last executing test programs: 1m19.371331291s ago: executing program 0 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000021c0)={0x30, r1, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) 1m12.712755073s ago: executing program 0 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000021c0)={0x30, r1, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) 1m5.74216359s ago: executing program 0 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000021c0)={0x30, r1, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) 58.987607371s ago: executing program 0 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000021c0)={0x30, r1, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) 52.041576399s ago: executing program 0 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000021c0)={0x30, r1, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) 44.350677466s ago: executing program 0 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000021c0)={0x30, r1, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) 14.572493825s ago: executing program 3 (id=971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x800, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2004c, 0x19ee0}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 13.963520766s ago: executing program 3 (id=978): creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) 13.962999069s ago: executing program 3 (id=979): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2}, {@in=@remote, 0x0, 0xff}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {0xfffffffe, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x90}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}]}, 0x154}}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2}, {@in=@remote, 0x0, 0xff}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {0xfffffffe, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x90}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}]}, 0x154}}, 0x0) (async) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) (async) 13.893324095s ago: executing program 3 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0x506a, 0x1, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x10, r0, 0x0, 0x0, 0x0, 0x10060, 0x1, {0x2}}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14060000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) io_uring_enter(r1, 0x567, 0x1e, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) unshare(0x22020600) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x1, 0x0, r9, 0xffffffffffffffff}) setns(r7, 0x24020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r10 = socket(0x2, 0x2, 0x4000) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2f, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_pidfd_open(0x0, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 13.223197858s ago: executing program 3 (id=983): sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x300, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000800) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0xfffc, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 12.991434399s ago: executing program 3 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) setreuid(0xee01, 0xffffffffffffffff) r3 = getuid() setfsuid(r3) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r2, 0x8208200) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) read$FUSE(r4, 0x0, 0x0) (async) read$FUSE(r4, 0x0, 0x0) setfsuid(r3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f00000003c0)=0x7ff, 0x4) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x42, 0x2000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000200)=ANY=[@ANYBLOB="040000001e367c2beb3e675a36f78cc4823080943a6b510fccc0625c", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000340001801400020077673000000000000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200766574683000"/24], 0x60}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000200)=ANY=[@ANYBLOB="040000001e367c2beb3e675a36f78cc4823080943a6b510fccc0625c", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000340001801400020077673000000000000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200766574683000"/24], 0x60}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000280)="f20b3ae9339b3ed5f840295acdc755a0c354547f6e8a128d0e4840d261e067856eb12837497e9b749d99bdab28cc7667ed88b5be80e245d3516b3b68d134230280f9449bacaf71d03c98", 0xffffffffffffff15}, {&(0x7f0000000480)="b89e0e426bcfedfb72d605410000000000001aa97a67037782526b67496f5f0eb9284416a70f322f77747ecf8ed65c4ceffca67bb591069919f9de28fdaad222aa5fbee3fb09f664dbcb0fbcdbc437df419160fccf24e1d6e1d47efb544108c23e9761c2068a0600c0000000", 0x6c}, {&(0x7f0000000300)="dbab7ac4816a0aec0379e01ce56252e0cca09f3acc54a9cb16a3cd41d6e118deecbdae2444697a4adeb4bb261681c4c3330dc00dce34682b5d1e84cff3f9e4c4b40ce9ff1c7a62efdf5ed62619cca91f0a9dd125cdce5627372c7df2e98a70fded5084fc558d57ed2a48fa9128052425a08cd787127280a643f13074dcd9e4436b5480d1683280843026b13e0d21", 0x8e}, {&(0x7f0000000040)="b216d2a9d7103cbb77d117cfa48b0e2bbc01500691c07f61daffe1e58613c2", 0x1f}], 0x5}, 0x2000) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000280)="f20b3ae9339b3ed5f840295acdc755a0c354547f6e8a128d0e4840d261e067856eb12837497e9b749d99bdab28cc7667ed88b5be80e245d3516b3b68d134230280f9449bacaf71d03c98", 0xffffffffffffff15}, {&(0x7f0000000480)="b89e0e426bcfedfb72d605410000000000001aa97a67037782526b67496f5f0eb9284416a70f322f77747ecf8ed65c4ceffca67bb591069919f9de28fdaad222aa5fbee3fb09f664dbcb0fbcdbc437df419160fccf24e1d6e1d47efb544108c23e9761c2068a0600c0000000", 0x6c}, {&(0x7f0000000300)="dbab7ac4816a0aec0379e01ce56252e0cca09f3acc54a9cb16a3cd41d6e118deecbdae2444697a4adeb4bb261681c4c3330dc00dce34682b5d1e84cff3f9e4c4b40ce9ff1c7a62efdf5ed62619cca91f0a9dd125cdce5627372c7df2e98a70fded5084fc558d57ed2a48fa9128052425a08cd787127280a643f13074dcd9e4436b5480d1683280843026b13e0d21", 0x8e}, {&(0x7f0000000040)="b216d2a9d7103cbb77d117cfa48b0e2bbc01500691c07f61daffe1e58613c2", 0x1f}], 0x5}, 0x2000) 12.919634736s ago: executing program 32 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) setreuid(0xee01, 0xffffffffffffffff) r3 = getuid() setfsuid(r3) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r2, 0x8208200) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) read$FUSE(r4, 0x0, 0x0) (async) read$FUSE(r4, 0x0, 0x0) setfsuid(r3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f00000003c0)=0x7ff, 0x4) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x42, 0x2000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000200)=ANY=[@ANYBLOB="040000001e367c2beb3e675a36f78cc4823080943a6b510fccc0625c", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000340001801400020077673000000000000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200766574683000"/24], 0x60}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000200)=ANY=[@ANYBLOB="040000001e367c2beb3e675a36f78cc4823080943a6b510fccc0625c", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000340001801400020077673000000000000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200766574683000"/24], 0x60}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000280)="f20b3ae9339b3ed5f840295acdc755a0c354547f6e8a128d0e4840d261e067856eb12837497e9b749d99bdab28cc7667ed88b5be80e245d3516b3b68d134230280f9449bacaf71d03c98", 0xffffffffffffff15}, {&(0x7f0000000480)="b89e0e426bcfedfb72d605410000000000001aa97a67037782526b67496f5f0eb9284416a70f322f77747ecf8ed65c4ceffca67bb591069919f9de28fdaad222aa5fbee3fb09f664dbcb0fbcdbc437df419160fccf24e1d6e1d47efb544108c23e9761c2068a0600c0000000", 0x6c}, {&(0x7f0000000300)="dbab7ac4816a0aec0379e01ce56252e0cca09f3acc54a9cb16a3cd41d6e118deecbdae2444697a4adeb4bb261681c4c3330dc00dce34682b5d1e84cff3f9e4c4b40ce9ff1c7a62efdf5ed62619cca91f0a9dd125cdce5627372c7df2e98a70fded5084fc558d57ed2a48fa9128052425a08cd787127280a643f13074dcd9e4436b5480d1683280843026b13e0d21", 0x8e}, {&(0x7f0000000040)="b216d2a9d7103cbb77d117cfa48b0e2bbc01500691c07f61daffe1e58613c2", 0x1f}], 0x5}, 0x2000) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000280)="f20b3ae9339b3ed5f840295acdc755a0c354547f6e8a128d0e4840d261e067856eb12837497e9b749d99bdab28cc7667ed88b5be80e245d3516b3b68d134230280f9449bacaf71d03c98", 0xffffffffffffff15}, {&(0x7f0000000480)="b89e0e426bcfedfb72d605410000000000001aa97a67037782526b67496f5f0eb9284416a70f322f77747ecf8ed65c4ceffca67bb591069919f9de28fdaad222aa5fbee3fb09f664dbcb0fbcdbc437df419160fccf24e1d6e1d47efb544108c23e9761c2068a0600c0000000", 0x6c}, {&(0x7f0000000300)="dbab7ac4816a0aec0379e01ce56252e0cca09f3acc54a9cb16a3cd41d6e118deecbdae2444697a4adeb4bb261681c4c3330dc00dce34682b5d1e84cff3f9e4c4b40ce9ff1c7a62efdf5ed62619cca91f0a9dd125cdce5627372c7df2e98a70fded5084fc558d57ed2a48fa9128052425a08cd787127280a643f13074dcd9e4436b5480d1683280843026b13e0d21", 0x8e}, {&(0x7f0000000040)="b216d2a9d7103cbb77d117cfa48b0e2bbc01500691c07f61daffe1e58613c2", 0x1f}], 0x5}, 0x2000) 9.433156897s ago: executing program 2 (id=1053): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0104}}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0409200c"], 0x7) capset(0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1}, 0x4000081) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ppoll(&(0x7f0000000140)=[{r4, 0x410}, {r4, 0x10}, {r4, 0x42}, {0xffffffffffffffff, 0x240}, {r4, 0x84c0}, {r4, 0x4002}, {r4, 0x1004}, {r5, 0x4020}], 0x8, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x2]}, 0x8) dup(r3) write$UHID_INPUT(r4, &(0x7f0000002c40)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed02000000f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e8948ff0f661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e9090000000000000052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf55d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545e4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df00", 0x1000}}, 0x1006) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000020000100000000000000000030838bc46ae5e9c029b544aada2fb80a801000000000011800010014000100fe80000000000000000000000000001108000f00ffffffff140003006e72300000000000000000000000000014000200fe"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f00000005c0)={{r3}, "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"}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400)) 8.673099475s ago: executing program 2 (id=1064): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, '.'}}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r6, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) r9 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000004000040"]) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@exit]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000011002d08000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008c00000140003"], 0x34}}, 0x0) 8.523054535s ago: executing program 2 (id=1066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008001}], 0x1, 0x40044) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x118, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffff801}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2f, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3f5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa46f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0xd47}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xda4229b7, 0xfffffc38}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x4}}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x84}}, @IFLA_VLAN_QOS_MAPPING={0x5, 0x1, {0x6ea, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x96ce, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe0000000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffb, 0xffff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}]}, 0x118}}, 0x4000) 7.66165826s ago: executing program 2 (id=1069): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x76581527, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x401, 0x2, 0x4, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x0, 0x2, 0x4, 0x4, 0x314d, {}, {0x2, 0x1, 0xd, 0x9a, 0x6, 0x3b, "06623c5d"}, 0xffff, 0x4, {0x0}, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0xd4, r6, 0x100, 0x70bd2b, 0x21dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7aad}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, 0x0, &(0x7f0000000380)) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x118, 0x24, 0x300, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffff}, {0xfff3}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xf}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffe}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) recvmmsg$unix(r8, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002c80)=""/147, 0x93}], 0x1}}], 0x1, 0x20, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="0637000024ca9d2f3b0ead245b214e9a12756306816f26d2a61560b8fa83aa2de54d8e83e545afecd4028f11a3005579f858a1a7e37ece9d45691adf1e436b4314a136e0ae28447188dde5626d279678b1039b8615", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 7.603039982s ago: executing program 2 (id=1071): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x8040) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x56, 0x0, 0x6, {0x9, 0x7}, {0xfff7, 0x1000}, @ramp={0x3, 0x2, {0x6, 0x8, 0x8, 0x20a6}}}) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x6000, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000240)={[{@mode}, {@quota}], [{@pcr={'pcr', 0x3d, 0x2b}}, {@audit}, {@subj_role={'subj_role', 0x3d, '{(^%]),$[{()*@]}-+&)H-/@%)-&'}}, {@euid_lt={'euid<', r1}}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) ppoll(&(0x7f0000000300)=[{r0, 0x1}, {r0, 0x408}, {r0, 0x2160}, {r0, 0x400}], 0x4, &(0x7f0000000340), &(0x7f0000000380)={[0x68e]}, 0x8) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x8080, 0x0) ioctl$CDROM_DEBUG(r2, 0x5330, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x18}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xd8, 0x6, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xc2, 0x7, 0x1, 0x0, "1b6ce5d9fad70c531bc4a1b84a481531afed03b5d0664b5f182e759a17277da245c7bb463394c01f491fcacd33ef9f6f7265cc26fa7c21306fe06007e1e41439e0d57c1bd92708f298c9cdc3a0f629b00079f19ae632b9e174724698fb36de46db9bf94b37fe6770b71c73d3cc9a40f739a02c5b3c769f301bb45c96d7679c0b07c5203d7e2aa468b5aefe5b51237f8d5bafae9248305501c9f2d7e4c1eb3fa020a04f0188f4cc10d2272b92a5cd8fb607c226915af6ae833967bd0c4935"}]}, @NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xc1, 0x6, "bfd6b87b541670378dc211686b23edecf3e82c3bafa141d4004fee1d048a4ec9d5f01e11c17f9d6f2ebe5e9ad4b012b3a9a57c0d4f3437754fa1f67794140c0698ea06321c47ca589418e37b8dbc0f0153d3bb79f8fac320b96d36eeb3d60deb5a6f213a4115d5c8bd951b266b73ef3648c6722facfd4ea757dc2719dbd48989f2747146797dcbb6fcd860c1b18b4b205367665047af4417e74efc830d29469711fa68d1da2e9e6de6f8780e19e166780124f4352823672e778da10e88"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa2848a688d92697}}}, 0x330}, 0x1, 0x0, 0x0, 0x40810}, 0x4004) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000840), 0x4) write$binfmt_script(r5, &(0x7f0000000880)={'#! ', './file0', [{0x20, 'root'}, {0x20, '(-^]'}], 0xa, "0e8b7b38e5a0e4b1995e5baeb6c0d32fba195e4a85c8f4d583"}, 0x2e) syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r5) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe, 0x32}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setxattr$trusted_overlay_upper(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), &(0x7f0000000a80)={0x0, 0xfb, 0x103, 0x1, 0x7, "6f0038038bc819e7a351b208e77f3431", "d91cc7a62af2a361697e2e398ca70abb674b9d77ac7eb38a5c2bb0a9150ad469b085272c7990890380d9ca7948994b40b74a796b859e70702022287bd651ca7624a90b6140d2e4d75b2969c94a4b142dc630e092fc273dd00b64dbf9972c2fd2ecc6c2fefd701847a2685acd93f23a6d9580af6ab0487f95e4499cbd6a23d984c70f12439fe179c5eddd74eb92cf69f46807dcc81c13fd3a42f23008288d5fb2733f4bb0e3c4bfe4c418e23a538811e04d96cd92a7eda95c9e857511b346a8a80954877ce197b6b4e732c2513894fc0bef185d5a276ae9f8ade4cec78918c466211a763b4d95adf21e5bd6888cbe"}, 0x103, 0x2) bind$inet(r2, &(0x7f0000000bc0)={0x2, 0x4e22, @loopback}, 0x10) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000c00)=""/127) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000c80)={0xc, {0xb, 0xbe8, 0xffffffffffffffff, 0xffffffffffffffff, 0x1}}) write$tun(r5, &(0x7f0000000cc0)={@val={0x0, 0x17}, @val={0x3, 0x0, 0x8d45, 0x18, 0x0, 0x2}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @loopback, @broadcast, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x42) sendto$rxrpc(r5, &(0x7f0000000d40)="137ed9430e9daa2e290c9727e66ce673cfebfa804dd6b784bf0c93c617cb468d790c0687c43c9726c7a4180712df02c21025f702c2f5a8f99abfc26344667b16b2551ca75d2414138de2c5d782c10e4df73825885d04d00d8a31bdbd0bc08d69b7fc0f00c7b3bbcb2c146c0334be750bfe9db2fe06891e16d01916fa718624da03715665", 0x84, 0xc010, &(0x7f0000000e00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000e, 0x2010, r5, 0x0) bind$tipc(r5, &(0x7f0000000e40)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x4}}, 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000e80)=0xb) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000ec0)={'caif0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) 7.499200708s ago: executing program 2 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c004) 7.394310652s ago: executing program 33 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c004) 3.083438172s ago: executing program 5 (id=1105): memfd_create(&(0x7f0000000000)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9b\xc7_K6\xd9[\xc37[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&}\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xb9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x6) (async) r0 = memfd_create(&(0x7f0000000000)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9b\xc7_K6\xd9[\xc37[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&}\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xb9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x1, 0x100000000, 0x201000004}) fcntl$addseals(r0, 0x409, 0xb) 3.080646343s ago: executing program 5 (id=1106): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101002, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000080)={{0x0}, 0x0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000280)=""/4096, 0x9005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r5 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000140)={0x2}) sendfile(r0, r0, 0x0, 0x401) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x248, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x80}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x71}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfffe}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7fff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x94f0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x5e5}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x57}, {0x6, 0x11, 0x9}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0xffffffff}}]}, 0x248}, 0x1, 0x0, 0x0, 0x48000}, 0xc845) read$alg(r8, &(0x7f0000002dc0)=""/4096, 0x1000) unshare(0x6a040000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001300)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000013c0)={0x8, 0x0, &(0x7f0000001340)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000f00)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.513430043s ago: executing program 1 (id=1107): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x80, 0x3, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x8000, 0x3, 0x80}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000440)={0x4a8, r9, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x20b, 0x2a, [@ibss={0x6, 0x2, 0x4}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0xfa, "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"}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0xa, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0xd5, 0x1}}, @tim={0x5, 0x19, {0x9, 0x24, 0xe, "9a48820bdae1ecd1b4d9e35f982d9a18fc5172501542"}}, @fast_bss_trans={0x37, 0xbd, {0x73, 0x6, "7419969d6e9b97dd55bfa39090f3e5b7", "4f992782b03dec21ab6ed5579ff7e0af0fcd61220dd533095fdb34dd4375e41d", "1f61449512f47a118364aba6a60ee07687d5ebc5a8d62995d97ba7e290843c7d", [{0x3, 0x3, "6972c1"}, {0x4, 0x13, "5bc87e252244a53b544bcdabde2bcab14905fe"}, {0x1, 0x21, "cbf9c176a6556683bda75633edf5b92740761870c208da914037113b3d48943706"}, {0x1, 0x6, "b1860431bfc5"}, {0x3, 0x19, "247e7f082521ec1d34eece8ba7028ab39e321aa3d5c5411a47"}, {0x2, 0x9, "8fb81442e972c857f6"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x2, 0x8, 0x41}}]}, @NL80211_ATTR_PROBE_RESP={0x155, 0x91, "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"}, @NL80211_ATTR_IE={0x90, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x0, @device_b, 0x0, @value=@broadcast, 0x2, 0x0, @device_b, 0xfff}}, @peer_mgmt={0x75, 0x6, {0x0, 0x7, @val=0x1, @void, @void}}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x9, 0x6, @broadcast, 0x9, 0x5, 0x7fff}}, @channel_switch={0x25, 0x3, {0x1, 0xb5, 0x8d}}, @measure_req={0x26, 0x19, {0x1, 0x8, 0x6, "aa6c252dde673c629c619557dbef252dfaf1696605a4"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x3, @val=0x8, @void, @val="6fd92c5f73c1d8df251cde1d17753e1d"}}, @mesh_chsw={0x76, 0x6, {0xb6, 0x6, 0x23, 0x5}}, @chsw_timing={0x68, 0x4, {0x6, 0xabf4}}]}, @NL80211_ATTR_PROBE_RESP={0x9d, 0x91, "dae4ab05724911c99745e85bac8d280984ada206be1fb283065443de6c258938b1a57865a65017fc81d38269fa39e267e782afa8c21db98b645dc672fffa3944b59e2975ee18a2e009c967614bc4f9cf04a86338ed8895974deda6625570d8e3d0d7e2fcb376083b7e13d8b83dc29e80cb6dc29d9b742c0997674d1d148ab84afeff6a296db8a453c05d7b46d6dddb698b87b48d1fa204d283"}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x10}, 0x20040044) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000880}, 0x400c090) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r12, &(0x7f0000000200)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0xfffffffe}, 0x80, 0x0}, 0x5b4}], 0x1, 0x8d0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) 2.19255525s ago: executing program 5 (id=1108): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r1, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.143232508s ago: executing program 5 (id=1109): syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340064000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c10000095780000080a00000100000000010000"], 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './bus\x00'}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f00004d5000/0x4000)=nil) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1}, 0x2002) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000010100fbdb3c9696c3000008000300", @ANYRES64=r2, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0x1) write$binfmt_script(r5, &(0x7f0000000cc0), 0xfd45) 2.142949224s ago: executing program 5 (id=1110): r0 = inotify_init1(0x40000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x81000041) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f00000001c0)='coda\x00', 0x10, &(0x7f0000000280)='%*@)\x00\x00') syz_usb_disconnect(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)=0x0) ptrace(0x10, r6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r4, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/time\x00') 1.653420576s ago: executing program 1 (id=1111): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xb4, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x5319) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) 1.653110236s ago: executing program 1 (id=1112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xa, 0x0, &(0x7f0000000100)="63eced8e46dc3f0adf33", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x50) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20008000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x1}, 0xe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.492838273s ago: executing program 1 (id=1113): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) (async) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_subtree(r2, 0x0, 0x9) (async) write$cgroup_subtree(r2, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003800010329bd7000fadbdb2504"], 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb810020000800450000380000000000019078ac1e0001ac1414aa030490781200183f250000007f00000100186371ae9b1c03"], 0x0) mkdirat(r2, &(0x7f00000002c0)='./file1\x00', 0x108) (async) mkdirat(r2, &(0x7f00000002c0)='./file1\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x5000, &(0x7f0000000400)={[{@verity_require}, {@uuid_off}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './bus'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'nfs_export=off'}}, {@obj_role}, {@hash}, {@subj_type={'subj_type', 0x3d, '-]{*{&.]\'@((!]@/-'}}, {@seclabel}]}) (async) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x5000, &(0x7f0000000400)={[{@verity_require}, {@uuid_off}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './bus'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'nfs_export=off'}}, {@obj_role}, {@hash}, {@subj_type={'subj_type', 0x3d, '-]{*{&.]\'@((!]@/-'}}, {@seclabel}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) (async) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') chroot(&(0x7f0000000040)='./file1\x00') syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[], 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x48980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000009) (async) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000009) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_buf(r7, 0x0, 0x28, &(0x7f0000000180)="4d871e98f880e7a8bb17893ad8c40a92", 0x10) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000bdc000/0x3000)=nil, &(0x7f0000bdf000/0x4000)=nil, 0x8, &(0x7f0000000380)=[{0x3ff, 0x0, 0x2b}], 0x1, 0x6, 0x43, 0x5b, 0x38, 0x4c}) (async) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000bdc000/0x3000)=nil, &(0x7f0000bdf000/0x4000)=nil, 0x8, &(0x7f0000000380)=[{0x3ff, 0x0, 0x2b}], 0x1, 0x6, 0x43, 0x5b, 0x38, 0x4c}) 1.492436201s ago: executing program 4 (id=1114): r0 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x7, 0x50323234, 0x4, 0x0, [{0x0, 0x9}, {0x1, 0xd420}, {0xea10, 0x9}, {0x10, 0x8001}, {0x80005, 0x1}, {0x3, 0x569}, {0x6, 0x7}, {0x6, 0x10000}], 0xfd, 0x0, 0x9, 0x0, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.351834829s ago: executing program 5 (id=1115): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d5b4982ac97", 0xe}}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, 0x0) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.282655186s ago: executing program 1 (id=1116): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) memfd_create(&(0x7f0000000080)=']\x04\x88 \xf1\xe5\xad\xa9#\xe1>a\xa2\xa2\x17\xb8\x85\xb9J%', 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x20, &(0x7f0000000000)=0x2, 0xd8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x5414, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x265, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x60, 0x0, 0x2, 0x40, 0xbc}, 0x0, 0x0}) 1.203027167s ago: executing program 4 (id=1117): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000000)=[r1, r1], &(0x7f0000000340)=[0x100000020], 0x400000000009608, 0x2, 0x3}) 352.917489ms ago: executing program 4 (id=1118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="1790323b", 0x4}, {&(0x7f0000000600)="b18117208151981dc685651eb39cad23c09b9b83ae66ad2efbbeaf525c1071efcf772f7547180925e8cb61720fdd0ae9583bc2a5ebff793d068b5d010fb3464ef7d12e8fcf5dd0598abb31b5ff867ca772e933ddb3d235890f828c0ae2bdae8708595e55bfb56762649e449d16b9643c4faf3bc8031d7e01a13701543cdc1cd4635cfc36bba2ba3102a33df49193838abee57ce53b1c2ba2acc5735bf3debf10ad5bf490e2be5b5b6707722297c1e75b5b0ebfbba3d86fae27afdc68856a21599983f11bb65383877eecfaf8246b6cfd0e57a7f50fe6b82a637b4c94c3adb4c66b0a641415db98", 0xe7}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000700)="760d823d278657e784260a3fa385573b6fa9f82c07ba8baa2d2f16c89781125ef6539da37740132f80820ca6587c178785a3344e0ff94f721e4d90a83e0cd9edc8e539eb82c7d7fd168b330a6542ffad8736bf1b261339397a3bd418629b06226b7a5ffe694370d3685ddd71e3de8a91405c5f977179cddf694944c54bb2e407f239e2f4c7203e1c75c6e2fefe7d2ac25a9951a63cb6870b532aad1368a758d5812b767b8f4db5df56affa6af76a024b5dd8ec0429ef050df9cfa3f0064923551e1c2db6b5da3f16af9c2e15f6b4b7184cd1d873f700c341990a116294aa15b130811dfde56554", 0xe7}], 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x2c, 0x2e, 0x5, 0x70bd30, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff3, 0x2}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4481, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000100)) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async, rerun: 32) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,mmap,cache=none,cache=loose,posixacl']) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6cc0c3, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_pidfd_open(r8, 0x0) (async) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000007ac8}) (rerun: 64) 213.111121ms ago: executing program 4 (id=1119): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\r\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8e\x82\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r5, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r6, 0x0, 0x81, 0x1, &(0x7f0000000700)="85", 0x4}) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '( \b\xd1\x00\x9b5\x15\xda\x02\xaa\x96\xef\xb8 '}]}, 0x1b) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 73.071621ms ago: executing program 4 (id=1120): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="300063fbb527cb64f3487e76", 0xc}], 0x1}}], 0x1, 0x8800) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}, 0x40}], 0x1, 0x3, 0x0) close(r1) 317.273µs ago: executing program 1 (id=1121): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x40400, 0x0) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f00000000c0)={@msf={0x80, 0x0, 0x8}, 0x2, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x35, 0x0, r5, 0x0, 0x0, r5, 0x1400, 0x1, {0x0, r6}}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) r7 = getpid() fsetxattr(r0, &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000240)=']\x00', 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1122): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x9, 0xfffffff9, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000001c0)="6c0e6294f253071985f24b41ed664bcb85e181b3dfb1b244bc550f5da47f719338e3c63a790a176e1bd509e6fb8550d818292cab8a9b89eb788033363bfe434e6c8b53e94a549048aab6944146a3e0015ac14bc11a304d387e0b5f15f014142439d74db83b337bdf2a331dae72cd53d88079a72d1225e1b3f25c3bbd0d4c445b75fa50e63b283f8e0c72e220ad", 0x0, r1, 0x4}, 0xffffffffffffffd7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 619): avc: denied { open } for pid=7847 comm="syz.2.422" path="/dev/input/mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 113.039571][ T40] audit: type=1400 audit(1749225722.061:620): avc: denied { ioctl } for pid=7847 comm="syz.2.422" path="/dev/input/mouse0" dev="devtmpfs" ino=947 ioctlcmd=0x5330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 113.511418][ T7745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.529888][ T7745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.552759][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 113.572359][ T7745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.580942][ T7745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.655231][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.668478][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.674151][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.677135][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.693112][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.695730][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.806205][ T7890] batman_adv: batadv0: Adding interface: dummy0 [ 113.808526][ T7891] netlink: 604 bytes leftover after parsing attributes in process `syz.3.426'. [ 113.808743][ T7890] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.822350][ T7890] batman_adv: batadv0: Interface activated: dummy0 [ 113.835418][ T7745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.855256][ T7890] batadv0: mtu less than device minimum [ 113.857563][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.861321][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.864891][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.868446][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.872025][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.875604][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.879122][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.882665][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.886233][ T7890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.922599][ T7745] veth0_vlan: entered promiscuous mode [ 113.928217][ T7745] veth1_vlan: entered promiscuous mode [ 113.944794][ T7745] veth0_macvtap: entered promiscuous mode [ 113.948769][ T7745] veth1_macvtap: entered promiscuous mode [ 113.959545][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.966105][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.972904][ T7745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.976868][ T7745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.981718][ T7745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.981747][ T7745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.038735][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.041646][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.055964][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.058603][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.835741][ T7910] sit0: entered promiscuous mode [ 114.845062][ T7910] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 114.848233][ T7910] netlink: 1 bytes leftover after parsing attributes in process `syz.2.436'. [ 114.941925][ T7913] geneve2: entered promiscuous mode [ 115.094262][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 115.094277][ T40] audit: type=1400 audit(1749225724.121:629): avc: denied { write } for pid=7920 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.205751][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 115.648184][ T7946] binder: 7945:7946 ioctl c018620c 200000000540 returned -22 [ 115.653006][ T40] audit: type=1400 audit(1749225724.681:630): avc: denied { create } for pid=7945 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.659202][ T40] audit: type=1400 audit(1749225724.681:631): avc: denied { connect } for pid=7945 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.785665][ T7952] syz.3.450 uses obsolete (PF_INET,SOCK_PACKET) [ 115.837021][ T40] audit: type=1400 audit(1749225724.861:632): avc: denied { read } for pid=7954 comm="syz.3.451" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.846943][ T40] audit: type=1400 audit(1749225724.861:633): avc: denied { open } for pid=7954 comm="syz.3.451" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.855896][ T40] audit: type=1400 audit(1749225724.861:634): avc: denied { ioctl } for pid=7954 comm="syz.3.451" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.998991][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.000865][ T837] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 116.161536][ T837] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.165213][ T837] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.168664][ T837] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.172237][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.177685][ T7948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.182933][ T837] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.404612][ T7948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.411929][ T837] usb 7-1: USB disconnect, device number 9 [ 117.093756][ T40] audit: type=1400 audit(1749225726.121:635): avc: denied { execmem } for pid=7961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 117.109260][ T40] audit: type=1400 audit(1749225726.131:636): avc: denied { transfer } for pid=7962 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 117.109621][ T7964] binder_alloc: 7962: binder_alloc_buf, no vma [ 117.121379][ T7966] binder: BINDER_SET_CONTEXT_MGR already set [ 117.124015][ T7966] binder: 7962:7966 ioctl 4018620d 2000000000c0 returned -16 [ 117.128346][ T7965] sctp: [Deprecated]: syz.3.454 (pid 7965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.128346][ T7965] Use struct sctp_sack_info instead [ 117.216846][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.221070][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.225288][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.230397][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.235625][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.356203][ T7973] chnl_net:caif_netlink_parms(): no params data found [ 117.395642][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 117.444018][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.446419][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.448899][ T7973] bridge_slave_0: entered allmulticast mode [ 117.451954][ T7973] bridge_slave_0: entered promiscuous mode [ 117.455070][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.457397][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.460926][ T7973] bridge_slave_1: entered allmulticast mode [ 117.463564][ T7973] bridge_slave_1: entered promiscuous mode [ 117.498613][ T7973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.503143][ T7973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.543280][ T7973] team0: Port device team_slave_0 added [ 117.547363][ T7973] team0: Port device team_slave_1 added [ 117.564047][ T40] audit: type=1400 audit(1749225726.591:637): avc: denied { ioctl } for pid=7997 comm="syz.3.461" path="socket:[26727]" dev="sockfs" ino=26727 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 117.583715][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.586138][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.594911][ T7973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.601696][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.604313][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.614360][ T7973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.655621][ T7973] hsr_slave_0: entered promiscuous mode [ 117.657876][ T7973] hsr_slave_1: entered promiscuous mode [ 117.660487][ T7973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.662816][ T7973] Cannot create hsr debugfs directory [ 117.955584][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.032161][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.043537][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 118.092285][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.209224][ T1145] bridge_slave_1: left allmulticast mode [ 118.211121][ T1145] bridge_slave_1: left promiscuous mode [ 118.212883][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.218921][ T1145] bridge_slave_0: left allmulticast mode [ 118.220503][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 118.221849][ T1145] bridge_slave_0: left promiscuous mode [ 118.225191][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.434669][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.438864][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.443288][ T1145] bond0 (unregistering): Released all slaves [ 118.629468][ T40] audit: type=1400 audit(1749225727.651:638): avc: denied { getopt } for pid=8039 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.648716][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 118.649167][ T8046] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 118.651533][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 118.667026][ T8046] CIFS mount error: No usable UNC path provided in device string! [ 118.667026][ T8046] [ 118.670434][ T8046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.699107][ T8044] macsec2: entered promiscuous mode [ 118.763785][ T1145] hsr_slave_0: left promiscuous mode [ 118.766219][ T1145] hsr_slave_1: left promiscuous mode [ 118.768593][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.772098][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.774940][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.777282][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.795259][ T1145] veth1_macvtap: left promiscuous mode [ 118.796961][ T1145] veth0_macvtap: left promiscuous mode [ 118.798676][ T1145] veth1_vlan: left promiscuous mode [ 118.800487][ T1145] veth0_vlan: left promiscuous mode [ 118.806675][ T8056] binder: 8052:8056 ioctl 40046210 0 returned -14 [ 119.146788][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 119.151182][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 119.319445][ T5944] Bluetooth: hci0: command tx timeout [ 119.389049][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 119.459947][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 119.939667][ T8060] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 120.051140][ T7973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.055257][ T7973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.062231][ T7973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.069954][ T7973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.102656][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 120.107040][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 120.114601][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 120.116663][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.118897][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 120.118906][ T40] audit: type=1400 audit(1749225729.141:645): avc: denied { lock } for pid=8090 comm="syz.3.481" path="socket:[26043]" dev="sockfs" ino=26043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.129246][ T40] audit: type=1400 audit(1749225729.151:646): avc: denied { setopt } for pid=8090 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.131042][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.140807][ T8089] vlan2: entered promiscuous mode [ 120.142524][ T8089] bridge2: entered promiscuous mode [ 120.144424][ T8089] bridge2: port 1(vlan2) entered blocking state [ 120.147023][ T8089] bridge2: port 1(vlan2) entered disabled state [ 120.149162][ T8089] vlan2: entered allmulticast mode [ 120.151735][ T8089] bridge2: entered allmulticast mode [ 120.155643][ T8089] vlan2: left allmulticast mode [ 120.157269][ T8089] bridge2: left allmulticast mode [ 120.169335][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.172339][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.183966][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.186464][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.248441][ T40] audit: type=1400 audit(1749225729.261:647): avc: denied { ioctl } for pid=8095 comm="syz.3.482" path="socket:[26051]" dev="sockfs" ino=26051 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.266516][ T8096] No control pipe specified [ 120.307629][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.329996][ T7973] veth0_vlan: entered promiscuous mode [ 120.339132][ T7973] veth1_vlan: entered promiscuous mode [ 120.344254][ T8112] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 120.360828][ T40] audit: type=1400 audit(1749225729.391:648): avc: denied { firmware_load } for pid=8111 comm="syz.1.485" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 120.364215][ T7973] veth0_macvtap: entered promiscuous mode [ 120.373159][ T7973] veth1_macvtap: entered promiscuous mode [ 120.384976][ T8112] syz.1.485 (8112) used greatest stack depth: 19576 bytes left [ 120.389131][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.394060][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.400380][ T7973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.403161][ T7973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.406373][ T7973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.409057][ T7973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.427353][ T8114] overlayfs: conflicting options: userxattr,redirect_dir=on [ 120.449419][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.451797][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.480445][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.487150][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.499104][ T40] audit: type=1400 audit(1749225729.521:649): avc: denied { mounton } for pid=7973 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 120.599991][ T40] audit: type=1400 audit(1749225729.631:650): avc: denied { load_policy } for pid=8095 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 120.604208][ T8096] SELinux: ebitmap: high bit 1536 is not equal to the expected value 1152 [ 120.612825][ T8096] SELinux: failed to load policy [ 120.868867][ T40] audit: type=1400 audit(1749225729.891:651): avc: denied { wake_alarm } for pid=8121 comm="syz.3.489" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.878615][ T8122] PKCS8: Unsupported PKCS#8 version [ 120.981978][ T8133] xt_bpf: check failed: parse error [ 120.985589][ T40] audit: type=1400 audit(1749225730.011:652): avc: denied { listen } for pid=8132 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.991831][ T40] audit: type=1400 audit(1749225730.011:653): avc: denied { lock } for pid=8132 comm="syz.2.494" path="socket:[29199]" dev="sockfs" ino=29199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 121.269508][ T10] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 121.421053][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.424342][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.428541][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.432089][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.473781][ T8147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.478417][ T40] audit: type=1326 audit(1749225730.501:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.1.497" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4301d8e929 code=0x7ffc0000 [ 121.638935][ T10] usb 8-1: usb_control_msg returned -32 [ 121.641903][ T10] usbtmc 8-1:16.0: can't read capabilities [ 121.671294][ T8154] net_ratelimit: 10 callbacks suppressed [ 121.671310][ T8154] openvswitch: netlink: Message has 3 unknown bytes. [ 121.676166][ T8154] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.934631][ T5944] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 121.934801][ T8166] netlink: 'syz.2.503': attribute type 10 has an invalid length. [ 121.946014][ T8166] batman_adv: batadv0: Adding interface: team0 [ 121.949448][ T8166] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.959407][ T8166] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 121.964891][ T8166] netlink: 'syz.2.503': attribute type 10 has an invalid length. [ 121.968134][ T8166] team0: entered promiscuous mode [ 121.971538][ T8166] team_slave_0: entered promiscuous mode [ 121.974050][ T8166] team_slave_1: entered promiscuous mode [ 121.978049][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.981311][ T8166] batman_adv: batadv0: Interface activated: team0 [ 121.984055][ T8166] batman_adv: batadv0: Interface deactivated: team0 [ 121.986717][ T8166] batman_adv: batadv0: Removing interface: team0 [ 121.990904][ T8166] bridge0: port 3(team0) entered blocking state [ 121.993619][ T8166] bridge0: port 3(team0) entered disabled state [ 121.996318][ T8166] team0: entered allmulticast mode [ 121.998545][ T8166] team_slave_0: entered allmulticast mode [ 122.001989][ T8166] team_slave_1: entered allmulticast mode [ 122.006429][ T8166] bridge0: port 3(team0) entered blocking state [ 122.008975][ T8166] bridge0: port 3(team0) entered forwarding state [ 122.542096][ T8169] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 122.545777][ T8169] overlayfs: missing 'lowerdir' [ 122.602561][ T8171] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56315 sclass=netlink_xfrm_socket pid=8171 comm=syz.2.505 [ 122.791879][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.871503][ T1349] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 123.019459][ T1349] usb 7-1: Using ep0 maxpacket: 32 [ 123.023284][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.026701][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.030855][ T1349] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 123.033620][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.038436][ T1349] usb 7-1: config 0 descriptor?? [ 123.459651][ T1349] savu 0003:1E7D:2D5A.0004: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 123.487956][ T5348] udevd[5348]: worker [5951] terminated by signal 33 (Unknown signal 33) [ 123.492055][ T5348] udevd[5348]: worker [5951] failed while handling '/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:1E7D:2D5A.0004/hidraw/hidraw1' [ 123.652847][ T8178] syz.2.507: attempt to access beyond end of device [ 123.652847][ T8178] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 123.658411][ T8178] exFAT-fs (nbd2): unable to read boot sector [ 123.661913][ T8178] exFAT-fs (nbd2): failed to read boot sector [ 123.663963][ T8178] exFAT-fs (nbd2): failed to recognize exfat type [ 123.667635][ T837] usb 7-1: USB disconnect, device number 10 [ 123.994188][ T1349] usb 8-1: USB disconnect, device number 8 [ 124.017663][ T8188] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 124.141214][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.149696][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.153155][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.156149][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.159693][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.173551][ T8198] 9pnet_fd: Insufficient options for proto=fd [ 124.276559][ T8196] chnl_net:caif_netlink_parms(): no params data found [ 124.381060][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.383566][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.385923][ T8196] bridge_slave_0: entered allmulticast mode [ 124.388606][ T8196] bridge_slave_0: entered promiscuous mode [ 124.392068][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.394582][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.396909][ T8196] bridge_slave_1: entered allmulticast mode [ 124.399813][ T8196] bridge_slave_1: entered promiscuous mode [ 124.409861][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 124.435174][ T8196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.440208][ T8196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.474454][ T8196] team0: Port device team_slave_0 added [ 124.478277][ T8196] team0: Port device team_slave_1 added [ 124.506449][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.529272][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.531513][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.540412][ T8196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.544838][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.547188][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.556777][ T8196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.559395][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 124.563519][ T10] usb 8-1: config index 0 descriptor too short (expected 65472, got 36) [ 124.567731][ T10] usb 8-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 124.570615][ T10] usb 8-1: config 255 has an invalid descriptor of length 208, skipping remainder of the config [ 124.573729][ T10] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 124.576526][ T10] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 124.579161][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.589989][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.638964][ T8196] hsr_slave_0: entered promiscuous mode [ 124.641533][ T8196] hsr_slave_1: entered promiscuous mode [ 124.643684][ T8196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.646019][ T8196] Cannot create hsr debugfs directory [ 124.678811][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.811669][ T10] usb 8-1: string descriptor 0 read error: -71 [ 124.822341][ T10] usb 8-1: USB disconnect, device number 9 [ 124.845017][ T13] bridge_slave_1: left allmulticast mode [ 124.846834][ T13] bridge_slave_1: left promiscuous mode [ 124.848693][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.853545][ T13] bridge_slave_0: left allmulticast mode [ 124.855420][ T13] bridge_slave_0: left promiscuous mode [ 124.857250][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.153693][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.158580][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.163533][ T13] bond0 (unregistering): Released all slaves [ 125.179657][ T837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.353071][ T837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 125.357654][ T837] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 125.364505][ T837] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 125.375893][ T837] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.379890][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.383129][ T837] usb 6-1: Product: syz [ 125.390584][ T837] usb 6-1: Manufacturer: syz [ 125.392069][ T837] usb 6-1: SerialNumber: syz [ 125.500903][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 125.500956][ T40] audit: type=1400 audit(1749225734.531:683): avc: denied { bind } for pid=8219 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.511577][ T13] hsr_slave_0: left promiscuous mode [ 125.514594][ T13] hsr_slave_1: left promiscuous mode [ 125.517239][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.520338][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.524516][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.527647][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.555935][ T13] veth1_macvtap: left promiscuous mode [ 125.558098][ T13] veth0_macvtap: left promiscuous mode [ 125.560144][ T13] veth1_vlan: left promiscuous mode [ 125.561830][ T13] veth0_vlan: left promiscuous mode [ 125.604684][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.619897][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.630235][ T837] cdc_ncm 6-1:1.0: bind() failure [ 125.639176][ T837] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 125.642613][ T837] cdc_ncm 6-1:1.1: bind() failure [ 125.648074][ T837] usb 6-1: USB disconnect, device number 6 [ 125.774365][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 125.893854][ T8231] SELinux: ebitmap: truncated map [ 125.901493][ T8231] SELinux: failed to load policy [ 126.211513][ T5944] Bluetooth: hci0: command tx timeout [ 126.238213][ T13] team0 (unregistering): Port device team_slave_1 removed [ 126.313246][ T13] team0 (unregistering): Port device team_slave_0 removed [ 126.419502][ T5983] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 126.580755][ T5983] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.583919][ T5983] usb 6-1: config 0 interface 0 has no altsetting 0 [ 126.587829][ T5983] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.590875][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.593359][ T5983] usb 6-1: Product: syz [ 126.595052][ T5983] usb 6-1: Manufacturer: syz [ 126.596512][ T5983] usb 6-1: SerialNumber: syz [ 126.608934][ T5983] usb 6-1: config 0 descriptor?? [ 126.613243][ T5983] usb 6-1: selecting invalid altsetting 0 [ 126.813199][ T40] audit: type=1400 audit(1749225735.841:684): avc: denied { setattr } for pid=8244 comm="syz.3.528" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.824576][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.832843][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.851106][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.856210][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.864561][ T8253] __nla_validate_parse: 6 callbacks suppressed [ 126.864571][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 126.874749][ T8243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8243 comm=syz.2.527 [ 126.944703][ T8196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.946753][ T40] audit: type=1400 audit(1749225735.971:685): avc: denied { append } for pid=8256 comm="syz.3.530" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 126.957451][ T8196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.965776][ T8196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.976895][ T8196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.023793][ T8270] binder: 8267:8270 ioctl ae41 1 returned -22 [ 127.043283][ T40] audit: type=1400 audit(1749225736.071:686): avc: denied { bind } for pid=8269 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.051816][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 127.090063][ T8196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.106064][ T8196] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.114280][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.117224][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.127022][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.129470][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.130937][ T8276] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 127.164944][ T8241] program syz.1.526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.167865][ T40] audit: type=1400 audit(1749225736.191:687): avc: denied { append } for pid=8240 comm="syz.1.526" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.284424][ T8196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.323349][ T8196] veth0_vlan: entered promiscuous mode [ 127.336454][ T8196] veth1_vlan: entered promiscuous mode [ 127.360739][ T8196] veth0_macvtap: entered promiscuous mode [ 127.366037][ T8196] veth1_macvtap: entered promiscuous mode [ 127.377885][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.395575][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.402931][ T8196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.406534][ T8196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.407406][ T8286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.535'. [ 127.410343][ T8196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.416237][ T8196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.450090][ T6021] usb 6-1: USB disconnect, device number 7 [ 127.468947][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.471532][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.493960][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.496501][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.902666][ T40] audit: type=1400 audit(1749225736.931:688): avc: denied { map } for pid=8287 comm="syz.1.536" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 127.911250][ T40] audit: type=1400 audit(1749225736.931:689): avc: denied { nlmsg_read } for pid=8287 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.963324][ T8293] set match dimension is over the limit! [ 127.976922][ T8293] sctp: [Deprecated]: syz.2.537 (pid 8293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.976922][ T8293] Use struct sctp_sack_info instead [ 128.249393][ T1349] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 128.420361][ T1349] usb 7-1: Using ep0 maxpacket: 16 [ 128.424772][ T1349] usb 7-1: config index 0 descriptor too short (expected 65472, got 36) [ 128.427858][ T1349] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.430798][ T1349] usb 7-1: config 255 has an invalid descriptor of length 208, skipping remainder of the config [ 128.434075][ T1349] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.437127][ T1349] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 128.440998][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.655097][ T1349] usb 7-1: string descriptor 0 read error: -71 [ 128.659444][ T1349] usb 7-1: USB disconnect, device number 11 [ 128.822243][ T8296] omfs: Invalid superblock (0) [ 129.390491][ T40] audit: type=1400 audit(1749225738.421:690): avc: denied { create } for pid=8306 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 129.397850][ T40] audit: type=1400 audit(1749225738.421:691): avc: denied { sys_admin } for pid=8306 comm="syz.1.542" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 129.411996][ T8310] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 129.418012][ T8311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 129.703777][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.167219][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.172081][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.174956][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.180305][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.186506][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.220244][ T1122] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.224417][ T1122] sr 2:0:0:0: [sr0] tag#20 Sense Key : Illegal Request [current] [ 131.227610][ T1122] sr 2:0:0:0: [sr0] tag#20 Add. Sense: Invalid command operation code [ 131.239488][ T1122] sr 2:0:0:0: [sr0] tag#20 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 131.242940][ T1122] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 131.247160][ T1122] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 131.253046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.258113][ T5944] Bluetooth: hci2: connection err: -111 [ 131.280547][ T40] audit: type=1400 audit(1749225740.311:692): avc: denied { setopt } for pid=8333 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.456190][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'. [ 131.465888][ T8358] ipt_ECN: cannot use operation on non-tcp rule [ 131.533337][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.539545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 131.561064][ T8341] chnl_net:caif_netlink_parms(): no params data found [ 131.581788][ T8362] netlink: 92 bytes leftover after parsing attributes in process `syz.3.558'. [ 131.623221][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.720831][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.731514][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.734287][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.737249][ T8341] bridge_slave_0: entered allmulticast mode [ 131.741860][ T8341] bridge_slave_0: entered promiscuous mode [ 131.745113][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.749912][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.753124][ T8341] bridge_slave_1: entered allmulticast mode [ 131.757228][ T8341] bridge_slave_1: entered promiscuous mode [ 131.782452][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 131.786020][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 131.849497][ T8341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.855219][ T8341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.864092][ T8372] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 131.910806][ T8372] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 131.923736][ T40] audit: type=1400 audit(1749225740.951:693): avc: denied { ioctl } for pid=8376 comm="syz.3.562" path="socket:[30981]" dev="sockfs" ino=30981 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.931223][ T8341] team0: Port device team_slave_0 added [ 131.938322][ T8378] fuse: Unknown parameter 'g' [ 131.948054][ T8341] team0: Port device team_slave_1 added [ 131.949668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 131.953050][ T1145] tipc: Subscription rejected, illegal request [ 131.968899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.995620][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.998625][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.013975][ T8341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.020903][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.023838][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.036717][ T8341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.136463][ T40] audit: type=1400 audit(1749225741.161:694): avc: denied { read write } for pid=8388 comm="syz.2.565" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.153573][ T40] audit: type=1400 audit(1749225741.161:695): avc: denied { open } for pid=8388 comm="syz.2.565" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.166652][ T40] audit: type=1400 audit(1749225741.161:696): avc: denied { ioctl } for pid=8388 comm="syz.2.565" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.185357][ T8341] hsr_slave_0: entered promiscuous mode [ 132.188642][ T8341] hsr_slave_1: entered promiscuous mode [ 132.191985][ T8341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.194866][ T8341] Cannot create hsr debugfs directory [ 132.199485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 132.275598][ T40] audit: type=1400 audit(1749225741.301:697): avc: denied { accept } for pid=8395 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.283099][ T13] bridge_slave_1: left allmulticast mode [ 132.284787][ T13] bridge_slave_1: left promiscuous mode [ 132.286885][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.301786][ T13] bridge_slave_0: left allmulticast mode [ 132.303521][ T13] bridge_slave_0: left promiscuous mode [ 132.305292][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.523348][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.525331][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.602657][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.607715][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.612081][ T13] bond0 (unregistering): Released all slaves [ 132.802311][ T8411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.572'. [ 132.835322][ T40] audit: type=1400 audit(1749225741.861:698): avc: denied { append } for pid=8412 comm="syz.3.573" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.844561][ T40] audit: type=1400 audit(1749225741.861:699): avc: denied { map } for pid=8412 comm="syz.3.573" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.852650][ T40] audit: type=1400 audit(1749225741.861:700): avc: denied { execute } for pid=8412 comm="syz.3.573" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.967194][ T8424] use of bytesused == 0 is deprecated and will be removed in the future, [ 132.971321][ T8424] use the actual size instead. [ 132.982896][ T13] hsr_slave_0: left promiscuous mode [ 132.985489][ T13] hsr_slave_1: left promiscuous mode [ 132.987585][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.990460][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.995660][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.998353][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.018811][ T40] audit: type=1400 audit(1749225742.041:701): avc: denied { getopt } for pid=8426 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 133.024221][ T8427] tmpfs: Invalid gid '0x00000000ffffffff' [ 133.025057][ T13] veth1_macvtap: left promiscuous mode [ 133.025133][ T13] veth0_macvtap: left promiscuous mode [ 133.025267][ T13] veth1_vlan: left promiscuous mode [ 133.025365][ T13] veth0_vlan: left promiscuous mode [ 133.241967][ T5944] Bluetooth: hci0: command tx timeout [ 133.636230][ T13] team0 (unregistering): Port device team_slave_1 removed [ 133.709039][ T13] team0 (unregistering): Port device team_slave_0 removed [ 134.222784][ T8449] tmpfs: Unknown parameter '' [ 134.317221][ T8452] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 134.322093][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.392481][ T8455] netlink: 60 bytes leftover after parsing attributes in process `syz.2.584'. [ 134.397906][ T8455] netlink: 60 bytes leftover after parsing attributes in process `syz.2.584'. [ 134.429077][ T8341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.436368][ T8341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.441340][ T8341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.445766][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 134.454642][ T8341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.499458][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 134.508188][ T8341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.510963][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 134.525982][ T8341] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.533947][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.536117][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.560920][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.563215][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.580047][ T8472] program syz.2.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.593629][ T8472] wireguard0: entered promiscuous mode [ 134.595511][ T8472] wireguard0: entered allmulticast mode [ 134.601089][ T8472] tracefs: Invalid uid '0x00000000ffffffff' [ 134.605243][ T8477] program syz.2.