last executing test programs: 30.012051496s ago: executing program 2 (id=193): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') (async) 30.011525187s ago: executing program 2 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100003cf1945a0a95fe402791e17ac00095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/mdstat\x00', 0x0, 0x0) pread64(r2, 0x0, 0x2c, 0x97) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000080)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000180)='GPL\x00', 0x5, 0xf4, &(0x7f00000001c0)=""/244, 0x40f00, 0x12, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[r1, r3, r0, r1], &(0x7f0000000340)=[{0x0, 0x5, 0xb, 0xa}, {0x5, 0x5, 0x0, 0x8}, {0x0, 0x4, 0x9, 0x3}, {0x1, 0x3, 0x6, 0x6}, {0x3, 0x4, 0x7, 0xb}], 0x10, 0x6}, 0x94) (rerun: 32) 29.960657633s ago: executing program 2 (id=195): r0 = socket$kcm(0x29, 0x5, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) 29.960153796s ago: executing program 2 (id=196): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xfffffffffffffcaa}, {0xc}}}]}]}, 0xe94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891b, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="0200ff7fac14"}) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000011c0)={0x5, &(0x7f00000000c0)=[{0x4, 0x5, 0x2, 0x7}, {0xde4e, 0x9, 0x2, 0x800}, {0x6, 0x2, 0x9, 0x1}, {0x4, 0x3, 0x7, 0x2}, {0x7, 0x5, 0xf2, 0xa1}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x7}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) chdir(&(0x7f0000000180)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc040ff0b, &(0x7f0000000180)) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) r9 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000000)={0x36, 0x1, 0x2, "09e4ffb97e3b4c00152258011a9285a5df0300080000f8000000000000000500", 0x41414770}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x40880) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) 29.892235719s ago: executing program 2 (id=197): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40840) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd26, 0x4, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x20044000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x100, 0x0) mkdir(0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) poll(&(0x7f00000002c0)=[{r2, 0x50}, {r4, 0x8000}], 0x2, 0x80000000) socket(0x400000000010, 0x3, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40840) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd26, 0x4, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x20044000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x100, 0x0) (async) mkdir(0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) (async) poll(&(0x7f00000002c0)=[{r2, 0x50}, {r4, 0x8000}], 0x2, 0x80000000) (async) 29.642029488s ago: executing program 2 (id=203): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000480)=0x7fffffff, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 29.628597504s ago: executing program 32 (id=203): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000480)=0x7fffffff, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 12.417600622s ago: executing program 4 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002440)={0x2020}, 0x2020) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB=',k']) mount_setattr(r2, &(0x7f0000000200)='./file0\x00', 0x1800, &(0x7f0000000280)={0x81, 0x10000a, 0x100000, {r5}}, 0x20) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000040)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r7, 0x4018aee2, &(0x7f0000000040)=@attr_other={0x0, 0x5, 0xfffffffffffffff8, &(0x7f0000000000)=0x2}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa86dd60ff00f500200600fe8000000000000000000000000000aafe800b00000000000000009100000000aa00004e220000000000fce4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e0c10000000000000000000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) preadv(r11, &(0x7f0000000180)=[{&(0x7f0000002380)=""/181, 0xb5}], 0x1, 0x6, 0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000140)={0x0, 0x0}) 11.523297359s ago: executing program 4 (id=520): r0 = syz_io_uring_setup(0x557e, &(0x7f0000000100)={0x0, 0x35ba, 0x1, 0x3, 0x230}, &(0x7f0000000300), &(0x7f0000000180)) syz_io_uring_setup(0x7660, &(0x7f0000000200)={0x0, 0x8289, 0x10000, 0x3, 0xdd, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000100fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="19580000000000001c0012800b000104691649be8c0e2a74230002800600010000000000030035006970766c616e30000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) 11.522963327s ago: executing program 4 (id=521): socket$isdn_base(0x22, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01000064b46de34c6398c100000000000000010000000500000005000600000000000800030001000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="050003"], 0x28}}, 0x10) 11.520529479s ago: executing program 4 (id=523): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1800) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) linkat(r1, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x1400) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x36}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) symlinkat(&(0x7f00000003c0)='./file2\x00', r0, &(0x7f0000000400)='./file1\x00') write$qrtrtun(0xffffffffffffffff, &(0x7f0000000440)="99f197205b4e9cc9756cb3668cf7cf3f15d09633d526fe38a0d405801d102c80603abd52d7b3cc4dbf09a0ab23cdb867815f6491ecf3724a7431c968d8cd3c770b227a4ecc2225782deefab659b86edb09f7d743423080228f09705e521b8a2916c3f0aaf52cfefa5a8d865dad30ebc7240ff08d5ac11d1bcfd08b0c14b8fa0ce12b6e55dc752acd7b790e17c29d602ef24e362e54c99db7f0f0bfabafaa0c2c6fde7de6994819557cade24210f0c0c44f79", 0xb2) mount$pvfs2(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x50000, &(0x7f00000005c0)={[], [{@subj_role={'subj_role', 0x3d, '{#'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@hash}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2000080d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() sendmsg$nl_netfilter(r4, &(0x7f0000000e80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000780)={0x68c, 0x12, 0x3, 0x201, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x3}, [@generic="1482498678111676149d63dfb342dd39352326d558ad4f9748d500b78ac7e03d7d27aaca282a3327b91cdb0ca1943140a28071d5cecafe9e5c0d8084fa04339d83e36155f8ed8f3be3ba5a59f994d246a0c35fab8e5d5f3bf2f3b3776f623c78b89115be922145cd68296f5a889e32dc243a33bf970eff9aa1f2842e1a0e6b578a7f6814e0ba5454", @nested={0x154, 0xd7, 0x0, 0x1, [@generic="49a1db4dc07f297309be6d721fa8e5464b6137af0d709fdeb1f8", @typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@multicast1}, @generic="ebe5fd6b3b3ab30b54bb4c9e3805a245d60dc1abaa89bd6da7d2aeda361edd", @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@local}, @generic="580df86615be018bc549005cf03e8b33d28735044e00a2b685f6f18b110ad5471d23f4a946ca7df87401f4cba6b528ad66ed8fae26e9c6a26a504e83aded586b6b216124e098", @generic="f41f4fd21554d0abf0cf28e95527b51ffe2a7a26022ef8106abe0228d85660f2abe8b4bab2ed15704e6cc046576c1d1d620953e58d09f431a02c80308273bfb7609eaf523beacd14fadf6f421b2b09806f6bc86227c1d43761aa25d07a19a363e302a1299daf23147fd556661368f65a94573e450666b865931cc1815d9871845758e32aae1a38a7f1f53a14a0ad73b02270f077c375fdf5d6a4633c78555987c6cea51df11432bac0479beddefb2940aa", @nested={0x4, 0x137}]}, @nested={0x1e0, 0x43, 0x0, 0x1, [@typed={0x4, 0x6b}, @generic="96272f7b8e4bf3754d4705e7ef514585abc700080af9549858c07776ee3e1ac882be0ff08e15fbbb8866e8ce7dd9b2fd453f50e5568dc1fd37be5fa26512d685922ea34a409f6153d45b6903ae17b04197e2d0189fedf3c3d15e2a91f3e7113b46a7190fdda0421dd4ecd134230b309efcc856b4573b909ac40132e193de6a3eeac8a96de0773989056a6ffc00aaa4358d5998b40c5ed4febddd97746f3d7283c00d33b6a2055ca9d204b97abdbff8", @generic="3e064ec6c2e1dfe0f61607d2546c6788033aaf42a0f8df3d7e5ccf4df5660ab75eb89163d5d2", @generic="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", @nested={0x4, 0xc}]}, @nested={0x2a7, 0x7b, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x12f, 0x0, 0x0, @fd=r1}, @generic="601c2678bda6292863f9d10cc00fc91c16d7b7d6521e4b57622e5a50a6ba0812fdcf56196001a60b83d1422e9473fd1996aff45e70c7f558db26abf822071a3045bb3bd7cf02497c86eb120befe16c739f49475bc51d7ce09b364a3394eb30bab62f14f31ed469d1bedae55c18d13c93f955261798408bbc915005ff7c8385244419b6395a0be91b89b15cf29ef7e96b941d833f8adb3953f1c5a8", @typed={0x8, 0x91, 0x0, 0x0, @u32=0x9f2}, @generic="ab835a0c51b550ec615158adfc0ba84323b36fc5106b13d116f544ab96a042c879d4a5a051c2d912b0a9e49436a63383966cd33dd98ae529f42cbd3bc67ad6ad6e87b92def36dfc5d939c16b9565a054528c7589ef064a9a592756719391a299d8de78f5c5b20c33dfc1b1626f96e286c11640f62bba43fb8910e490d07c31093c26a7af5680df9fa6f4dc8f1daeb07871054799ea4ff6d6058b6ae1019bf646e0fa03e40b21c2df101956c84d46299e0d848734ed5b390f4e0de1dbfafbe89bc152dea9bf37cd77125e8ccbeb4b993194c47408dbca008168e65fece1d08e83b8f3b6e4d24069a5b207564ae9c44f2ecc01915c36bfaf", @nested={0x4, 0xd8}, @nested={0x4, 0xad}, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@broadcast}, @generic="916256f6faa4299ac521e3c8f4da412ed9f6480a46d0980dd1cda23219f001872519f52eb635c3884bd4a947b7e0fae93989d358ce3ddfdfced9692ffa3c79138820e284be755dd65496702446bc2956a00642788495994b091d63679a8397354fb7e58eb2585895a13d0122d003bdabe70048ac56e4c1f833db5ac2c2804e922046d7f321fa771d201af2c7dc5b8bba3656620672c18a354926d8e22517d717634075c45bd95338b39c3ea85e8796020ee56a186b3eaa65435148548d213ee86430e18823e5d0d122dca814de81f3fb01d43ff3cb85e71cbcef90c412462b5637ee78135d567ab29f"]}, @typed={0x12, 0x44, 0x0, 0x0, @binary="9296503166ce922536edcbf19f76"}]}, 0x68c}, 0x1, 0x0, 0x0, 0x24048080}, 0x20000000) lsetxattr$trusted_overlay_nlink(&(0x7f0000000ec0)='./file2\x00', &(0x7f0000000f00), &(0x7f0000000f40)={'U-', 0xfffffffffffffffc}, 0x16, 0x1) r6 = accept(r0, &(0x7f0000000f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001000)=0x80) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x400000, 0x0) sendto$inet6(r7, &(0x7f0000001080)="3dbe966abe5d967e9458568802da451aa0bd0d141c2d58e6eee672d24c7c1100c1b77a4248396fec2e540f35dafc3774976928e8894595adb99d2456b5ba879396333cac23392f04c80b4a0b11c8c2bf8905ea4525e4abd0ee60d63529210e35c7a7276812f5df1dea42e1ce42d8d6a6aafbcd09e78c608c54f44473ff484ab2b3c2ed5886ba48f012853afef57d95465f0d628ff3997d70cf1f60b5137f39a428a8ee7fffffeb8d2d3fc7c932f102961ab86856298aa456215a666fa529818f5b42f5def2890e36e41869e61ab5e7671c1066eaeb9e2a1b3e22312a4f1500e9fa81d9", 0xe3, 0x20000000, &(0x7f0000001180)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r1, 0x0, 0x25, 0xd, @void}, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001240), r6) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, r8, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x60480d0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000014c0), r7) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd4, r9, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xb9ab2dd2dda9dd6f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004000}, 0x40c0880) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file2\x00', 0x541400, 0x33) renameat2(r7, &(0x7f0000001680)='./file1\x00', r10, &(0x7f0000001700)='./file2\x00', 0x6) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001780), r7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000018c0)={'syztnl1\x00', &(0x7f00000017c0)={'tunl0\x00', 0x0, 0x1, 0x8007, 0x9, 0x4a, {{0x2b, 0x4, 0x2, 0x9, 0xac, 0x67, 0x0, 0x1, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x24, 0x56, 0x3, 0x8, [{@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x3}, {@local, 0x5}, {@loopback, 0x9}]}, @noop, @timestamp_addr={0x44, 0x4c, 0x9f, 0x1, 0x7, [{@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x2f}}, {@remote, 0x6a}, {@private=0xa010101, 0x8}, {@multicast2, 0x8}, {@multicast1, 0x81}, {@multicast2, 0x8ca}, {@empty, 0x3}, {@local, 0x7}]}, @generic={0x94, 0x6, "78138d24"}, @timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0xf, [{@multicast1, 0xab}, {@private=0xa010101, 0x8001}]}, @rr={0x7, 0xb, 0x16, [@multicast1, @broadcast]}]}}}}}) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000019c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x70, r11, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x3}, @GTPA_LINK={0x8, 0x1, r12}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 11.453006986s ago: executing program 4 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r9, &(0x7f0000000300)) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050016000200000008001d0009000000a6af9f771031848e17c7b881c7c2ce46943ba07880cf4d9299705a744b3bb84edbfcccd71950d172532707d957f4a96fb49157ace26b3cc8bb3ac478449b1ae9f355496b86ff7c181a3199f7ec35f732a64dcdcf858e85e146a8742b52e73d9566da6c830087ecb89518e52d9c0719c90b14484d3469885e2431685d5dcf2a663b2bd85a6b909c87af8bdd17e6ae7f5fb78467ef1465035fccb06b35358f84050a7677e4d5792ef75a6c7a488dc433d9817814736e8823622473afa40ce9f78eec8b18836d518ab72bfd2e186544937cc45803ee9e291ed23953604281ff9fab0c6d0a759744c40779a4adbee789dfcf12d3ce7f7be067ac"], 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000100)=""/101) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe88000000000000000000000000000120010000000000000000000000000000000046a200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe880000000000000000000000000001000000000000000000000000000000100000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000070000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004201"], 0x184}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 9.7209122s ago: executing program 4 (id=543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x1}}, 0x1c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f00000000c0)={0x0, 0x8, 0xfffffe3f, 0x0, 0xfd, "4d3611000000000008000000497549e7ffffff", 0x9, 0xfff}) readv(r9, &(0x7f0000000380)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x33, 0x107, 0xfffffffe, 0x0, {0xc, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r10}]}}}]}, 0x6c}}, 0x0) (async) syz_usb_disconnect(r1) r12 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000d1}, 0x8808) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r15, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) (async, rerun: 64) syz_usb_control_io(r12, 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x48}}, 0x40800) 1.043301024s ago: executing program 1 (id=640): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000001040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x8}, {0x6, 0xfffe, 0x9, 0x8}}}}, 0x15) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) close(r1) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0xffffeffd, 0x661009, 0x4, 0x1, 0x0, 0x206c9f, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '@--)'}, {}, {0x20, '.'}, {0x20, '\x00'}, {}], 0xa, "819aa43b28012aa7fe6b862b50c7376bf7753680da3f276d3d3d43b219cd5cc6719efc935febc8c8cc55a0c49886ea492e2fadabde24a13fbe69bed4398246b29abe07338a400a12b7a753961714569315a86d85faa2d44be1e83da76291f830591a95584db53cd6f1ae383677a2f04b13ecc8f7e63a837c07"}, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x1, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x2, r7}) 1.042338867s ago: executing program 1 (id=642): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x45, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@local, 0x75, r2}) 983.275604ms ago: executing program 1 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000ff7660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000fdf000/0x4000)=nil, 0x4000, 0xd) 980.64627ms ago: executing program 1 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/179) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 912.089242ms ago: executing program 1 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x484, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x454, 0x2, [@TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x5, 0x8e8, 0x3, 0x7, {0x3, 0x2, 0x5, 0x1, 0xd, 0x1}, {0xe, 0x2, 0x101, 0x800, 0x9, 0x9e}, 0x5, 0x3f1f, 0x57fd}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x787, 0x80, 0x3, 0x9, 0x3, 0x2, 0x3, 0xd, 0x8, 0x5, 0x4, 0x6000, 0x8, 0x5, 0xc, 0xfffffff9, 0x6, 0x5ed, 0x3, 0x0, 0x9, 0x7fff, 0x7, 0x9, 0x4, 0x2, 0x401, 0x3, 0x4, 0x54, 0xaca, 0x4, 0x3efe, 0x5, 0x7fff, 0x3, 0x33, 0x3, 0x5, 0x9363, 0x7, 0x1, 0x2, 0x6, 0x7f, 0xff, 0xfffffffc, 0xe, 0x5, 0x7, 0x9, 0x6, 0x0, 0x63, 0x2, 0x400, 0x8, 0x5, 0x3, 0xb945, 0xffffffff, 0x4fd3ba48, 0x2, 0x8, 0x6, 0x2, 0xa, 0x2, 0x7, 0x1, 0x4, 0x7, 0x5, 0x0, 0x5, 0xa86, 0x0, 0x4, 0x39, 0x8000, 0x0, 0x171, 0x7fff, 0x7, 0x4, 0x5, 0x2, 0x1ff, 0x7fff, 0xa, 0x9, 0xe9, 0x0, 0x400, 0x6, 0x8, 0x4, 0x299, 0x7, 0x2, 0x8, 0x7fffffff, 0xfff, 0x1, 0x0, 0x4, 0x2a82, 0x8, 0xfffffff8, 0x1000, 0x1, 0x7, 0x7, 0x2, 0xfff, 0x9, 0x0, 0x4, 0x7, 0x8, 0x1, 0xfffffff9, 0x3e48, 0x66565886, 0x2, 0x9, 0x1ff, 0x6, 0x4, 0xfff, 0x7fffffff, 0x7, 0x80000000, 0x45a, 0xffffffff, 0xb7, 0x7, 0xdf, 0xa4f, 0x40000000, 0x1, 0x5, 0x1000, 0x5aa, 0x7f, 0x401, 0x1, 0xfffffad2, 0x2, 0x800, 0xffffffff, 0x4, 0xc0, 0xc8c5, 0x6, 0x2, 0x401, 0x5, 0x9, 0x4, 0x2, 0x1, 0x7, 0x1000, 0x5, 0x3, 0xffffff25, 0x7, 0xfffffffd, 0xa64, 0x9, 0x8000, 0x8a, 0x80000001, 0x1, 0x2, 0x3ff, 0x0, 0xe, 0x4, 0x16, 0xffff, 0xe, 0x9, 0x1200, 0x3, 0xa, 0x5, 0xfffffff4, 0xda4c, 0x7f, 0xfffffffb, 0xb9e, 0x101, 0x2, 0x4, 0x8, 0x401, 0x8b, 0xfffff09c, 0x7f, 0x0, 0x200, 0x0, 0xaa, 0x3, 0x7, 0xe, 0x7, 0x8001, 0x2, 0x5, 0x4, 0x6, 0x2, 0xe21f2640, 0xd, 0xa, 0x6, 0x3, 0x1, 0x8, 0xffff, 0x1, 0x2, 0x5, 0xf0000000, 0x5, 0x9c, 0x7, 0xffffffff, 0x9c10, 0x0, 0xf5, 0x80, 0x4, 0x8, 0xc2c, 0xe92, 0x6d0, 0x71, 0x10, 0x5, 0xda, 0x8, 0x7, 0x4, 0x7, 0x3, 0x7f, 0x0, 0x2, 