0000003040)={0x40, 0x22, 0xf3, {0xf3, 0x7, "830e225867338e23e7cca6a199ebc2327533e29472c2e2159b31265ca42d91b7033c0511537939c7d300c629cbacb360ca439a4134195c953b78dc26da063bc9fe1c95d471d5288d544774da6e3b679b2e74db0f3c4ad19af3eca793984d993f3d9b4842a3ac046b684a7db4e703c9b6e922f83ef4f48f24babfbd2524e9c590e35ed09043558be41fa6f9c6708e4a7254f29fd1db19633930c6796070a77fbaf6e9b6b6509026a2ce51b4557b124a5f3f5feb25bf64986548416a864be0769a1c2dfaf8dd9e0e759ce895100f57f053a2469fdc6bd0d21a33108840d2d102d7dd45e2eb7e39cf45ac2161c13c12ecdd52"}}, &(0x7f0000003140)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "179a02761d780bc24dba2753da32d9616f1fa04a0516a7c43d0f55fc4d2db909b75d872dc1858dc5397a9e553ec46aaf9316e8ae54cd3e0986b8ca462372d3f537e54984bfa2ffe0a3df539fb42e5ccd54005eca434c20831412c4c0bdc70715e9f8ff9d2d96237e16ee5ea253bae51a17c39a3c15e62d6e46e9ddd19165aa8e1a32066d80bcc8f98cb84a187fd5822e0f17f5415c52137a29f4c74291512e14a5708d834e346c031c1bcb48a161bdd940c980b7d8841fce94226020eb27613815d1c1fd1530cffd23dea9124ce382ca316d35f399"}}}, &(0x7f0000003480)={0x44, &(0x7f0000003280)={0x20, 0xd, 0x2e, "3c6ffb5e7e73b18fb12a09fb256e5027ed3d11fc8e9661ea57afa86c5430cf8210e5a5e644f7e29cc9dcd8e12e2a"}, &(0x7f00000032c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000003300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003340)={0x20, 0x81, 0x2, "9b5c"}, &(0x7f0000003380)={0x20, 0x82, 0x2, 'gj'}, &(0x7f00000033c0)={0x20, 0x83, 0x2, ':1'}, &(0x7f0000003400)={0x20, 0x84, 0x4, "adfce4c0"}, &(0x7f0000003440)={0x20, 0x85, 0x3, "f288f6"}}) syz_usb_control_io(r3, &(0x7f0000003700)={0x2c, &(0x7f0000003500)={0x20, 0xf, 0xf3, {0xf3, 0x21, "a9987cd5710899d43a215a276339aeb467f3e29720e71825fa9538d1c5a53ec681e6b18b224037c67dc82fb2f5c199ba13be264a25e3e3e4dee355ee33cd964b687c5957fbe45ab3efdec34b90d26737594e4427115d16022757a2f9b7025dbd70d49e4a8fa758deac8f7434b5284a71d2b80ed1bea9628ed465a37e1b3fb1fd3499b40c01a25140d711eeeb2df219be5af27b78c07458c781d698fe1536366becc8e6068250fce51589a780ed669d81a30e5057d40e65f8fc7ad39ed3c43b20f98f5721fcb5019745c790289a0ccb55deda44afe55f48ab95aad2e8265e2076c259ebd793d90da090b632e00c6d00774e"}}, &(0x7f0000003600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000003640)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "af80d3f484315d89587ee8eff752a328"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x43, 0x12, 0x5, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0x81, 0x2}]}}, &(0x7f0000003680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0xf1, 0x2, "4f0e0c1d", "eb9bfb7a"}}, &(0x7f00000036c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0xd56a9a77f37d7f30, 0x0, 0x2, 0x1c, 0x8001}}}, &(0x7f0000003c00)={0x84, &(0x7f0000003740)={0x0, 0x14, 0xc6, "ebbd503830b178bf36c630124b959be9f50a1d1c6d0034489883617734c51b337df840733ce9766a8b935f74180f5721bc9fea73e89d019dd4330ee1dd1f1d1d698f0dafb3c67e774614e03fc757ed9007e404e35ff9738490affed3dcd3a29356e39382afb8f3f743d7cf81e80b0adad3b8eeadf23d69c92df8e9dbaed881a302f0637e44572312977ba3d0d99df630376529079c66e30c49c24e352803a54f1f192ea7e2ccb590844dd9db6b425cc488867b9d0580ef01f31fb251e11546d5ab1a68ed12e4"}, &(0x7f0000003840)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003880)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000038c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000003900)={0x20, 0x0, 0x4, {0xe0, 0x40}}, &(0x7f0000003940)={0x40, 0x7, 0x2}, &(0x7f0000003980)={0x40, 0x9, 0x1, 0xc}, &(0x7f00000039c0)={0x40, 0xb, 0x2, "ecde"}, &(0x7f0000003a00)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000003a40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000003a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000003ac0)={0x40, 0x19, 0x2, 'v^'}, &(0x7f0000003b00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000003b40)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000003b80)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000003bc0)={0x40, 0x21, 0x1, 0xa}}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000003cc0)) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000003e40)={0x14, &(0x7f0000003d40)={0x40, 0xa, 0x75, {0x75, 0xd, "045baf741cd6768efb76e06ee935bdd83195173ba2d981a2690e692a509511da8486177769beae1cbcbb45821b51b9d24e1230e3c207c1e9d8c3be963d3828599d491563df3d468092b25b24380f11814b0a19f003baf71bd5deacac19012b7fd59aee04d322d1a611e09c71a237d5c93df444"}}, &(0x7f0000003dc0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "41d7915fe249bbadf6f211243d0e02b8124fbde718127152fc0efcf638b5aa9156488dd41c7c0cda8594c6c5ed6cfd2f1fb7e3c0605d62390b4057bbe4fa229b42fad25ffa18d6184aad3e68e66af8c57e7b02cfc7"}}}, &(0x7f0000004040)={0x34, &(0x7f0000003e80)={0x20, 0x8, 0x5a, "ebfd602a5dd200a54f22550e33b01ef491b131fcb14b83c78ea0b7423f0ede99927279f046ce0e7f460aaba055da4879841133ce1de15c39a447f87e4eab5417aa5d672aa9fac1a8ffa3cf024d99b1c12f26ca3b08fa778624ec"}, &(0x7f0000003f00)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000003f40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003f80)={0x20, 0x0, 0x11, {0xf, "f7a2468840c553c57b411b875210cd"}}, &(0x7f0000003fc0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000004000)={0x20, 0x0, 0x1, 0xa}}) r6 = syz_usb_connect$cdc_ecm(0x1, 0x5b, &(0x7f0000004080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x50, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x4, 0x20, 0xcd, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb7b4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x8, 0x8}, [@obex={0x5, 0x24, 0x15, 0x562f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x2, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xff, 0x4, 0x1}}}}}]}}]}}, &(0x7f0000004400)={0xa, &(0x7f0000004100)={0xa, 0x6, 0x310, 0xee, 0x4, 0x8, 0x40, 0x3}, 0x3a, &(0x7f0000004140)={0x5, 0xf, 0x3a, 0x3, [@generic={0x7, 0x10, 0x2, "245cee04"}, @ssp_cap={0x24, 0x10, 0xa, 0x23, 0x6, 0x3, 0xf, 0x7, [0xff3fcf, 0xc030, 0xc0c0, 0xf, 0x3f0f, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x80, 0x3c}]}, 0x7, [{0x35, &(0x7f0000004180)=@string={0x35, 0x3, "69638e2d2089cf636f7572e6a13cde152af13e7180578fef244edc16fca51028103eaa07d92c9e82d204c04229a7b52b9e9166"}}, {0x42, &(0x7f00000041c0)=@string={0x42, 0x3, "ac0c93073410efe317451698528a219bb8c4e98e17e2050799fefbd140ff0d9df36045ec8d4725cd7095411a1a270f4b0343f80aadc59224e63a4741cd3fe3e9"}}, {0x4a, &(0x7f0000004240)=@string={0x4a, 0x3, "81b9817d8f4af4053bea15760c9be9340f68027d95873a775d990f619e9ea86d22d3e3d1f85a88497e67cc34c12444920b5a90be666c54f449a784e227661eb6d5441d715ab9c8c0"}}, {0x4, &(0x7f00000042c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000004300)=@lang_id={0x4, 0x3, 0x2009}}, {0x66, &(0x7f0000004340)=@string={0x66, 0x3, "b6c83c6b2909958edf054a871d75b7ff6fd051bdaa51610c24cae2a37fd3014460956a76761c5346adffc32ec5a5d42e0f657526db36c56244803b367dcbb2e9703e4d981151519b783f37f2f295f2f0294c25fec4834ca6c32bdd5db7f82fdaafbfef19"}}, {0x4, &(0x7f00000043c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000004580)={0x14, &(0x7f0000004480)={0x20, 0xb, 0xac, {0xac, 0xc, "fc5c650161ab17333dadb97fcac8410f48013ee8b2326e2617dce32de95e2f204c73270f2465659c28549ac2ee69a5a5886c9cef87b0eb5001cc389960880c352ac5863d6cb885043b60df8c3bb7b464feb6533bfee1ce8b350ef4a3ba6413a8f9732922f71ab6010c367e42ce70dfc85d4025b685e386a482a244aa1eb6db8607509fd7bf3d7096c9727a8fd72a8c2fd64ff97cdd83b082c3c14e2df27ce4cb39233e58b985594ddb2a"}}, &(0x7f0000004540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004700)={0x1c, &(0x7f00000045c0)={0x40, 0x16, 0x9c, "b3ec1c0be452b7143a11f949a8e5dc3e200095718978e570570f82f8042e3921ceecd9dd916abe412457e1361c2e08e5530b9a6164829a18f025bc56687c51fa2c46d138f3930530a2f233655a199d29024b9fab8aeccaea948ee4ce64efd938bc0c1129f53cafe34c261668d9f0a4ee7ea7cc087cc6742cc65c9c384ece6c3fc9c7d66dc7aeabcf4d3e983a80ee14fc5c6579442d68bc1d250ddccc"}, &(0x7f0000004680)={0x0, 0xa, 0x1, 0xe0}, &(0x7f00000046c0)={0x0, 0x8, 0x1, 0xfd}}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000004740)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000004780), 0x220040, 0x0) write$binfmt_script(r0, &(0x7f00000047c0)={'#! ', './file0', [{0x20, '%\'-!-^$,-&,-:)'}, {0x20, 'vfat\x00'}, {}, {0x20, 'syz0\x00'}], 0xa, "82299a27fc31ac6bb212694820b757162a85fc"}, 0x3a) creat(&(0x7f0000004800)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000004ac0)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004a80)={&(0x7f00000048c0)={0x1b8, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x6555}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4ab}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5cb}, {0x6, 0x11, 0x2}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 657.792842ms ago: executing program 0 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe1f00000000000008000f00fe000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x60, r8, 0x1, 0x50bd29, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r4}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x4008000}, 0x4800) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0xe3, "b63da91222e71de96c3fe32d43404fd24bc76d9d8a1a2de56c7bdfd68644ced8cb5cfd96448fdd6967904ef1820ebd3c1c45360fb992795de4e9ed2265c929b50691baaa000322464b7977e42911fe09b67d621cff0bed9b07ccebb42d57aa5fd2b864a7e1688cc87cc6b7f7561a6897e90c819e6364394d61c9acb48b6eb48f92f6f3698886c80916a95a3bfcc28b294fd76e695f9be275abdf947876876cb79a371d968be7c18e6e40d441616e60e3571fad42f3ea131f6e5e0a85ccefb85d0d79e3113748c7865e1dacef2c7cd6e89359a026453565eb22e88e9db2ca5097a16565"}, &(0x7f0000000080)=0xeb) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000300)={r10, 0x71, "2620f59f8ca25558d01d2a808164040bae29b3d310833dcb305e5e8874246335849a30678c13d64ab75e3dc31327d0a92085bc5c4805044739e2e1322474919c29e7982f64b76d08c6caa6e6f6ce2eb09765c2d0a4063b747b2421b5823b42cc83ec7c22fa557a8ee54198d1c228e99dc5"}, &(0x7f0000000100)=0x79) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r11, &(0x7f00000001c0)=""/4068, 0xfe4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r11, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000740), r12, 0xfffffffd}}, 0x18) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="010002004020000000002500000008000300aae515cc701add62c4d0d4179b8d2c267e437fbd33a7f47117c416ebcad69f3ec8de20c43c85bc11a01a29a7dea6", @ANYRES32=r2, @ANYBLOB="0c009900000100000a000000080026006c0900000a000600505050505050000008003500000000000400340008002201780100000800270000000000050019010500000008002201590200000800270003000000080027000000000008002201120200000500190109000000"], 0x88}, 0x1, 0x0, 0x0, 0x40094}, 0x0) 581.200146ms ago: executing program 0 (id=905): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) r10 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x4f424752, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x91}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025010000340200000200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r8], 0x12) 0s ago: executing program 2 (id=906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0x3, 0x40000) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r3, 0x836f3000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xd0, 0x8, 0x6, '\x00', 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 44.011831][ T40] audit: type=1400 audit(1752738667.537:60): avc: denied { rlimitinh } for pid=5909 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.018490][ T40] audit: type=1400 audit(1752738667.537:61): avc: denied { siginh } for pid=5909 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:28690' (ED25519) to the list of known hosts. [ 44.965861][ T40] audit: type=1400 audit(1752738668.507:62): avc: denied { name_bind } for pid=5932 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.983872][ T40] audit: type=1400 audit(1752738668.527:63): avc: denied { write } for pid=5933 comm="sh" path="pipe:[3769]" dev="pipefs" ino=3769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.996117][ T40] audit: type=1400 audit(1752738668.537:64): avc: denied { execute } for pid=5933 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.003049][ T40] audit: type=1400 audit(1752738668.537:65): avc: denied { execute_no_trans } for pid=5933 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.965837][ T40] audit: type=1400 audit(1752738670.507:66): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.968631][ T5933] cgroup: Unknown subsys name 'net' [ 47.163930][ T5933] cgroup: Unknown subsys name 'cpuset' [ 47.168108][ T5933] cgroup: Unknown subsys name 'rlimit' [ 47.403508][ T5939] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.149363][ T5933] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.214373][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.214387][ T40] audit: type=1400 audit(1752738674.757:80): avc: denied { execmem } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.489923][ T40] audit: type=1400 audit(1752738675.027:81): avc: denied { create } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.497561][ T40] audit: type=1400 audit(1752738675.027:82): avc: denied { read write } for pid=5947 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.506568][ T40] audit: type=1400 audit(1752738675.027:83): avc: denied { open } for pid=5947 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.515752][ T40] audit: type=1400 audit(1752738675.037:84): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="socket:[6585]" dev="sockfs" ino=6585 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.538682][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.541945][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.544920][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.547451][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.550332][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.554299][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.557365][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.559890][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.559935][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.562514][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.563282][ T5962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.565302][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.575610][ T5964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.577112][ T40] audit: type=1400 audit(1752738675.117:85): avc: denied { read } for pid=5956 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.577322][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.578473][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.579038][ T5964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.579151][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.583591][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.592120][ T40] audit: type=1400 audit(1752738675.117:86): avc: denied { open } for pid=5956 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.595037][ T5964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.596041][ T40] audit: type=1400 audit(1752738675.117:87): avc: denied { mounton } for pid=5956 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.599610][ T5964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.824214][ T40] audit: type=1400 audit(1752738675.367:88): avc: denied { module_request } for pid=5948 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.894614][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 51.936177][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 51.943471][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 52.056658][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 52.068397][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.071160][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.073624][ T5948] bridge_slave_0: entered allmulticast mode [ 52.076301][ T5948] bridge_slave_0: entered promiscuous mode [ 52.093317][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.095552][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.097783][ T5948] bridge_slave_1: entered allmulticast mode [ 52.100334][ T5948] bridge_slave_1: entered promiscuous mode [ 52.209603][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.212122][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.214446][ T5956] bridge_slave_0: entered allmulticast mode [ 52.217123][ T5956] bridge_slave_0: entered promiscuous mode [ 52.220294][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.223059][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.225362][ T5956] bridge_slave_1: entered allmulticast mode [ 52.228069][ T5956] bridge_slave_1: entered promiscuous mode [ 52.232858][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.236481][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.239246][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.242465][ T5947] bridge_slave_0: entered allmulticast mode [ 52.246107][ T5947] bridge_slave_0: entered promiscuous mode [ 52.250102][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.252958][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.255606][ T5947] bridge_slave_1: entered allmulticast mode [ 52.258802][ T5947] bridge_slave_1: entered promiscuous mode [ 52.330000][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.385552][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.388424][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.391674][ T5953] bridge_slave_0: entered allmulticast mode [ 52.394307][ T5953] bridge_slave_0: entered promiscuous mode [ 52.398196][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.403460][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.426900][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.430218][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.433009][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.435287][ T5953] bridge_slave_1: entered allmulticast mode [ 52.438735][ T5953] bridge_slave_1: entered promiscuous mode [ 52.487844][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.505519][ T5956] team0: Port device team_slave_0 added [ 52.509418][ T5948] team0: Port device team_slave_0 added [ 52.543802][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.548528][ T5956] team0: Port device team_slave_1 added [ 52.552503][ T5948] team0: Port device team_slave_1 added [ 52.570371][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.635144][ T5947] team0: Port device team_slave_0 added [ 52.650240][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.652566][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.660437][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.665278][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.667448][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.676780][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.682387][ T5947] team0: Port device team_slave_1 added [ 52.696941][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.699196][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.707298][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.711241][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.713882][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.722272][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.740276][ T5953] team0: Port device team_slave_0 added [ 52.747371][ T5953] team0: Port device team_slave_1 added [ 52.814517][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.816666][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.824565][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.828803][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.830971][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.840486][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.858486][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.860727][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.868890][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.916465][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.918716][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.926833][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.948871][ T5948] hsr_slave_0: entered promiscuous mode [ 52.951380][ T5948] hsr_slave_1: entered promiscuous mode [ 52.956172][ T5956] hsr_slave_0: entered promiscuous mode [ 52.958437][ T5956] hsr_slave_1: entered promiscuous mode [ 52.960510][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.963257][ T5956] Cannot create hsr debugfs directory [ 53.012562][ T5947] hsr_slave_0: entered promiscuous mode [ 53.015658][ T5947] hsr_slave_1: entered promiscuous mode [ 53.018534][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.021933][ T5947] Cannot create hsr debugfs directory [ 53.181028][ T5953] hsr_slave_0: entered promiscuous mode [ 53.184252][ T5953] hsr_slave_1: entered promiscuous mode [ 53.187146][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.190340][ T5953] Cannot create hsr debugfs directory [ 53.527404][ T5956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.535135][ T5956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.542872][ T5956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.548166][ T5956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.585992][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.590959][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.595698][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.599884][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.631766][ T5964] Bluetooth: hci2: command tx timeout [ 53.631771][ T5950] Bluetooth: hci0: command tx timeout [ 53.631932][ T63] Bluetooth: hci1: command tx timeout [ 53.632352][ T5311] Bluetooth: hci3: command tx timeout [ 53.659808][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.665044][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.668855][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.673505][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.717535][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.721577][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.728487][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.733172][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.737894][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.759596][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.774049][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.787662][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.790285][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.803563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.805906][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.822450][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.839387][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.841829][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.865448][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.868470][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.898958][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.922734][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.929119][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.929161][ T40] audit: type=1400 audit(1752738677.467:89): avc: denied { sys_module } for pid=5956 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.934958][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.940515][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.950689][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.952918][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.966009][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.982875][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.985189][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.999324][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.001587][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.037411][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.042283][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.076940][ T5947] veth0_vlan: entered promiscuous mode [ 54.087075][ T5947] veth1_vlan: entered promiscuous mode [ 54.089460][ T5956] veth0_vlan: entered promiscuous mode [ 54.096935][ T5956] veth1_vlan: entered promiscuous mode [ 54.109377][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.124416][ T5947] veth0_macvtap: entered promiscuous mode [ 54.130217][ T5947] veth1_macvtap: entered promiscuous mode [ 54.152373][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.156428][ T5956] veth0_macvtap: entered promiscuous mode [ 54.161745][ T5956] veth1_macvtap: entered promiscuous mode [ 54.166679][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.172513][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.175226][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.177791][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.180514][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.199377][ T5948] veth0_vlan: entered promiscuous mode [ 54.209756][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.219085][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.230632][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.236057][ T5956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.238442][ T5956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.240806][ T5956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.243377][ T5956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.248687][ T5948] veth1_vlan: entered promiscuous mode [ 54.287952][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.290433][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.312444][ T5953] veth0_vlan: entered promiscuous mode [ 54.321977][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.325161][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.330834][ T5953] veth1_vlan: entered promiscuous mode [ 54.333923][ T5948] veth0_macvtap: entered