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.692879][ T8341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.712637][ T8341] veth0_vlan: entered promiscuous mode [ 134.744730][ T8341] veth1_vlan: entered promiscuous mode [ 134.765707][ T8341] veth0_macvtap: entered promiscuous mode [ 134.771270][ T8341] veth1_macvtap: entered promiscuous mode [ 134.785511][ T8341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.794770][ T8341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.802110][ T8341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.804867][ T8341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.807635][ T8341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.810634][ T8341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.910823][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.913321][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.943162][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.945617][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.023861][ T8494] nfs: Unknown parameter 'è' [ 135.892063][ T8507] overlayfs: failed to resolve './bus/file0': -2 [ 135.933511][ T8509] xt_cgroup: xt_cgroup: no path or classid specified [ 136.042104][ T8523] kvm: Disabled LAPIC found during irq injection [ 136.246353][ T8530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.330977][ T8538] (syz.2.606,8538,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 136.331518][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 136.331530][ T40] audit: type=1400 audit(1749225745.361:714): avc: denied { create } for pid=8536 comm="syz.2.606" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 136.348662][ T40] audit: type=1400 audit(1749225745.361:715): avc: denied { shutdown } for pid=8536 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.359608][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 136.361728][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 136.405292][ T8541] netlink: 'syz.1.607': attribute type 21 has an invalid length. [ 136.462611][ T40] audit: type=1400 audit(1749225745.491:716): avc: denied { accept } for pid=8540 comm="syz.3.608" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.591380][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 136.595528][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.610'. [ 136.739499][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 136.824332][ T40] audit: type=1400 audit(1749225745.851:717): avc: denied { bind } for pid=8558 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.899374][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 136.903646][ T54] usb 6-1: config 9 has an invalid interface number: 89 but max is 3 [ 136.906666][ T54] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 136.910854][ T54] usb 6-1: config 9 has 1 interface, different from the descriptor's value: 4 [ 136.914219][ T54] usb 6-1: config 9 has no interface number 0 [ 136.916542][ T54] usb 6-1: config 9 interface 89 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 136.921343][ T54] usb 6-1: config 9 interface 89 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 136.927988][ T54] usb 6-1: New USB device found, idVendor=12d1, idProduct=a22e, bcdDevice=1c.99 [ 136.934175][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.937295][ T54] usb 6-1: Product: Ñ— [ 136.938963][ T54] usb 6-1: Manufacturer: Ð’ [ 136.941134][ T54] usb 6-1: SerialNumber: Т [ 137.005488][ T40] audit: type=1400 audit(1749225746.031:718): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 137.034243][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 137.104081][ T8574] vxcan1 speed is unknown, defaulting to 1000 [ 137.107990][ T8574] vxcan1 speed is unknown, defaulting to 1000 [ 137.111040][ T8574] vxcan1 speed is unknown, defaulting to 1000 [ 137.149156][ T8545] /dev/sr0: Can't open blockdev [ 137.164596][ T8545] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.182816][ T54] option 6-1:9.89: GSM modem (1-port) converter detected [ 137.197360][ T54] usb 6-1: USB disconnect, device number 8 [ 137.207815][ T54] option 6-1:9.89: device disconnected [ 137.246442][ T8574] infiniband syz0: set active [ 137.249060][ T29] vxcan1 speed is unknown, defaulting to 1000 [ 137.251260][ T8574] infiniband syz0: added vxcan1 [ 137.282683][ T8574] RDS/IB: syz0: added [ 137.285059][ T8574] smc: adding ib device syz0 with port count 1 [ 137.287844][ T8574] smc: ib device syz0 port 1 has pnetid [ 137.291311][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 137.295152][ T8574] vxcan1 speed is unknown, defaulting to 1000 [ 137.297273][ T8593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.303050][ T40] audit: type=1400 audit(1749225746.331:719): avc: denied { map } for pid=8591 comm="syz.2.619" path="socket:[31410]" dev="sockfs" ino=31410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.310369][ T40] audit: type=1400 audit(1749225746.331:720): avc: denied { read accept } for pid=8591 comm="syz.2.619" path="socket:[31410]" dev="sockfs" ino=31410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.387592][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.406004][ T8574] vxcan1 speed is unknown, defaulting to 1000 [ 137.505680][ T8574] vxcan1 speed is unknown, defaulting to 1000 [ 137.514358][ T8595] QAT: Stopping all acceleration devices. [ 137.517538][ T8595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65525 sclass=netlink_route_socket pid=8595 comm=syz.2.620 [ 137.586088][ T8574] vxcan1 speed is unknown, defaulting to 1000 [ 137.589562][ T837] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 137.593870][ T8599] fuse: Bad value for 'user_id' [ 137.595897][ T8599] fuse: Bad value for 'user_id' [ 138.279766][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.851792][ T8615] netlink: 14 bytes leftover after parsing attributes in process `syz.1.626'. [ 138.857356][ T8615] hsr_slave_0: left promiscuous mode [ 138.860740][ T8615] hsr_slave_1: left promiscuous mode [ 138.908298][ T40] audit: type=1400 audit(1749225747.931:721): avc: denied { associate } for pid=8617 comm="syz.3.628" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 138.916576][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.917802][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.923260][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.927806][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.930598][ T8618] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 138.931868][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.978514][ T8624] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 138.978794][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 138.983098][ T8624] netlink: 224 bytes leftover after parsing attributes in process `syz.2.627'. [ 139.051013][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.079143][ T8636] tipc: Started in network mode [ 139.088267][ T8636] tipc: Node identity 5298a88bd539, cluster identity 4711 [ 139.090911][ T8636] tipc: Enabled bearer , priority 0 [ 139.112381][ T8636] syzkaller0: entered promiscuous mode [ 139.114230][ T8636] syzkaller0: entered allmulticast mode [ 139.116439][ T8636] tipc: Resetting bearer [ 139.138276][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.159069][ T8635] tipc: Resetting bearer [ 139.369418][ T40] audit: type=1400 audit(1749225748.391:722): avc: denied { listen } for pid=8644 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.439906][ T40] audit: type=1400 audit(1749225748.461:723): avc: denied { accept } for pid=8644 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.071973][ T8635] tipc: Disabling bearer [ 140.096681][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.109151][ T8645] vlan2: entered allmulticast mode [ 140.110990][ T8645] bond0: entered allmulticast mode [ 140.112640][ T8645] bond_slave_0: entered allmulticast mode [ 140.114466][ T8645] bond_slave_1: entered allmulticast mode [ 140.195061][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 140.222821][ T8648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 140.297152][ T13] bridge_slave_1: left allmulticast mode [ 140.298986][ T13] bridge_slave_1: left promiscuous mode [ 140.302261][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.307554][ T13] bridge_slave_0: left allmulticast mode [ 140.309393][ T13] bridge_slave_0: left promiscuous mode [ 140.311223][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.418127][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 140.592002][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.596001][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.599521][ T13] bond0 (unregistering): Released all slaves [ 140.605466][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.607836][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.612589][ T8622] bridge_slave_0: entered allmulticast mode [ 140.620714][ T8622] bridge_slave_0: entered promiscuous mode [ 140.624188][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.626525][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.629666][ T8622] bridge_slave_1: entered allmulticast mode [ 140.633640][ T8622] bridge_slave_1: entered promiscuous mode [ 140.697231][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.701657][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.742698][ T8622] team0: Port device team_slave_0 added [ 140.767530][ T8622] team0: Port device team_slave_1 added [ 140.769840][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.643'. [ 140.787596][ T8682] program syz.2.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.801963][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.804413][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.813795][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.818544][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.822552][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.832020][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.904883][ T8622] hsr_slave_0: entered promiscuous mode [ 140.907438][ T8622] hsr_slave_1: entered promiscuous mode [ 140.991680][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 140.999456][ T5941] Bluetooth: hci0: command tx timeout [ 141.036183][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 141.041662][ T13] hsr_slave_0: left promiscuous mode [ 141.043733][ T13] hsr_slave_1: left promiscuous mode [ 141.045784][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.048075][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.051409][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.053763][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.071158][ T13] veth1_macvtap: left promiscuous mode [ 141.072917][ T13] veth0_macvtap: left promiscuous mode [ 141.074740][ T13] veth1_vlan: left promiscuous mode [ 141.076484][ T13] veth0_vlan: left promiscuous mode [ 141.145744][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.648'. [ 141.635329][ T13] team0 (unregistering): Port device team_slave_1 removed [ 141.697511][ T13] team0 (unregistering): Port device team_slave_0 removed [ 142.311759][ T8721] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 142.439562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 142.607014][ T8622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.611908][ T8622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.615752][ T8622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.619596][ T8622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.657408][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.667711][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 142.667722][ T40] audit: type=1400 audit(1749225751.691:726): avc: denied { ioctl } for pid=8747 comm="syz.3.660" path="socket:[33309]" dev="sockfs" ino=33309 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.668899][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.683936][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.686174][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.691813][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.694076][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.802871][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.830893][ T8622] veth0_vlan: entered promiscuous mode [ 142.835646][ T8622] veth1_vlan: entered promiscuous mode [ 142.850808][ T8622] veth0_macvtap: entered promiscuous mode [ 142.856904][ T8622] veth1_macvtap: entered promiscuous mode [ 142.865939][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.874158][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.878471][ T8622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.881241][ T8622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.883928][ T8622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.886596][ T8622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.889582][ T6193] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 142.926800][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.930179][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.942414][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.945324][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.039393][ T6193] usb 7-1: Invalid ep0 maxpacket: 32 [ 143.079442][ T5944] Bluetooth: hci0: command tx timeout [ 143.171327][ T6193] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 143.319530][ T6193] usb 7-1: Invalid ep0 maxpacket: 32 [ 143.322219][ T6193] usb usb7-port1: attempt power cycle [ 143.669439][ T6193] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 143.700401][ T6193] usb 7-1: Invalid ep0 maxpacket: 32 [ 143.829461][ T6193] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 143.850089][ T6193] usb 7-1: Invalid ep0 maxpacket: 32 [ 143.852620][ T6193] usb usb7-port1: unable to enumerate USB device [ 145.683502][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 145.687176][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 145.706197][ T8758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 145.854959][ T40] audit: type=1400 audit(1749225754.881:727): avc: denied { create } for pid=8760 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 145.863871][ T40] audit: type=1400 audit(1749225754.881:728): avc: denied { ioctl } for pid=8760 comm="syz.1.671" path="socket:[34001]" dev="sockfs" ino=34001 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 146.069503][ T837] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 146.143421][ T8782] program syz.3.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.229391][ T837] usb 7-1: Using ep0 maxpacket: 8 [ 146.232335][ T837] usb 7-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 146.235472][ T837] usb 7-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 146.238120][ T837] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 146.240888][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.399455][ T1349] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 146.447007][ T8771] netlink: 14 bytes leftover after parsing attributes in process `syz.2.665'. [ 146.514460][ T8771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.519913][ T8771] bond_slave_0: left allmulticast mode [ 146.526171][ T8771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.529494][ T1349] usb 8-1: device descriptor read/64, error -71 [ 146.529548][ T8771] bond_slave_1: left allmulticast mode [ 146.536036][ T8771] bond0 (unregistering): Released all slaves [ 146.600679][ T61] usb 7-1: USB disconnect, device number 17 [ 146.769464][ T1349] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 146.899438][ T1349] usb 8-1: device descriptor read/64, error -71 [ 147.019611][ T1349] usb usb8-port1: attempt power cycle [ 147.188017][ T40] audit: type=1400 audit(1749225756.211:729): avc: denied { write } for pid=8787 comm="syz.2.668" path="socket:[33374]" dev="sockfs" ino=33374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 147.211755][ T40] audit: type=1400 audit(1749225756.241:730): avc: denied { execute } for pid=8795 comm="syz.1.672" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.359552][ T1349] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 147.383854][ T1349] usb 8-1: device descriptor read/8, error -71 [ 147.532703][ T8799] futex_wake_op: syz.1.673 tries to shift op by -1; fix this program [ 147.629444][ T1349] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 147.650620][ T1349] usb 8-1: device descriptor read/8, error -71 [ 147.695917][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 147.699607][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'. [ 147.710793][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.676'. [ 147.761359][ T1349] usb usb8-port1: unable to enumerate USB device [ 147.994650][ T8826] xfrm1: entered allmulticast mode [ 148.153356][ T5944] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 148.472994][ T40] audit: type=1400 audit(1749225757.501:731): avc: denied { getopt } for pid=8848 comm="syz.2.