last executing test programs: 12.740466102s ago: executing program 3 (id=1086): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYRES8=r1, @ANYRESHEX]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x5) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x89d, 0x33}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48d1}, 0x20044040) (async) utime(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000600)={0xdbd0, 0xb}) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000640)={0x1, 0x9}, 0x8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) (async) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x1f000000, r7}, 0x10) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f00000002c0)=@raw=[@ldst={0x15058d1f3e02b36a, 0x0, 0x6, 0x7, 0x6, 0xfffffffffffffff0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f0000000300)='GPL\x00', 0x8, 0xa9, &(0x7f00000003c0)=""/169, 0x40f00, 0x3c, '\x00', r6, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x4, 0x0, &(0x7f0000000500)=[{0x0, 0x5, 0x4, 0x1}, {0x2, 0x3, 0xf, 0xa}, {0x0, 0x4, 0x0, 0x3}, {0x5, 0x3, 0x8, 0x8}], 0x10, 0xe95, @void, @value}, 0x94) 12.340022229s ago: executing program 3 (id=1087): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x1, 0x1, 0x40, 0xca, 0x10001, r4}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x1, 0x1, 0x40, 0xca, 0x10001, r4}, 0x20) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)=0x1) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r8, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000540)={{0x3, 0x1, 0x80000000, 0x1, 'syz1\x00', 0xfffffff5}, 0x0, 0x34, 0x8, r8, 0x1, 0x8000000, 'syz1\x00', &(0x7f0000000280)=['syzkaller\x00'], 0xa}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000540)={{0x3, 0x1, 0x80000000, 0x1, 'syz1\x00', 0xfffffff5}, 0x0, 0x34, 0x8, r8, 0x1, 0x8000000, 'syz1\x00', &(0x7f0000000280)=['syzkaller\x00'], 0xa}) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4004000}, 0x80000) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r9, &(0x7f00000041c0)=""/4111, 0x100f) 12.271576785s ago: executing program 3 (id=1091): ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000400)={0x2, 0x55cd925e, 0x1, 'queue1\x00', 0x9}) r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x550}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x28c16562e159cd74}, 0x4) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x7, 0x2}) chdir(&(0x7f0000000080)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000, 0x2, 0x80000000000, 0x400000000, 0x6, 0x7fffffff}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001880)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000009c0], 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000073305c0ba6eaabbd00"/144]}, 0x108) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x1, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x5]}}) 9.10060709s ago: executing program 3 (id=1161): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0xc, 0x0, [0x0], [0x0, 0x6], [0x2], [0x9, 0x0, 0xfffffffffffffffe, 0x4]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5], [0x2b8]}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="640000001900010000000000000000001d01090050001180a9f00fd5878349002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a07f30900009ed32d3b477d35b296674f1fe3"], 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000900)=@sack_info={0x0, 0x0, 0x40}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r10, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000d80)={0x434, 0x3f4, 0x8, 0x70bd25, 0x25dfdbff, {0x3, 0x2, 0x1f, [0x8, 0x2, 0x4, 0x8, 0x3, 0x10000, 0x3, 0x400, 0x7, 0xff, 0x6, 0x2, 0x2, 0x2, 0x6, 0x2, 0x9, 0x9, 0x219, 0x0, 0x1000, 0x5, 0x6, 0x80000001, 0xda12ee76, 0x9d, 0xb, 0x4, 0x2, 0x5, 0xbc3, 0x15, 0x8, 0x0, 0x9, 0xfffff801, 0x6, 0x6, 0x9, 0x80000001, 0x4a, 0x3ff, 0x7, 0x4ea, 0x6, 0x1, 0x6, 0xc, 0x3, 0x1, 0x100000, 0x0, 0x1, 0x4, 0x0, 0x8, 0x9, 0x4, 0x66, 0x8000, 0x9, 0x9, 0x4, 0x1], [0x10001, 0x4, 0x1b9, 0x5aad, 0x81, 0xb, 0x7, 0x8, 0xf, 0xa, 0x4, 0x3, 0xfffffffc, 0x81, 0x7f, 0x8, 0xf6, 0x100, 0x4fc, 0xfffff47a, 0x5, 0x3, 0x5, 0x100, 0x3, 0x1, 0x6, 0x40, 0x5, 0x4, 0x8, 0x0, 0x101, 0x6, 0x7, 0xff, 0x6, 0x5, 0x4, 0x6, 0x8, 0x7, 0x7, 0x4, 0x35f, 0x40009, 0x4, 0xb, 0x1, 0x54, 0x7d1459ee, 0x0, 0x80000000, 0x8b, 0x8, 0x1, 0x1, 0x6, 0x3d8, 0x0, 0x3, 0xece, 0x2, 0x9], [0x8, 0x0, 0x0, 0x8, 0x10, 0x800, 0x5, 0x9, 0xa3d, 0x4, 0xc40, 0x0, 0x200, 0x800, 0x5, 0xd6, 0x9, 0x7, 0xbaf0, 0x7, 0xd22, 0x7ff, 0x3, 0xfff, 0x18, 0xd31, 0x8, 0x2, 0x7, 0x0, 0x3ff, 0x1, 0xff, 0x2, 0x401, 0x3, 0x9, 0x6, 0x2, 0x7, 0xbada, 0x7fff, 0x2, 0x9, 0x100, 0x9, 0x3, 0x83, 0x0, 0xa, 0xfff, 0x67, 0xa7c4, 0xc, 0x3, 0x7, 0x3, 0x5, 0xa0c, 0x9, 0xfff, 0x4, 0x8, 0xffff], [0x9, 0x9, 0xbcd, 0x7ff, 0x7, 0x2, 0x4, 0x5724, 0x1, 0x808, 0x2, 0x1, 0x2, 0xcaf, 0x4, 0x9, 0x10, 0x9, 0x10000, 0x5f21, 0x9, 0x4, 0x3, 0x4, 0xc, 0x7, 0x9, 0x7, 0x7, 0x9, 0x4, 0x7, 0x7, 0x0, 0x4, 0x192b, 0x4e69, 0x101, 0x5, 0x7, 0x12f, 0x5, 0x7, 0x0, 0x7, 0x5, 0x2, 0x1, 0xb, 0x23, 0x1, 0xffff, 0x9, 0x5, 0x0, 0x4, 0x0, 0x8, 0x6, 0x6, 0x1, 0x3, 0xff, 0x10001], 0x12, ['sysfs\x00', 'sysfs\x00', 'sysfs\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x850) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010e0000000b00000000020000000900020073797a3200000000090001007379030000000000000006400000000000000002140000001100010000000000000000000500000a"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r11 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) ioctl$FS_IOC_FSGETXATTR(r11, 0x801c581f, &(0x7f0000000980)={0x80, 0xfd2c, 0x80, 0x3, 0x11dd33e3}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/../file0/../file0\x00', 0xd) 9.095108123s ago: executing program 3 (id=1164): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x3, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) 7.735124929s ago: executing program 3 (id=1199): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1737, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @empty}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 7.648098966s ago: executing program 32 (id=1199): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1737, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @empty}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 2.092504202s ago: executing program 2 (id=1226): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x100, 0x400500) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote, 0xfffffffd}, {@private}, {@dev}, {@private}, {@local}, {@dev}]}]}}}}}}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x14800, 0x100) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) close(0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000140)=0x1) mmap$snddsp_control(&(0x7f0000786000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r4, 