0x8, 0xbc]}]}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r5, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}, 0x1, 0x0, 0x0, 0x80}, 0x24000005) sendmsg$can_j1939(r3, 0x0, 0x20000010) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r10 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r10, 0xc01064ac, &(0x7f0000000000)={r11, 0x1000, &(0x7f0000001a80)=""/4096}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 770.48275ms ago: executing program 1 (id=648): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 487.064162ms ago: executing program 0 (id=654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x700, 0x70bd25, 0x9, {{}, {@void, @val={0xc, 0x99, {0x1ed3, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, 0x33, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x31}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6c99d894}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x58}}, 0x1010) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) 436.158325ms ago: executing program 0 (id=655): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = eventfd2(0x0, 0x0) (async) io_setup(0x6, &(0x7f0000000040)=0x0) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x560f, &(0x7f00000002c0)={0xb}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x80d804}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x104) (async) syz_fuse_handle_req(r4, &(0x7f000000c400)="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", 0x2000, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) io_submit(r2, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) (async) close_range(r0, 0xffffffffffffffff, 0x0) 303.936942ms ago: executing program 0 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e21}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'pim6reg1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r3, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44000) 241.153033ms ago: executing program 0 (id=657): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') r1 = getpid() ioprio_set$pid(0x2, r1, 0x2004) fstat(r0, &(0x7f0000004800)) 240.083223ms ago: executing program 0 (id=658): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x3, 0x6, 0x2, 0x80000000, 0x2004c8, 0x0, 0x0, 0x1000000100800001, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x5], 0x7000, 0x200306}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 132.258078ms ago: executing program 0 (id=659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x922ecbcc}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x922ecbcc}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newchain={0x81c, 0x64, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x7}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x170, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x2d1}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x57}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0xff, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2}, @TCA_FLOWER_KEY_ENC_OPTS={0x84, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x517}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x279}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffff9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6ac735a5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_macvtap\x00'}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x84, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xd2}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5d}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x101}]}]}]}}, @TCA_RATE={0x6, 0x5, {0xe9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_fw={{0x7}, {0x654, 0x2, [@TCA_FW_ACT={0x62c, 0x4, [@m_skbedit={0x110, 0x4, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0xd1, 0x6, "debb270cb0358efcb24a400ef91634b63021869fd96f6971b37bf8b12da353c7df8cc915562c3b42a0efd90bea6efc5d54e971b27fb537d4f732e074b485bd7bac01d1bb11bf13ee3bd48567ec701e0ccf96e38b6f69d3d46b179c26cd07f4ff6fd55d32f0c7a3f1c4e34137e873aaef4d3d5ef90d382fb1d91d1780330657dd33de8f7960f3c54428812852ea75295588c13487581538b95d0d214e9c6b5265274258b012bf128e01b21054d3195438275c37cced76b1dcdafd8b85e8991bbcac8d836262cfe8c96ecf765e25"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xf0, 0xe, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xbf73, 0x1, 0x0, 0xe}, 0x3}}]}, {0xa6, 0x6, "692934872682bd544e7377c23a496bc4d88cc01b4a069f38b768e8d6ca985a06647ddbaa1990c7bb1cc160fdf749bfb7dfe831160c2a927947e426b58faa4078dbc8ee7789c86aa783ec1ef41b7b01f780deaad9d0257e4e2b60f2d5fc55f2d7fed7d11236a3016f58dd35b66a260485d5ed3727b58edd55d46ae3dfd839ec4519b7e4a4736aca1849708aae9e16b30c3ed5f82d02d25424ec45adcc8519e0819e51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x14c, 0x1a, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}]}, {0xf8, 0x6, "b1e2d7af1e064dea86508bc2761d016d7498d49eacd8d897ce4c58a92965f59f7fd1b47fd18fcab65f896d242a73d8d28f02a150dc0696240fe27bcde80317c71cb912a6fc724de3e79dd1b9292892632ac83acee6412670efcbe5d67bba7cb8c88273376704d8d590a69b3138cb77108a4e85ab3bc9d762c3910e1506c639ac567923131f7b27741942da90d85a4004d34d8296d255433f4011c8008f37de9b26dc5bde740797aee8a7ac4fe3be18f30fad35d9ac0220243c46e50ca5c5c7d27d0991c8e89c0764e13cd98e703795d59b7d0a8831a8ef7aa9209982edf28e209e55f85d81a5d6127734cc85e4cb40688cc06a5c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x80, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7, 0x4, 0xe, 0xffff7fff}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x34, 0x6, "964130f0bbe2ab2666c951c5728840a5ef03de4a3fc885db7c9a10da125f09c58c935b91edbe62a4b1ad2d5cec157983"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x130, 0x18, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff0}]}, {0xfa, 0x6, "209238bd0a7d97d909210a0020c6d2becf08405f635e6ebd8a2a5a5f5c9b8cce53e20cde9ba4d73293091f11a7f22f85b18ee8d9c3bac46d6a5f158e48eb240122ee5b09c713ce55af16fde9b0b298eabad09a4ed676e1897af4b21d0891e89f3027e88965d106d2ad81ad201eba8d4a271a639949d5447482ba92c1db63c6330bc4bbef9ae83600886843bba836b88ce7274a1d086a5ab955c4f1c30b480a3e866f51f876019d0ad9048e67ba83be3415a96f9ced35446ed592c911574f91dc247eff3dd3e1981b96fce1cac4f9c8c190a829d518904abe9dd88e3e507cc5c3c23d1c2bba0124b61f4bccc63d04276cc5b5c0cdfc58"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x94, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x80000001, 0x20000000, 0x1, 0x4}, 0x33}}]}, {0x4b, 0x6, "08fa00cf8ee64c5e40dfe585b7177a26935f0a866b4b7c07847de3c6f80c91bfc9a9d57cf3f1a528a6df2fc6f5cd057ef39f48658a3dd035ec1638380f009cae94ec7e6839f0f9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x98, 0xf, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x81, 0x5, 0x80000001, 0xa5}, 0x1}}]}, {0x3d, 0x6, "1860ab8985d4489144c59ea6fbdb2e842e07430bff8a9d14744421c12529efd5950b640b586da74f033c07da46fa7440eb099ee43299aab732"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xb}}, @TCA_FW_MASK={0x8, 0x5, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x81c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 131.672367ms ago: executing program 3 (id=660): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='loginuid\x00') read$FUSE(r1, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) 51.350911ms ago: executing program 3 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x9]}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 47.479318ms ago: executing program 3 (id=662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000200)=[@in={0x2, 0x4ea4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x10, @mcast2}]}, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) poll(&(0x7f00000000c0)=[{r0, 0x6220}, {0xffffffffffffffff, 0xc602}, {r0, 0x8}, {r0, 0x10}], 0x4, 0x17) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=r0], 0x110}}, 0x20000885) 654.45µs ago: executing program 3 (id=663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) 209.281µs ago: executing program 3 (id=664): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) write(r0, &(0x7f0000000000)="2a000200010078", 0x7) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa010800490000240000000000001d9eac1414bbac1414418907f3ffffffff860600000000000000"], 0x0) 0s ago: executing program 3 (id=665): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0xd3, 0x488000) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x1, 0x0, 0x401, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x10000002}, 0x6f) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x4, 0x1, 0x2, 0x72f, 0x2]}, &(0x7f00000001c0)=0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000240)) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)) write(r2, &(0x7f0000000000)="240000001a005f021483c6c5cd9008e696234eac188a8cf9f407000000001f5800000000", 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 0s ago: executing program 3 (id=667): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) close(0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x2, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001a00010000000000fdffffff020000000000fd00", @ANYRES32, @ANYBLOB="05001b0001"], 0x6c}}, 0x2000c044) (async) r5 = socket$kcm(0x10, 0x3, 0x10) (async) unshare(0x6a040000) socket$inet(0x2, 0x2, 0x1) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x4000000) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r7, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}}) kernel console output (not intermixed with test programs): [ 38.141808][ T40] audit: type=1400 audit(1755540843.448:60): avc: denied { rlimitinh } for pid=5937 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.148933][ T40] audit: type=1400 audit(1755540843.448:61): avc: denied { siginh } for pid=5937 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:16188' (ED25519) to the list of known hosts. [ 39.386076][ T40] audit: type=1400 audit(1755540844.718:62): avc: denied { name_bind } for pid=5952 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.407868][ T40] audit: type=1400 audit(1755540844.738:63): avc: denied { write } for pid=5953 comm="sh" path="pipe:[7637]" dev="pipefs" ino=7637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.423512][ T40] audit: type=1400 audit(1755540844.758:64): avc: denied { execute } for pid=5953 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.434374][ T40] audit: type=1400 audit(1755540844.758:65): avc: denied { execute_no_trans } for pid=5953 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.177257][ T40] audit: type=1400 audit(1755540846.508:66): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.178128][ T5953] cgroup: Unknown subsys name 'net' [ 41.324870][ T5953] cgroup: Unknown subsys name 'cpuset' [ 41.328281][ T5953] cgroup: Unknown subsys name 'rlimit' [ 41.483756][ T5962] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.947954][ T5953] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.635094][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 44.635110][ T40] audit: type=1400 audit(1755540849.968:80): avc: denied { execmem } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.820542][ T40] audit: type=1400 audit(1755540850.148:81): avc: denied { create } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.830130][ T40] audit: type=1400 audit(1755540850.148:82): avc: denied { read write } for pid=5968 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.837622][ T40] audit: type=1400 audit(1755540850.148:83): avc: denied { open } for pid=5968 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.845763][ T40] audit: type=1400 audit(1755540850.158:84): avc: denied { ioctl } for pid=5968 comm="syz-executor" path="socket:[1826]" dev="sockfs" ino=1826 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.857000][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.862407][ T5975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.865502][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.868761][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.868775][ T5972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.869504][ T5979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.871392][ T5975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.874607][ T5972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.876579][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.876639][ T5975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.877315][ T5975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.877734][ T5975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.880035][ T5972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.881609][ T40] audit: type=1400 audit(1755540850.208:85): avc: denied { read } for pid=5976 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.881865][ T40] audit: type=1400 audit(1755540850.208:86): avc: denied { open } for pid=5976 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.882346][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.882565][ T40] audit: type=1400 audit(1755540850.208:87): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.885551][ T5975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.885946][ T5972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.925773][ T5975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.929330][ T5975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.931995][ T5975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.934747][ T5975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.993298][ T40] audit: type=1400 audit(1755540850.328:88): avc: denied { module_request } for pid=5971 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.022005][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 45.063702][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 45.128166][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.131268][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.134535][ T5971] bridge_slave_0: entered allmulticast mode [ 45.137814][ T5971] bridge_slave_0: entered promiscuous mode [ 45.162086][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.165624][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.168660][ T5971] bridge_slave_1: entered allmulticast mode [ 45.171876][ T5971] bridge_slave_1: entered promiscuous mode [ 45.187225][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.189562][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.191914][ T5968] bridge_slave_0: entered allmulticast mode [ 45.194480][ T5968] bridge_slave_0: entered promiscuous mode [ 45.218089][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 45.221424][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.223782][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.225969][ T5968] bridge_slave_1: entered allmulticast mode [ 45.228194][ T5968] bridge_slave_1: entered promiscuous mode [ 45.240886][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.246868][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.267423][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.270552][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 45.302190][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.348427][ T5968] team0: Port device team_slave_0 added [ 45.351177][ T5971] team0: Port device team_slave_0 added [ 45.354839][ T5971] team0: Port device team_slave_1 added [ 45.376432][ T5968] team0: Port device team_slave_1 added [ 45.400281][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.403797][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.406827][ T5976] bridge_slave_0: entered allmulticast mode [ 45.410140][ T5976] bridge_slave_0: entered promiscuous mode [ 45.436291][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.439265][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.450062][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.472604][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.475142][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.477605][ T5976] bridge_slave_1: entered allmulticast mode [ 45.479939][ T5976] bridge_slave_1: entered promiscuous mode [ 45.489613][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.491786][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.500102][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.504111][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.506324][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.514557][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.519875][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.522121][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.524936][ T5980] bridge_slave_0: entered allmulticast mode [ 45.527310][ T5980] bridge_slave_0: entered promiscuous mode [ 45.548652][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.550892][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.559510][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.565855][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.568248][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.570713][ T5980] bridge_slave_1: entered allmulticast mode [ 45.574023][ T5980] bridge_slave_1: entered promiscuous mode [ 45.585625][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.626573][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.631400][ T5971] hsr_slave_0: entered promiscuous mode [ 45.635087][ T5971] hsr_slave_1: entered promiscuous mode [ 45.638142][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.642673][ T5968] hsr_slave_0: entered promiscuous mode [ 45.644903][ T5968] hsr_slave_1: entered promiscuous mode [ 45.646845][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 45.648556][ T5968] Cannot create hsr debugfs directory [ 