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.593743][ T8851] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 149.187194][ T8884] gfs2: gfs2 mount does not exist [ 149.283314][ T40] audit: type=1400 audit(1749225758.311:732): avc: denied { map } for pid=8886 comm="syz.3.702" path="socket:[34901]" dev="sockfs" ino=34901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.409402][ T1349] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 149.564483][ T1349] usb 6-1: not running at top speed; connect to a high speed hub [ 149.568726][ T1349] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 149.574218][ T1349] usb 6-1: config 1 interface 0 has no altsetting 0 [ 149.579458][ T1349] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.40 [ 149.583578][ T1349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.587101][ T1349] usb 6-1: Product: 態 [ 149.589082][ T1349] usb 6-1: Manufacturer: â°à¸²ë¤§êŸ¤éº¨åª¹â¹®í…¹æ´‰è‘䭌衃ã¾ïš½å–⡈쥯샹෸ä„ᠡἼ뙜瘄︺鵷콨í嚟쭙ïŽè˜Œæ–— [ 149.591982][ T8895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.705'. [ 149.599066][ T8895] bridge0: port 3(team0) entered blocking state [ 149.600127][ T1349] usb 6-1: SerialNumber: syz [ 149.601759][ T8895] bridge0: port 3(team0) entered forwarding state [ 149.606435][ T8881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.606528][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.611070][ T8895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.613397][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.615608][ T8895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.623654][ T40] audit: type=1400 audit(1749225758.651:733): avc: denied { write } for pid=8894 comm="syz.3.705" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.792153][ T8906] netlink: 2044 bytes leftover after parsing attributes in process `syz.3.709'. [ 149.817189][ T40] audit: type=1400 audit(1749225758.841:734): avc: denied { firmware_load } for pid=13 comm="kworker/u32:1" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 149.826965][ T40] audit: type=1400 audit(1749225758.841:735): avc: denied { firmware_load } for pid=75 comm="kworker/u32:4" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 149.864143][ T40] audit: type=1400 audit(1749225758.891:736): avc: denied { ioctl } for pid=8880 comm="syz.1.700" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 150.679491][ T5939] Bluetooth: hci4: command 0xfc11 tx timeout [ 150.679720][ T5944] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 151.879515][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.879590][ T8881] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 152.157675][ T8881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.190520][ T1349] usbhid 6-1:1.0: can't add hid device: -71 [ 152.193007][ T1349] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 152.197026][ T1349] usb 6-1: USB disconnect, device number 9 [ 152.261887][ T40] audit: type=1400 audit(1749225761.291:737): avc: denied { mount } for pid=8918 comm="syz.1.712" name="/" dev="9p" ino=35913858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 152.283703][ T40] audit: type=1400 audit(1749225761.311:738): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 152.328843][ T8927] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8927 comm=syz.2.716 [ 152.334160][ T8927] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8927 comm=syz.2.716 [ 152.338464][ T40] audit: type=1400 audit(1749225761.361:739): avc: denied { audit_write } for pid=8926 comm="syz.2.716" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 152.366033][ T40] audit: type=1400 audit(1749225761.391:740): avc: denied { write } for pid=8928 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.419385][ T837] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 152.544022][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.548897][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.553741][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.558224][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.563249][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.568820][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.574237][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.579082][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.580928][ T837] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 152.583637][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.586375][ T837] usb 8-1: can't read configurations, error -22 [ 152.590890][ T8952] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 152.650245][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.704261][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.719443][ T837] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 152.870986][ T837] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 152.873583][ T837] usb 8-1: can't read configurations, error -22 [ 152.875770][ T837] usb usb8-port1: attempt power cycle [ 153.010341][ T8955] FAT-fs (nullb0): bogus number of reserved sectors [ 153.013171][ T8955] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 153.063020][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 153.165943][ T8959] ceph: Path missing in source [ 153.278598][ T8968] overlayfs: disabling nfs_export due to verity=require [ 153.396652][ T8978] tmpfs: Bad value for 'mpol' [ 153.398229][ T8980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8980 comm=syz.3.732 [ 153.442669][ T8985] xt_cgroup: path and classid specified [ 153.526098][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 153.526112][ T40] audit: type=1400 audit(1749225762.551:742): avc: denied { map } for pid=8993 comm="syz.3.737" path="socket:[33724]" dev="sockfs" ino=33724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 153.753876][ T9012] overlayfs: failed to resolve './file0': -2 [ 153.958569][ T40] audit: type=1400 audit(1749225762.981:743): avc: denied { append } for pid=9025 comm="syz.2.749" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 153.959461][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.968270][ T40] audit: type=1400 audit(1749225762.991:744): avc: denied { bind } for pid=9025 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.242874][ T40] audit: type=1400 audit(1749225763.271:745): avc: denied { mount } for pid=9037 comm="syz.2.753" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.246577][ T9038] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.254876][ T40] audit: type=1400 audit(1749225763.281:746): avc: denied { mounton } for pid=9037 comm="syz.2.753" path="/237/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 154.353744][ T40] audit: type=1400 audit(1749225763.381:747): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.376728][ T40] audit: type=1400 audit(1749225763.401:748): avc: denied { write } for pid=9040 comm="syz.2.754" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 154.383640][ T40] audit: type=1400 audit(1749225763.401:749): avc: denied { getopt } for pid=9040 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.389234][ T40] audit: type=1400 audit(1749225763.401:750): avc: denied { getopt } for pid=9040 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.936629][ T40] audit: type=1400 audit(1749225763.961:751): avc: denied { block_suspend } for pid=9056 comm="syz.2.760" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.496744][ T9071] 9pnet_virtio: no channels available for device syz [ 155.571898][ T9077] can: request_module (can-proto-0) failed. [ 155.710884][ T9087] netlink: 64 bytes leftover after parsing attributes in process `syz.1.770'. [ 155.719485][ T5944] Bluetooth: hci4: command 0xfc11 tx timeout [ 155.719918][ T5939] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 155.732455][ T9090] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.745789][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.753779][ T9002] sp0: Synchronizing with TNC [ 155.788060][ T9093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.772'. [ 155.792608][ T9090] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 155.793382][ T9093] netlink: 'syz.1.772': attribute type 3 has an invalid length. [ 155.797829][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.017039][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 156.191074][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 156.212305][ T9113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9113 comm=syz.1.780 [ 156.393840][ T9123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.620480][ T9138] Falling back ldisc for ttyS3. [ 156.973345][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'. [ 157.098552][ T9168] No source specified [ 157.255796][ T9178] xt_hashlimit: size too large, truncated to 1048576 [ 157.370162][ T9178] netlink: 204172 bytes leftover after parsing attributes in process `syz.1.803'. [ 157.714505][ T9186] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 157.716832][ T9186] netlink: 228 bytes leftover after parsing attributes in process `syz.3.805'. [ 157.799497][ T5939] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.799752][ T5944] Bluetooth: hci5: command 0x1003 tx timeout [ 157.950643][ T9208] netlink: 72 bytes leftover after parsing attributes in process `syz.2.810'. [ 158.195975][ T9223] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 158.402464][ T9243] netlink: 'syz.3.824': attribute type 10 has an invalid length. [ 158.405197][ T9243] netlink: 2 bytes leftover after parsing attributes in process `syz.3.824'. [ 159.524934][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 159.524945][ T40] audit: type=1400 audit(1749225768.551:759): avc: denied { ioctl } for pid=9291 comm="syz.3.842" path="socket:[37181]" dev="sockfs" ino=37181 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.536282][ T40] audit: type=1400 audit(1749225768.561:760): avc: denied { setattr } for pid=9291 comm="syz.3.842" name="AF_VSOCK" dev="sockfs" ino=37181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.555310][ T40] audit: type=1400 audit(1749225768.581:761): avc: denied { getopt } for pid=9291 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.667699][ T9305] digital: digital_start_poll: Unknown protocol [ 159.837617][ T40] audit: type=1400 audit(1749225768.861:762): avc: denied { bind } for pid=9322 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 159.838476][ T9322] delete_channel: no stack [ 159.878843][ T40] audit: type=1400 audit(1749225768.901:763): avc: denied { append } for pid=9328 comm="syz.1.855" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.911011][ T40] audit: type=1400 audit(1749225768.941:764): avc: denied { setattr } for pid=9332 comm="syz.3.857" name="PACKET" dev="sockfs" ino=35304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.917665][ T9333] vlan2: entered promiscuous mode [ 159.923901][ T9333] vlan2: entered allmulticast mode [ 159.926217][ T9333] hsr_slave_1: entered allmulticast mode [ 159.942705][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 159.979494][ T1349] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 160.149480][ T1349] usb 7-1: Using ep0 maxpacket: 16 [ 160.155868][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.159258][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.162852][ T1349] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.166784][ T1349] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.170597][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.174298][ T1349] usb 7-1: config 0 descriptor?? [ 160.228107][ T40] audit: type=1400 audit(1749225769.251:765): avc: denied { read } for pid=9357 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.380190][ T1349] usbhid 7-1:0.0: can't add hid device: -71 [ 160.382304][ T1349] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 160.386252][ T1349] usb 7-1: USB disconnect, device number 18 [ 160.503662][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 160.729384][ T7951] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 160.736069][ T9380] net_ratelimit: 266 callbacks suppressed [ 160.736080][ T9380] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 160.833416][ T9386] binfmt_misc: register: failed to install interpreter file ./file0 [ 160.836333][ T9387] binfmt_misc: register: failed to install interpreter file ./file0 [ 160.845267][ T9387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9387 comm=syz.1.875 [ 160.891933][ T7951] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 160.895320][ T7951] usb 8-1: can't read configurations, error -61 [ 161.004084][ T9401] /dev/sr0: Can't open blockdev [ 161.019516][ T7951] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 161.029206][ T9404] netlink: 56 bytes leftover after parsing attributes in process `syz.2.881'. [ 161.057888][ T9406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.103759][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.882'. [ 161.142438][ T40] audit: type=1400 audit(1749225770.171:766): avc: denied { getopt } for pid=9409 comm="syz.2.883" lport=43727 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.188265][ T9415] ISOFS: Unable to identify CD-ROM format. [ 161.195908][ T40] audit: type=1400 audit(1749225770.221:767): avc: denied { accept } for pid=9414 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 161.197199][ T9415] overlayfs: failed to resolve './file1': -2 [ 161.203684][ T7951] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 161.207371][ T7951] usb 8-1: can't read configurations, error -61 [ 161.210477][ T7951] usb usb8-port1: attempt power cycle [ 161.215407][ T9415] tmpfs: Bad value for 'mpol' [ 161.243947][ T9417] overlayfs: overlapping lowerdir path [ 161.278019][ T9421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65498 sclass=netlink_route_socket pid=9421 comm=syz.2.886 [ 161.319484][ T40] audit: type=1400 audit(1749225770.351:768): avc: denied { read } for pid=9422 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.549667][ T7951] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 161.571815][ T7951] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 161.575175][ T7951] usb 8-1: can't read configurations, error -61 [ 161.583167][ T9436] cgroup: fork rejected by pids controller in /syz2 [ 161.709759][ T7951] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 161.732816][ T7951] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 161.736070][ T7951] usb 8-1: can't read configurations, error -61 [ 161.740561][ T7951] usb usb8-port1: unable to enumerate USB device [ 162.024768][ T9517] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 162.037537][ T9517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.050976][ T9517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.053684][ T9517] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 162.057321][ T9517] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 162.093078][ T9518] batman_adv: batadv0: Interface deactivated: dummy0 [ 162.097681][ T9518] batman_adv: batadv0: Removing interface: dummy0 [ 162.105551][ T9518] bond4: (slave dummy0): making interface the new active one [ 162.108100][ T9518] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 162.284915][ T9567] vxcan1 speed is unknown, defaulting to 1000 [ 162.363471][ T9575] xt_HMARK: spi-set and port-set can't be combined [ 163.158630][ T9594] SELinux: policydb version -352640257 does not match my version range 15-34 [ 163.160862][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 163.161930][ T9594] SELinux: failed to load policy [ 163.338457][ T9602] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.344464][ T9602] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.399472][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.629462][ T61] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 163.789531][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 163.797691][ T61] usb 6-1: config 0 has an invalid interface number: 150 but max is 0 [ 163.800965][ T61] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 163.803620][ T61] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 163.806759][ T61] usb 6-1: config 0 has no interface number 1 [ 163.808918][ T61] usb 6-1: config 0 has no interface number 2 [ 163.811451][ T61] usb 6-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.816472][ T61] usb 6-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 163.820498][ T61] usb 6-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 163.824649][ T61] usb 6-1: config 0 interface 150 has no altsetting 0 [ 163.827096][ T61] usb 6-1: config 0 interface 112 has no altsetting 0 [ 163.830271][ T61] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 163.833711][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.838057][ T61] usb 6-1: config 0 descriptor?? [ 164.044019][ T61] usb 6-1: string descriptor 0 read error: -71 [ 164.062489][ T61] usb 6-1: USB disconnect, device number 10 [ 164.193046][ T9655] sp0: Synchronizing with TNC [ 164.196381][ T9656] sp0: Found TNC [ 164.617696][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 164.622261][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 164.660029][ T6193] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 164.770531][ T9679] xt_l2tp: v2 tid > 0xffff: 150994944 [ 164.831056][ T6193] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.835501][ T6193] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.839993][ T6193] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.843205][ T6193] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.848688][ T9667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.856042][ T6193] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.055219][ T6193] usb 7-1: USB disconnect, device number 19 [ 165.417775][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 165.421383][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 165.421419][ T40] audit: type=1400 audit(1749225774.451:772): avc: denied { append } for pid=9682 comm="syz.3.936" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 165.425491][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 165.425581][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 165.454192][ T40] audit: type=1400 audit(1749225774.481:773): avc: denied { write } for pid=9682 comm="syz.3.936" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.454291][ T9684] random: crng reseeded on system resumption [ 165.472371][ T9683] Unrecognized hibernate image header format! [ 165.475102][ T9683] PM: hibernation: Image mismatch: architecture specific data [ 165.544135][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 166.169431][ T6193] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 166.199154][ T40] audit: type=1400 audit(1749225775.221:774): avc: denied { unlink } for pid=9762 comm="syz.1.959" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.329759][ T6193] usb 8-1: Using ep0 maxpacket: 8 [ 166.333042][ T6193] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.339359][ T6193] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.342687][ T6193] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.346100][ T6193] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.350429][ T6193] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.353565][ T6193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.560146][ T6193] usb 8-1: usb_control_msg returned -32 [ 166.562569][ T6193] usbtmc 8-1:16.0: can't read capabilities [ 166.571945][ T6193] usb 8-1: USB disconnect, device number 21 [ 166.808149][ T40] audit: type=1400 audit(1749225775.831:775): avc: denied { read write } for pid=9788 comm="syz.2.967" name="file1" dev="9p" ino=35913953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.817917][ T40] audit: type=1400 audit(1749225775.831:776): avc: denied { open } for pid=9788 comm="syz.2.967" path="/303/bus/file1" dev="9p" ino=35913953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.059884][ T9794] program syz.2.