0x83000000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c34977340539f7483ac", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4844) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r6, 0x141601) 1.360652535s ago: executing program 2 (id=1227): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 1.360110448s ago: executing program 2 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) exit(0x0) r3 = socket$inet(0x2, 0x1, 0x0) symlink(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00') getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000240)=0x28) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x3, 0x40009, 0x20}) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14, 0x80400) getsockname$packet(r7, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x1, 0x37, 0x9, 0x6}, {0x4, 0xdf, 0x4, 0x4}]}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000004000000000400"/19, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r9, &(0x7f00000004c0)=""/57, 0x39) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000005c0)="26ff970ec9e20957fcb895fc4f87ad0616c2802f5c24759270b2a314b66c922cbfa90c6369ca786c2ed2306e4d93cbb6a9f8ac8dcebc1bb1a2b35fdb09f276003e35b158adc90fffb20a36e0037a", 0x4e}, {&(0x7f0000000640)="d1e3b6cf8b12a0b39e346874cc4cd7e82be241aa09660c6833d8154de89adffb4350e3c8eb422c5a3b7370d75cf2ff1aaf65def0954aefe9bace55e7dadc132b46db0115f6089a05c6cba352b30e73e8b1586e67359ecadac071ddcf4871c30cc01124159ba2a523177bc01c1469006ce61be3602cd9f9e9f3d6b057e54afe21d11a2973898fde0bc07f639232204997b0794d811f7e84", 0x97}, {&(0x7f0000000700)="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", 0xfd}, {&(0x7f0000000800)="d5c85195c8d334de899322b432e132d79bf22bfc49b6379d6cc89fc7ffb6b9a5e7af4dc17629f302a7c0cd21117156fe51a9554e8829653b193d44a9751172a62b", 0x41}, {&(0x7f0000000880)="4a95538478b2ffc58f89b99105419aa17fd5fa45a399cd7b1dfc8db16c7021c4e805816686c5005fcfa4d8e672069d2c", 0x30}, {&(0x7f00000008c0)="3bccea3d712b586d89a6afc36728a30548cb9ddb4d7f749396e43307246e8fc78362d1f451db25ff76bc357293d205a8e4badfe9bf92d05c847890d6ca3d523dd6f4", 0x42}, {&(0x7f0000000940)="7b172c07f04c70aed71502e2fc31", 0xe}, {&(0x7f0000000980)="ded304e18f13f4d635ce982113d883ba970cb595d2d231dc69ca377d35361e15043b311e6e0936a0a12472b897515d51ac779bcda6944a8c8e3b3a421c60bb8be4c1469489d7c57e7a2ba346be31ec8ef35310a7e364ef090ac85cb2086b45eb173179c2fb194e2d5c44d663d399c60b0448065637f354705a438faea2cd23b43691d6385e17fdc7fa0fa106983183bdfb866fc6665f6ab6b967c2b6dfee0b0fea196226c5c046032aa34e2a", 0xac}], 0x8}, 0x800) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(r10, 0x0, 0x0, 0x0) 777.183327ms ago: executing program 1 (id=1235): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) 776.623753ms ago: executing program 1 (id=1236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) (async) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24008010) (async) close(r0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) sched_setaffinity(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x4, 0xd90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x0, &(0x7f00000000c0), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x0, 0x8, 0xf6, '\x00', 'veth0_to_team\x00', 'veth1_to_bridge\x00', 'xfrm0\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0xff], 0x99e, 0xa06, 0xa3e, [@mac={{'mac\x00', 0x0, 0x10}, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, 0x1}}}, @among={{'among\x00', 0x0, 0x8d0}, {{@zero, @offset=0x468, 0x1, {[0x6, 0x1, 0x8, 0x4, 0x5, 0x10, 0xc, 0x8000, 0x4, 0xffffff9b, 0x3, 0x5, 0x6, 0x7, 0x1, 0x401, 0x4, 0xfffffff8, 0x3, 0xffff, 0x2, 0xf, 0x5, 0x1, 0x10000, 0x8, 0xfffffffd, 0x400, 0x9, 0x5, 0x3, 0x400, 0x7, 0x6, 0x4, 0xc231, 0x5, 0x8, 0x6132, 0x80000001, 0x8000, 0x7ca0a642, 0x2, 0x0, 0xff, 0xb, 0x4, 0x5, 0x80000000, 0x4, 0x6, 0x1ff, 0xffffffff, 0x5, 0x10, 0x2, 0x2bbb, 0x1000, 0x9, 0x7ff, 0x1ff, 0xc11a, 0x14000000, 0x4, 0x6, 0x9, 0x8, 0x7, 0x9, 0x800, 0x0, 0x6, 0x45c, 0x2, 0x47, 0x10, 0xffff, 0x6, 0x0, 0x8, 0x3ff, 0x1, 0x80000001, 0x9, 0x2, 0x80, 0x3, 0x7ff, 0x6b7, 0x4, 0x400, 0xfffffffc, 0x8, 0x4, 0x6, 0x5, 0xffffff80, 0x2, 0xffffffff, 0x34, 0x9, 0x8, 0x5ca, 0x4, 0xb0, 0x7, 0xfffffffd, 0xf9c4, 0xffffffff, 0x2, 0x4, 0xe, 0x3, 0x0, 0x2, 0x2, 0xfffffbff, 0x5, 0x9, 0x8, 0xe7ff, 0xc, 0xd085, 0x0, 0x0, 0x6, 0xe00, 0x1, 0x4, 0xffffff01, 0x5, 0x4, 0x7, 0x0, 0xfffff757, 0x3, 0x3, 0x800, 0x2, 0x0, 0x6, 0x1, 0x2, 0x1, 0x9, 0x7ff, 0x1, 0x0, 0x3, 0x10, 0x5, 0xf4c, 0x9, 0x6, 0x6, 0xe, 0x8, 0x8, 0x1, 0x3, 0x401, 0xb7e9, 0x10, 0x7f, 0x5, 0x9, 0x2, 0xffffffde, 0xf3c1, 0xf, 0x4, 0x0, 0xe0b8, 0x4, 0x7, 0x6, 0x150, 0x40, 0x8, 0xff, 0x2, 0x7fff, 0x7, 0x3, 0x8, 0x8, 0x7f, 0x1, 0x6, 0xfffffff7, 0xf5, 0x0, 0x2, 0x5, 0x663a, 0x6, 0x8000, 0x2, 0x9, 0x3, 0x0, 0x400, 0x6, 0x2, 0xfffffffc, 0x969, 0x4, 0x8, 0xfff, 0xfffffff9, 0x8, 0xaf2b, 0x4, 0x72b8, 0x8, 0x10, 0x4, 0x0, 0x0, 0x2, 0x5, 0x4, 0x7ff, 0x8, 0xff, 0x3, 0x5, 0x5, 0x2, 0xe8a, 0x2, 0x0, 0x1, 0x0, 0x9, 0x6, 0x2, 0x2, 0x8bab, 0x3, 0xb38, 0x145, 0x1, 0x9bdb, 0x2, 0x1, 0xff, 0x7fffffff, 0x6, 0x1, 0x4, 0x7, 0x49, 0x2, 0x53d4, 0x330, 0x46], 0x7, [{[0x7, 0xa], @multicast1}, {[0x7ff, 0x9], @rand_addr=0x64010100}, {[0x7, 0x7], @broadcast}, {[0x5, 0x1], @rand_addr=0x64010100}, {[0xffffffff, 0x2], @loopback}, {[0x4e66, 0x1ff], @private=0xa010101}, {[0x8, 0x7], @local}]}, {[0x7, 0x8, 0x6, 0x3000, 0xb337, 0x5, 0x9, 0x9, 0x3, 0x4, 0x3, 0xfff, 0x3, 0x6, 0x0, 0x5, 0x2, 0x7fff, 0x3, 0x3, 0x10, 0x1, 0x8455, 0x0, 0x1, 0x1, 0x7, 0x3, 0x8, 0x10000, 0x1, 0x80000000, 0x0, 0x4, 0x9, 0x8, 0x6, 0x6, 0x55, 0x3, 0x301f, 0x8, 0x1, 0x5, 0x4, 0x6, 0x794, 0x10001, 0x2, 0x4, 0x9d1, 0xf0, 0x1c8, 0xcdd5, 0x0, 0xb, 0x400, 0xa3c, 0x41a, 0x9, 0x2, 0x8, 0x7, 0x2, 0xdc, 0x1, 0xda1, 0xa, 0x4, 0xe9, 0x3, 0x200, 0xfff, 0x67, 0xfff, 0x200, 0x6, 0x1, 0x4, 0x3, 0xffff938d, 0x5, 0xc, 0x100, 0x8, 0x7, 0x0, 0x1d2, 0x1, 0x4, 0x800, 0x87, 0x81, 0xffff, 0x3, 0x9, 0x2, 0x0, 0x4, 0xa2, 0x81, 0x1, 0xfffff391, 0x8d98, 0x3, 0x2, 0x1, 0x3, 0xfffffff2, 0x6, 0x7, 0x81, 0x676, 0x7, 0xffff5b93, 0x3, 0x7, 0x5, 0x7, 0x5, 0x4, 0x6, 0x8, 0x200, 0x8, 0xd0, 0x6, 0x5, 0x8, 0x5, 0x7fffffff, 0x9, 0x10, 0x1, 0x8, 0x80000001, 0xb627, 0xd, 0xfffffff7, 0x40, 0x8c, 0x7, 0x6, 0x0, 0x3, 0xb, 0x5, 0x0, 0x6, 0x3ff, 0x35, 0x9, 0x3c, 0x1000, 0x6, 0x3, 0x1, 0x9, 0x4, 0x4, 0x8, 0x8, 0x0, 0x1, 0x46be, 0xd, 0x7, 0x7, 0xb2, 0x3, 0xe, 0x4, 0x5, 0x1, 0x0, 0xa, 0x8, 0x3, 0x0, 0x8, 0x7f, 0x4, 0x10001, 0x61, 0x2, 0x8, 0x6, 0x80000000, 0x5, 0x4, 0x9, 0x80000001, 0x2, 0x2, 0x40, 0xab, 0x48, 0x1cb, 0x1000, 0x4, 0x3, 0x7fff, 0x239ee19b, 0x4, 0xfffffffb, 0x51, 0x1745, 0x4, 0x7, 0xd, 0x1, 0x2, 0x0, 0x80000000, 0x9, 0x0, 0xc, 0x1b1, 0xb, 0xf, 0x1ff, 0x4afa, 0x5, 0x1, 0x7a2e, 