45.667477][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.679370][ T5976] team0: Port device team_slave_0 added [ 45.682501][ T5976] team0: Port device team_slave_1 added [ 45.694493][ T5980] team0: Port device team_slave_0 added [ 45.728460][ T5980] team0: Port device team_slave_1 added [ 45.750840][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.753302][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.761735][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.782284][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.784586][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.792540][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.796542][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.799211][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.809873][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.818131][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.820405][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.828731][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.861337][ T5980] hsr_slave_0: entered promiscuous mode [ 45.863605][ T5980] hsr_slave_1: entered promiscuous mode [ 45.865865][ T5980] debugfs: 'hsr0' already exists in 'hsr' [ 45.867605][ T5980] Cannot create hsr debugfs directory [ 45.904940][ T5976] hsr_slave_0: entered promiscuous mode [ 45.907698][ T5976] hsr_slave_1: entered promiscuous mode [ 45.910024][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 45.911897][ T5976] Cannot create hsr debugfs directory [ 46.024362][ T5971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.030578][ T5971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.035539][ T5971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.039460][ T5971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.081537][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.086660][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.091522][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.097070][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.134941][ T5980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.139709][ T5980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.144517][ T5980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.148104][ T5980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.182057][ T5976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.187177][ T5976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.191817][ T5976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.196541][ T5976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.207205][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.219828][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.225208][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.234280][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.237144][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.248173][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.251238][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.257499][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.264835][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.267885][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.281358][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.283883][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.297160][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.312545][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.319856][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.322828][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.330049][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.341269][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.343573][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.350687][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.361117][ T40] audit: type=1400 audit(1755540851.688:89): avc: denied { sys_module } for pid=5968 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.363735][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.375471][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.378384][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.387180][ T5980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.391376][ T5980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.397295][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.399799][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.431172][ T5976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.444626][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.452423][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.471069][ T5968] veth0_vlan: entered promiscuous mode [ 46.477717][ T5971] veth0_vlan: entered promiscuous mode [ 46.485490][ T5971] veth1_vlan: entered promiscuous mode [ 46.488089][ T5968] veth1_vlan: entered promiscuous mode [ 46.494802][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.503815][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.507498][ T5968] veth0_macvtap: entered promiscuous mode [ 46.513744][ T5968] veth1_macvtap: entered promiscuous mode [ 46.525112][ T5971] veth0_macvtap: entered promiscuous mode [ 46.528854][ T5971] veth1_macvtap: entered promiscuous mode [ 46.534904][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.540955][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.548634][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.552495][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.559172][ T1260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.564313][ T1260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.567181][ T1260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.578022][ T1260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.580834][ T5980] veth0_vlan: entered promiscuous mode [ 46.588669][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.591841][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.597772][ T5976] veth0_vlan: entered promiscuous mode [ 46.600595][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.603497][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.610442][ T5980] veth1_vlan: entered promiscuous mode [ 46.623595][ T5976] veth1_vlan: entered promiscuous mode [ 46.643125][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.643382][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.645679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.652010][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.667572][ T5980] veth0_macvtap: entered promiscuous mode [ 46.671005][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.673785][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.677231][ T5980] veth1_macvtap: entered promiscuous mode [ 46.684324][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.686864][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.691198][ T5971] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.699202][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.702016][ T5976] veth0_macvtap: entered promiscuous mode [ 46.707615][ T5976] veth1_macvtap: entered promiscuous mode [ 46.711256][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.725022][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.728103][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.731819][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.735006][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.738206][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.741871][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.748727][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.751924][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.760237][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.764058][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.771248][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.800177][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.802507][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.802713][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.807102][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.820845][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.824141][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.825975][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.829389][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.855265][ T6072] syz.3.4: attempt to access beyond end of device [ 46.855265][ T6072] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 46.860124][ T6072] SQUASHFS error: Failed to read block 0x0: -5 [ 46.861595][ T6074] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.862701][ T6072] unable to read squashfs_super_block [ 46.864817][ T6075] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7'. [ 46.894433][ T6081] program syz.1.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.909244][ T6077] netfs: Couldn't get user pages (rc=-14) [ 46.916822][ T6086] netlink: 'syz.2.11': attribute type 13 has an invalid length. [ 46.923190][ T5975] Bluetooth: hci0: command tx timeout [ 46.923308][ T5974] Bluetooth: hci2: command tx timeout [ 46.923753][ T5979] Bluetooth: hci1: command tx timeout [ 46.947934][ T6086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.956397][ T6086] program syz.2.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.994606][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 46.997675][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 47.003031][ T6099] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 47.003058][ T5974] Bluetooth: hci3: command tx timeout [ 47.005243][ T6099] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.005580][ T6099] vhci_hcd vhci_hcd.0: Device attached [ 47.014104][ T6099] fuse: Unknown parameter '' [ 47.038658][ T6106] overlay: Unknown parameter 'uid>00000000000000000000' [ 47.125749][ T6111] capability: warning: `syz.0.15' uses 32-bit capabilities (legacy support in use) [ 47.263058][ T6067] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 47.287865][ T6127] syz_tun: entered allmulticast mode [ 47.289915][ T6126] syz_tun: left allmulticast mode [ 47.729003][ T6100] vhci_hcd: connection reset by peer [ 47.731134][ T13] vhci_hcd: stop threads [ 47.732600][ T13] vhci_hcd: release socket [ 47.734300][ T13] vhci_hcd: disconnect device [ 48.142889][ T1025] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.226601][ T6157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 48.312954][ T1025] usb 8-1: Using ep0 maxpacket: 16 [ 48.316495][ T1025] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 48.320301][ T1025] usb 8-1: config 0 has no interface number 0 [ 48.322927][ T1025] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 48.327383][ T1025] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 48.333678][ T1025] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 48.337408][ T1025] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 48.340671][ T1025] usb 8-1: Product: syz [ 48.342278][ T1025] usb 8-1: SerialNumber: syz [ 48.345329][ T1025] usb 8-1: config 0 descriptor?? [ 48.348448][ T1025] cm109 8-1:0.8: invalid payload size 1024, expected 4 [ 48.351319][ T1025] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input5 [ 48.439020][ T6173] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.441509][ T6173] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 48.445217][ T6173] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.448722][ T6173] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 48.556045][ T6194] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 48.557456][ T6194] team0: Device ipvlan1 failed to register rx_handler [ 48.578317][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 48.579331][ T5853] usb 8-1: USB disconnect, device number 2 [ 48.580993][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 48.587811][ T5853] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 48.604676][ T6197] netfs: Couldn't get user pages (rc=-14) [ 48.716668][ T6204] process 'syz.1.38' launched './file1' with NULL argv: empty string added [ 49.003068][ T5974] Bluetooth: hci2: command tx timeout [ 49.003081][ T5975] Bluetooth: hci1: command tx timeout [ 49.083029][ T5974] Bluetooth: hci3: command tx timeout [ 49.112053][ T6214] tap0: tun_chr_ioctl cmd 1074025675 [ 49.114223][ T6214] tap0: persist disabled [ 49.189079][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.42'. [ 49.194096][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 49.198296][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 49.250396][ T6222] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 49.335608][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 49.335619][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 49.339399][ T6225] afs: Unknown parameter '' [ 49.345205][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 49.393794][ T5853] IPVS: starting estimator thread 0... [ 49.397428][ T6231] tipc: Started in network mode [ 49.400094][ T6231] tipc: Node identity ac1414aa, cluster identity 4711 [ 49.404630][ T6231] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 49.408103][ T6231] tipc: Enabled bearer , priority 10 [ 49.483052][ T6232] IPVS: using max 57 ests per chain, 136800 per kthread [ 49.495467][ T6237] netlink: 'syz.1.49': attribute type 18 has an invalid length. [ 49.503393][ T46] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.506229][ T46] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.509001][ T6237] netlink: 'syz.1.49': attribute type 18 has an invalid length. [ 49.511396][ T46] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.514595][ T46] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.517831][ T6237] Zero length message leads to an empty skb [ 49.542967][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 49.611575][ T6254] netlink: 'syz.1.54': attribute type 2 has an invalid length. [ 49.683030][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 49.766981][ T40] kauditd_printk_skb: 199 callbacks suppressed [ 49.766993][ T40] audit: type=1400 audit(1755540855.098:289): avc: denied { mount } for pid=6266 comm="syz.0.58" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 49.789520][ T6271] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1954005275 (125056337600 ns) > initial count (69329932160 ns). Using initial count to start timer. [ 49.796174][ T40] audit: type=1400 audit(1755540855.128:290): avc: denied { wake_alarm } for pid=6274 comm="syz.0.59" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.802943][ T6271] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3503323016 (224212673024 ns) > initial count (219510975936 ns). Using initial count to start timer. [ 49.822913][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 49.830586][ T40] audit: type=1400 audit(1755540855.158:291): avc: denied { getopt } for pid=6280 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.862738][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.865607][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.914973][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.918767][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.935957][ T40] audit: type=1400 audit(1755540855.268:292): avc: denied { create } for pid=6295 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.943471][ T40] audit: type=1400 audit(1755540855.268:293): avc: denied { setopt } for pid=6295 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.950785][ T40] audit: type=1400 audit(1755540855.268:294): avc: denied { mount } for pid=6295 comm="syz.3.62" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.958825][ T40] audit: type=1400 audit(1755540855.278:295): avc: denied { mount } for pid=6295 comm="syz.3.62" name="/" dev="ramfs" ino=10868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.962914][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 49.988959][ T6298] SELinux: syz.3.63 (6298) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 50.004810][ T46] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.010650][ T46] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.014269][ T46] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.017190][ T46] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.020012][ T46] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.022807][ T46] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.026092][ T46] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.028845][ T46] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.034602][ T6303] program syz.1.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.039324][ T40] audit: type=1400 audit(1755540855.368:296): avc: denied { mount } for pid=6302 comm="syz.1.65" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.043122][ T6306] program syz.1.