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.116888][ T9799] program syz.2.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.137673][ T40] audit: type=1400 audit(1749225776.161:777): avc: denied { map } for pid=9802 comm="syz.3.971" path="socket:[35837]" dev="sockfs" ino=35837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.181068][ T9805] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.183379][ T9805] overlayfs: failed to set xattr on upper [ 167.185295][ T9805] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.187597][ T9805] overlayfs: ...falling back to index=off. [ 167.191434][ T9805] overlayfs: ...falling back to uuid=null. [ 167.193566][ T9805] overlayfs: conflicting lowerdir path [ 167.198580][ T9805] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.201561][ T9805] overlayfs: failed to set xattr on upper [ 167.203519][ T9805] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.205821][ T9805] overlayfs: ...falling back to index=off. [ 167.207953][ T9805] overlayfs: ...falling back to uuid=null. [ 167.257349][ T9811] netlink: 'syz.1.974': attribute type 10 has an invalid length. [ 167.355395][ T40] audit: type=1400 audit(1749225776.381:778): avc: denied { mount } for pid=9814 comm="syz.1.976" name="/" dev="hugetlbfs" ino=37747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 167.439447][ T1349] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 167.611880][ T1349] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.615831][ T1349] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.618960][ T1349] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.622122][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.628420][ T9808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.633210][ T1349] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.640286][ T61] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 167.762818][ T9822] /dev/sr0: Can't open blockdev [ 167.799525][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 167.804871][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.809736][ T61] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.813404][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.823875][ T61] usb 6-1: config 0 descriptor?? [ 167.833085][ T5939] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 167.840584][ T837] usb 7-1: USB disconnect, device number 20 [ 167.864065][ T9827] vxcan1 speed is unknown, defaulting to 1000 [ 168.033981][ T61] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.234708][ T61] usb 6-1: USB disconnect, device number 11 [ 168.234779][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 168.447765][ T5939] Bluetooth: hci2: unexpected event for opcode 0x080b [ 168.697892][ T9848] fuse: Bad value for 'rootmode' [ 168.932119][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.935102][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.938612][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.944091][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.947293][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.973238][ T9858] vxcan1 speed is unknown, defaulting to 1000 [ 169.234349][ T9858] chnl_net:caif_netlink_parms(): no params data found [ 169.314221][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.316679][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.318977][ T9858] bridge_slave_0: entered allmulticast mode [ 169.321789][ T9858] bridge_slave_0: entered promiscuous mode [ 169.324853][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.327062][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.329240][ T9858] bridge_slave_1: entered allmulticast mode [ 169.332101][ T9858] bridge_slave_1: entered promiscuous mode [ 169.366147][ T9858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.371724][ T9858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.412977][ T9858] team0: Port device team_slave_0 added [ 169.416563][ T9858] team0: Port device team_slave_1 added [ 169.449657][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.451810][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.460766][ T9858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.465784][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.467863][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.476234][ T9858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.522800][ T9858] hsr_slave_0: entered promiscuous mode [ 169.525280][ T9858] hsr_slave_1: entered promiscuous mode [ 169.527284][ T9858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.529708][ T9858] Cannot create hsr debugfs directory [ 169.666168][ T9858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.670403][ T9858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.674433][ T9858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.678492][ T9858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.692739][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.694260][ T40] audit: type=1400 audit(1749225778.721:779): avc: denied { setattr } for pid=9874 comm="syz.2.995" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.695482][ T9858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.706479][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.708707][ T9858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.737228][ T9858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.745517][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.748765][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.762958][ T9858] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.771092][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.773407][ T9534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.779045][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.782116][ T9535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.818062][ T9885] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 169.832800][ T9885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.852505][ T9885] bond0: (slave geneve3): making interface the new active one [ 169.855959][ T9885] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 169.873636][ T9885] geneve4: entered promiscuous mode [ 169.878479][ T9885] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 169.935902][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 169.941207][ T9858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.978208][ T5939] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 170.086308][ T9918] overlayfs: missing 'lowerdir' [ 170.090715][ T9858] veth0_vlan: entered promiscuous mode [ 170.096853][ T9858] veth1_vlan: entered promiscuous mode [ 170.110219][ T9858] veth0_macvtap: entered promiscuous mode [ 170.114857][ T9858] veth1_macvtap: entered promiscuous mode [ 170.122983][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 170.141993][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.152200][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.160121][ T9858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.163096][ T9858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.166146][ T9858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.168820][ T9858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.197120][ T9926] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 170.232174][ T9546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.235396][ T9546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.257446][ T9534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.262065][ T9534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.272407][ T40] audit: type=1400 audit(1749225779.301:780): avc: denied { mounton } for pid=9858 comm="syz-executor" path="/syzkaller.Uv5kTn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 170.333130][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 170.338798][ T40] audit: type=1326 audit(1749225779.361:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.2.1009" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f752978e929 code=0x0 [ 170.361190][ T9942] Driver unsupported XDP return value 0 on prog (id 149) dev N/A, expect packet loss! [ 170.378444][ T9942] Trying to write to read-only block-device nullb0 [ 170.554701][ T9965] block device autoloading is deprecated and will be removed. [ 170.558219][ T40] audit: type=1400 audit(1749225779.581:782): avc: denied { ioctl } for pid=9953 comm="syz.4.1015" path="/3/file0/file0" dev="fuse" ino=64 ioctlcmd=0x933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 170.562236][ T9955] netlink: 'syz.4.1015': attribute type 62 has an invalid length. [ 170.663778][ T9976] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 170.666660][ T9975] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 170.999501][ T5939] Bluetooth: hci3: command tx timeout [ 171.043722][ T9996] misc userio: Can't change port type on an already running userio instance [ 171.051307][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1026'. [ 171.106799][ T9997] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 171.261105][T10005] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 171.347300][T10010] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1031'. [ 171.375369][T10015] sctp: [Deprecated]: syz.2.1032 (pid 10015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.375369][T10015] Use struct sctp_sack_info instead [ 171.393303][T10017] sctp: [Deprecated]: syz.2.1032 (pid 10017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.393303][T10017] Use struct sctp_sack_info instead [ 171.546559][T10033] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 171.578889][T10034] IPVS: Scheduler module ip_vs_sip not found [ 171.591718][ T7951] IPVS: starting estimator thread 0... [ 171.679658][T10038] IPVS: using max 46 ests per chain, 110400 per kthread [ 171.717603][T10039] block device autoloading is deprecated and will be removed. [ 171.787540][T10043] kernel profiling enabled (shift: 7) [ 171.907064][T10049] sp0: Synchronizing with TNC [ 171.909838][T10049] sp0: Found TNC [ 172.009527][T10054] sp0: Synchronizing with TNC [ 172.094867][T10066] veth1_to_team: entered promiscuous mode [ 172.100420][T10066] veth1_to_team: left promiscuous mode [ 172.128226][T10069] netlink: 'syz.2.1050': attribute type 2 has an invalid length. [ 172.132305][T10069] netlink: 784 bytes leftover after parsing attributes in process `syz.2.1050'. [ 172.138415][T10069] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1050'. [ 172.200192][ T40] audit: type=1400 audit(1749225781.221:783): avc: denied { connect } for pid=10074 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.353593][ T5939] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 172.357719][T10077] loop6: detected capacity change from 0 to 524287999 [ 172.424073][T10081] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20128 [ 172.520818][ T5939] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 172.524621][ T5939] Bluetooth: hci2: Injecting HCI hardware error event [ 172.528100][ T5939] Bluetooth: hci2: hardware error 0x00 [ 172.634165][T10086] syz.1.1055: attempt to access beyond end of device [ 172.634165][T10086] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 172.640485][T10086] gfs2: error -5 reading superblock [ 172.774637][T10114] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.778478][T10114] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 172.842204][T10120] sp0: Synchronizing with TNC [ 173.033950][T10122] overlayfs: workdir and upperdir must be separate subtrees [ 173.046291][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 173.074660][T10122] kvm: kvm [10121]: vcpu0, guest rIP: 0x54030 Unhandled WRMSR(0x40000004) = 0x2d [ 173.089695][ T5944] Bluetooth: hci3: command tx timeout [ 173.139158][T10124] netlink: 'syz.4.1065': attribute type 1 has an invalid length. [ 174.269762][ T9535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.274152][ T9535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.407528][ T9535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.410960][ T9535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.457089][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.461579][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.468171][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.478487][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.483498][ T9535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.483787][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.487491][ T9535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.520449][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1077'. [ 174.521103][T10148] vxcan1 speed is unknown, defaulting to 1000 [ 174.553572][ T9535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.556767][ T9535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.599504][ T5939] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 174.635898][ T40] audit: type=1400 audit(1749225784.657:784): avc: denied { remount } for pid=10160 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 174.738076][ T9535] team0: left allmulticast mode [ 174.741102][ T9535] team_slave_0: left allmulticast mode [ 174.744164][ T9535] team_slave_1: left allmulticast mode [ 174.746075][ T9535] bridge0: port 3(team0) entered disabled state [ 174.750547][ T9535] bridge_slave_1: left allmulticast mode [ 174.752375][ T9535] bridge_slave_1: left promiscuous mode [ 174.754309][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.760459][ T9535] bridge_slave_0: left allmulticast mode [ 174.762650][ T9535] bridge_slave_0: left promiscuous mode [ 174.764946][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.888690][ T40] audit: type=1400 audit(1749225784.907:785): avc: denied { bind } for pid=10168 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.956681][ T9535] bond0 (unregistering): (slave geneve4): Releasing active interface [ 174.963832][ T9535] geneve3 (unregistering): entered promiscuous mode [ 174.979269][ T9535] bond0 (unregistering): (slave geneve3): Releasing active interface [ 174.982700][ T9535] geneve3 (unregistering): left promiscuous mode [ 175.159931][ T5939] Bluetooth: hci3: command tx timeout [ 175.392808][T10187] syz.1.1085 (10187): drop_caches: 2 [ 175.426141][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 175.588071][ T9535] bond1 (unregistering): Released all slaves [ 175.676297][ T9535] bond0 (unregistering): Released all slaves [ 175.720009][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 175.742276][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 175.844921][T10148] chnl_net:caif_netlink_parms(): no params data found [ 175.876949][ T40] audit: type=1400 audit(1749225785.897:786): avc: denied { accept } for pid=10210 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.892532][ T40] audit: type=1400 audit(1749225785.917:787): avc: denied { map } for pid=10210 comm="syz.4.1093" path="socket:[39462]" dev="sockfs" ino=39462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.995489][T10148] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.998342][T10148] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.003209][T10148] bridge_slave_0: entered allmulticast mode [ 176.005925][T10148] bridge_slave_0: entered promiscuous mode [ 176.009818][T10216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10216 comm=syz.4.1094 [ 176.009977][T10148] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.015905][T10148] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.018621][T10148] bridge_slave_1: entered allmulticast mode [ 176.022523][T10148] bridge_slave_1: entered promiscuous mode [ 176.080972][T10148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.086389][T10148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.192691][ T40] audit: type=1400 audit(1749225786.217:788): avc: denied { ioctl } for pid=10217 comm="syz.4.1095" path="socket:[39486]" dev="sockfs" ino=39486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 176.211533][ T9535] hsr_slave_0: left promiscuous mode [ 176.214409][ T9535] hsr_slave_1: left promiscuous mode [ 176.216439][ T9535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.218781][ T9535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.222645][ T9535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.225011][ T9535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.258758][ T9535] veth1_macvtap: left promiscuous mode [ 176.260850][ T9535] veth0_macvtap: left promiscuous mode [ 176.263044][ T9535] veth1_vlan: left promiscuous mode [ 176.265084][ T9535] veth0_vlan: left promiscuous mode [ 176.337165][ T40] audit: type=1400 audit(1749225786.357:789): avc: denied { listen } for pid=10225 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.521752][ T5939] Bluetooth: hci1: command tx timeout [ 176.737947][T10229] ipt_REJECT: TCP_RESET invalid for non-tcp [ 176.777003][T10231] trusted_key: encrypted_key: insufficient parameters specified [ 176.816904][T10231] xt_ipcomp: unknown flags 12 [ 177.022655][ T9535] team_slave_1 (unregistering): left promiscuous mode [ 177.027688][ T9535] team0 (unregistering): Port device team_slave_1 removed [ 177.089457][ T1349] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 177.096255][ T9535] team_slave_0 (unregistering): left promiscuous mode [ 177.099000][ T9535] team0 (unregistering): Port device team_slave_0 removed [ 177.242546][ T5939] Bluetooth: hci3: command tx timeout [ 177.269441][ T1349] usb 6-1: Using ep0 maxpacket: 8 [ 177.272908][ T1349] usb 6-1: config 0 has no interfaces? [ 177.275157][ T1349] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 177.278129][ T1349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.285557][ T1349] usb 6-1: config 0 descriptor?? [ 177.643132][ T40] audit: type=1400 audit(1749225787.667:790): avc: denied { unmount } for pid=9858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 177.646405][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 177.664828][T10148] team0: Port device team_slave_0 added [ 177.668153][T10148] team0: Port device team_slave_1 added [ 177.671303][ T1349] usb 6-1: USB disconnect, device number 12 [ 177.709558][T10148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.711731][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.720084][T10148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.724264][T10148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.726472][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.735003][T10148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.790520][T10148] hsr_slave_0: entered promiscuous mode [ 177.792822][T10148] hsr_slave_1: entered promiscuous mode [ 177.795032][T10148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.797383][T10148] Cannot create hsr debugfs directory [ 177.921533][T10148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.928464][T10148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.932954][T10148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.937702][T10148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.004608][T10148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.022018][T10148] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.027395][ T9546] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.030307][ T9546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.038961][ T9546] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.041760][ T9546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.095725][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 178.100838][T10257] netlink: zone id is out of range [ 178.103825][T10257] netlink: zone id is out of range [ 178.105549][T10257] netlink: zone id is out of range [ 178.107184][T10257] netlink: zone id is out of range [ 178.108895][T10257] netlink: zone id is out of range [ 178.127212][T10257] netlink: set zone limit has 4 unknown bytes [ 178.129241][ T9535] IPVS: stop unused estimator thread 0... [ 178.154120][T10148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.178603][T10257] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1102'. [ 178.178993][ T9536] Bluetooth: hci4: Frame reassembly failed (-84) [ 178.196819][ T9536] Bluetooth: hci4: Frame reassembly failed (-84) [ 178.197774][ T40] audit: type=1400 audit(1749225788.217:791): avc: denied { mounton } for pid=10253 comm="syz.4.1102" path="/48/file0" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.198004][T10257] Invalid source name [ 178.198014][T10257] UBIFS error (pid: 10257): cannot open "./file0", error -22 [ 178.329975][T10148] veth0_vlan: entered promiscuous mode [ 178.338842][T10148] veth1_vlan: entered promiscuous mode [ 178.356947][T10148] veth0_macvtap: entered promiscuous mode [ 178.362286][T10148] veth1_macvtap: entered promiscuous mode [ 178.372725][T10148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.377828][T10148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.384382][T10148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.387506][T10148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.391227][T10148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.393924][T10148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.435183][ T9535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.437517][ T9535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.452269][ T9535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.455080][ T9535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.602195][ T5936] Bluetooth: hci1: command tx timeout [ 178.646148][ T40] audit: type=1400 audit(1749225788.667:792): avc: denied { read open } for pid=10276 comm="syz.5.1106" path="/" dev="configfs" ino=3180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.732379][T10279] vxcan1 speed is unknown, defaulting to 1000 [ 179.240831][T10284] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1107'. [ 180.040635][T10296] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 180.199829][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.200010][ T5936] Bluetooth: hci4: command 0x1003 tx timeout [ 180.212628][T10302] vxcan1 speed is unknown, defaulting to 1000 [ 180.346475][ T40] audit: type=1400 audit(1749225790.367:793): avc: denied { dac_read_search } for pid=10308 comm="syz.1.1113" capability=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 180.356265][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1115'. [ 180.369391][ T40] audit: type=1400 audit(1749225790.367:794): avc: denied { dac_override } for pid=10308 comm="syz.1.1113" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 180.659559][ T837] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 180.662625][ T7951] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 180.680022][ T5939] Bluetooth: hci1: command tx timeout [ 180.824303][ T837] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.828391][ T7951] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.832537][ T7951] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.836164][ T7951] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.840985][ T837] usb 6-1: config 8 has an invalid interface number: 135 but max is 0 [ 180.843860][ T837] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 180.847819][ T837] usb 6-1: config 8 has no interface number 0 [ 180.851056][ T837] usb 6-1: config 8 interface 135 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 8 [ 180.855096][ T837] usb 6-1: config 8 interface 135 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 180.859352][ T837] usb 6-1: config 8 interface 135 altsetting 8 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 180.864446][ T7951] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 180.868113][ T7951] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.871522][ T837] usb 6-1: config 8 interface 135 altsetting 8 endpoint 0x82 has invalid maxpacket 26904, setting to 1024 [ 180.876185][ T7951] usb 10-1: Product: syz [ 180.877899][ T7951] usb 10-1: Manufacturer: syz [ 180.880133][ T837] usb 6-1: config 8 interface 135 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 180.884153][ T837] usb 6-1: config 8 interface 135 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 180.888413][ T7951] usb 10-1: SerialNumber: syz [ 180.892358][ T837] usb 6-1: config 8 interface 135 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 180.896476][ T837] usb 6-1: config 8 interface 135 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 0 [ 180.902204][ T837] usb 6-1: config 8 interface 135 has no altsetting 0 [ 180.907802][ T7951] hub 10-1:1.0: bad descriptor, ignoring hub [ 180.910884][ T7951] hub 10-1:1.0: probe with driver hub failed with error -5 [ 180.917025][ T837] usb 6-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=4f.58 [ 180.920870][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.924151][ T837] usb 6-1: Product: syz [ 180.925943][ T837] usb 6-1: Manufacturer: syz [ 180.928000][ T837] usb 6-1: SerialNumber: syz [ 180.934297][T10310] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.937322][T10310] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.940715][T10310] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.109758][ T7951] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.308177][ T40] audit: type=1400 audit(1749225791.327:795): avc: denied { read write } for pid=10305 comm="syz.5.1115" name="lp0" dev="devtmpfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 181.315778][ T40] audit: type=1400 audit(1749225791.337:796): avc: denied { open } for pid=10305 comm="syz.5.1115" path="/dev/usb/lp0" dev="devtmpfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 181.660774][ T837] sierra 6-1:8.135: Sierra USB modem converter detected [ 181.678165][ T837] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 181.689170][ T837] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 181.699652][ T837] usb 6-1: USB disconnect, device number 13 [ 181.715554][ T837] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 181.720665][ T837] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 181.725830][ T837] sierra 6-1:8.135: device disconnected [ 181.736208][T10335] vxcan1 speed is unknown, defaulting to 1000 [ 181.789903][T10339] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 181.805546][ T7951] ------------[ cut here ]------------ [ 181.807510][ T7951] workqueue: cannot queue hci_conn_timeout on wq hci0 [ 181.809753][ T7951] WARNING: CPU: 2 PID: 7951 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 181.812506][ T7951] Modules linked in: [ 181.814124][ T7951] CPU: 2 UID: 0 PID: 7951 Comm: kworker/2:4 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 181.819648][ T7951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.822980][ T7951] Workqueue: events l2cap_chan_timeout [ 181.824691][ T7951] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 181.826394][ T7951] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 00 fe ab 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 66 4b 38 00 90 0f 0b 90 e9 1b f6 ff [ 181.832275][ T7951] RSP: 0018:ffffc90005677a48 EFLAGS: 00010082 [ 181.834240][ T7951] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 181.836687][ T7951] RDX: ffff888058620000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 181.839151][ T7951] RBP: ffff888057c54948 R08: 0000000000000001 R09: 0000000000000000 [ 181.841615][ T7951] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 181.844375][ T7951] R13: ffff888037eec000 R14: ffff888037eec178 R15: ffff888057c54950 [ 181.846977][ T7951] FS: 0000000000000000(0000) GS:ffff8880d695a000(0000) knlGS:0000000000000000 [ 181.849795][ T7951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.851875][ T7951] CR2: 00007f3b071bbf98 CR3: 000000003bd0d000 CR4: 0000000000352ef0 [ 181.854368][ T7951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.856711][ T7951] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.859155][ T7951] Call Trace: [ 181.860279][ T7951] [ 181.861225][ T7951] ? __cancel_work+0x2c8/0x370 [ 181.862785][ T7951] ? clear_pending_if_disabled+0xa8/0x210 [ 181.864597][ T7951] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 181.866554][ T7951] __queue_delayed_work+0x35b/0x460 [ 181.868186][ T7951] queue_delayed_work_on+0x1b5/0x200 [ 181.869881][ T7951] l2cap_chan_del+0x5a0/0x8f0 [ 181.871414][ T7951] l2cap_chan_close+0xfe/0xa30 [ 181.872963][ T7951] ? __pfx_l2cap_chan_close+0x10/0x10 [ 181.875006][ T7951] l2cap_chan_timeout+0x196/0x310 [ 181.876567][ T7951] process_one_work+0x9cf/0x1b70 [ 181.878191][ T7951] ? __pfx_process_one_work+0x10/0x10 [ 181.879977][ T7951] ? assign_work+0x1a0/0x250 [ 181.881631][ T7951] worker_thread+0x6c8/0xf10 [ 181.883213][ T7951] ? __kthread_parkme+0x19e/0x250 [ 181.884806][ T7951] ? __pfx_worker_thread+0x10/0x10 [ 181.886618][ T7951] kthread+0x3c5/0x780 [ 181.887897][ T7951] ? __pfx_kthread+0x10/0x10 [ 181.889520][ T7951] ? rcu_is_watching+0x12/0xc0 [ 181.891120][ T7951] ? __pfx_kthread+0x10/0x10 [ 181.892714][ T7951] ret_from_fork+0x5d4/0x6f0 [ 181.894402][ T7951] ? __pfx_kthread+0x10/0x10 [ 181.895950][ T7951] ret_from_fork_asm+0x1a/0x30 [ 181.897555][ T7951] [ 181.898672][ T7951] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.900914][ T7951] CPU: 2 UID: 0 PID: 7951 Comm: kworker/2:4 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 181.904649][ T7951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.907905][ T7951] Workqueue: events l2cap_chan_timeout [ 181.909621][ T7951] Call Trace: [ 181.910682][ T7951] [ 181.911625][ T7951] dump_stack_lvl+0x3d/0x1f0 [ 181.913104][ T7951] panic+0x71c/0x800 [ 181.914368][ T7951] ? __pfx_panic+0x10/0x10 [ 181.915779][ T7951] ? show_trace_log_lvl+0x29b/0x3e0 [ 181.917469][ T7951] ? check_panic_on_warn+0x1f/0xb0 [ 181.919073][ T7951] ? __queue_work+0xc9c/0x10f0 [ 181.920571][ T7951] check_panic_on_warn+0xab/0xb0 [ 181.922142][ T7951] __warn+0xf6/0x3c0 [ 181.923408][ T7951] ? __queue_work+0xc9c/0x10f0 [ 181.925050][ T7951] report_bug+0x3c3/0x580 [ 181.926464][ T7951] ? __queue_work+0xc9c/0x10f0 [ 181.927986][ T7951] handle_bug+0x184/0x210 [ 181.929363][ T7951] exc_invalid_op+0x17/0x50 [ 181.930812][ T7951] asm_exc_invalid_op+0x1a/0x20 [ 181.932343][ T7951] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 181.934069][ T7951] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 00 fe ab 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 66 4b 38 00 90 0f 0b 90 e9 1b f6 ff [ 181.939969][ T7951] RSP: 0018:ffffc90005677a48 EFLAGS: 00010082 [ 181.941872][ T7951] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 181.944557][ T7951] RDX: ffff888058620000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 181.947515][ T7951] RBP: ffff888057c54948 R08: 0000000000000001 R09: 0000000000000000 [ 181.949997][ T7951] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 181.952465][ T7951] R13: ffff888037eec000 R14: ffff888037eec178 R15: ffff888057c54950 [ 181.954954][ T7951] ? __warn_printk+0x198/0x350 [ 181.956542][ T7951] ? __warn_printk+0x1a5/0x350 [ 181.958053][ T7951] ? __queue_work+0xc9b/0x10f0 [ 181.959577][ T7951] ? __cancel_work+0x2c8/0x370 [ 181.961092][ T7951] ? clear_pending_if_disabled+0xa8/0x210 [ 181.962916][ T7951] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 181.964853][ T7951] __queue_delayed_work+0x35b/0x460 [ 181.966502][ T7951] queue_delayed_work_on+0x1b5/0x200 [ 181.968147][ T7951] l2cap_chan_del+0x5a0/0x8f0 [ 181.969634][ T7951] l2cap_chan_close+0xfe/0xa30 [ 181.971136][ T7951] ? __pfx_l2cap_chan_close+0x10/0x10 [ 181.972847][ T7951] l2cap_chan_timeout+0x196/0x310 [ 181.974481][ T7951] process_one_work+0x9cf/0x1b70 [ 181.976087][ T7951] ? __pfx_process_one_work+0x10/0x10 [ 181.977833][ T7951] ? assign_work+0x1a0/0x250 [ 181.979309][ T7951] worker_thread+0x6c8/0xf10 [ 181.980778][ T7951] ? __kthread_parkme+0x19e/0x250 [ 181.982443][ T7951] ? __pfx_worker_thread+0x10/0x10 [ 181.984076][ T7951] kthread+0x3c5/0x780 [ 181.985403][ T7951] ? __pfx_kthread+0x10/0x10 [ 181.986921][ T7951] ? rcu_is_watching+0x12/0xc0 [ 181.988645][ T7951] ? __pfx_kthread+0x10/0x10 [ 181.990229][ T7951] ret_from_fork+0x5d4/0x6f0 [ 181.991744][ T7951] ? __pfx_kthread+0x10/0x10 [ 181.993303][ T7951] ret_from_fork_asm+0x1a/0x30 [ 181.994853][ T7951] [ 181.996513][ T7951] Kernel Offset: disabled [ 181.997914][ T7951] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:03:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff81cd2ad6 RDX=ffff888024de8000 RSI=ffffffff8c156fa0 RDI=ffffffff8c156fe0 RBP=00007f3b0638e929 RSP=ffffc900037c7730 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff81a77a90 R13=ffffc900037c7888 R14=0000000000000000 R15=ffff888024de8000 RIP=ffffffff8b7f243d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d675a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000028062000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001e5459 RBX=0000000000000001 RCX=ffffffff8b7f1c99 RDX=0000000000000000 RSI=ffffffff8de14dcb RDI=ffffffff8c157020 RBP=ffffed1003bd3488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801de9a440 R14=ffffffff90a80050 R15=0000000000000000 RIP=ffffffff8b7f07ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d685a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004e93b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed9b4cc20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b2985 RDI=ffffffff9b082320 RBP=ffffffff9b0822e0 RSP=ffffc900056773b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0822e0 R15=ffffffff855b2920 RIP=ffffffff855b29af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d695a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3b071bbf98 CR3=000000003bd0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957d84488 00007fd957d84480 00007fd957d84478 00007fd957d84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9588ed100 00007fd957d84440 00007fd957d80004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd957d84498 00007fd957d84490 00007fd957d84488 00007fd957d84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff9141be00 RDX=1ffff920006d0def RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc90003686fc0 RSP=ffffc90003686f08 R8 =ffffffff9141be04 R9 =0000000000000000 R10=0000000000000000 R11=000000000000a77e R12=ffffc90003686fc8 R13=ffffc90003686f78 R14=ffffc900036870a8 R15=ffffc90003686fac RIP=ffffffff816ad64a RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4302b566c0 ffffffff 00c00000 GS =0000 ffff8880d6a5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c378ed9 CR3=0000000028062000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000100442 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556581e1ac40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b11bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b11bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffff0000 00000000ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ee85b6a70e97839 73732613a4caf50a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 314253557974742f 3533312e383a312d 362f312d362f3662 73752f312e646368 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6f736e6f6320 6164732f7665642f 3d746f6f7220313d 6e7261775f6e6f5f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63696e6170203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000556535ac2010 0000000000003019 00004e4f35412052 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000