0xfffffffc, 0x1, 0x605, 0x10001, 0xfffffff9, 0x1, 0x9, 0x6, 0xd, 0x3, 0x0, 0x68, 0x7, 0x4, 0x0, 0x8, 0x3, 0xc6, 0x9, 0x0, 0x1, 0xff, 0x4f7f, 0x276, 0x6, 0x200, 0x5, 0x80000000, 0x95, 0x800, 0x9720, 0x69], 0x8, [{[0xfffffffe, 0x61ffbc15], @empty}, {[0x8, 0xffffffff], @multicast2}, {[0x81, 0x7], @private=0xa010100}, {[0x5, 0x1], @local}, {[0x6, 0x101], @remote}, {[0x6, 0x9], @remote}, {[0xb1, 0x7fff], @multicast1}, {[0x4, 0x4], @rand_addr=0x64010102}]}}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0x1}}}], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x5, 0x0, 0x6, 'vlan1\x00', 'geneve1\x00', 'bridge0\x00', 'lo\x00', @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x10e, 0x10e, 0x13e, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xfc, 0x0, 0x4, 0x4}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x38, {0x3, 0x3, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xa0, 0x4, 0x3, 0x8, @local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x4e20, 0x4e21, 0xeef, 0x4, 0xe, 0x9, 0x5, 0xff, 0xf5}, 0x5c, 0xa01}}}], [], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x12, 0x10, 'sit0\x00', 'rose0\x00', 'vlan0\x00', 'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"13549fe7d52b1cf760f3210ca65b7bc74e4994caaf23251f0997e8fee2f8"}}}, {0x3, 0x1, 0xa937, 'veth0_to_bridge\x00', 'vcan0\x00', 'ip6tnl0\x00', 'pim6reg1\x00', @empty, [0xff, 0x101, 0x0, 0x0, 0xff, 0xff], @random="7bb2323a702b", [0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}]}, 0xe08) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000200)=0x3, 0x4) (async, rerun: 32) syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000a80)={0xc0, 0xff}) (async) tee(r0, 0xffffffffffffffff, 0x2, 0xa) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 776.273781ms ago: executing program 1 (id=1237): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c040000020305000000000004000010000000000800010001000000672c57147cec6ed35bbd4d14f9ba3786c118b70da534d30acc24a445c0c2"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0700000000000000000d7300000000000000000010080001000100"], 0x1c}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, 0x0}, 0x34000041) syz_open_dev$sndpcmp(&(0x7f0000000300), 0xfffffffffffffff7, 0xa8501) r4 = dup2(r0, r0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x3ff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000cc0)={r8, &(0x7f0000000000), &(0x7f0000000c80)=""/2}, 0x20) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000028c0)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat(r0, &(0x7f0000000240)='./file0\x00', 0x2400, 0x399) keyctl$dh_compute(0x17, &(0x7f0000000040)={r9, r10, r10}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @window={0x3, 0x9, 0x8}, @mss={0x2, 0x1}, @mss={0x2, 0xb41}], 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r11, 0x1f716000) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfff9, 0x8, 0x1, 0x3, 0x7}) 702.669361ms ago: executing program 1 (id=1238): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) ioctl$VT_OPENQRY(r0, 0x4b4c, &(0x7f0000000180)) 702.328179ms ago: executing program 1 (id=1239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001400030064756d6d793000000000000000000000050021"], 0x3c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000000000000410101c000"]) 587.948072ms ago: executing program 4 (id=1201): openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x73622a85, 0x7, 0x2, 0x27}, @flat, @fda={0x66646185, 0x8000000000000005, 0x1, 0x1b}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x25, 0x1, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x462, 0x10000, 0x1000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x81}}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0x0, r5, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r9 = dup(r4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2, 0x10010, r10, 0xd47e0000) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34343459, 0x0, 0x0, [{}, {0x0, 0x80000}, {0x3}, {}, {0xfffffffd}, {}, {0x1f}], 0x0, 0x0, 0x9}}) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) 541.421796ms ago: executing program 1 (id=1242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) socket$kcm(0x10, 0x2, 0x10) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x240480c0}, 0x20040c00) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 540.960544ms ago: executing program 0 (id=1243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x2000000015, 0x80005, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp6=r2}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="0f20c035000001000f22c0c744240001000000c74424020a000000c7442406000000000f011c24c462413e790f66b80b010f00d866b816010f00d0f30fc7b1a1000000b805000000b9a01a00000f01d942de36b9c20300000f3266ba4100b004ee", 0x61}], 0x89b, 0x17, 0x0, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x200203, 0x14) r6 = socket$inet_icmp(0x2, 0x2, 0x1) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="040e0504580c"], 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000340), &(0x7f0000000380)=0x30) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000080)={0x8000000000000000, 0xeeee8000, 0xffffffffffff6153, 0x3, 0xa}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffe25, 0x24, 0x3, [@enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0xd, 0x4}, {0x0, 0x9}]}]}, {0x0, [0x0]}}, 0x0, 0x3f, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) 462.836812ms ago: executing program 4 (id=1244): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200000001005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2903fcffffff00000000160000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 462.410031ms ago: executing program 2 (id=1245): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='source', &(0x7f00000001c0)="9875", 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8808}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x800}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x44}, 0x1, 0xba01, 0x0, 0x20004811}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 399.672924ms ago: executing program 4 (id=1246): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1bd}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r10, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 396.445677ms ago: executing program 0 (id=1247): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0xfffffff2, 0xfffffffb, 0x100, 0x4007, 0x3]}, &(0x7f0000000000)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911053000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181042, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x700, 0x700, 0x1, 