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.057057][ T40] audit: type=1400 audit(1755540855.388:297): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.075815][ T40] audit: type=1400 audit(1755540855.408:298): avc: denied { read write } for pid=6309 comm="syz.0.67" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.077166][ T1025] hid-generic 07FF:000C:0009.0002: unknown main item tag 0x1 [ 50.085974][ T1025] hid-generic 07FF:000C:0009.0002: item fetching failed at offset 5/165 [ 50.088810][ T1025] hid-generic 07FF:000C:0009.0002: probe with driver hid-generic failed with error -22 [ 50.102995][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 50.165612][ T6324] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 50.165850][ T6326] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6326 comm=syz.1.72 [ 50.169095][ T6324] qnx6: wrong signature (magic) in superblock #1. [ 50.176969][ T6324] qnx6: unable to read the first superblock [ 50.181119][ T6324] 9pnet_fd: Insufficient options for proto=fd [ 50.242944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 50.271908][ T6339] bridge_slave_1: left allmulticast mode [ 50.273905][ T6339] bridge_slave_1: left promiscuous mode [ 50.275882][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.278829][ T6339] bridge_slave_0: left allmulticast mode [ 50.280673][ T6339] bridge_slave_0: left promiscuous mode [ 50.282543][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.382971][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 50.523010][ T29] tipc: Node number set to 2886997162 [ 50.603126][ T5974] Bluetooth: hci0: command tx timeout [ 50.662892][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 51.043174][ T6364] warning: `syz.2.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.092992][ T5975] Bluetooth: hci2: command tx timeout [ 51.093660][ T5974] Bluetooth: hci1: command tx timeout [ 51.151893][ T6372] netlink: 'syz.0.86': attribute type 12 has an invalid length. [ 51.173085][ T5974] Bluetooth: hci3: command tx timeout [ 51.233447][ T72] cfg80211: failed to load regulatory.db [ 51.492907][ T839] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.653275][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 51.656588][ T839] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 51.660112][ T839] usb 5-1: config 0 has no interface number 0 [ 51.662773][ T839] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 51.667339][ T839] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 51.672327][ T839] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 51.677084][ T839] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 51.680387][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.683801][ T839] usb 5-1: config 0 descriptor?? [ 51.686678][ T839] ldusb 5-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 51.690719][ T839] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 51.861825][ T6392] syz.2.93: attempt to access beyond end of device [ 51.861825][ T6392] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 51.866253][ T6392] qnx4: unable to read the superblock [ 51.874725][ T6394] capability: warning: `syz.1.94' uses deprecated v2 capabilities in a way that may be insecure [ 51.926769][ T6398] cgroup: fork rejected by pids controller in /syz2 [ 51.980652][ T6453] __nla_validate_parse: 16 callbacks suppressed [ 51.980663][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 52.010993][ T6453] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.116509][ T6465] hfsplus: unable to find HFS+ superblock [ 52.373169][ T6067] vhci_hcd: vhci_device speed not set [ 52.398924][ T839] kernel write not supported for file /sg0 (pid: 839 comm: kworker/2:2) [ 52.522949][ C1] net_ratelimit: 4 callbacks suppressed [ 52.522961][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 52.565021][ T6491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.110'. [ 52.568985][ T6491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.110'. [ 52.584103][ T6493] hfsplus: unable to find HFS+ superblock [ 52.682973][ T5974] Bluetooth: hci0: command tx timeout [ 52.852241][ T6521] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 52.939179][ T6529] vlan2: entered promiscuous mode [ 52.941565][ T6529] vlan2: entered allmulticast mode [ 52.944529][ T6529] hsr_slave_1: entered allmulticast mode [ 53.000416][ T6530] 9pnet_virtio: no channels available for device syz [ 53.155439][ T6542] overlay: ./file0 is not a directory [ 53.162892][ T5974] Bluetooth: hci2: command tx timeout [ 53.167664][ T6544] QAT: Invalid ioctl -2144835806 [ 53.173097][ T5974] Bluetooth: hci1: command tx timeout [ 53.238287][ T6549] ======================================================= [ 53.238287][ T6549] WARNING: The mand mount option has been deprecated and [ 53.238287][ T6549] and is ignored by this kernel. Remove the mand [ 53.238287][ T6549] option from the mount to silence this warning. [ 53.238287][ T6549] ======================================================= [ 53.253057][ T5974] Bluetooth: hci3: command tx timeout [ 53.257287][ T6549] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 53.262746][ T6549] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 53.562994][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 54.230379][ T6573] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 54.239578][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.256351][ T9] usb 5-1: USB disconnect, device number 2 [ 54.260440][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 54.266226][ T6581] 9pnet: p9_errstr2errno: server reported unknown error @@ [ 54.333742][ T6595] syz_tun: entered promiscuous mode [ 54.335519][ T6595] macvtap1: entered promiscuous mode [ 54.338537][ T6595] syz_tun: left promiscuous mode [ 54.602924][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 54.612321][ T6635] tmpfs: Bad value for 'mpol' [ 54.627320][ T6637] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 54.629929][ T6637] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 54.632531][ T6637] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 54.635174][ T6637] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 54.911327][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 54.911337][ T40] audit: type=1400 audit(1755540860.238:393): avc: denied { getopt } for pid=6664 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.913714][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 55.072412][ T40] audit: type=1400 audit(1755540860.398:394): avc: denied { associate } for pid=6677 comm="syz.3.163" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.094626][ T40] audit: type=1400 audit(1755540860.428:395): avc: denied { write } for pid=6679 comm="syz.3.164" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.135266][ T6683] Bluetooth: MGMT ver 1.23 [ 55.135293][ T40] audit: type=1400 audit(1755540860.468:396): avc: denied { ioctl } for pid=6682 comm="syz.3.165" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x54d9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.298059][ T40] audit: type=1400 audit(1755540860.628:397): avc: denied { read } for pid=6687 comm="syz.3.167" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.298991][ T6688] input: syz1 as /devices/virtual/input/input6 [ 55.308115][ T40] audit: type=1400 audit(1755540860.628:398): avc: denied { open } for pid=6687 comm="syz.3.167" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.317233][ T40] audit: type=1400 audit(1755540860.628:399): avc: denied { ioctl } for pid=6687 comm="syz.3.167" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.331909][ T40] audit: type=1400 audit(1755540860.658:400): avc: denied { mount } for pid=6687 comm="syz.3.167" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 55.340296][ T40] audit: type=1400 audit(1755540860.658:401): avc: denied { unmount } for pid=6687 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 55.408630][ T6695] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 55.412800][ T40] audit: type=1400 audit(1755540860.738:402): avc: denied { setopt } for pid=6694 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.559747][ T6709] 9pnet_fd: p9_fd_create_tcp (6709): problem connecting socket to 127.0.0.1 [ 55.567910][ T6707] kvm: MWAIT instruction emulated as NOP! [ 55.619815][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 55.643014][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 56.032982][ T6067] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.197604][ T6742] comedi: No check for data length of config insn id 162 is implemented [ 56.200991][ T6742] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 56.205161][ T6067] usb 7-1: Using ep0 maxpacket: 32 [ 56.205560][ T6742] comedi: Assuming n=15 is correct [ 56.208872][ T6067] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.213788][ T6067] usb 7-1: config 0 has no interfaces? [ 56.216026][ T6067] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 56.219749][ T6067] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.224433][ T6067] usb 7-1: config 0 descriptor?? [ 56.335717][ T6746] syz.0.186 (6746) used obsolete PPPIOCDETACH ioctl [ 56.425498][ T6749] input: syz1 as /devices/virtual/input/input7 [ 56.662984][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.692985][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 56.814360][ T9] usb 5-1: config 0 has no interfaces? [ 56.816268][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 56.819115][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.822967][ T9] usb 5-1: config 0 descriptor?? [ 56.843352][ T6754] netlink: 'syz.3.188': attribute type 2 has an invalid length. [ 57.227488][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.231622][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.244755][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 57.248459][ T839] usb 5-1: USB disconnect, device number 3 [ 57.334031][ T10] usb 7-1: USB disconnect, device number 2 [ 57.335678][ T6728] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 57.346256][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.181'. [ 57.404752][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 57.408382][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 57.433000][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 57.478015][ T6772] NILFS (nbd2): device size too small [ 57.482187][ T6772] NILFS (nbd2): device size too small [ 57.528875][ T6778] trusted_key: encrypted_key: key trusted:8sX not found [ 57.546173][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'. [ 57.552588][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'. [ 57.560472][ T6780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.196'. [ 57.722908][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 57.847524][ T6794] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 57.849739][ T6794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.852213][ T6794] vhci_hcd vhci_hcd.0: Device attached [ 57.856148][ T6795] usbip_core: unknown command [ 57.857904][ T6795] vhci_hcd: unknown pdu 83886080 [ 57.859582][ T6795] usbip_core: unknown command [ 57.861160][ T1260] vhci_hcd: stop threads [ 57.862530][ T1260] vhci_hcd: release socket [ 57.864561][ T1260] vhci_hcd: disconnect device [ 57.968277][ T5975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.971779][ T5975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.977016][ T5975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.980299][ T5975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.983741][ T5975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.009144][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'. [ 58.058422][ T6804] chnl_net:caif_netlink_parms(): no params data found [ 58.094784][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.097208][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.099555][ T6804] bridge_slave_0: entered allmulticast mode [ 58.101999][ T6804] bridge_slave_0: entered promiscuous mode [ 58.105208][ T6443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.105499][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.107670][ T6443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.112215][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.115663][ T6804] bridge_slave_1: entered allmulticast mode [ 58.119026][ T6804] bridge_slave_1: entered promiscuous mode [ 58.123211][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.141889][ T6815] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 58.142278][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.150198][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.167450][ T6804] team0: Port device team_slave_0 added [ 58.170556][ T6804] team0: Port device team_slave_1 added [ 58.191705][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.194031][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.201955][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.206116][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.208448][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.216662][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.238546][ T6804] hsr_slave_0: entered promiscuous mode [ 58.240703][ T6804] hsr_slave_1: entered promiscuous mode [ 58.242670][ T6804] debugfs: 'hsr0' already exists in 'hsr' [ 58.244672][ T6804] Cannot create hsr debugfs directory [ 58.299692][ T6804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.303521][ T6804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.307081][ T6804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.310411][ T6804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.320232][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.322513][ T6804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.324913][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.327161][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.344776][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.350456][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.353931][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.359443][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.363992][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.366382][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.375711][ T1260] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.378057][ T1260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.385507][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 58.473311][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.571069][ T6847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6847 comm=syz.3.213 [ 58.582553][ T6804] veth0_vlan: entered promiscuous mode [ 58.587630][ T6804] veth1_vlan: entered promiscuous mode [ 58.599100][ T6804] veth0_macvtap: entered promiscuous mode [ 58.602516][ T6804] veth1_macvtap: entered promiscuous mode [ 58.610959][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.617664][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.624446][ T1260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.627276][ T1260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.631286][ T1260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.634956][ T1260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.661597][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.665683][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.666820][ T1260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.670638][ T1260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.718632][ T6864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6864 comm=syz.3.217 [ 58.762986][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 58.769190][ T6873] hfsplus: unable to find HFS+ superblock [ 58.827712][ T6884] Bluetooth: MGMT ver 1.23 [ 58.852565][ T6886] input: syz1 as /devices/virtual/input/input8 [ 58.930960][ T6897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6897 comm=syz.3.227 [ 58.938156][ T6897] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 58.950055][ T6897] bond1: (slave bridge1): making interface the new active one [ 58.953586][ T6897] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 58.978076][ T6901] syz.3.