promiscuous mode [ 54.346419][ T5948] veth1_macvtap: entered promiscuous mode [ 54.351826][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.354245][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.371917][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.383313][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.385716][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.390083][ T5953] veth0_macvtap: entered promiscuous mode [ 54.402544][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.408096][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.413505][ T5953] veth1_macvtap: entered promiscuous mode [ 54.430316][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.430349][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.430365][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.430379][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.446655][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 54.449241][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.456237][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.467004][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.469817][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.473252][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.476140][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.489943][ T6037] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.533583][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.536099][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.570081][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.572688][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.591913][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.594373][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.614047][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.617014][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.696875][ T6045] Zero length message leads to an empty skb [ 54.768783][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.135490][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 55.571453][ T6018] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.673761][ T6069] overlayfs: statfs failed on './file0' [ 55.719120][ T5950] Bluetooth: hci3: command tx timeout [ 55.719219][ T5964] Bluetooth: hci2: command tx timeout [ 55.719234][ T5311] Bluetooth: hci1: command tx timeout [ 55.721755][ T5950] Bluetooth: hci0: command tx timeout [ 55.726116][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 55.729692][ T6018] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.733777][ T6018] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.737757][ T6018] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0x34, changing to 0x4 [ 55.740792][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 55.742659][ T6018] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1153, setting to 1024 [ 55.742675][ T6018] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 55.742687][ T6018] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.742707][ T6018] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.742718][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.748213][ T6018] usbtmc 7-1:16.0: bulk endpoints not found [ 55.775213][ T6113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6113 comm=syz.0.20 [ 55.940885][ T6124] ubi31: attaching mtd0 [ 55.945010][ T6124] ubi31: scanning is finished [ 55.947798][ T6124] ubi31: empty MTD device detected [ 56.023476][ T6124] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 56.025926][ T6124] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 56.028197][ T6124] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 56.030452][ T6124] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 56.033373][ T6124] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 56.035659][ T6124] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 56.038251][ T6124] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4266752587 [ 56.042650][ T6124] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 56.046423][ T6133] ubi31: background thread "ubi_bgt31d" started, PID 6133 [ 56.236179][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 56.236188][ T40] audit: type=1400 audit(1752738679.777:187): avc: denied { read } for pid=6156 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.263785][ T40] audit: type=1400 audit(1752738679.807:188): avc: denied { write } for pid=6152 comm="syz.1.30" path="socket:[7709]" dev="sockfs" ino=7709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.270841][ T40] audit: type=1400 audit(1752738679.807:189): avc: denied { unlink } for pid=6157 comm="rm" name="resolv.conf.lapb7.link" dev="tmpfs" ino=2142 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.302820][ T40] audit: type=1400 audit(1752738679.847:190): avc: denied { create } for pid=6105 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 56.308766][ T40] audit: type=1400 audit(1752738679.847:191): avc: denied { ioctl } for pid=6105 comm="syz.2.18" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 56.316552][ T40] audit: type=1400 audit(1752738679.847:192): avc: denied { getopt } for pid=6105 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 56.664716][ T40] audit: type=1400 audit(1752738680.207:193): avc: denied { name_bind } for pid=6164 comm="syz.0.31" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.923578][ T40] audit: type=1400 audit(1752738680.467:194): avc: denied { create } for pid=6167 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.930834][ T40] audit: type=1400 audit(1752738680.467:195): avc: denied { connect } for pid=6167 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.938225][ T40] audit: type=1400 audit(1752738680.467:196): avc: denied { setopt } for pid=6167 comm="syz.3.32" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.070179][ T6175] xt_hashlimit: size too large, truncated to 1048576 [ 57.397189][ T6184] netlink: 1656 bytes leftover after parsing attributes in process `syz.1.35'. [ 57.401092][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'. [ 57.556024][ T6188] netlink: 80 bytes leftover after parsing attributes in process `syz.0.37'. [ 57.562552][ T6188] netlink: 52 bytes leftover after parsing attributes in process `syz.0.37'. [ 57.802221][ T5950] Bluetooth: hci0: command tx timeout [ 57.802250][ T5964] Bluetooth: hci3: command tx timeout [ 57.802806][ T5311] Bluetooth: hci2: command tx timeout [ 57.802829][ T5311] Bluetooth: hci1: command tx timeout [ 58.280035][ T6031] usb 7-1: USB disconnect, device number 2 [ 58.820077][ T6234] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 59.010617][ T6238] program syz.1.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.092647][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 59.157545][ T6250] netlink: 80 bytes leftover after parsing attributes in process `syz.2.57'. [ 59.459434][ T6272] ipt_rpfilter: unknown options [ 59.588228][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 59.871918][ T5964] Bluetooth: hci2: command tx timeout [ 59.873309][ T5950] Bluetooth: hci1: command tx timeout [ 59.873756][ T5964] Bluetooth: hci3: command tx timeout [ 59.881846][ T5964] Bluetooth: hci0: command tx timeout [ 59.968240][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.69'. [ 59.971065][ T6296] netlink: 264 bytes leftover after parsing attributes in process `syz.1.69'. [ 59.975465][ T6296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.69'. [ 60.096576][ T6305] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.268395][ T6326] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 60.369379][ T6337] xt_hashlimit: invalid rate [ 60.379223][ T6339] syz.2.83: attempt to access beyond end of device [ 60.379223][ T6339] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 60.384693][ T6339] exFAT-fs (nbd2): unable to read boot sector [ 60.386655][ T6339] exFAT-fs (nbd2): failed to read boot sector [ 60.388477][ T6339] exFAT-fs (nbd2): failed to recognize exfat type [ 60.435445][ T6347] 9pnet_fd: p9_fd_create_tcp (6347): problem connecting socket to 127.0.0.1 [ 60.501321][ T6352] capability: warning: `syz.3.88' uses deprecated v2 capabilities in a way that may be insecure [ 60.529078][ T6355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.537986][ T6354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.739781][ T6371] kvm: user requested TSC rate below hardware speed [ 61.150783][ T6388] syz.3.98 uses obsolete (PF_INET,SOCK_PACKET) [ 61.173734][ T838] libceph: connect (1)[c::]:6789 error -101 [ 61.176315][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 61.244022][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 61.244032][ T40] audit: type=1400 audit(1752738684.787:280): avc: denied { bind } for pid=6389 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.252862][ T40] audit: type=1400 audit(1752738684.797:281): avc: denied { execute } for pid=6398 comm="syz.3.101" path="/25/blkio.bfq.io_service_bytes" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.299603][ T6390] ceph: No mds server is up or the cluster is laggy [ 61.308845][ T40] audit: type=1400 audit(1752738684.847:282): avc: denied { write } for pid=6404 comm="syz.1.102" path="socket:[10176]" dev="sockfs" ino=10176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.324029][ T40] audit: type=1400 audit(1752738684.867:283): avc: denied { bind } for pid=6406 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.334649][ T40] audit: type=1400 audit(1752738684.867:284): avc: denied { getopt } for pid=6406 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.359149][ T40] audit: type=1400 audit(1752738684.897:285): avc: denied { create } for pid=6409 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.368964][ T40] audit: type=1400 audit(1752738684.917:286): avc: denied { mount } for pid=6409 comm="syz.3.104" name="/" dev="ramfs" ino=10181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.375425][ T6410] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.376661][ T40] audit: type=1400 audit(1752738684.917:287): avc: denied { mounton } for pid=6409 comm="syz.3.104" path="/bus" dev="ramfs" ino=10669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 61.378811][ T6410] overlayfs: failed to set xattr on upper [ 61.387271][ T6410] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.390003][ T6410] overlayfs: ...falling back to index=off. [ 61.391863][ T6410] overlayfs: ...falling back to uuid=null. [ 61.394553][ T40] audit: type=1400 audit(1752738684.937:288): avc: denied { mount } for pid=6409 comm="syz.3.104" name="/" dev="overlay" ino=10668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.407259][ T6410] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.409409][ T6410] overlayfs: failed to set xattr on upper [ 61.411426][ T6410] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.414291][ T6410] overlayfs: ...falling back to index=off. [ 61.416012][ T6410] overlayfs: ...falling back to uuid=null. [ 61.423972][ T40] audit: type=1400 audit(1752738684.957:289): avc: denied { bind } for pid=6409 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.027746][ T6457] syzkaller1: entered promiscuous mode [ 62.029751][ T6457] syzkaller1: entered allmulticast mode [ 62.071010][ T6460] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 62.207859][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'. [ 62.313787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.408758][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'. [ 62.481502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.492286][ T6483] tipc: Started in network mode [ 62.493834][ T6483] tipc: Node identity ba62f09b3e15, cluster identity 4711 [ 62.496068][ T6483] tipc: Enabled bearer , priority 0 [ 62.500883][ T6483] tipc: Resetting bearer [ 62.512438][ T6482] tipc: Disabling bearer [ 62.608402][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 62.650589][ T6487] bond0: (slave bond_slave_1): Releasing backup interface [ 62.710714][ T6493] hfs: can't find a HFS filesystem on dev sr0 [ 62.754060][ T6497] vlan2: entered promiscuous mode [ 62.755633][ T6497] bond0: entered promiscuous mode [ 62.757177][ T6497] bond_slave_0: entered promiscuous mode [ 62.759000][ T6497] bond_slave_1: entered promiscuous mode [ 62.772478][ T6499] netlink: 96 bytes leftover after parsing attributes in process `syz.2.129'. [ 62.863137][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.866116][ T6505] batadv_slave_0: entered promiscuous mode [ 62.887287][ T6510] input: syz0 as /devices/virtual/input/input5 [ 62.990189][ T6522] xt_socket: unknown flags 0x50 [ 63.107220][ T6534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.292094][ T6540] overlayfs: failed to clone upperpath [ 63.328011][ T6545] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.331954][ T835] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.494237][ T6567] netlink: 9 bytes leftover after parsing attributes in process `syz.0.152'. [ 63.495675][ T835] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 63.500797][ T835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.501142][ T6567] gretap0: entered promiscuous mode [ 63.503702][ T835] usb 8-1: Product: syz [ 63.507179][ T835] usb 8-1: Manufacturer: syz [ 63.508255][ T6565] netlink: 5 bytes leftover after parsing attributes in process `syz.0.152'. [ 63.508608][ T835] usb 8-1: SerialNumber: syz [ 63.512496][ T6565] 0ªî{X¹¦: renamed from gretap0 [ 63.516327][ T6565] 0ªî{X¹¦: left promiscuous mode [ 63.517852][ T6565] 0ªî{X¹¦: entered allmulticast mode [ 63.518782][ T835] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 63.520751][ T6565] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 63.537294][ T6163] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 63.561589][ T6571] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.595663][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.649172][ T6575] bridge_slave_1 (unregistering): left allmulticast mode [ 63.651608][ T6575] bridge_slave_1 (unregistering): left promiscuous mode [ 63.654451][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.001771][ T5737] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.131299][ T5737] usb 7-1: device descriptor read/64, error -71 [ 64.392045][ T5737] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.444383][ T6605] process 'syz.0.166' launched './file0' with NULL argv: empty string added [ 64.521793][ T5737] usb 7-1: device descriptor read/64, error -71 [ 64.601410][ T6163] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 64.605331][ T6163] ath9k_htc: Failed to initialize the device [ 64.634101][ T5737] usb usb7-port1: attempt power cycle [ 64.641052][ T6163] usb 8-1: ath9k_htc: USB layer deinitialized [ 64.798190][ T6633] 9p: Unknown Cache mode or invalid value looseÏCÐd=0x000 [ 64.957820][ T6638] CIFS: iocharset name too long [ 64.964091][ T6638] overlayfs: failed to clone upperpath [ 64.972479][ T5737] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 64.992024][ T5737] usb 7-1: device descriptor read/8, error -71 [ 65.031328][ T6018] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.160130][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.215169][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.218708][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.221830][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.225664][ T6018] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.228422][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.233987][ T6018] usb 6-1: config 0 descriptor?? [ 65.243358][ T6662] fuse: Bad value for 'user_id' [ 65.244884][ T6662] fuse: Bad value for 'user_id' [ 65.251695][ T5737] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.291815][ T5737] usb 7-1: device descriptor read/8, error -71 [ 65.412217][ T5737] usb usb7-port1: unable to enumerate USB device [ 65.637934][ T6683] netlink: 'syz.0.191': attribute type 29 has an invalid length. [ 65.642049][ T6018] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.644667][ T6018] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.649079][ T6683] __nla_validate_parse: 3 callbacks suppressed [ 65.649088][ T6683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.191'. [ 65.651735][ T6018] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 65.913944][ T9] usb 6-1: USB disconnect, device number 2 [ 66.054614][ T6001] usb 8-1: USB disconnect, device number 2 [ 66.261009][ T5964] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 66.261512][ T6696] vxcan1: MTU too low for tipc bearer [ 66.264352][ T5964] CPU: 2 UID: 0 PID: 5964 Comm: kworker/u33:8 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 66.264369][ T5964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.264376][ T5964] Workqueue: hci1 hci_rx_work [ 66.264411][ T5964] Call Trace: [ 66.264416][ T5964] [ 66.264421][ T5964] dump_stack_lvl+0x16c/0x1f0 [ 66.264439][ T5964] sysfs_warn_dup+0x7f/0xa0 [ 66.264459][ T5964] sysfs_create_dir_ns+0x24b/0x2b0 [ 66.264474][ T5964] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 66.264489][ T5964] ? find_held_lock+0x2b/0x80 [ 66.264512][ T5964] ? do_raw_spin_unlock+0x172/0x230 [ 66.264525][ T5964] kobject_add_internal+0x2c4/0x9b0 [ 66.264546][ T5964] kobject_add+0x16e/0x240 [ 66.264562][ T5964] ? __pfx_kobject_add+0x10/0x10 [ 66.264580][ T5964] ? do_raw_spin_unlock+0x172/0x230 [ 66.264593][ T5964] ? kobject_put+0xab/0x5a0 [ 66.264613][ T5964] device_add+0x288/0x1a70 [ 66.264625][ T5964] ? __pfx_dev_set_name+0x10/0x10 [ 66.264637][ T5964] ? __pfx_device_add+0x10/0x10 [ 66.264649][ T5964] ? mgmt_send_event_skb+0x2fb/0x460 [ 66.264668][ T5964] hci_conn_add_sysfs+0x17e/0x230 [ 66.264685][ T5964] le_conn_complete_evt+0x1075/0x1d70 [ 66.264703][ T5964] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 66.264718][ T5964] ? hci_event_packet+0x459/0x11c0 [ 66.264736][ T5964] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 66.264752][ T5964] ? skb_pull_data+0x166/0x210 [ 66.264768][ T5964] hci_le_meta_evt+0x357/0x5e0 [ 66.264784][ T5964] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 66.264801][ T5964] hci_event_packet+0x685/0x11c0 [ 66.264815][ T5964] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 66.264832][ T5964] ? __pfx_hci_event_packet+0x10/0x10 [ 66.264848][ T5964] ? kcov_remote_start+0x3c9/0x6d0 [ 66.264860][ T5964] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.264878][ T5964] hci_rx_work+0x2c5/0x16b0 [ 66.264895][ T5964] ? rcu_is_watching+0x12/0xc0 [ 66.264912][ T5964] process_one_work+0x9cf/0x1b70 [ 66.264930][ T5964] ? __pfx_process_one_work+0x10/0x10 [ 66.264945][ T5964] ? assign_work+0x1a0/0x250 [ 66.264957][ T5964] worker_thread+0x6c8/0xf10 [ 66.264973][ T5964] ? __kthread_parkme+0x19e/0x250 [ 66.264989][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 66.265001][ T5964] kthread+0x3c5/0x780 [ 66.265011][ T5964] ? __pfx_kthread+0x10/0x10 [ 66.265023][ T5964] ? rcu_is_watching+0x12/0xc0 [ 66.265042][ T5964] ? __pfx_kthread+0x10/0x10 [ 66.265053][ T5964] ret_from_fork+0x5d7/0x6f0 [ 66.265069][ T5964] ? __pfx_kthread+0x10/0x10 [ 66.265079][ T5964] ret_from_fork_asm+0x1a/0x30 [ 66.265099][ T5964] [ 66.265112][ T5964] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.266359][ T6696] tipc: Enabling of bearer rejected, failed to enable media [ 66.270011][ T5964] Bluetooth: hci1: failed to register connection device [ 66.427607][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 66.427624][ T40] audit: type=1400 audit(1752738689.967:332): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 66.510361][ T40] audit: type=1400 audit(1752738690.047:333): avc: denied { write } for pid=6699 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.945291][ T40] audit: type=1400 audit(1752738690.487:334): avc: denied { create } for pid=6716 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.951493][ T6717] bond0: entered promiscuous mode [ 66.953071][ T6717] bond_slave_0: entered promiscuous mode [ 66.954874][ T6717] bond_slave_1: entered promiscuous mode [ 66.956668][ T6717] bond0: entered allmulticast mode [ 66.958271][ T6717] bond_slave_0: entered allmulticast mode [ 66.960124][ T6717] bond_slave_1: entered allmulticast mode [ 67.219648][ T40] audit: type=1400 audit(1752738690.757:335): avc: denied { create } for pid=6738 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.219917][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'. [ 67.230466][ T40] audit: type=1400 audit(1752738690.767:336): avc: denied { write } for pid=6738 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.250671][ T40] audit: type=1400 audit(1752738690.787:337): avc: denied { map } for pid=6741 comm="syz.3.209" path="socket:[12619]" dev="sockfs" ino=12619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.257669][ T40] audit: type=1400 audit(1752738690.787:338): avc: denied { read } for pid=6741 comm="syz.3.209" path="socket:[12619]" dev="sockfs" ino=12619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.330058][ T6753] syz.1.215 uses old SIOCAX25GETINFO [ 67.331768][ T40] audit: type=1400 audit(1752738690.867:339): avc: denied { ioctl } for pid=6752 comm="syz.1.215" path="socket:[10916]" dev="sockfs" ino=10916 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 67.347512][ T40] audit: type=1400 audit(1752738690.877:340): avc: denied { mounton } for pid=6754 comm="syz.0.216" path="/68/file0" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.383978][ T40] audit: type=1400 audit(1752738690.927:341): avc: denied { execute } for pid=6760 comm="syz.0.220" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 67.412042][ T6765] netlink: 'syz.1.219': attribute type 6 has an invalid length. [ 67.415302][ T6765] netlink: 'syz.1.219': attribute type 6 has an invalid length. [ 67.569534][ T6799] netlink: 830 bytes leftover after parsing attributes in process `syz.3.228'. [ 67.721575][ T6820] fuse: Unknown parameter 'rootmodeM00000000000000000040000' [ 67.725403][ T6820] fuse: Bad value for 'fd' [ 67.727376][ T6820] fuse: Bad value for 'fd' [ 67.746926][ T6824] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.235'. [ 67.757773][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 67.762257][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 67.925089][ T6864] xt_time: unknown flags 0xb4 [ 68.004655][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 68.067783][ T6881] xt_hashlimit: max too large, truncated to 1048576 [ 68.070929][ T6881] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 68.190465][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'. [ 68.269970][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'. [ 68.309887][ T6899] overlayfs: conflicting options: userxattr,metacopy=on [ 68.515654][ T6915] netlink: 'syz.1.267': attribute type 28 has an invalid length. [ 68.518425][ T6915] netlink: 'syz.1.267': attribute type 3 has an invalid length. [ 68.521061][ T6915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.267'. [ 69.427429][ T6962] netlink: set zone limit has 4 unknown bytes [ 69.432439][ T6962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.453545][ T6966] SELinux: syz.2.281 (6966) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 69.481366][ T6969] binder: BINDER_SET_CONTEXT_MGR already set [ 69.483853][ T6969] binder: 6968:6969 ioctl 4018620d 200000000040 returned -16 [ 69.486599][ T6970] binder_alloc: 6968: binder_alloc_buf size 1024 failed, no address space [ 69.489188][ T6970] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 69.658441][ T6992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61130 sclass=netlink_route_socket pid=6992 comm=syz.0.291 [ 69.665489][ T6996] netlink: 'syz.1.292': attribute type 2 has an invalid length. [ 69.667878][ T6996] netlink: 'syz.1.292': attribute type 6 has an invalid length. [ 69.699963][ T6998] ref_ctr_offset mismatch. inode: 0x246 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 69.707521][ T7000] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 69.710061][ T7000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.168537][ T7019] xt_hashlimit: max too large, truncated to 1048576 [ 70.172258][ T7019] Cannot find set identified by id 0 to match [ 70.413807][ T7024] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 70.417686][ T7024] VFS: Can't find a romfs filesystem on dev nullb0. [ 70.417686][ T7024] [ 70.507101][ T7029] sg_write: process 175 (syz.2.304) changed security contexts after opening file descriptor, this is not allowed. [ 70.630658][ T7034] loop8: detected capacity change from 0 to 79 [ 70.702584][ T7034] loop8: detected capacity change from 79 to 75 [ 70.706547][ T7041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.713309][ T7046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7046 comm=syz.2.309 [ 70.723821][ T7048] __nla_validate_parse: 6 callbacks suppressed [ 70.723831][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 70.753210][ T7042] loop8: detected capacity change from 75 to 78 [ 70.812158][ T7060] ªªªªªª2g,¾{: renamed from lo (while UP) [ 70.957002][ T7078] geneve2: entered promiscuous mode [ 70.959379][ T7078] geneve2: entered allmulticast mode [ 70.976471][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 70.985041][ T7076] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 70.987765][ T7076] overlayfs: missing 'lowerdir' [ 71.060009][ T7087] tmpfs: Invalid uid '0x00000000ffffffff' [ 71.074926][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.077027][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.110881][ T7080] autofs4:pid:7080:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(24.11), cmd(0xc018937e) [ 71.116136][ T7080] autofs4:pid:7080:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 71.322660][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.330'. [ 71.325460][ T7098] netlink: 'syz.1.330': attribute type 7 has an invalid length. [ 71.327850][ T7098] netlink: 'syz.1.330': attribute type 8 has an invalid length. [ 71.330186][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 71.450784][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 71.450796][ T40] audit: type=1400 audit(1752738694.987:381): avc: denied { create } for pid=7104 comm="syz.2.333" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.462885][ T40] audit: type=1400 audit(1752738694.987:382): avc: denied { link } for pid=7104 comm="syz.2.333" name="#9" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.469723][ T40] audit: type=1400 audit(1752738694.987:383): avc: denied { rename } for pid=7104 comm="syz.2.333" name="#a" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.657738][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.335'. [ 71.660643][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 71.799558][ T40] audit: type=1400 audit(1752738695.337:384): avc: denied { setopt } for pid=7120 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.828397][ T40] audit: type=1400 audit(1752738695.367:385): avc: denied { append } for pid=7120 comm="syz.3.338" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.835773][ T40] audit: type=1400 audit(1752738695.367:386): avc: denied { setattr } for pid=7120 comm="syz.3.338" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.863596][ T40] audit: type=1400 audit(1752738695.407:387): avc: denied { listen } for pid=7118 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.869629][ T40] audit: type=1400 audit(1752738695.407:388): avc: denied { accept } for pid=7118 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.994792][ T7136] xt_hashlimit: invalid rate [ 72.059548][ T7144] fuse: Bad value for 'user_id' [ 72.061122][ T7144] fuse: Bad value for 'user_id' [ 72.098742][ T40] audit: type=1400 audit(1752738695.637:389): avc: denied { append } for pid=7146 comm="syz.3.345" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.290768][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 72.375960][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 72.386110][ T7168] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 72.446273][ T7170] team0 (unregistering): Port device team_slave_0 removed [ 72.454467][ T7170] team0 (unregistering): Port device team_slave_1 removed [ 72.519576][ T7173] comedi comedi4: bad chanlist[0]=0xffffffff chan=65535 range length=2 [ 72.576534][ T40] audit: type=1400 audit(1752738696.117:390): avc: denied { write } for pid=7176 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.627192][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.356'. [ 72.630466][ T7181] netlink: 'syz.1.356': attribute type 7 has an invalid length. [ 72.634624][ T7181] netlink: 'syz.1.356': attribute type 8 has an invalid length. [ 72.637461][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 72.724287][ T7189] mmap: syz.2.358 (7189) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.834036][ T7196] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.837681][ T7196] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 72.946111][ T7202] QAT: Invalid ioctl -2144835806 [ 72.966248][ T7202] geneve2: entered promiscuous mode [ 72.968512][ T7202] geneve2: entered allmulticast mode [ 73.033235][ T7202] xfrm1: entered promiscuous mode [ 73.035491][ T7202] xfrm1: entered allmulticast mode [ 73.094428][ T7211] [U]  [ 73.189100][ T7223] sctp: [Deprecated]: syz.2.370 (pid 7223) Use of int in maxseg socket option. [ 73.189100][ T7223] Use struct sctp_assoc_value instead [ 73.279082][ T7223] bridge_slave_1: left allmulticast mode [ 73.280935][ T7223] bridge_slave_1: left promiscuous mode [ 73.283776][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.287786][ T7223] bridge_slave_0: left allmulticast mode [ 73.289624][ T7223] bridge_slave_0: left promiscuous mode [ 73.291999][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.681836][ T6043] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 73.700784][ T7244] syzkaller0: entered promiscuous mode [ 73.703334][ T7244] syzkaller0: entered allmulticast mode [ 73.834207][ T6043] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 73.838132][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.841649][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.844987][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.848065][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.852956][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.856794][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.859950][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.862808][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.866100][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.869045][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.872251][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.875678][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.878505][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.881372][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.884753][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.887781][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.891120][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.895349][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.898786][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.902802][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.906264][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.911888][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.915045][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.918693][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.925125][ T6043] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 73.928332][ T6043] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 73.931006][ T6043] usb 8-1: Product: syz [ 73.932800][ T6043] usb 8-1: Manufacturer: syz [ 73.934342][ T6043] usb 8-1: SerialNumber: syz [ 73.937620][ T6043] usb 8-1: config 0 descriptor?? [ 73.971032][ T6043] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 73.973780][ T5737] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 74.132914][ T5737] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.136174][ T5737] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 74.139004][ T5737] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 74.142130][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.149064][ T5737] usb 6-1: config 0 descriptor?? [ 74.156198][ T5737] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 74.158458][ T5737] dvb-usb: bulk message failed: -22 (3/0) [ 74.201981][ C3] usb 8-1: yurex_control_callback - control failed: -71 [ 74.206011][ T59] usb 8-1: USB disconnect, device number 3 [ 74.207766][ T5737] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 74.208935][ T6001] hid-generic 3730:1B2E:07FF.0003: unknown main item tag 0x6 [ 74.211101][ T5737] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 74.217333][ T6001] hid-generic 3730:1B2E:07FF.0003: item fetching failed at offset 3/4 [ 74.217561][ T5737] usb 6-1: media controller created [ 74.220083][ T6001] hid-generic 3730:1B2E:07FF.0003: probe with driver hid-generic failed with error -22 [ 74.222999][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.228349][ T59] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 74.254107][ T5737] dvb-usb: bulk message failed: -22 (6/0) [ 74.256065][ T5737] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 74.263623][ T5737] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input6 [ 74.276275][ T5737] dvb-usb: schedule remote query interval to 150 msecs. [ 74.278539][ T5737] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 74.446195][ T5737] dvb-usb: bulk message failed: -22 (1/0) [ 74.450761][ T5737] dvb-usb: error while querying for an remote control event. [ 74.588789][ T7247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.596303][ T5737] usb 6-1: USB disconnect, device number 3 [ 74.611590][ T5737] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 75.261383][ T7282] overlay: ./file0 is not a directory [ 75.264089][ T7283] trusted_key: encrypted_key: insufficient parameters specified [ 75.499043][ T7312] trusted_key: syz.1.397 sent an empty control message without MSG_MORE. [ 75.687137][ T7321] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 75.781105][ T7331] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 75.783559][ T7331] __nla_validate_parse: 4 callbacks suppressed [ 75.783567][ T7331] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.402'. [ 75.962997][ T7339] 9pnet_fd: Insufficient options for proto=fd [ 76.064685][ T7353] fuse: Bad value for 'fd' [ 76.092656][ T7365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 76.129848][ T7372] fuse: Bad value for 'fd' [ 76.351642][ T7390] capability: warning: `syz.2.423' uses 32-bit capabilities (legacy support in use) [ 76.451310][ T5737] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.530142][ T7394] loop9: detected capacity change from 0 to 524255232 [ 76.601330][ T5737] usb 6-1: Using ep0 maxpacket: 16 [ 76.604782][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.608164][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.611987][ T5737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.616416][ T5737] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.619280][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.623755][ T5737] usb 6-1: config 0 descriptor?? [ 76.722142][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 76.984958][ T7410] netlink: 68 bytes leftover after parsing attributes in process `syz.3.431'. [ 76.988271][ T7410] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.996531][ T7410] CIFS mount error: No usable UNC path provided in device string! [ 76.996531][ T7410] [ 76.999897][ T7410] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 77.033098][ T5737] microsoft 0003:045E:07DA.0004: unknown main item tag 0x2 [ 77.035426][ T5737] microsoft 0003:045E:07DA.0004: item fetching failed at offset 31/34 [ 77.038298][ T5737] microsoft 0003:045E:07DA.0004: parse failed [ 77.040357][ T5737] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 77.094800][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 77.094815][ T40] audit: type=1400 audit(1752738700.637:406): avc: denied { read write } for pid=7415 comm="syz.3.432" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 77.108130][ T40] audit: type=1400 audit(1752738700.657:407): avc: denied { open } for pid=7415 comm="syz.3.432" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 77.184653][ T40] audit: type=1400 audit(1752738700.727:408): avc: denied { map } for pid=7426 comm="syz.3.435" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.194238][ T40] audit: type=1400 audit(1752738700.727:409): avc: denied { execute } for pid=7426 comm="syz.3.435" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.231382][ T5964] Bluetooth: hci3: command tx timeout [ 77.232154][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.239152][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.253019][ T5737] usb 6-1: USB disconnect, device number 4 [ 77.277165][ T7433] netlink: 'syz.2.434': attribute type 5 has an invalid length. [ 77.282111][ T7430] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 77.284999][ T7430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.289565][ T7430] vhci_hcd vhci_hcd.0: Device attached [ 77.299689][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.303466][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.307144][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.310309][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.311603][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.316696][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.531274][ T6018] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 77.532390][ T10] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 77.661246][ T6018] usb 8-1: device descriptor read/64, error -71 [ 77.882115][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 77.902492][ T6018] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.923789][ T40] audit: type=1400 audit(1752738701.467:410): avc: denied { read } for pid=7452 comm="syz.1.441" path="socket:[16630]" dev="sockfs" ino=16630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.946096][ T7453] netlink: 'syz.1.441': attribute type 2 has an invalid length. [ 77.949442][ T7453] netlink: 46 bytes leftover after parsing attributes in process `syz.1.441'. [ 78.031845][ T6018] usb 8-1: device descriptor read/64, error -71 [ 78.112847][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 