0xfffffff7, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x65, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0x2d, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xd}, {@broadcast, 0x7}]}, @ssrr={0x89, 0xf, 0x60, [@empty, @rand_addr=0x64010100, @multicast2]}, @timestamp={0x44, 0x8, 0x64, 0x0, 0x3, [0xd]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@deltfilter={0x74, 0x2d, 0x700, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff1}, {0xe, 0x9}, {0x4, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xe0f9}, @TCA_RATE={0x6, 0x5, {0xc, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x3, 0xfc}}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x74}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000041428bd7000fbdbdf250a4082c8fb5f9727c12c09bfa3ff", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20008100}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60121f0800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000607f000000001100fc010000000000000000000800000000000000000000000000000000000000000000000000000000052f000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x6, 0x1, 0x2000000005}}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) 321.854512ms ago: executing program 0 (id=1248): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0xc4800, 0x222) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) r3 = io_uring_setup(0x47ce, &(0x7f0000000140)={0x0, 0x342c, 0x40, 0x2, 0x3d7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x6a040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 321.267037ms ago: executing program 2 (id=1249): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 260.641243ms ago: executing program 4 (id=1250): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x80b00, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 260.049054ms ago: executing program 2 (id=1251): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) r0 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000001880)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f", 0x45b) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45b], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0xfffffff9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 180.3604ms ago: executing program 0 (id=1252): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') 180.073657ms ago: executing program 4 (id=1253): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) listen(r0, 0x5) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f0000000000), 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200), 0x0, 0x0, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) listen(r0, 0x0) (async) listen(r0, 0x5) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) (async) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f0000000000), 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200), 0x0, 0x0, 0x2) (async) 100.832101ms ago: executing program 0 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) setresgid(0x0, 0x0, 0xee00) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ad6e4b18309d4e4081c4d0fea0245af7d7d4f1724634a7d2fe96b97b35f664825096ff24688229734077d88ec7873b95396d9397d3", 0x35, r3) readv(r0, &(0x7f0000003900)=[{&(0x7f0000003980)=""/230, 0xe6}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/107, 0x6b}, {&(0x7f00000035c0)=""/161, 0xa1}, {&(0x7f0000003680)=""/75, 0x4b}, {&(0x7f0000003700)=""/227, 0xe3}, {&(0x7f0000003800)=""/231, 0xe7}], 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r5, &(0x7f00000022c0)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0x6, 0xddd073cf) keyctl$unlink(0x9, r4, r3) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002240)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000081ffffffffffffff000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x20000, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "7e9b06c2b89a1461b0be74bd4cfece1c8b79781c06a023812322941c6a79192bec04315ff4856aef0a03e5c71c55cc9f4defd5b8eac2c30e5fcfc800", 0x35}, 0x48, 0xfffffffffffffffe) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000002180)={[0x22f, 0x8f, 0x4, 0x7ffb, 0xfff, 0x0, 0x143, 0x200, 0x2, 0x6, 0x40, 0x0, 0x2, 0x1, 0x6b2a, 0x1], 0x4}) write$FUSE_DIRENT(r2, &(0x7f0000002240)=ANY=[], 0x1e0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) readahead(r2, 0x1, 0x5) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x3f5b, 0x400, 0x8000000, 0x3d7}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r10, 0xc004510e, &(0x7f00000010c0)) keyctl$get_persistent(0x16, r6, r3) 100.634349ms ago: executing program 4 (id=1255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x40, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$AUDIT_GET(r0, 0x0, 0x40010) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f000080d000/0x4000)=nil, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x43) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="90db829991766d5fad37f60c9bfd514d84cceeebff710ae4febaf6402f89d15f506dd659ffc650f514a4826a058afd03dfb950587320d15f5bd6a256e7069bda6aa1e2b3800e5de6ebc0dc463b89df4381767f9f13e6ae523290e27d70507e9612cfb00a5f5c8a992b1cf8f8377d45e8efd00a47b77127b4822b8fbdb3638e4abb78cf8519b0b0fab38637f2ec632d9b8af093d365e2d1756de9dbcad45581eb", 0xa0}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="eaedc54dc9dd37a911162a3c52d59ee540a4cd090c8e034120d46bad3f8ded27a52b03e717f986f978", 0x29, 0x4010, 0x0, 0x0) 0s ago: executing program 0 (id=1256): prctl$PR_GET_KEEPCAPS(0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(r1) prctl$PR_GET_KEEPCAPS(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x6, 0x3, 0x1}}, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 0s ago: executing program 0 (id=1257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) (async) listen(r0, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) kernel console output (not intermixed with test programs): denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 68.494228][ T7157] tmpfs: Unknown parameter '[%' [ 68.519364][ T40] audit: type=1400 audit(1747033000.473:443): avc: denied { create } for pid=7161 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.539769][ T40] audit: type=1400 audit(1747033000.493:444): avc: denied { connect } for pid=7161 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.695553][ T63] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.861637][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 68.865206][ T63] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 68.868458][ T63] usb 5-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 68.872973][ T63] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 68.875838][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.878305][ T63] usb 5-1: Product: syz [ 68.879634][ T63] usb 5-1: Manufacturer: syz [ 68.881080][ T63] usb 5-1: SerialNumber: syz [ 68.937545][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.337'. [ 68.976893][ T7193] netlink: 56 bytes leftover after parsing attributes in process `syz.3.338'. [ 69.027776][ T7197] syz.3.340: attempt to access beyond end of device [ 69.027776][ T7197] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 69.033079][ T7197] gfs2: error -5 reading superblock [ 69.098398][ T7153] kvm: emulating exchange as write [ 69.183979][ T4223] usb 5-1: USB disconnect, device number 6 [ 69.429462][ T7214] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 70.296202][ T7231] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.325471][ T7235] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 70.335652][ T7239] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.350522][ T7235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.356595][ T7239] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.364618][ T7236] dummy0: entered promiscuous mode [ 70.375223][ T7236] bond1: (slave dummy0): making interface the new active one [ 70.378790][ T7236] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 70.385962][ T7239] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.393591][ T7239] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.401156][ T7239] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.408150][ T7239] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.414765][ T7239] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.421319][ T7239] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.428551][ T7239] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.436761][ T7239] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.443166][ T7239] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.449736][ T7239] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.456888][ T7239] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.463064][ T7239] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.469274][ T7239] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.476077][ T7239] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.482675][ T7239] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.488859][ T7239] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.495762][ T7239] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.502141][ T7239] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.508414][ T7239] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.515496][ T7239] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.522973][ T7239] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.529262][ T7239] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.543367][ T7239] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.549811][ T7239] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.561132][ T7239] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.572827][ T7239] bridge29: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.579223][ T7239] bridge30: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.585884][ T7239] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.593280][ T7239] bridge32: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.599467][ T7239] bridge33: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.606512][ T7239] bridge34: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.612849][ T7239] bridge35: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.618957][ T7239] bridge36: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.625224][ T7239] bridge37: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.631530][ T7239] bridge38: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.639032][ T7239] bridge39: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.645933][ T7239] bridge40: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.652237][ T7239] bridge41: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.661659][ T63] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.669093][ T7239] bridge42: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.676488][ T7246] overlayfs: failed to resolve './file1': -2 [ 70.680814][ T7239] bridge43: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.690850][ T7239] bridge44: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.697464][ T7239] bridge45: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.704063][ T7239] bridge46: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.709727][ T5975] hid-generic 0362:07FF:7FFFFFFF.0002: item fetching failed at offset 0/2 [ 70.711473][ T7239] bridge47: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.713178][ T5975] hid-generic 0362:07FF:7FFFFFFF.0002: probe with driver hid-generic failed with error -22 [ 70.719536][ T7239] bridge48: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.726081][ T7239] bridge49: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.733770][ T7239] bridge50: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.741485][ T7239] bridge51: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.747945][ T7239] bridge52: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.753141][ T7246] Invalid logical block size (3) [ 70.755773][ T7239] bridge53: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.763016][ T7239] bridge54: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.770709][ T7239] bridge55: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.777869][ T7239] bridge56: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.785871][ T7239] bridge57: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.792431][ T7239] bridge58: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.801855][ T7239] bridge59: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.808142][ T7239] bridge60: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.813809][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 70.814832][ T7239] bridge61: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.820182][ T63] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 70.830944][ T63] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 70.834223][ T63] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 70.837091][ T63] usb 6-1: config 250 has no interface number 0 [ 70.839058][ T63] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 70.845042][ T7239] bridge62: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.847462][ T63] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 70.851339][ T63] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 70.854392][ T7239] bridge63: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.855663][ T63] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 70.861277][ T7239] bridge64: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.862817][ T63] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 70.868405][ T7239] bridge65: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.869049][ T63] usb 6-1: config 250 interface 228 has no altsetting 0 [ 70.876164][ T63] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 70.876327][ T7239] bridge66: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.878932][ T63] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 70.884728][ T63] usb 6-1: Product: syz [ 70.886063][ T63] usb 6-1: SerialNumber: syz [ 70.894012][ T13] bond1: (slave dummy0): link status definitely down, disabling slave [ 70.897217][ T13] bond1: now running without any active interface! [ 70.902048][ T63] hub 6-1:250.228: bad descriptor, ignoring hub [ 70.904040][ T63] hub 6-1:250.228: probe with driver hub failed with error -5 [ 70.911229][ T7267] ipt_ECN: cannot use operation on non-tcp rule [ 71.039372][ T7279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12056 sclass=netlink_route_socket pid=7279 comm=syz.2.368 [ 71.100438][ T7288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.371'. [ 71.103836][ T7290] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.355'. [ 71.105809][ T63] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 71.106361][ T7288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.371'. [ 71.114501][ T7291] capability: warning: `syz.0.372' uses deprecated v2 capabilities in a way that may be insecure [ 71.126727][ T7291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.131844][ T63] usb 6-1: USB disconnect, device number 7 [ 71.136661][ T7291] kvm: user requested TSC rate below hardware speed [ 71.138854][ T63] usblp0: removed [ 71.155254][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.158137][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.339254][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 71.339264][ T40] audit: type=1400 audit(1747033003.293:552): avc: denied { write } for pid=7307 comm="syz.0.378" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 71.367286][ T40] audit: type=1400 audit(1747033003.323:553): avc: denied { mount } for pid=7309 comm="syz.0.379" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 71.375061][ T40] audit: type=1400 audit(1747033003.323:554): avc: denied { search } for pid=7309 comm="syz.0.379" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.470345][ T40] audit: type=1400 audit(1747033003.423:555): avc: denied { ioctl } for pid=7311 comm="syz.0.380" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.548940][ T7319] process 'syz.0.383' launched '/dev/fd/4' with NULL argv: empty string added [ 71.553578][ T40] audit: type=1400 audit(1747033003.513:556): avc: denied { execute_no_trans } for pid=7318 comm="syz.0.383" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.582041][ T63] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 71.650115][ T7329] mmap: syz.0.385 (7329): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 71.738077][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 71.741390][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.745231][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 71.748626][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 71.755584][ T63] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 71.758419][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.760868][ T63] usb 6-1: Product: syz [ 71.763141][ T63] usb 6-1: Manufacturer: syz [ 71.764627][ T63] usb 6-1: SerialNumber: syz [ 71.768158][ T63] usb 6-1: config 0 descriptor?? [ 71.908943][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 71.973091][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.976481][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.983475][ T63] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 72.016007][ T40] audit: type=1400 audit(1747033003.973:557): avc: denied { name_connect } for pid=7361 comm="syz.3.392" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 72.064432][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 72.067159][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 72.085718][ T7375] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.088457][ T7375] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.091142][ T7375] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.094028][ T7375] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.175406][ T40] audit: type=1400 audit(1747033004.133:558): avc: denied { create } for pid=7385 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.185702][ T40] audit: type=1400 audit(1747033004.143:559): avc: denied { ioctl } for pid=7385 comm="syz.3.395" path="socket:[18669]" dev="sockfs" ino=18669 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.197413][ T40] audit: type=1400 audit(1747033004.143:560): avc: denied { name_bind } for pid=7305 comm="syz.1.377" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 72.263015][ T40] audit: type=1400 audit(1747033004.213:561): avc: denied { write } for pid=7380 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.282413][ T7401] dummy0: left allmulticast mode [ 72.284321][ T7401] bridge0: port 5(dummy0) entered disabled state [ 72.289377][ T7401] batman_adv: batadv0: Adding interface: dummy0 [ 72.291495][ T7401] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.300522][ T7401] batman_adv: batadv0: Interface activated: dummy0 [ 72.309363][ T7401] batadv0: mtu less than device minimum [ 72.311710][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.315872][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.320804][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.324445][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.328051][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.331895][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.335596][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.339305][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.343092][ T7401] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.363855][ T7401] kernel read not supported for file /policy (pid: 7401 comm: syz.3.397) [ 72.417683][ T7415] team_slave_0: entered allmulticast mode [ 72.450906][ T7425] vivid-007: ================= START STATUS ================= [ 72.461617][ T7425] vivid-007: Generate PTS: true [ 72.463585][ T7425] vivid-007: Generate SCR: true [ 72.465171][ T7425] tpg source WxH: 640x360 (Y'CbCr) [ 72.466833][ T7425] tpg field: 1 [ 72.468038][ T7425] tpg crop: (0,0)/640x360 [ 72.469482][ T7425] tpg compose: (0,0)/640x360 [ 72.471009][ T7425] tpg colorspace: 8 [ 72.473428][ T7425] tpg transfer function: 0/0 [ 72.474906][ T7425] tpg Y'CbCr encoding: 0/0 [ 72.476364][ T7425] tpg quantization: 0/0 [ 