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.263536][ T6938] netlink: 'syz.3.240': attribute type 10 has an invalid length. [ 59.316550][ T6950] mmap: syz.3.240 (6950) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.442516][ T6965] can: request_module (can-proto-0) failed. [ 59.735121][ T6966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.757318][ T6997] netlink: 'syz.3.253': attribute type 2 has an invalid length. [ 59.759886][ T6997] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 59.760036][ T6996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6996 comm=syz.0.256 [ 59.803051][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 59.844073][ T7012] hfsplus: unable to find HFS+ superblock [ 60.042975][ T5975] Bluetooth: hci3: command tx timeout [ 60.050547][ T7026] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 60.071031][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 60.071047][ T40] audit: type=1400 audit(1755540865.398:452): avc: denied { read append } for pid=7027 comm="syz.1.266" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.085887][ T40] audit: type=1400 audit(1755540865.398:453): avc: denied { open } for pid=7027 comm="syz.1.266" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.093951][ T40] audit: type=1400 audit(1755540865.398:454): avc: denied { ioctl } for pid=7027 comm="syz.1.266" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.096007][ T7030] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 60.183230][ T7033] fuse: Bad value for 'fd' [ 60.237630][ T7034] fuse: Bad value for 'fd' [ 60.293276][ T7035] fuse: Bad value for 'fd' [ 60.349056][ T7036] fuse: Bad value for 'fd' [ 60.852923][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 61.883122][ T6991] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 61.883164][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.888205][ T6991] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 61.893012][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 62.123126][ T5975] Bluetooth: hci3: command tx timeout [ 62.699667][ T6991] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.702039][ T6991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.704185][ T6991] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.706350][ T6991] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.708996][ T6991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.711595][ T6991] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.715143][ T6991] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.717811][ T6991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.719787][ T6991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.722102][ T6991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.749798][ T7038] __nla_validate_parse: 13 callbacks suppressed [ 62.749812][ T7038] netlink: 348 bytes leftover after parsing attributes in process `syz.0.269'. [ 62.769325][ T7040] hfsplus: unable to find HFS+ superblock [ 62.791278][ T40] audit: type=1400 audit(1755540868.118:455): avc: denied { read } for pid=7042 comm="syz.1.272" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.801992][ T40] audit: type=1400 audit(1755540868.118:456): avc: denied { open } for pid=7042 comm="syz.1.272" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.812392][ T7046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.273'. [ 62.813060][ T40] audit: type=1400 audit(1755540868.118:457): avc: denied { getopt } for pid=7041 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 62.879227][ T40] audit: type=1400 audit(1755540868.208:458): avc: denied { connect } for pid=7052 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.894741][ T40] audit: type=1400 audit(1755540868.228:459): avc: denied { write } for pid=7052 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.907982][ T40] audit: type=1400 audit(1755540868.238:460): avc: denied { mounton } for pid=7057 comm="syz.0.277" path="/bus" dev="ramfs" ino=16408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 62.915856][ T7058] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.918081][ T7058] overlayfs: failed to set xattr on upper [ 62.920060][ T7058] overlayfs: ...falling back to redirect_dir=nofollow. [ 62.922474][ T7058] overlayfs: ...falling back to metacopy=off. [ 62.924628][ T7058] overlayfs: ...falling back to index=off. [ 62.926503][ T7058] overlayfs: ...falling back to uuid=null. [ 62.932965][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 62.977048][ T7065] netlink: 830 bytes leftover after parsing attributes in process `syz.0.279'. [ 63.000079][ T40] audit: type=1400 audit(1755540868.328:461): avc: denied { create } for pid=7066 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.007018][ T7069] hfsplus: unable to find HFS+ superblock [ 63.043986][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 63.047025][ T7081] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 63.050084][ T7081] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (255) [ 63.117099][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 63.120074][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.122575][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.126798][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.129439][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.136001][ T7099] binder: BINDER_SET_CONTEXT_MGR already set [ 63.138000][ T7099] binder: 7096:7099 ioctl 4018620d 2000000001c0 returned -16 [ 63.178364][ T7106] hfsplus: unable to find HFS+ superblock [ 63.296872][ T7119] netlink: 256 bytes leftover after parsing attributes in process `syz.0.299'. [ 63.428694][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 63.532215][ T7143] tipc: Started in network mode [ 63.534835][ T7143] tipc: Node identity 2, cluster identity 4711 [ 63.537488][ T7143] tipc: Node number set to 2 [ 63.545407][ T7145] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.572904][ T839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 63.577550][ T7147] hfsplus: unable to find HFS+ superblock [ 63.705331][ T7162] 9pnet_fd: Insufficient options for proto=fd [ 63.723171][ T839] usb 9-1: Using ep0 maxpacket: 8 [ 63.726600][ T839] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 63.729580][ T839] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.734777][ T839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.738768][ T839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.742903][ T839] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.748176][ T839] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.751922][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.818154][ T7165] CUSE: info not properly terminated [ 63.897877][ T7171] trusted_key: syz.1.314 sent an empty control message without MSG_MORE. [ 63.948877][ T7176] hfsplus: unable to find HFS+ superblock [ 63.957904][ T839] usb 9-1: usb_control_msg returned -32 [ 63.959690][ T839] usbtmc 9-1:16.0: can't read capabilities [ 63.962989][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 63.963544][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.049785][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 64.150251][ T7185] tty tty27: ldisc open failed (-12), clearing slot 26 [ 64.632965][ T6044] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.733905][ T7208] ptrace attach of "/syz-executor exec"[7209] was attempted by "/syz-executor exec"[7208] [ 64.773036][ T5975] Bluetooth: hci3: command 0x0419 tx timeout [ 64.775313][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.775388][ T5974] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.783498][ T7213] syz.3.322: attempt to access beyond end of device [ 64.783498][ T7213] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 64.787910][ T7213] syz.3.322: attempt to access beyond end of device [ 64.787910][ T7213] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 64.792682][ T7213] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 64.796894][ T7213] syz.3.322: attempt to access beyond end of device [ 64.796894][ T7213] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 64.800991][ T7213] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 64.804167][ T6044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.805202][ T7213] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 64.810041][ T6044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.812874][ T7213] UDF-fs: Scanning with blocksize 512 failed [ 64.814721][ T6044] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 64.814952][ T7211] netlink: 9 bytes leftover after parsing attributes in process `syz.1.325'. [ 64.814997][ T7211] 0: renamed from hsr0 [ 64.816205][ T7213] syz.3.322: attempt to access beyond end of device [ 64.816205][ T7213] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 64.821776][ T6044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.823900][ T7213] syz.3.322: attempt to access beyond end of device [ 64.823900][ T7213] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 64.828042][ T7211] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.830227][ T7213] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 64.836101][ T6044] usb 5-1: config 0 descriptor?? [ 64.837795][ T7213] syz.3.322: attempt to access beyond end of device [ 64.837795][ T7213] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 64.846284][ T7211] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.849817][ T7213] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 64.856007][ T7213] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 64.857304][ T7211] 0: entered allmulticast mode [ 64.859244][ T7213] UDF-fs: Scanning with blocksize 1024 failed [ 64.860844][ T7211] hsr_slave_0: entered allmulticast mode [ 64.861553][ T7211] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 64.864240][ T7213] syz.3.322: attempt to access beyond end of device [ 64.864240][ T7213] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 64.874367][ T7213] syz.3.322: attempt to access beyond end of device [ 64.874367][ T7213] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 64.879034][ T7213] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 64.883216][ T7213] syz.3.322: attempt to access beyond end of device [ 64.883216][ T7213] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 64.889088][ T7213] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 64.892325][ T7213] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 64.896455][ T7213] UDF-fs: Scanning with blocksize 2048 failed [ 64.898848][ T7213] syz.3.322: attempt to access beyond end of device [ 64.898848][ T7213] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 64.903894][ T7213] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 64.907896][ T7213] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 64.911321][ T7213] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 64.916466][ T7213] UDF-fs: Scanning with blocksize 4096 failed [ 64.919055][ T7213] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 64.924415][ T839] usb 9-1: USB disconnect, device number 2 [ 65.012927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 65.068935][ T6044] usbhid 5-1:0.0: can't add hid device: -71 [ 65.071312][ T6044] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.076337][ T6044] usb 5-1: USB disconnect, device number 4 [ 65.226682][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 65.226693][ T40] audit: type=1400 audit(1755540870.558:505): avc: denied { module_request } for pid=7238 comm="syz.1.329" kmod="netdev-pim6reg0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.285848][ T40] audit: type=1400 audit(1755540870.618:506): avc: denied { getopt } for pid=7243 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.380343][ T40] audit: type=1400 audit(1755540870.708:507): avc: denied { bind } for pid=7247 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 65.387048][ T40] audit: type=1400 audit(1755540870.718:508): avc: denied { listen } for pid=7247 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 65.394490][ T40] audit: type=1400 audit(1755540870.718:509): avc: denied { accept } for pid=7247 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 65.489912][ T40] audit: type=1400 audit(1755540870.818:510): avc: denied { ioctl } for pid=7258 comm="syz.4.336" path="socket:[15011]" dev="sockfs" ino=15011 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 65.506492][ T40] audit: type=1400 audit(1755540870.838:511): avc: denied { write } for pid=7247 comm="syz.1.332" path="socket:[14999]" dev="sockfs" ino=14999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 65.508330][ T7262] xt_policy: too many policy elements [ 65.514583][ T40] audit: type=1400 audit(1755540870.838:512): avc: denied { write } for pid=7247 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 65.564955][ T40] audit: type=1400 audit(1755540870.898:513): avc: denied { bind } for pid=7247 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.573392][ T40] audit: type=1400 audit(1755540870.898:514): avc: denied { read } for pid=7247 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.580214][ T7267] veth1_to_batadv: entered promiscuous mode [ 65.585987][ T7267] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 65.715062][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 65.733768][ T7285] IPv6: sit1: Disabled Multicast RS [ 65.735695][ T7285] sit1: entered allmulticast mode [ 65.833463][ T7296] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 65.872948][ T7298] openvswitch: netlink: Multiple metadata blocks provided [ 65.921394][ T5974] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 66.042984][ T5974] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.042985][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 66.165215][ T7316] syzkaller1: entered promiscuous mode [ 66.166961][ T7316] syzkaller1: entered allmulticast mode [ 66.245165][ T7318] syzkaller1: entered promiscuous mode [ 66.247030][ T7318] syzkaller1: entered allmulticast mode [ 66.250278][ T7318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.294692][ T7325] erspan0: entered promiscuous mode [ 66.582903][ T6031] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.732971][ T6031] usb 8-1: Using ep0 maxpacket: 16 [ 66.736727][ T6031] usb 8-1: config 15 has an invalid interface number: 220 but max is 0 [ 66.739548][ T6031] usb 8-1: config 15 has an invalid descriptor of length 255, skipping remainder of the config [ 66.743060][ T6031] usb 8-1: config 15 has no interface number 0 [ 66.745397][ T6031] usb 8-1: config 15 interface 220 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 64 [ 66.749840][ T6031] usb 8-1: config 15 interface 220 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 66.753284][ T6031] usb 8-1: config 15 interface 220 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 66.757085][ T6031] usb 8-1: config 15 interface 220 has no altsetting 0 [ 66.761079][ T6031] usb 8-1: language id specifier not provided by device, defaulting to English [ 66.764807][ T6031] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=38.b6 [ 66.767327][ T6031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.769618][ T6031] usb 8-1: Product: syz [ 66.770834][ T6031] usb 8-1: Manufacturer: syz [ 66.772172][ T6031] usb 8-1: SerialNumber: syz [ 66.775222][ T7327] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.843074][ T5974] Bluetooth: hci3: command 0x0419 tx timeout [ 66.843111][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.980716][ T7327] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 67.061176][ T7334] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 67.082961][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 67.223883][ T6031] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 67.226731][ T6031] dvb-usb: bulk message failed: -8 (2/0) [ 67.228336][ T6031] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 67.231249][ T6031] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 67.234112][ T6031] usb 8-1: media controller created [ 67.239769][ T6031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.245803][ T6031] dvb-usb: bulk message failed: -8 (1/0) [ 67.247511][ T6031] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 67.252602][ T6031] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input10 [ 67.256534][ T6031] dvb-usb: schedule remote query interval to 50 msecs. [ 67.258508][ T6031] dvb-usb: bulk message failed: -8 (2/0) [ 67.260065][ T6031] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 67.265421][ T6031] usb 8-1: USB disconnect, device number 3 [ 67.276780][ T6031] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 67.388479][ T7347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7347 comm=syz.1.364 [ 67.416327][ T34] libceph: connect (1)[c::]:6789 error -101 [ 67.418273][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 67.517971][ T7354] netlink: 'syz.1.365': attribute type 10 has an invalid length. [ 67.521862][ T7354] team0: Port device geneve0 added [ 67.523987][ T6443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.527178][ T6443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.530769][ T6443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.534520][ T6443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.589678][ T7360] openvswitch: netlink: Key type 14608 is out of range max 32 [ 67.673163][ T34] libceph: connect (1)[c::]:6789 error -101 [ 67.675796][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 67.786965][ T7368] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 67.928377][ T7372] binder: 7370:7372 ioctl c0306201 200000000640 returned -22 [ 67.931028][ T7372] binder: 7370:7372 ioctl 8010500c 2000000000c0 returned -22 [ 67.960960][ T7372] binder: 7370:7372 ioctl c0306201 200000000640 returned -22 [ 67.962287][ T7375] binder: 7370:7375 ioctl 8010500c 2000000000c0 returned -22 [ 67.990531][ T7378] can0: slcan on ptm0. [ 67.997916][ T7378] syzkaller1: entered promiscuous mode [ 68.000212][ T7378] syzkaller1: entered allmulticast mode [ 68.132976][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 68.153199][ T7377] can0 (unregistered): slcan off ptm0. [ 68.183349][ T7392] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 68.183351][ T7391] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 68.193163][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 68.197737][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 68.198625][ T7392] veth3: entered promiscuous mode [ 68.212028][ T7393] veth3: entered promiscuous mode [ 68.235221][ T7391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.238982][ T7391] __nla_validate_parse: 8 callbacks suppressed [ 68.238992][ T7391] netlink: 44 bytes leftover after parsing attributes in process `syz.3.372'. [ 68.244550][ T7351] ceph: No mds server is up or the cluster is laggy [ 68.328252][ T7404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.425134][ T7408] fuse: Invalid rootmode [ 68.573047][ T6031] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 68.595306][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 68.617063][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 68.740452][ T7428] sp0: Synchronizing with TNC [ 68.743866][ T7427] [U] ` [ 68.754454][ T6031] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.758068][ T6031] usb 8-1: config 0 has no interfaces? [ 68.759921][ T6031] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 68.762952][ T6031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.768063][ T6031] usb 8-1: config 0 descriptor?? [ 68.932967][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.932999][ T5974] Bluetooth: hci3: command 0x0419 tx timeout [ 68.991903][ T7436] netlink: 'syz.1.388': attribute type 30 has an invalid length. [ 68.992031][ T7437] netlink: 'syz.1.388': attribute type 30 has an invalid length. [ 68.994994][ T7436] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 69.000585][ T7436] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 69.005861][ T7437] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 69.009140][ T7437] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 69.034171][ T7440] netlink: 'syz.1.389': attribute type 11 has an invalid length. [ 69.041565][ T9] usb 8-1: USB disconnect, device number 4 [ 69.056371][ T7444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.390'. [ 69.060830][ T7444] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.063540][ T7444] overlayfs: failed to set xattr on upper [ 69.065958][ T7444] overlayfs: ...falling back to redirect_dir=nofollow. [ 69.068015][ T7444] overlayfs: ...falling back to index=off. [ 69.069923][ T7444] overlayfs: ...falling back to uuid=null. [ 69.071944][ T7444] overlayfs: ...falling back to xino=off. [ 69.109282][ T839] IPVS: starting estimator thread 0... [ 69.154272][ T7456] team0 (unregistering): Port device team_slave_0 removed [ 69.157120][ T7456] team0 (unregistering): Port device team_slave_1 removed [ 69.162721][ T7456] team0 (unregistering): Port device geneve0 removed [ 69.172272][ T1156] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.176931][ T1156] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.180847][ T1156] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.184696][ T1156] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.193759][ T7452] IPVS: using max 56 ests per chain, 134400 per kthread [ 69.423515][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 69.564538][ T7488] /dev/sr0: Can't open blockdev [ 69.589138][ T7497] netlink: 80 bytes leftover after parsing attributes in process `syz.0.405'. [ 69.660005][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 69.668621][ T7501] team0 (unregistering): Port device team_slave_0 removed [ 69.672560][ T7501] team0 (unregistering): Port device team_slave_1 removed [ 69.704482][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.707175][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.709719][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.712387][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.715994][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.718416][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.720934][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.723793][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.726850][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.730187][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.733713][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.734783][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 69.736772][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.741587][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 69.744092][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.750194][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.753435][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.756523][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.759832][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.763536][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.767329][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.770097][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.772403][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.775254][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.777577][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.779998][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.782412][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.785047][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.787733][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.790142][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.792441][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.794844][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.797250][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.799676][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.802068][ T5974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 70.014355][ T7537] nbd: couldn't find device at index -1605786504 [ 70.083598][ T9] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 70.234440][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.238158][ T9] usb 5-1: config 0 has no interfaces? [ 70.240058][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 70.243401][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.247044][ T9] usb 5-1: config 0 descriptor?? [ 70.310225][ T7562] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 70.315321][ T7562] Error validating options; rc = [-22] [ 70.398132][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 70.398142][ T40] audit: type=1400 audit(1755540875.728:550): avc: denied { remount } for pid=7566 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 70.398464][ T7569] bpf: Bad value for 'uid' [ 70.400175][ T40] audit: type=1400 audit(1755540875.728:551): avc: denied { mounton } for pid=7566 comm="syz.1.428" path="/133/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 70.415338][ T40] audit: type=1400 audit(1755540875.728:552): avc: denied { read write } for pid=7568 comm="syz.4.429" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.423219][ T40] audit: type=1400 audit(1755540875.728:553): avc: denied { open } for pid=7568 comm="syz.4.429" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.488356][ T6031] usb 5-1: USB disconnect, device number 5 [ 70.511454][ T40] audit: type=1400 audit(1755540875.838:554): avc: denied { mounton } for pid=7566 comm="syz.1.428" path="/133/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 70.527320][ T7576] binder: 7575:7576 ioctl c018620c 200000000100 returned -1 [ 70.530067][ T7576] binder: 7575:7576 ioctl c0c89425 200000000140 returned -22 [ 70.606907][ T7589] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 70.613376][ T7589] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.658977][ T7598] netlink: 'syz.4.436': attribute type 3 has an invalid length. [ 70.680760][ T7600] nbd: must specify a device to reconfigure [ 70.806831][ T40] audit: type=1400 audit(1755540876.138:555): avc: denied { create } for pid=7612 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.815322][ T40] audit: type=1400 audit(1755540876.138:556): avc: denied { write } for pid=7612 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.823955][ T40] audit: type=1400 audit(1755540876.138:557): avc: denied { nlmsg_write } for pid=7612 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.929430][ T7624] fuse: Unknown parameter 'smackfstransmute' [ 70.939492][ T40] audit: type=1400 audit(1755540876.268:558): avc: denied { append } for pid=7623 comm="syz.4.445" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.004006][ T5974] Bluetooth: hci3: command 0x0419 tx timeout [ 71.051575][ T40] audit: type=1400 audit(1755540876.378:559): avc: denied { ioctl } for pid=7635 comm="syz.0.450" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 71.086581][ T7640] netlink: 'syz.0.452': attribute type 10 has an invalid length. [ 71.110687][ T7644] block device autoloading is deprecated and will be removed. [ 71.118840][ T7646] : renamed from bridge_slave_0 (while UP) [ 71.164765][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.166863][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.166915][ T7656] usb usb8: usbfs: process 7656 (syz.4.457) did not claim interface 0 before use [ 71.174692][ T7656] QAT: failed to copy from user cfg_data. [ 71.492983][ T10] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 71.577833][ T7683] syz.1.467 (7683) used greatest stack depth: 17992 bytes left [ 71.654419][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.658477][ T10] usb 8-1: config 0 has no interfaces? [ 71.660736][ T10] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 71.664559][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.669168][ T10] usb 8-1: config 0 descriptor?? [ 71.689957][ T7689] netlink: 'syz.4.469': attribute type 2 has an invalid length. [ 71.693717][ T7689] bio_check_eod: 2 callbacks suppressed [ 71.693729][ T7689] syz.4.469: attempt to access beyond end of device [ 71.693729][ T7689] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 71.700368][ T7689] syz.4.469: attempt to access beyond end of device [ 71.700368][ T7689] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 71.704500][ T7689] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 71.707516][ T7689] syz.4.469: attempt to access beyond end of device [ 71.707516][ T7689] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 71.711750][ T7689] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 71.715010][ T7689] syz.4.469: attempt to access beyond end of device [ 71.715010][ T7689] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 71.719033][ T7689] syz.4.469: attempt to access beyond end of device [ 71.719033][ T7689] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 71.724106][ T7689] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 71.728140][ T7689] syz.4.469: attempt to access beyond end of device [ 71.728140][ T7689] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 71.733728][ T7689] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 71.737162][ T7689] syz.4.469: attempt to access beyond end of device [ 71.737162][ T7689] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 71.741153][ T7689] syz.4.469: attempt to access beyond end of device [ 71.741153][ T7689] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 71.745590][ T7689] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 71.748703][ T7689] syz.4.469: attempt to access beyond end of device [ 71.748703][ T7689] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 71.752757][ T7689] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 71.756077][ T7689] syz.4.469: attempt to access beyond end of device [ 71.756077][ T7689] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 71.760250][ T7689] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 71.763406][ T7689] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 71.766949][ T7689] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 71.815932][ T7695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.471'. [ 71.890791][ T53] usb 8-1: USB disconnect, device number 5 [ 72.351330][ T7713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7713 comm=syz.0.478 [ 72.351362][ T7714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7714 comm=syz.0.478 [ 72.756192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.761421][ T7729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7729 comm=syz.3.483 [ 72.972383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.978421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.044607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.052314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.055493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.096521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.147828][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880533fbc00: rx timeout, send abort [ 73.150709][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880533fbc00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 73.186222][ T7743] macsec0: entered promiscuous mode [ 73.188012][ T7743] macsec0: entered allmulticast mode [ 73.191167][ T7743] veth1_macvtap: entered allmulticast mode [ 73.256503][ T7745] geneve2: entered promiscuous mode [ 73.375369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.993604][ T839] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 74.111505][ T7762] netlink: 'syz.4.491': attribute type 39 has an invalid length. [ 74.159608][ T839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.162732][ T839] usb 8-1: config 0 has no interfaces? [ 74.164476][ T839] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 74.167548][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.174139][ T839] usb 8-1: config 0 descriptor?? [ 74.398930][ T9] usb 8-1: USB disconnect, device number 6 [ 74.410642][ T7770] loop6: detected capacity change from 0 to 2560 [ 74.413375][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.417578][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.420500][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.423578][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.426806][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.430105][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.433101][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.435628][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.439743][ T7136] ldm_validate_partition_table(): Disk read failed. [ 74.442362][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.445405][ T7136] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.449334][ T7136] Dev loop6: unable to read RDB block 0 [ 74.451503][ T7136] loop6: unable to read partition table [ 74.455286][ T7770] ldm_validate_partition_table(): Disk read failed. [ 74.457743][ T7770] Dev loop6: unable to read RDB block 0 [ 74.459631][ T7770] loop6: unable to read partition table [ 74.464602][ T7770] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 74.560320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.665735][ T7774] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 74.678662][ T7774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.683166][ T7774] __nla_validate_parse: 5 callbacks suppressed [ 74.683178][ T7774] netlink: 92 bytes leftover after parsing attributes in process `syz.4.495'. [ 74.688118][ T7774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.495'. [ 74.980899][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.500'. [ 75.033607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.059793][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 75.067226][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.499'. [ 75.070083][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.499'. [ 75.205510][ T7808] No source specified [ 75.263384][ T7809] netlink: 48 bytes leftover after parsing attributes in process `syz.1.506'. [ 75.266428][ T7809] netlink: 'syz.1.506': attribute type 2 has an invalid length. [ 75.372837][ T6283] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 75.527053][ T6283] usb 9-1: Using ep0 maxpacket: 32 [ 75.530005][ T6283] usb 9-1: config 0 has an invalid interface number: 247 but max is 0 [ 75.532517][ T6283] usb 9-1: config 0 has no interface number 0 [ 75.535695][ T6283] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 75.539561][ T6283] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 75.542242][ T6283] usb 9-1: Product: syz [ 75.543610][ T6283] usb 9-1: Manufacturer: syz [ 75.545844][ T6283] usb 9-1: config 0 descriptor?? [ 75.567486][ T40] kauditd_printk_skb: 46336 callbacks suppressed [ 75.567498][ T40] audit: type=1400 audit(1756065168.809:46896): avc: denied { call } for pid=7822 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 75.569844][ T7823] binder_alloc: 7822: binder_alloc_buf, no vma [ 75.570276][ T40] audit: type=1400 audit(1756065168.809:46897): avc: denied { transfer } for pid=7822 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 75.576816][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 75.578498][ T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 75.744160][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.747559][ T9] usb 6-1: config 0 has no interfaces? [ 75.749597][ T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.752679][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.756400][ T9] usb 6-1: config 0 descriptor?? [ 75.828042][ T6044] usb 9-1: USB disconnect, device number 3 [ 75.956949][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.520'. [ 75.960359][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 75.973297][ T9] usb 6-1: USB disconnect, device number 2 [ 76.013812][ T5974] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 76.013834][ T5974] Bluetooth: hci2: Malformed LE Event: 0x02 [ 76.152631][ T7873] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 76.162321][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.358894][ T6044] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 76.430746][ T6031] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.523111][ T6044] usb 9-1: Using ep0 maxpacket: 16 [ 76.526801][ T6044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.531139][ T6044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.535067][ T6044] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.540103][ T6044] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.543921][ T6044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.547920][ T7879] netlink: zone id is out of range [ 76.550475][ T7879] netlink: zone id is out of range [ 76.550802][ T6044] usb 9-1: config 0 descriptor?? [ 76.552524][ T7879] netlink: zone id is out of range [ 76.552534][ T7879] netlink: zone id is out of range [ 76.558457][ T7879] netlink: zone id is out of range [ 76.560185][ T7879] netlink: zone id is out of range [ 76.563017][ T7879] netlink: zone id is out of range [ 76.565292][ T7879] netlink: zone id is out of range [ 76.567757][ T7879] netlink: zone id is out of range [ 76.569547][ T7879] netlink: zone id is out of range [ 76.574031][ T7879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7879 comm=syz.3.530 [ 76.583668][ T7886] overlayfs: overlapping lowerdir path [ 76.584413][ T7887] overlayfs: overlapping lowerdir path [ 76.590138][ T7887] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 76.593648][ T7886] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 76.595620][ T7887] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 76.610409][ T6031] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 76.614493][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 76.618455][ T6031] usb 5-1: Product: syz [ 76.619951][ T6031] usb 5-1: Manufacturer: syz [ 76.621675][ T6031] usb 5-1: SerialNumber: syz [ 76.624594][ T6031] usb 5-1: config 0 descriptor?? [ 76.629541][ T6031] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 76.632741][ T6031] dvb-usb: bulk message failed: -22 (2/0) [ 76.636775][ T6031] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.638870][ T7889] netlink: 'syz.3.533': attribute type 32 has an invalid length. [ 76.641016][ T6031] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 76.647481][ T6031] usb 5-1: media controller created [ 76.661733][ T6031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.833682][ T7876] dvb-usb: bulk message failed: -22 (4/0) [ 76.835680][ T7877] dvb-usb: bulk message failed: -22 (4/0) [ 76.837725][ T7876] program syz.0.