78.117765][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 78.124608][ T40] audit: type=1400 audit(1752738701.667:411): avc: denied { getopt } for pid=7469 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.136613][ T40] audit: type=1400 audit(1752738701.677:412): avc: denied { ioctl } for pid=7461 comm="syz.0.445" path="socket:[16642]" dev="sockfs" ino=16642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.145561][ T6018] usb usb8-port1: attempt power cycle [ 78.386113][ T40] audit: type=1326 audit(1752738701.927:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.450" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25f758e929 code=0x0 [ 78.437816][ T40] audit: type=1326 audit(1752738701.977:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.2.450" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25f758e929 code=0x0 [ 78.491549][ T6018] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.511881][ T6018] usb 8-1: device descriptor read/8, error -71 [ 78.771513][ T6018] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 78.795807][ T6018] usb 8-1: device descriptor read/8, error -71 [ 78.864422][ T53] cfg80211: failed to load regulatory.db [ 78.901754][ T6018] usb usb8-port1: unable to enumerate USB device [ 78.910920][ T40] audit: type=1400 audit(1752738702.447:415): avc: denied { map } for pid=7497 comm="syz.2.456" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 79.090259][ T7523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7523 comm=syz.2.465 [ 79.095666][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.465'. [ 79.222777][ T7533] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 79.226032][ T7533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.282724][ T6031] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 79.411406][ T6031] usb 6-1: device descriptor read/64, error -71 [ 79.651619][ T6031] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.692923][ T5964] Bluetooth: hci0: unexpected subevent 0x1a length: 28 > 6 [ 79.791252][ T6031] usb 6-1: device descriptor read/64, error -71 [ 79.901459][ T6031] usb usb6-port1: attempt power cycle [ 80.015819][ T7565] fuse: Bad value for 'fd' [ 80.019021][ T7565] fuse: Bad value for 'fd' [ 80.140069][ T7576] overlayfs: failed to resolve './file0': -2 [ 80.245218][ T6031] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.246835][ T7434] vhci_hcd: connection reset by peer [ 80.259133][ T1142] vhci_hcd: stop threads [ 80.261033][ T1142] vhci_hcd: release socket [ 80.263575][ T6031] usb 6-1: device descriptor read/8, error -71 [ 80.263713][ T1142] vhci_hcd: disconnect device [ 80.264626][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.486'. [ 80.346245][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 80.361138][ T7597] macsec0: entered promiscuous mode [ 80.444869][ T7612] openvswitch: netlink: Message has 5 unknown bytes. [ 80.479281][ T7614] SELinux: syz.2.498 (7614) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.512365][ T6031] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 80.534626][ T6031] usb 6-1: device descriptor read/8, error -71 [ 80.599256][ T7639] netlink: 'syz.2.505': attribute type 3 has an invalid length. [ 80.643872][ T6031] usb usb6-port1: unable to enumerate USB device [ 80.713823][ T7653] evm: overlay not supported [ 80.741103][ T838] IPVS: starting estimator thread 0... [ 80.824668][ T7664] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 80.831465][ T7656] IPVS: using max 43 ests per chain, 103200 per kthread [ 80.838610][ T7664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.876950][ T7664] veth3: entered promiscuous mode [ 80.885733][ T7664] bond1: (slave veth3): Enslaving as an active interface with a down link [ 80.894993][ T7664] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 80.983845][ T7675] __nla_validate_parse: 8 callbacks suppressed [ 80.983860][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 81.240727][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 81.499155][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 81.503627][ T7717] netlink: 'syz.3.528': attribute type 7 has an invalid length. [ 81.506826][ T7717] netlink: 'syz.3.528': attribute type 8 has an invalid length. [ 81.509991][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 81.735724][ T7739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.977378][ T7756] ======================================================= [ 81.977378][ T7756] WARNING: The mand mount option has been deprecated and [ 81.977378][ T7756] and is ignored by this kernel. Remove the mand [ 81.977378][ T7756] option from the mount to silence this warning. [ 81.977378][ T7756] ======================================================= [ 82.085438][ T7767] can0: slcan on ptm0. [ 82.121404][ T7767] xt_CONNSECMARK: invalid mode: 0 [ 82.145229][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 82.145244][ T40] audit: type=1400 audit(1752738705.687:428): avc: denied { mount } for pid=7780 comm="syz.0.546" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 82.202390][ T7766] can0 (unregistered): slcan off ptm0. [ 82.223666][ T7788] netlink: 666 bytes leftover after parsing attributes in process `syz.0.548'. [ 82.414688][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 82.671297][ T10] vhci_hcd: vhci_device speed not set [ 82.794614][ T7807] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:21 [ 82.828740][ T40] audit: type=1400 audit(1752738706.367:429): avc: denied { create } for pid=7810 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.838190][ T40] audit: type=1400 audit(1752738706.377:430): avc: denied { setopt } for pid=7810 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.844309][ T40] audit: type=1400 audit(1752738706.377:431): avc: denied { connect } for pid=7810 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.973493][ T7820] xt_hashlimit: size too large, truncated to 1048576 [ 83.028028][ T40] audit: type=1400 audit(1752738706.567:432): avc: denied { read write } for pid=7819 comm="syz.2.556" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.032441][ T7822] unknown channel width for channel at 909000KHz? [ 83.035557][ T40] audit: type=1400 audit(1752738706.577:433): avc: denied { open } for pid=7819 comm="syz.2.556" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.045968][ T40] audit: type=1400 audit(1752738706.587:434): avc: denied { read } for pid=7819 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.074159][ T40] audit: type=1400 audit(1752738706.617:435): avc: denied { create } for pid=7823 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.075227][ T5964] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 83.082249][ T6163] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 83.082789][ T40] audit: type=1400 audit(1752738706.617:436): avc: denied { ioctl } for pid=7823 comm="syz.2.557" path="socket:[16380]" dev="sockfs" ino=16380 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.084908][ T5964] Bluetooth: Wrong link type (-22) [ 83.215866][ T40] audit: type=1400 audit(1752738706.757:437): avc: denied { ioctl } for pid=7826 comm="syz.1.558" path="/109/file0/file0" dev="9p" ino=36047757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.236695][ T6163] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.240193][ T6163] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 83.243899][ T6163] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.246739][ T6163] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.253731][ T7811] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.259723][ T6163] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.270423][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 83.386229][ T7843] netlink: 'syz.1.560': attribute type 6 has an invalid length. [ 83.389034][ T7843] netlink: 'syz.1.560': attribute type 6 has an invalid length. [ 83.438334][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 83.442015][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 83.444998][ T7849] netlink: 'syz.1.566': attribute type 18 has an invalid length. [ 83.468339][ T6018] usb 8-1: USB disconnect, device number 8 [ 83.479502][ T7853] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 83.557195][ T7861] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 83.633293][ T7878] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.573'. [ 83.647739][ T7881] IPv6: Can't replace route, no match found [ 83.845337][ T7896] netlink: 'syz.0.578': attribute type 10 has an invalid length. [ 83.848337][ T7896] dummy0: entered promiscuous mode [ 83.850324][ T7896] bridge0: port 3(dummy0) entered blocking state [ 83.852806][ T7896] bridge0: port 3(dummy0) entered disabled state [ 83.854949][ T7896] dummy0: entered allmulticast mode [ 83.859153][ T7896] bridge0: port 3(dummy0) entered blocking state [ 83.861269][ T7896] bridge0: port 3(dummy0) entered forwarding state [ 84.094692][ T7899] xt_ipcomp: unknown flags 12 [ 84.240376][ T838] IPVS: starting estimator thread 0... [ 84.327281][ T7922] program syz.2.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.341732][ T7912] IPVS: using max 43 ests per chain, 103200 per kthread [ 84.390239][ T7927] ata1.00: invalid multi_count 1 ignored [ 84.492036][ T7943] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 84.544430][ T7949] bad cache= option: none [ 84.544430][ T7949] [ 84.546650][ T7949] CIFS: VFS: bad cache= option: none [ 84.586849][ T7943] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 84.596471][ T7953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.599693][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 84.713141][ T60] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 84.754705][ T7968] binder: 7967:7968 ioctl c018620c 200000000100 returned -22 [ 84.757259][ T7968] binder: 7967:7968 ioctl 400c620e 2000000000c0 returned -22 [ 85.125861][ T7934] syz.1.584 (7934) used greatest stack depth: 17976 bytes left [ 85.198977][ T8011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.328514][ T8032] nftables ruleset with unbound set [ 85.638612][ T8062] fuse: Unknown parameter 'roOtmode' [ 85.643852][ T8063] tmpfs: Unknown parameter '/dev/video36' [ 86.612905][ T8078] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 86.615320][ T8078] __nla_validate_parse: 4 callbacks suppressed [ 86.615327][ T8078] netlink: 152 bytes leftover after parsing attributes in process `syz.1.627'. [ 86.624066][ T8078] : renamed from bond0 (while UP) [ 86.794541][ T8086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.955112][ T8100] SELinux: syz.3.635 (8100) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 87.265040][ T8107] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 87.268626][ T8107] No control pipe specified [ 87.269301][ T8108] No control pipe specified [ 87.305204][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 87.305218][ T40] audit: type=1400 audit(1752738710.847:464): avc: denied { read } for pid=8109 comm="syz.1.638" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.317179][ T40] audit: type=1400 audit(1752738710.847:465): avc: denied { open } for pid=8109 comm="syz.1.638" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.334499][ T40] audit: type=1400 audit(1752738710.877:466): avc: denied { ioctl } for pid=8109 comm="syz.1.638" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.341344][ T8110] netlink: 'syz.1.638': attribute type 3 has an invalid length. [ 87.346103][ T8110] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 87.446190][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 87.588318][ T80] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 88.004265][ T8132] pimreg: entered allmulticast mode [ 88.012527][ T8132] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.057967][ T8133] netlink: 156 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.063333][ T8133] netlink: 'syz.0.645': attribute type 5 has an invalid length. [ 88.066464][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.117537][ T40] audit: type=1326 audit(88.031:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.0.648" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc20518e929 code=0x0 [ 88.409182][ T40] audit: type=1400 audit(88.321:468): avc: denied { append } for pid=8146 comm="syz.2.649" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.425257][ T40] audit: type=1400 audit(88.341:469): avc: denied { read } for pid=8148 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.451606][ T8155] Bluetooth: MGMT ver 1.23 [ 88.588282][ T8166] syz.3.656: attempt to access beyond end of device [ 88.588282][ T8166] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 88.593916][ T8166] hpfs: hpfs_map_sector(): read error [ 88.653917][ T8168] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 88.659335][ T8168] fuseblk: Bad value