72.477811][ T7425] tpg RGB range: 0/2 [ 72.479038][ T7425] vivid-007: ================== END STATUS ================== [ 72.553864][ T7442] netlink: 'syz.2.404': attribute type 21 has an invalid length. [ 72.555688][ T7437] input: syz1 as /devices/virtual/input/input7 [ 72.556365][ T7442] netlink: 156 bytes leftover after parsing attributes in process `syz.2.404'. [ 72.567409][ T7443] netlink: 'syz.2.404': attribute type 64 has an invalid length. [ 72.570032][ T7443] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 72.573264][ T7443] netlink: 152 bytes leftover after parsing attributes in process `syz.2.404'. [ 72.783630][ T7472] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 72.796775][ T7472] bond0: (slave wlan1): Releasing backup interface [ 72.798060][ T7474] ALSA: mixer_oss: invalid OSS volume '' [ 72.807354][ T7472] team0: Port device wlan1 added [ 72.841776][ T833] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 72.868193][ T7478] bond0: (slave rose0): Enslaving as an active interface with an up link [ 72.993289][ T833] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.996133][ T833] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.999347][ T833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.002359][ T833] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 73.005817][ T833] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 73.010525][ T833] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.013463][ T833] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.015934][ T833] usb 7-1: Product: syz [ 73.017288][ T833] usb 7-1: Manufacturer: syz [ 73.022432][ T833] cdc_wdm 7-1:1.0: skipping garbage [ 73.024171][ T833] cdc_wdm 7-1:1.0: skipping garbage [ 73.028075][ T833] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 73.030032][ T833] cdc_wdm 7-1:1.0: Unknown control protocol [ 73.159576][ T7490] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 73.256724][ T7496] bond2: entered promiscuous mode [ 73.258420][ T7496] bond2: entered allmulticast mode [ 73.260313][ T7496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.272367][ T7497] bond3: entered promiscuous mode [ 73.273979][ T7497] bond3: entered allmulticast mode [ 73.275843][ T7497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.305382][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 73.308148][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.422'. [ 73.335619][ T7503] netlink: 124 bytes leftover after parsing attributes in process `syz.0.423'. [ 73.338741][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 73.624660][ T9] usb 7-1: USB disconnect, device number 6 [ 73.833601][ T7516] 9pnet: Could not find request transport: viOydf!RڃHrtio [ 74.288309][ T9] usb 6-1: USB disconnect, device number 8 [ 74.308904][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 74.391708][ T63] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.544624][ T63] usb 7-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 74.547540][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.550038][ T63] usb 7-1: Product: syz [ 74.551383][ T63] usb 7-1: Manufacturer: syz [ 74.553032][ T63] usb 7-1: SerialNumber: syz [ 74.559210][ T63] usb 7-1: config 0 descriptor?? [ 74.562747][ T63] go7007 7-1:0.0: Sensoray 2250 found [ 74.564786][ T63] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 74.952793][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 75.179956][ T7522] vlan0: entered promiscuous mode [ 75.182705][ T7522] vlan0: entered allmulticast mode [ 75.184797][ T7522] hsr_slave_1: entered allmulticast mode [ 75.191778][ T5994] usb 7-1: USB disconnect, device number 7 [ 75.292935][ T1148] veth0_to_bond: left promiscuous mode [ 75.317146][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 75.727678][ T7589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51602 sclass=netlink_route_socket pid=7589 comm=syz.2.446 [ 75.857506][ T7608] overlayfs: conflicting lowerdir path [ 75.991389][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 75.995836][ T7621] veth1_vlan: Device is already in use. [ 75.999188][ T7621] overlayfs: failed to resolve './file0': -2 [ 76.044237][ T7628] overlayfs: failed to resolve './file1': -2 [ 76.278211][ T4223] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 76.434198][ T4223] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 76.437166][ T4223] usb 7-1: config 0 has no interface number 0 [ 76.439352][ T4223] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.444139][ T4223] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 76.447706][ T4223] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 76.451675][ T4223] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 76.455808][ T4223] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 76.459319][ T4223] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.464664][ T4223] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 76.468805][ T4223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.473008][ T4223] usb 7-1: config 0 descriptor?? [ 76.475087][ T7626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.477391][ T7626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.482948][ T4223] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 76.693580][ T4223] usb 7-1: USB disconnect, device number 8 [ 76.698401][ T4223] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 76.754352][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 76.754363][ T40] audit: type=1400 audit(1747033008.713:577): avc: denied { getopt } for pid=7642 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.778431][ T7645] xt_hashlimit: size too large, truncated to 1048576 [ 76.845919][ T40] audit: type=1400 audit(1747033008.803:578): avc: denied { read } for pid=7653 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.051829][ T40] audit: type=1400 audit(1747033009.003:579): avc: denied { setattr } for pid=7658 comm="syz.0.467" name="file0" dev="9p" ino=35913899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.147165][ T7661] infiniband syz!: set active [ 77.150240][ T7661] infiniband syz!: added team_slave_0 [ 77.175220][ T7661] RDS/IB: syz!: added [ 77.177081][ T7661] smc: adding ib device syz! with port count 1 [ 77.179329][ T7661] smc: ib device syz! port 1 has pnetid [ 77.231367][ T40] audit: type=1400 audit(1747033009.183:580): avc: denied { write } for pid=7666 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.273940][ T40] audit: type=1400 audit(1747033009.233:581): avc: denied { write } for pid=7669 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 77.413697][ T7675] team0: Port device team_slave_0 removed [ 77.714853][ T7679] netlink: 'syz.1.473': attribute type 9 has an invalid length. [ 