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.841413][ T6031] cxusb: set interface failed [ 76.842976][ T6031] dvb-usb: bulk message failed: -22 (1/0) [ 76.857724][ T6031] DVB: Unable to find symbol mt352_attach() [ 76.859720][ T6031] dvb-usb: bulk message failed: -22 (5/0) [ 76.861592][ T6031] zl10353_read_register: readreg error (reg=127, ret==-121) [ 76.864065][ T6031] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 76.902748][ T6031] rc_core: IR keymap rc-dvico-mce not found [ 76.905099][ T6031] Registered IR keymap rc-empty [ 76.907822][ T6031] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 76.911674][ T6031] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input11 [ 76.915704][ T6031] dvb-usb: schedule remote query interval to 100 msecs. [ 76.917968][ T6031] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 76.926577][ T6031] usb 5-1: USB disconnect, device number 6 [ 76.947660][ T6031] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 76.964540][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 76.975544][ T6044] HID 045e:07da: Invalid code 65791 type 1 [ 76.980497][ T6044] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0003/input/input12 [ 76.985821][ T6044] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 77.130025][ T10] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 77.132831][ T10] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.136371][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 77.140244][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.143920][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.146554][ T10] usb 8-1: Product: syz [ 77.147892][ T10] usb 8-1: Manufacturer: syz [ 77.149556][ T10] usb 8-1: SerialNumber: syz [ 77.152230][ T10] usb 8-1: config 0 descriptor?? [ 77.154939][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 77.156966][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 77.160926][ T10] usb 8-1: selecting invalid altsetting 0 [ 77.189372][ T6044] usb 9-1: USB disconnect, device number 4 [ 77.712994][ T10] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 77.876514][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.880558][ T10] usb 5-1: config 0 has no interfaces? [ 77.882651][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 77.886136][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.892868][ T10] usb 5-1: config 0 descriptor?? [ 78.080810][ T7907] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 78.084251][ T7907] usb 8-1: device reset changed ep0 maxpacket size! [ 78.087331][ T6044] usb 8-1: USB disconnect, device number 7 [ 78.122685][ T6283] usb 5-1: USB disconnect, device number 7 [ 78.234243][ T6044] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 78.387648][ T6044] usb 8-1: Using ep0 maxpacket: 16 [ 78.397507][ T6044] usb 8-1: config 0 has an invalid interface number: 45 but max is 0 [ 78.400314][ T6044] usb 8-1: config 0 has no interface number 0 [ 78.403674][ T6044] usb 8-1: New USB device found, idVendor=1608, idProduct=0212, bcdDevice=70.17 [ 78.406488][ T6044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.409306][ T6044] usb 8-1: Product: syz [ 78.410686][ T6044] usb 8-1: Manufacturer: syz [ 78.412193][ T6044] usb 8-1: SerialNumber: syz [ 78.414478][ T6044] usb 8-1: config 0 descriptor?? [ 78.625338][ T6044] io_ti 8-1:0.45: required endpoints missing [ 78.628236][ T6044] usb 8-1: USB disconnect, device number 8 [ 78.806378][ T40] audit: type=1400 audit(1756065171.970:46898): avc: denied { ioctl } for pid=7942 comm="syz.1.546" path="socket:[29075]" dev="sockfs" ino=29075 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.974203][ T7955] Failed to initialize the IGMP autojoin socket (err -2) [ 79.176582][ T7960] bio_check_eod: 2 callbacks suppressed [ 79.176593][ T7960] syz.3.550: attempt to access beyond end of device [ 79.176593][ T7960] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 79.182269][ T7960] hpfs: hpfs_map_sector(): read error [ 79.419843][ T40] audit: type=1400 audit(1756065172.567:46899): avc: denied { map } for pid=7973 comm="syz.1.556" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.427973][ T40] audit: type=1400 audit(1756065172.567:46900): avc: denied { execute } for pid=7973 comm="syz.1.556" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.461097][ T6031] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 79.614421][ T6031] usb 8-1: Using ep0 maxpacket: 8 [ 79.619715][ T6031] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.624011][ T6031] usb 8-1: config 0 has no interfaces? [ 79.629169][ T6031] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 79.633056][ T6031] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 79.635867][ T6031] usb 8-1: Product: syz [ 79.637221][ T6031] usb 8-1: Manufacturer: syz [ 79.638766][ T6031] usb 8-1: SerialNumber: syz [ 79.641594][ T6031] usb 8-1: config 0 descriptor?? [ 79.658232][ T40] audit: type=1400 audit(1756065172.812:46901): avc: denied { lock } for pid=7979 comm="syz.0.558" path="socket:[28365]" dev="sockfs" ino=28365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 79.795770][ T7995] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 79.799128][ T7995] syz_tun: entered promiscuous mode [ 79.803027][ T7995] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 79.811744][ T40] audit: type=1400 audit(1756065172.959:46902): avc: denied { accept } for pid=7994 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.850585][ T6031] usb 8-1: USB disconnect, device number 9 [ 79.970856][ T8006] __nla_validate_parse: 5 callbacks suppressed [ 79.970872][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 79.978570][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'. [ 79.982933][ T8006] netlink: 'syz.0.567': attribute type 7 has an invalid length. [ 80.007164][ T5974] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 80.015115][ T8008] netlink: 'syz.0.568': attribute type 4 has an invalid length. [ 80.018377][ T8008] netlink: 17 bytes leftover after parsing attributes in process `syz.0.568'. [ 80.279943][ T40] audit: type=1400 audit(1756065173.419:46903): avc: denied { lock } for pid=8016 comm="syz.0.572" path="socket:[27249]" dev="sockfs" ino=27249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.282990][ T8016] delete_channel: no stack [ 80.314720][ T8019] syz.1.573(8019): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 80.320578][ T8021] 9p: Unknown Cache mode or invalid value dcachepȭ߃ B- B$m){oH/" 9 /Iq(W+RF [ 80.462622][ T8032] block nbd0: shutting down sockets [ 80.487942][ T8038] fuse: Unknown parameter '000000000000000000000030x0000000000000007' [ 80.634998][ T5853] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 80.726796][ T10] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 80.768091][ T8049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.583'. [ 80.787993][ T5853] usb 8-1: Using ep0 maxpacket: 8 [ 80.791292][ T5853] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 80.794796][ T5853] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.797923][ T5853] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.801876][ T5853] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.806004][ T5853] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.808813][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.881172][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.884375][ T10] usb 6-1: config 0 has no interfaces? [ 80.886116][ T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 80.889021][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.894432][ T10] usb 6-1: config 0 descriptor?? [ 81.018106][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.021049][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.024403][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.027151][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.030230][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.033767][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.038029][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.043044][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.046110][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.048842][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.056536][ T5853] usb 8-1: GET_CAPABILITIES returned 0 [ 81.061556][ T5853] usbtmc 8-1:16.0: can't read capabilities [ 81.065300][ T40] audit: type=1400 audit(1756065174.184:46904): avc: denied { read } for pid=8028 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.130732][ T6031] usb 6-1: USB disconnect, device number 3 [ 81.571974][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 81.576484][ T8056] xfrm1: entered promiscuous mode [ 81.578104][ T8056] xfrm1: entered allmulticast mode [ 81.753286][ T8061] netlink: 'syz.1.587': attribute type 21 has an invalid length. [ 81.756823][ T8061] netlink: 156 bytes leftover after parsing attributes in process `syz.1.587'. [ 81.802459][ T40] audit: type=1400 audit(1756065174.910:46905): avc: denied { ioctl } for pid=8065 comm="syz.1.588" path="socket:[29254]" dev="sockfs" ino=29254 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 82.012054][ T8080] overlayfs: failed to resolve './file0': -2 [ 82.196869][ T8096] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.306514][ T6031] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 82.408044][ T6283] libceph: mon0 (1)[c::]:6789 connect error [ 82.459624][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 82.470139][ T6031] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.473654][ T6031] usb 6-1: config 0 has no interfaces? [ 82.475502][ T6031] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 82.478594][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.483115][ T6031] usb 6-1: config 0 descriptor?? [ 82.674676][ T6283] libceph: mon0 (1)[c::]:6789 connect error [ 82.701630][ T6031] usb 6-1: USB disconnect, device number 4 [ 82.733566][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 83.191242][ T6283] libceph: mon0 (1)[c::]:6789 connect error [ 83.250132][ T8106] ceph: No mds server is up or the cluster is laggy [ 83.250159][ T8103] ceph: No mds server is up or the cluster is laggy [ 83.281927][ T8112] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 83.284999][ T8112] UDF-fs: Scanning with blocksize 2048 failed [ 83.288188][ T8112] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 83.290991][ T8112] UDF-fs: Scanning with blocksize 4096 failed [ 83.320669][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 83.327036][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 83.359577][ T5974] Bluetooth: hci0: SCO packet too small [ 83.412228][ T8125] random: crng reseeded on system resumption [ 83.414800][ T40] audit: type=1400 audit(1756065176.492:46906): avc: denied { append } for pid=8124 comm="syz.1.606" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.434021][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 83.434563][ T40] audit: type=1400 audit(1756065176.512:46907): avc: denied { create } for pid=8127 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 83.446506][ T40] audit: type=1400 audit(1756065176.512:46908): avc: denied { write } for pid=8127 comm="syz.0.607" path="socket:[30107]" dev="sockfs" ino=30107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 83.454525][ T40] audit: type=1400 audit(1756065176.532:46909): avc: denied { remount } for pid=8124 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 83.477506][ T6044] usb 8-1: USB disconnect, device number 10 [ 83.491056][ T40] audit: type=1400 audit(1756065176.571:46910): avc: denied { mount } for pid=8129 comm="syz.1.608" name="/" dev="9p" ino=30081548290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.504894][ T40] audit: type=1400 audit(1756065176.571:46911): avc: denied { setattr } for pid=8129 comm="syz.1.608" name="/" dev="9p" ino=30081548290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 83.517052][ T40] audit: type=1400 audit(1756065176.591:46912): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.568765][ T8136] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 83.581194][ T8136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.593848][ T8136] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 83.602032][ T8139] dlm: no locking on control device [ 83.883926][ T6061] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.892677][ T6044] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 84.036251][ T6061] usb 5-1: Using ep0 maxpacket: 8 [ 84.040793][ T6061] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 84.047235][ T6061] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.055330][ T6061] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.057952][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 84.059889][ T6061] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.068616][ T6044] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.074804][ T6044] usb 8-1: config 0 has no interfaces? [ 84.077581][ T6061] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.081666][ T6044] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 84.085460][ T6061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.088908][ T6044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.097396][ T6044] usb 8-1: config 0 descriptor?? [ 84.292692][ T8161] net_ratelimit: 422 callbacks suppressed [ 84.292700][ T8161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.304960][ T6061] usb 5-1: GET_CAPABILITIES returned 0 [ 84.306750][ T6061] usbtmc 5-1:16.0: can't read capabilities [ 84.321744][ T10] usb 8-1: USB disconnect, device number 11 [ 84.461487][ T40] audit: type=1400 audit(1756065177.516:46913): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.513565][ T8142] 9pnet_fd: Insufficient options for proto=fd [ 84.517835][ T10] usb 5-1: USB disconnect, device number 8 [ 84.755912][ T6283] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.897418][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 84.905514][ T10] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 84.918383][ T6283] usb 6-1: Using ep0 maxpacket: 8 [ 84.925733][ T6283] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 84.930793][ T6283] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.931831][ T8173] fido_id[8173]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.934874][ T6283] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 84.949969][ T6283] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 84.953079][ T6283] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.956634][ T6283] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 84.960837][ T6283] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 84.963868][ T6283] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.968505][ T6283] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 84.974820][ T6283] usb 6-1: string descriptor 0 read error: -22 [ 84.976790][ T6283] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 84.980193][ T6283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.986141][ T6283] adutux 6-1:168.0: interrupt endpoints not found [ 85.041464][ T8184] [U]  [ 85.068107][ T8188] __nla_validate_parse: 1 callbacks suppressed [ 85.068123][ T8188] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.629'. [ 85.075223][ T8188] netlink: zone id is out of range [ 85.076892][ T8188] netlink: get zone limit has 8 unknown bytes [ 85.189357][ T34] usb 6-1: USB disconnect, device number 5 [ 85.385318][ T6061] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 85.479269][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.550851][ T6061] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.554682][ T6061] usb 8-1: config 0 has no interfaces? [ 85.556859][ T6061] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 85.560592][ T6061] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.567613][ T6061] usb 8-1: config 0 descriptor?? [ 85.815210][ T6283] usb 8-1: USB disconnect, device number 12 [ 86.172810][ T8208] openvswitch: netlink: Duplicate or invalid key (type 0). [ 86.175181][ T8208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.199358][ T5381] pmem0: [POWERTEC] [ 86.275741][ T40] audit: type=1400 audit(1756065179.309:46914): avc: denied { read } for pid=8210 comm="syz.0.636" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 