for 'rootmode' [ 88.784680][ T40] audit: type=1400 audit(88.701:470): avc: denied { shutdown } for pid=8172 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.825202][ T8173] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.658'. [ 88.898722][ T8183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8183 comm=syz.2.661 [ 88.905907][ T40] audit: type=1400 audit(88.821:471): avc: denied { ioctl } for pid=8182 comm="syz.2.661" path="socket:[20745]" dev="sockfs" ino=20745 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.959006][ T5964] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 88.962133][ T8190] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 88.989079][ T8194] ipt_REJECT: ECHOREPLY no longer supported. [ 88.991945][ T8194] 9pnet_fd: Insufficient options for proto=fd [ 89.001252][ T40] audit: type=1400 audit(88.911:472): avc: denied { getopt } for pid=8193 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.071600][ T8199] block nbd0: server does not support multiple connections per device. [ 89.079694][ T8199] block nbd0: shutting down sockets [ 89.121603][ T8218] tmpfs: Invalid uid '0x00000000ffffffff' [ 89.272383][ T6018] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 89.292730][ T8232] nbd: couldn't find a device at index -1085692808 [ 89.298984][ T40] audit: type=1400 audit(89.211:473): avc: denied { nlmsg_read } for pid=8231 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.433017][ T6018] usb 6-1: Using ep0 maxpacket: 8 [ 89.436430][ T6018] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 89.440037][ T6018] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 18122, setting to 1024 [ 89.444212][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.446332][ T6018] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 89.450006][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.456360][ T6018] usb 6-1: config 0 descriptor?? [ 89.458465][ T8201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.515700][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 89.518726][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 89.524397][ T8240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.647979][ T8244] tmpfs: Unknown parameter '00000000000000000000003' [ 89.865705][ T6018] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 89.891031][ T8256] vlan0: entered promiscuous mode [ 90.154075][ T8272] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8272 comm=syz.0.691 [ 90.346303][ T8290] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 90.737171][ T8313] vlan2: entered promiscuous mode [ 90.739273][ T8313] bridge0: entered promiscuous mode [ 91.047861][ T8318] kvm: MWAIT instruction emulated as NOP! [ 91.113542][ T5958] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 91.325336][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.708'. [ 91.455480][ T8332] binder: BC_ACQUIRE_RESULT not supported [ 91.457350][ T8332] binder: 8331:8332 ioctl c0306201 200000000180 returned -22 [ 91.607416][ T8341] loop7: detected capacity change from 0 to 524287487 [ 91.610632][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.613828][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.616338][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.619004][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.621552][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.624263][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.626728][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.629410][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.632066][ T7432] ldm_validate_partition_table(): Disk read failed. [ 91.634056][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.636384][ T7432] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.638822][ T7432] Dev loop7: unable to read RDB block 0 [ 91.640685][ T7432] loop7: unable to read partition table [ 91.645679][ T8341] ldm_validate_partition_table(): Disk read failed. [ 91.648295][ T8341] Dev loop7: unable to read RDB block 0 [ 91.651059][ T8341] loop7: unable to read partition table [ 91.654639][ T8341] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 92.043652][ T8367] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003 [ 92.097829][ T8374] validate_nla: 1 callbacks suppressed [ 92.097839][ T8374] netlink: 'syz.2.721': attribute type 2 has an invalid length. [ 92.104417][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 92.163716][ T8380] netlink: 23 bytes leftover after parsing attributes in process `syz.2.725'. [ 92.231232][ T8382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8382 comm=syz.2.726 [ 92.243034][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'. [ 92.245801][ T8382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.410238][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 92.410251][ T40] audit: type=1400 audit(92.321:488): avc: denied { write } for pid=8400 comm="syz.2.731" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.578520][ T8416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.648790][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 92.677318][ T40] audit: type=1400 audit(92.591:489): avc: denied { getattr } for pid=8417 comm="syz.1.737" name="/" dev="9p" ino=36047756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.679112][ T8418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.690805][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 92.774424][ T6031] usb 6-1: USB disconnect, device number 9 [ 92.837745][ T8432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.739'. [ 92.844415][ T8425] /dev/sr0: Can't open blockdev [ 92.852677][ T8426] ntfs3(sr0): Primary boot signature is not NTFS. [ 92.855366][ T8426] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 92.945983][ T8440] syzkaller1: entered promiscuous mode [ 92.947753][ T8440] syzkaller1: entered allmulticast mode [ 93.103203][ T8444] cdrom: dropping to single frame dma [ 93.124689][ T8445] bridge2: entered promiscuous mode [ 93.142688][ T8448] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.145889][ T8448] overlayfs: failed to set xattr on upper [ 93.148448][ T8448] overlayfs: ...falling back to redirect_dir=nofollow. [ 93.152423][ T8448] overlayfs: ...falling back to index=off. [ 93.154897][ T8448] overlayfs: ...falling back to uuid=null. [ 93.157345][ T8448] overlayfs: ...falling back to xino=off. [ 93.159896][ T8448] overlayfs: conflicting lowerdir path [ 93.207513][ T8450] Bluetooth: MGMT ver 1.23 [ 93.207859][ T40] audit: type=1400 audit(93.121:490): avc: denied { write } for pid=8449 comm="syz.1.746" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.250952][ T8452] sock: sock_timestamping_bind_phc: sock not bind to device [ 93.251975][ T40] audit: type=1400 audit(93.161:491): avc: denied { lock } for pid=8451 comm="syz.1.747" path="socket:[21050]" dev="sockfs" ino=21050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 93.321331][ T40] audit: type=1400 audit(93.231:492): avc: denied { ioctl } for pid=8462 comm="syz.1.753" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.384705][ T40] audit: type=1400 audit(93.301:493): avc: denied { append } for pid=8465 comm="syz.2.754" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.488859][ T8495] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.761'. [ 93.502595][ T40] audit: type=1400 audit(93.421:494): avc: denied { ioctl } for pid=8496 comm="syz.0.762" path="socket:[21634]" dev="sockfs" ino=21634 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.548341][ T40] audit: type=1400 audit(93.461:495): avc: denied { append } for pid=8494 comm="syz.1.761" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.587065][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 93.791411][ T5964] Bluetooth: hci0: command tx timeout [ 94.198547][ T40] audit: type=1400 audit(94.111:496): avc: denied { mount } for pid=8520 comm="syz.2.770" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 94.352837][ T40] audit: type=1400 audit(94.271:497): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 94.516556][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 94.564364][ T8549] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.778'. [ 94.778997][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=8562 comm=syz.1.781 [ 95.210717][ T8576] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 95.876146][ T8601] xt_hashlimit: size too large, truncated to 1048576 [ 96.486695][ T8631] CIFS: iocharset name too long [ 96.549769][ T8643] netlink: 'syz.0.807': attribute type 7 has an invalid length. [ 96.554833][ T8643] netlink: 'syz.0.807': attribute type 8 has an invalid length. [ 96.560437][ T8643] 0ªî{X¹¦: entered promiscuous mode [ 96.564147][ T8643] batadv_slave_1: entered promiscuous mode [ 96.566706][ T8643] 0ªî{X¹¦: left promiscuous mode [ 96.569463][ T8643] batadv_slave_1: left promiscuous mode [ 96.781075][ T8665] futex_wake_op: syz.0.815 tries to shift op by -1; fix this program [ 96.977654][ T8692] overlay: ./file1 is not a directory [ 97.041468][ T8704] overlayfs: failed to resolve './file1': -2 [ 97.166979][ T8719] __nla_validate_parse: 6 callbacks suppressed [ 97.166994][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 97.208875][ T8721] openvswitch: netlink: Flow key attr not present in new flow. [ 97.213110][ T8721] netem: invalid attributes len -22 [ 97.215297][ T8721] netem: change failed [ 97.251507][ T8726] netlink: 156 bytes leftover after parsing attributes in process `syz.2.835'. [ 97.458085][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 97.527578][ T8741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.537388][ T8739] team0: Port device team_slave_0 removed [ 97.614398][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.844'. [ 97.617777][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.844'. [ 97.622361][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 97.622370][ T40] audit: type=1400 audit(97.541:508): avc: denied { lock } for pid=8754 comm="syz.2.844" path="socket:[23801]" dev="sockfs" ino=23801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.832382][ T8777] SET target dimension over the limit! [ 97.835513][ T8777] overlayfs: missing 'lowerdir' [ 97.858508][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.851'. [ 97.877262][ T40] audit: type=1400 audit(97.791:509): avc: denied { mounton } for pid=8785 comm="syz.2.852" path="/237/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 97.902605][ T8792] overlayfs: failed to clone upperpath [ 97.964174][ T8798] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 97.975085][ T8798] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.023821][ T8805] overlay: Bad value for 'nfs_export' [ 98.810008][ T40] audit: type=1400 audit(98.721:510): avc: denied { validate_trans } for pid=8835 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.875207][ T8836] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.867'. [ 98.968715][ T5964] Bluetooth: hci3: link tx timeout [ 98.970072][ T40] audit: type=1400 audit(98.881:511): avc: denied { view } for pid=8841 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 98.971239][ T5964] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.224770][ T8854] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 99.560861][ T40] audit: type=1400 audit(99.471:512): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 99.650317][ T8862] kvm: kvm [8858]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x0 [ 99.892492][ T8869] netlink: 'syz.2.878': attribute type 1 has an invalid length. [ 99.895318][ T8869] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.878'. [ 100.161545][ T5958] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 100.311336][ T5958] usb 7-1: Using ep0 maxpacket: 8 [ 100.314005][ T40] audit: type=1400 audit(100.231:513): avc: denied { getopt } for pid=8875 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.315452][ T5958] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.324593][ T5958] usb 7-1: config 0 has no interface number 0 [ 100.327675][ T5958] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.331161][ T5958] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.334871][ T5958] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.338235][ T5958] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.346970][ T5958] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.349846][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.354785][ T5958] usb 7-1: config 0 descriptor?? [ 100.365445][ T5958] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.522036][ T40] audit: type=1400 audit(100.441:514): avc: denied { watch_sb } for pid=8885 comm="syz.3.885" path="/154/file0" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.566577][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 100.566585][ T5958] usb 7-1: USB disconnect, device number 7 [ 100.570719][ T5958] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 100.639768][ T40] audit: type=1326 audit(100.551:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dda18e929 code=0x7ffc0000 [ 100.646731][ T40] audit: type=1326 audit(100.551:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.889" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dda18e929 code=0x7ffc0000 [ 100.657847][ T40] audit: type=1326 audit(100.551:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dda18e929 code=0x7ffc0000 [ 101.001289][ T5311] Bluetooth: hci3: command 0x0406 tx timeout [ 101.165395][ T5311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.171669][ T5311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.175498][ T5311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.179404][ T5311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.192225][ T5311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.239341][ T8914] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 101.256676][ T8914] bond2: entered allmulticast mode [ 101.271331][ T8917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8917 comm=syz.1.897 [ 101.400437][ T8907] chnl_net:caif_netlink_parms(): no params data found [ 101.463811][ T8947] netlink: 108 bytes leftover after parsing attributes in process `syz.0.904'. [ 101.510464][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.514245][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.516981][ T8907] bridge_slave_0: entered allmulticast mode [ 101.520258][ T8907] bridge_slave_0: entered promiscuous mode [ 101.526534][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.528952][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.531383][ T8907] bridge_slave_1: entered allmulticast mode [ 101.533976][ T8907] bridge_slave_1: entered promiscuous mode [ 101.565628][ T8907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.571416][ T8907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.608448][ T8907] team0: Port device team_slave_0 added [ 101.612074][ T8907] team0: Port device team_slave_1 added [ 101.639745][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.642013][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.649792][ T8907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.655421][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.657921][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.666104][ T8907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.671304][ T6163] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 101.708934][ T8907] hsr_slave_0: entered promiscuous mode [ 101.711622][ T8907] hsr_slave_1: entered promiscuous mode [ 101.713823][ T8907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.716190][ T8907] Cannot create hsr debugfs directory [ 101.803896][ T6163] usb 6-1: device descriptor read/64, error -71 [ 101.853864][ T8907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.924424][ T8907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.025284][ T8907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.056396][ T6163] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 102.129767][ T8907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.186580][ T8993] ------------[ cut here ]------------ [ 102.188839][ T8993] WARNING: CPU: 0 PID: 8993 at arch/x86/kvm/x86.c:11645 kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 102.192517][ T8993] Modules linked in: SYZFAIL: failed to recv rpc [ 102.194219][ T8993] CPU: 0 UID: 0 PID: 8993 Comm: syz.2.906 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 102.199431][ T8993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.202958][ T8993] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 102.204972][ T8993] Code: 0a 00 00 00 00 00 00 e8 25 88 be 1e 31 ff 89 c5 89 c6 e8 e7 68 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 95 6d 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 87 6d 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 102.211402][ T8993] RSP: 0018:ffffc9000e7efc38 EFLAGS: 00010287 [ 102.213317][ T8993] RAX: 0000000000001ed4 RBX: ffff88805787a940 RCX: ffffc90007993000 [ 102.215782][ T8993] RDX: 0000000000080000 RSI: ffffffff814184eb RDI: 0000000000000007 [ 102.218377][ T8993] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 102.221036][ T8993] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888058369000 [ 102.223438][ T8993] R13: ffff88805787aa18 R14: 0000000000000000 R15: ffff888058369120 [ 102.225909][ T8993] FS: 00007f25f842b6c0(0000) GS:ffff8880d6713000(0000) knlGS:0000000000000000 [ 102.229150][ T8993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.231778][ T8993] CR2: 000000005200000c CR3: 0000000053d4f000 CR4: 0000000000352ef0 [ 102.234536][ T8993] DR0: 0000000000000004 DR1: 0000000000000006 DR2: 0000000000000004 [ 102.237019][ T8993] DR3: 0000000000001000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 102.239555][ T8993] Call Trace: [ 102.240640][ T8993] [ 102.241678][ T8993] kvm_vcpu_ioctl+0x5eb/0x1690 [ 102.243218][ T8993] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.244928][ T8993] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 102.246990][ T8993] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.249576][ T8993] ? hook_file_ioctl_common+0x145/0x410 [ 102.251600][ T8993] ? selinux_file_ioctl+0x180/0x270 [ 102.253240][ T8993] ? selinux_file_ioctl+0xb4/0x270 [ 102.254898][ T8993] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.256536][ T8993] __x64_sys_ioctl+0x18e/0x210 [ 102.257978][ T8993] do_syscall_64+0xcd/0x4c0 [ 102.259619][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.261574][ T8993] RIP: 0033:0x7f25f758e929 [ 102.263004][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.269052][ T8993] RSP: 002b:00007f25f842b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.271760][ T8993] RAX: ffffffffffffffda RBX: 00007f25f77b5fa0 RCX: 00007f25f758e929 [ 102.274237][ T8993] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 102.276703][ T8993] RBP: 00007f25f7610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 102.279252][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.281863][ T8993] R13: 0000000000000000 R14: 00007f25f77b5fa0 R15: 00007ffef595da38 [ 102.284360][ T8993] [ 102.285372][ T8993] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.287666][ T8993] CPU: 0 UID: 0 PID: 8993 Comm: syz.2.906 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 102.291404][ T8993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.294748][ T8993] Call Trace: [ 102.295816][ T8993] [ 102.296764][ T8993] dump_stack_lvl+0x3d/0x1f0 [ 102.298322][ T8993] panic+0x71c/0x800 [ 102.299609][ T8993] ? __pfx_panic+0x10/0x10 [ 102.301044][ T8993] ? show_trace_log_lvl+0x29b/0x3e0 [ 102.302707][ T8993] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 102.304568][ T8993] check_panic_on_warn+0xab/0xb0 [ 102.306146][ T8993] __warn+0xf6/0x3c0 [ 102.307395][ T8993] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 102.309312][ T8993] report_bug+0x3c3/0x580 [ 102.310744][ T8993] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 102.312573][ T8993] handle_bug+0x184/0x210 [ 102.313963][ T8993] exc_invalid_op+0x17/0x50 [ 102.315399][ T8993] asm_exc_invalid_op+0x1a/0x20 [ 102.316931][ T8993] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 102.319247][ T8993] Code: 0a 00 00 00 00 00 00 e8 25 88 be 1e 31 ff 89 c5 89 c6 e8 e7 68 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 95 6d 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 87 6d 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 102.325256][ T8993] RSP: 0018:ffffc9000e7efc38 EFLAGS: 00010287 [ 102.327112][ T8993] RAX: 0000000000001ed4 RBX: ffff88805787a940 RCX: ffffc90007993000 [ 102.329542][ T8993] RDX: 0000000000080000 RSI: ffffffff814184eb RDI: 0000000000000007 [ 102.332069][ T8993] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 102.334771][ T8993] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888058369000 [ 102.337181][ T8993] R13: ffff88805787aa18 R14: 0000000000000000 R15: ffff888058369120 [ 102.339877][ T8993] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 102.341716][ T8993] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 102.343495][ T8993] kvm_vcpu_ioctl+0x5eb/0x1690 [ 102.345015][ T8993] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.346668][ T8993] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 102.349000][ T8993] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.351508][ T8993] ? hook_file_ioctl_common+0x145/0x410 [ 102.353259][ T8993] ? selinux_file_ioctl+0x180/0x270 [ 102.354919][ T8993] ? selinux_file_ioctl+0xb4/0x270 [ 102.356534][ T8993] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.358247][ T8993] __x64_sys_ioctl+0x18e/0x210 [ 102.359778][ T8993] do_syscall_64+0xcd/0x4c0 [ 102.361278][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.363145][ T8993] RIP: 0033:0x7f25f758e929 [ 102.364559][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.371185][ T8993] RSP: 002b:00007f25f842b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.373731][ T8993] RAX: ffffffffffffffda RBX: 00007f25f77b5fa0 RCX: 00007f25f758e929 [ 102.376202][ T8993] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 102.378703][ T8993] RBP: 00007f25f7610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 102.381235][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.383753][ T8993] R13: 0000000000000000 R14: 00007f25f77b5fa0 R15: 00007ffef595da38 [ 102.386236][ T8993] [ 102.387893][ T8993] Kernel Offset: disabled [ 102.389735][ T8993] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:52:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc9000e7ef5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f25f842b6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6713000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=0000000053d4f000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000006 DR2=0000000000000004 DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00000000000001a8 RCX=0000000000000008 RDX=ffffffff95e238a8 RSI=ffffc900006a0880 RDI=ffffffff977b2eb8 RBP=0000000000000030 RSP=ffffc900006a07d8 R8 =ffffffff95dfb130 R9 =000000000000024f R10=ffffc900006a0978 R11=0000000000000001 R12=ffffffff81981000 R13=ffffc900006a0880 R14=ffffffff81981b10 R15=ffffffff977b2eb8 RIP=ffffffff8198100f RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcd2f4f6e9c CR3=000000002de73000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffea27c9a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dda211c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dda211c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dda211c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dda211c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dda211d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dda211df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000005d4a2 RCX=ffffffff8207db69 RDX=ffff88802bbac880 RSI=ffffffff8207db77 RDI=0000000000000006 RBP=0000000000013d4c RSP=ffffc90003177790 R8 =0000000000000006 R9 =0000000000013d4c R10=000000000005d4a2 R11=0000000000000001 R12=1ffff9200062eef3 R13=0000000001752880 R14=000055556bdb9000 R15=0000000000000000 RIP=ffffffff81bbf2c1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6a73ce7d60 CR3=00000000321de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a731866a3 00007f6a731866a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd26505430 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556b8f1e30 000055556b8f1b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556b90c1b4 000055556b90abe0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011fba0000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000004080606 011efa00100005ba 8008000100000408 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606011efa038004 088485bac0080001 000004080606011f ba00000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ffff9f0803a00308 1000039003000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d4d09 RBX=0000000000000003 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003cd0000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e680000 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2f73e9 CR3=0000000051041000 CR4=00352ef0 DR0=0000000000000007 DR1=7fffffffffffffff DR2=0000000000000fb3 DR3=0000000000000101 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcec60fe00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc205211c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc205211c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc205211c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc205211c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc205211d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc205211df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000