86.282831][ T40] audit: type=1400 audit(1756065179.309:46915): avc: denied { open } for pid=8210 comm="syz.0.636" path="/159/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 86.284739][ T8211] : entered promiscuous mode [ 86.290464][ T40] audit: type=1400 audit(1756065179.309:46916): avc: denied { ioctl } for pid=8210 comm="syz.0.636" path="/159/file0/file0" dev="fuse" ino=64 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 86.406788][ T8218] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 86.411253][ T8218] hsr_slave_0: left promiscuous mode [ 86.419139][ T8218] hsr_slave_1: left promiscuous mode [ 86.440577][ T5974] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 86.443764][ T40] audit: type=1400 audit(1756065179.477:46917): avc: denied { ioctl } for pid=8225 comm="syz.1.640" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.453881][ T40] audit: type=1400 audit(1756065179.487:46918): avc: denied { ioctl } for pid=8225 comm="syz.1.640" path="socket:[27466]" dev="sockfs" ino=27466 ioctlcmd=0xaebd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.473672][ T40] audit: type=1400 audit(1756065179.507:46919): avc: denied { create } for pid=8228 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 86.482857][ T8229] Failed to initialize the IGMP autojoin socket (err -2) [ 86.485408][ T40] audit: type=1400 audit(1756065179.517:46920): avc: denied { sys_admin } for pid=8228 comm="syz.0.641" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 86.533597][ T40] audit: type=1400 audit(1756065179.566:46921): avc: denied { setattr } for pid=6804 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.542269][ T40] audit: type=1400 audit(1756065179.576:46922): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=34906 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 86.551902][ T40] audit: type=1400 audit(1756065179.576:46923): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=34906 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 86.605943][ T8247] geneve2: entered promiscuous mode [ 86.607928][ T8247] geneve2: entered allmulticast mode [ 86.738111][ T8253] gretap1: entered promiscuous mode [ 86.788358][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.649'. [ 86.967035][ T6031] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 87.120336][ T6031] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.124353][ T6031] usb 6-1: config 0 has no interfaces? [ 87.126842][ T6031] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 87.130324][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.133642][ T6031] usb 6-1: config 0 descriptor?? [ 87.191057][ T8280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.656'. [ 87.280707][ T8288] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.340652][ T6283] usb 6-1: USB disconnect, device number 6 [ 87.358796][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 87.358812][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 87.413068][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 87.427654][ T8297] netlink: 'syz.3.661': attribute type 23 has an invalid length. [ 87.443561][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 87.466901][ T8299] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.662'. [ 87.508979][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 87.512479][ T8304] Bluetooth: MGMT ver 1.23 [ 87.530368][ T8306] pmem0: [POWERTEC] [ 87.570893][ T8313] ------------[ cut here ]------------ [ 87.573044][ T8313] WARNING: CPU: 0 PID: 8313 at net/ipv4/route.c:1269 ip_rt_bug+0x2b/0x120 [ 87.576374][ T8313] Modules linked in: [ 87.577764][ T8313] CPU: 0 UID: 0 PID: 8313 Comm: syz.3.667 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 87.583526][ T8313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.587845][ T8313] RIP: 0010:ip_rt_bug+0x2b/0x120 [ 87.589863][ T8313] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 7c e8 c3 f7 66 90 e8 75 e8 c3 f7 ba 02 00 00 00 48 89 de 31 ff e8 a6 81 70 ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 53 c7 9e 01 e8 4e e8 c3 [ 87.597546][ T8313] RSP: 0018:ffffc900065e73d8 EFLAGS: 00010293 [ 87.599985][ T8313] RAX: 0000000000000000 RBX: ffff8880356bcb40 RCX: ffffffff81c3778f [ 87.603057][ T8313] RDX: ffff8880290ec880 RSI: ffffffff89f7a97a RDI: ffffffff8221ff6a [ 87.606429][ T8313] RBP: ffff8880356bcb40 R08: 0000000000000000 R09: 0000000000000000 [ 87.609095][ T8313] R10: ffffffff90ab3b97 R11: 0000000000000001 R12: ffff888035500000 [ 87.611577][ T8313] R13: ffff888022b83600 R14: ffff888052148a00 R15: ffff8880356bcb98 [ 87.614346][ T8313] FS: 00007f8410a1f6c0(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 87.617554][ T8313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.619850][ T8313] CR2: 0000001b31b63fff CR3: 000000002fb1e000 CR4: 0000000000352ef0 [ 87.622497][ T8313] Call Trace: [ 87.623722][ T8313] [ 87.624721][ T8313] ip_push_pending_frames+0x416/0x5d0 [ 87.626530][ T8313] icmp_push_reply+0x308/0x440 [ 87.628053][ T8313] __icmp_send+0xcdf/0x1960 [ 87.629560][ T8313] ? __pfx___icmp_send+0x10/0x10 [ 87.631128][ T8313] ? fib_multipath_hash+0x1651/0x1700 [ 87.633034][ T8313] ? stack_trace_save+0x8e/0xc0 [ 87.634899][ T8313] ? __ip_options_compile+0x873/0x1670 [ 87.637177][ T8313] ? ip_route_input_noref+0x15d/0x2e0 [ 87.639413][ T8313] ip_options_compile+0xb6/0x100 [ 87.641162][ T8313] ? __pfx_ip_options_compile+0x10/0x10 [ 87.642987][ T8313] ? tcp_v4_early_demux+0x484/0xbf0 [ 87.644627][ T8313] ? tcp_v4_early_demux+0xc6/0xbf0 [ 87.646325][ T8313] ip_rcv_finish_core+0x6e1/0x22a0 [ 87.647940][ T8313] ip_rcv+0x1c0/0x600 [ 87.649253][ T8313] ? __pfx_ip_rcv+0x10/0x10 [ 87.650685][ T8313] __netif_receive_skb_one_core+0x197/0x1e0 [ 87.652546][ T8313] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 87.654605][ T8313] ? __asan_memset+0x23/0x50 [ 87.656122][ T8313] ? lock_acquire+0x2cd/0x350 [ 87.657619][ T8313] ? __phys_addr+0xe8/0x180 [ 87.659108][ T8313] __netif_receive_skb+0x1d/0x160 [ 87.660693][ T8313] netif_receive_skb+0x137/0x7b0 [ 87.662275][ T8313] ? __pfx_netif_receive_skb+0x10/0x10 [ 87.663995][ T8313] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 87.666016][ T8313] tun_rx_batched.isra.0+0x3ee/0x740 [ 87.667689][ T8313] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 87.669566][ T8313] ? lock_acquire+0x2cd/0x350 [ 87.671068][ T8313] ? tun_get_user+0x1d8a/0x3ce0 [ 87.672603][ T8313] ? rcu_is_watching+0x12/0xc0 [ 87.674147][ T8313] tun_get_user+0x28e4/0x3ce0 [ 87.675650][ T8313] ? inode_has_perm+0x16f/0x1d0 [ 87.677252][ T8313] ? __pfx_tun_get_user+0x10/0x10 [ 87.678844][ T8313] ? file_has_perm+0x27d/0x350 [ 87.680521][ T8313] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 87.682790][ T8313] ? tun_get+0x191/0x370 [ 87.684484][ T8313] ? rcu_is_watching+0x12/0xc0 [ 87.686487][ T8313] ? lock_release+0x201/0x2f0 [ 87.688363][ T8313] tun_chr_write_iter+0xdc/0x210 [ 87.690396][ T8313] vfs_write+0x7d0/0x11d0 [ 87.692105][ T8313] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 87.694315][ T8313] ? __pfx_vfs_write+0x10/0x10 [ 87.695903][ T8313] ? lock_release+0x201/0x2f0 [ 87.697498][ T8313] ksys_write+0x12a/0x250 [ 87.698908][ T8313] ? __pfx_ksys_write+0x10/0x10 [ 87.700450][ T8313] do_syscall_64+0xcd/0x4c0 [ 87.701905][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.703767][ T8313] RIP: 0033:0x7f840fb8d69f [ 87.705196][ T8313] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 87.711243][ T8313] RSP: 002b:00007f8410a1f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 87.713840][ T8313] RAX: ffffffffffffffda RBX: 00007f840fdb6090 RCX: 00007f840fb8d69f [ 87.716489][ T8313] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 87.719001][ T8313] RBP: 00007f840fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 87.721573][ T8313] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 87.724034][ T8313] R13: 00007f840fdb6128 R14: 00007f840fdb6090 R15: 00007ffd00ed7598 [ 87.726548][ T8313] [ 87.727598][ T8313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.729896][ T8313] CPU: 0 UID: 0 PID: 8313 Comm: syz.3.667 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 87.733017][ T8313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.736453][ T8313] Call Trace: [ 87.737790][ T8313] [ 87.739003][ T8313] dump_stack_lvl+0x3d/0x1f0 [ 87.740819][ T8313] vpanic+0x6e8/0x7a0 [ 87.742516][ T8313] ? __pfx_vpanic+0x10/0x10 [ 87.744326][ T8313] ? ip_rt_bug+0x2b/0x120 [ 87.746034][ T8313] panic+0xca/0xd0 [ 87.747536][ T8313] ? __pfx_panic+0x10/0x10 [ 87.749464][ T8313] ? check_panic_on_warn+0x1f/0xb0 [ 87.751482][ T8313] check_panic_on_warn+0xab/0xb0 [ 87.753427][ T8313] __warn+0xf6/0x3c0 [ 87.754978][ T8313] ? ip_rt_bug+0x2b/0x120 [ 87.756653][ T8313] report_bug+0x3c3/0x580 [ 87.758383][ T8313] ? ip_rt_bug+0x2b/0x120 [ 87.760113][ T8313] handle_bug+0x184/0x210 [ 87.761843][ T8313] exc_invalid_op+0x17/0x50 [ 87.763653][ T8313] asm_exc_invalid_op+0x1a/0x20 [ 87.765587][ T8313] RIP: 0010:ip_rt_bug+0x2b/0x120 [ 87.767543][ T8313] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 7c e8 c3 f7 66 90 e8 75 e8 c3 f7 ba 02 00 00 00 48 89 de 31 ff e8 a6 81 70 ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 53 c7 9e 01 e8 4e e8 c3 [ 87.775205][ T8313] RSP: 0018:ffffc900065e73d8 EFLAGS: 00010293 [ 87.777625][ T8313] RAX: 0000000000000000 RBX: ffff8880356bcb40 RCX: ffffffff81c3778f [ 87.780767][ T8313] RDX: ffff8880290ec880 RSI: ffffffff89f7a97a RDI: ffffffff8221ff6a [ 87.784057][ T8313] RBP: ffff8880356bcb40 R08: 0000000000000000 R09: 0000000000000000 [ 87.787216][ T8313] R10: ffffffff90ab3b97 R11: 0000000000000001 R12: ffff888035500000 [ 87.790487][ T8313] R13: ffff888022b83600 R14: ffff888052148a00 R15: ffff8880356bcb98 [ 87.793662][ T8313] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 87.796047][ T8313] ? ip_rt_bug+0x2a/0x120 [ 87.797783][ T8313] ? kasan_quarantine_put+0x10a/0x240 [ 87.799931][ T8313] ? ip_rt_bug+0x2a/0x120 [ 87.801659][ T8313] ip_push_pending_frames+0x416/0x5d0 [ 87.803942][ T8313] icmp_push_reply+0x308/0x440 [ 87.805832][ T8313] __icmp_send+0xcdf/0x1960 [ 87.807746][ T8313] ? __pfx___icmp_send+0x10/0x10 [ 87.809784][ T8313] ? fib_multipath_hash+0x1651/0x1700 [ 87.811922][ T8313] ? stack_trace_save+0x8e/0xc0 [ 87.813938][ T8313] ? __ip_options_compile+0x873/0x1670 [ 87.816339][ T8313] ? ip_route_input_noref+0x15d/0x2e0 [ 87.818714][ T8313] ip_options_compile+0xb6/0x100 [ 87.820771][ T8313] ? __pfx_ip_options_compile+0x10/0x10 [ 87.822966][ T8313] ? tcp_v4_early_demux+0x484/0xbf0 [ 87.824993][ T8313] ? tcp_v4_early_demux+0xc6/0xbf0 [ 87.827033][ T8313] ip_rcv_finish_core+0x6e1/0x22a0 [ 87.829050][ T8313] ip_rcv+0x1c0/0x600 [ 87.830672][ T8313] ? __pfx_ip_rcv+0x10/0x10 [ 87.832474][ T8313] __netif_receive_skb_one_core+0x197/0x1e0 [ 87.834836][ T8313] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 87.837378][ T8313] ? __asan_memset+0x23/0x50 [ 87.839267][ T8313] ? lock_acquire+0x2cd/0x350 [ 87.841176][ T8313] ? __phys_addr+0xe8/0x180 [ 87.842983][ T8313] __netif_receive_skb+0x1d/0x160 [ 87.844982][ T8313] netif_receive_skb+0x137/0x7b0 [ 87.846946][ T8313] ? __pfx_netif_receive_skb+0x10/0x10 [ 87.849107][ T8313] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 87.851569][ T8313] tun_rx_batched.isra.0+0x3ee/0x740 [ 87.853670][ T8313] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 87.855973][ T8313] ? lock_acquire+0x2cd/0x350 [ 87.857845][ T8313] ? tun_get_user+0x1d8a/0x3ce0 [ 87.859815][ T8313] ? rcu_is_watching+0x12/0xc0 [ 87.861746][ T8313] tun_get_user+0x28e4/0x3ce0 [ 87.863623][ T8313] ? inode_has_perm+0x16f/0x1d0 [ 87.865615][ T8313] ? __pfx_tun_get_user+0x10/0x10 [ 87.867618][ T8313] ? file_has_perm+0x27d/0x350 [ 87.869538][ T8313] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 87.871629][ T8313] ? tun_get+0x191/0x370 [ 87.873323][ T8313] ? rcu_is_watching+0x12/0xc0 [ 87.875260][ T8313] ? lock_release+0x201/0x2f0 [ 87.877144][ T8313] tun_chr_write_iter+0xdc/0x210 [ 87.879157][ T8313] vfs_write+0x7d0/0x11d0 [ 87.880805][ T8313] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 87.883007][ T8313] ? __pfx_vfs_write+0x10/0x10 [ 87.884918][ T8313] ? lock_release+0x201/0x2f0 [ 87.886805][ T8313] ksys_write+0x12a/0x250 [ 87.888532][ T8313] ? __pfx_ksys_write+0x10/0x10 [ 87.890471][ T8313] do_syscall_64+0xcd/0x4c0 [ 87.892280][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.894620][ T8313] RIP: 0033:0x7f840fb8d69f [ 87.896285][ T8313] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 87.904138][ T8313] RSP: 002b:00007f8410a1f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 87.907547][ T8313] RAX: ffffffffffffffda RBX: 00007f840fdb6090 RCX: 00007f840fb8d69f [ 87.910564][ T8313] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 87.913691][ T8313] RBP: 00007f840fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 87.916833][ T8313] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 87.920014][ T8313] R13: 00007f840fdb6128 R14: 00007f840fdb6090 R15: 00007ffd00ed7598 [ 87.923151][ T8313] [ 87.924932][ T8313] Kernel Offset: disabled [ 87.926681][ T8313] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:14:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856416c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc900065e6d40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b10dfe0 R15=ffffffff85641660 RIP=ffffffff856416ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8410a1f6c0 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31b63fff CR3=000000002fb1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000f8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd00ed7aa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd00ed7aa6 00007ffd00ed7aac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fd874a8 00007f840fd874a0 00007f840fd87498 00007f840fd87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84108ed100 00007f840fd87460 00007f840fd87478 00007f840fd874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fd874b8 00007f840fd874b0 00007f840fd874a8 00007f840fd874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000b551c RBX=0000000000000001 RCX=ffffffff8b937c29 RDX=ffffed100d4a6656 RSI=ffffffff8c162600 RDI=ffffffff819133c1 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90ab3b90 R15=0000000000000000 RIP=ffffffff8b93678f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f715f17f000 CR3=000000004e316000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000f8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd00ed7920 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd00ed7aa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd00ed7aa6 00007ffd00ed7aac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840fc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000362f6a5974 RBX=ffff88806a623a00 RCX=00000000000006e0 RDX=0000000000000036 RSI=ffff88806a623a00 RDI=00000000000f821e RBP=00000000000f821e RSP=ffffc90000648ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000002 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a627c80 RIP=ffffffff81683db5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557ea1c500 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557ea2f588 CR3=0000000027835000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e9076089d232d363 c322313643b3e9f8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f408568cc206e6c1 90959db73ba8e70c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 23d202c57c614ae5 74020f43f38b81e7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3dd313b8c5f89d1 c3022926a24f12f7 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001440 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00362ce500000003 4542000096f40000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00362cec00362dc8 00362eed00362eab ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00362cf536030000 78fc0000d41a0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 da6a00000e440000 000000638e0c0000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d35889fbb45e8617 ccbcbbd42765264e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16de3f65059bc443 07f1a30d10fcdc32 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5a83874a8 00007fb5a83874a0 00007fb5a8387498 00007fb5a8387470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5a8eed100 00007fb5a8387460 00007fb5a8387478 00007fb5a83874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5a83874b8 00007fb5a83874b0 00007fb5a83874a8 00007fb5a83874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802600c540 RCX=ffffffff81c3778f RDX=ffff8880327e4880 RSI=ffffffff82348428 RDI=ffffffff81a1f390 RBP=0000000000000000 RSP=ffffc90003dcfe70 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90ab3b97 R11=0000000000000001 R12=1ffff920007b9fd0 R13=ffff88802600c6a0 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81bb9221 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555586657500 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3e6b9f CR3=0000000052fdf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6347a030 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6347b2a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6347b2a6 00007ffd6347b2ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff97a412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff97a412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff97a412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff97a412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff97a412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff97a412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000