77.718235][ T40] audit: type=1400 audit(1747033009.673:582): avc: denied { create } for pid=7678 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.729720][ T40] audit: type=1400 audit(1747033009.673:583): avc: denied { bind } for pid=7678 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.746203][ T7681] sp0: Synchronizing with TNC [ 77.935542][ T40] audit: type=1400 audit(1747033009.893:584): avc: denied { execmem } for pid=7695 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.014125][ T40] audit: type=1400 audit(1747033009.973:585): avc: denied { read write } for pid=7702 comm="syz.3.482" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.035599][ T7703] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.035997][ T40] audit: type=1400 audit(1747033009.973:586): avc: denied { open } for pid=7702 comm="syz.3.482" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.043205][ T7703] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 78.134879][ T7709] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 78.206892][ T7706] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 78.288236][ T7729] __nla_validate_parse: 4 callbacks suppressed [ 78.288246][ T7729] netlink: 80 bytes leftover after parsing attributes in process `syz.2.489'. [ 78.299860][ T7727] input: syz1 as /devices/virtual/input/input9 [ 78.396430][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.496'. [ 78.482375][ T7748] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 78.971689][ T4223] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 79.111633][ T4223] usb 6-1: device descriptor read/64, error -71 [ 79.211041][ T7765] binder: 7764:7765 ioctl 4090ae82 200000000040 returned -22 [ 79.346667][ T7777] net_ratelimit: 12 callbacks suppressed [ 79.346683][ T7777] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.369624][ T7777] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.375627][ T4223] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 79.382621][ T7777] loop6: detected capacity change from 0 to 7 [ 79.387476][ T7777] Dev loop6: unable to read RDB block 7 [ 79.389478][ T7777] loop6: unable to read partition table [ 79.391447][ T7777] loop6: partition table beyond EOD, truncated [ 79.396089][ T7777] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 79.491359][ T7782] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 79.493758][ T7782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.498231][ T7782] vhci_hcd vhci_hcd.0: Device attached [ 79.504093][ T7782] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 79.506721][ T7782] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.509784][ T7782] vhci_hcd vhci_hcd.0: Device attached [ 79.512527][ T4223] usb 6-1: device descriptor read/64, error -71 [ 79.513356][ T7783] vhci_hcd: connection closed [ 79.514751][ T7785] usbip_core: unknown command [ 79.515337][ T1142] vhci_hcd: stop threads [ 79.516338][ T7785] vhci_hcd: unknown pdu 0 [ 79.516346][ T7785] usbip_core: unknown command [ 79.522679][ T1142] vhci_hcd: release socket [ 79.524699][ T1142] vhci_hcd: disconnect device [ 79.530929][ T12] vhci_hcd: stop threads [ 79.532958][ T12] vhci_hcd: release socket [ 79.534802][ T12] vhci_hcd: disconnect device [ 79.599519][ T7797] binder: 7796:7797 ioctl c0306201 2000000003c0 returned -14 [ 79.601726][ T7798] binder: 7796:7798 ioctl c0306201 2000000003c0 returned -14 [ 79.634747][ T4223] usb usb6-port1: attempt power cycle [ 79.648868][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 79.652975][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 79.705229][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.516'. [ 79.709027][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 79.843838][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 79.848099][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 79.852386][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 79.981693][ T4223] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 80.002177][ T4223] usb 6-1: device descriptor read/8, error -71 [ 80.095704][ T7840] xt_l2tp: v2 tid > 0xffff: 150994944 [ 80.243413][ T4223] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 80.262511][ T4223] usb 6-1: device descriptor read/8, error -71 [ 80.374565][ T4223] usb usb6-port1: unable to enumerate USB device [ 80.377035][ T7865] nbd: device at index 64 is going down [ 80.417016][ T5934] udevd[5934]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 80.426463][ T5934] udevd[5934]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 80.837114][ T7879] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 80.839875][ T7879] SELinux: failed to load policy [ 80.842929][ T7879] xt_hashlimit: overflow, try lower: 0/0 [ 80.928463][ T7892] ksmbd: Unknown IPC event: 3, ignore. [ 81.004701][ T7899] team0: No ports can be present during mode change [ 81.087136][ T7899] team0 (unregistering): Port device team_slave_0 removed [ 81.103887][ T7899] team0 (unregistering): Port device team_slave_1 removed [ 81.112808][ T7899] team0 (unregistering): Port device geneve0 removed [ 81.250803][ T7913] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 81.255252][ T7913] batman_adv: batadv0: Adding interface: dummy0 [ 81.257918][ T7913] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.270489][ T7913] batman_adv: batadv0: Interface activated: dummy0 [ 81.281060][ T7913] batadv0: mtu less than device minimum [ 81.283729][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.287459][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.291081][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.294724][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.298327][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.301981][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.305579][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.356821][ T7916] overlayfs: missing 'lowerdir' [ 81.359045][ T7916] overlayfs: missing 'lowerdir' [ 81.362595][ T7916] overlayfs: missing 'lowerdir' [ 81.365244][ T7916] overlayfs: missing 'lowerdir' [ 81.367645][ T7916] overlayfs: missing 'lowerdir' [ 81.369707][ T7916] overlayfs: missing 'lowerdir' [ 81.372968][ T7916] overlayfs: missing 'lowerdir' [ 81.375239][ T7916] overlayfs: missing 'lowerdir' [ 81.377541][ T7916] overlayfs: missing 'lowerdir' [ 81.379820][ T7916] overlayfs: missing 'lowerdir' [ 81.383018][ T7916] overlayfs: missing 'lowerdir' [ 81.384925][ T7916] overlayfs: missing 'lowerdir' [ 81.387273][ T7916] overlayfs: missing 'lowerdir' [ 81.389155][ T7916] overlayfs: missing 'lowerdir' [ 81.401988][ T7916] overlayfs: missing 'lowerdir' [ 81.405086][ T7916] overlayfs: missing 'lowerdir' [ 81.408382][ T24] cfg80211: failed to load regulatory.db [ 81.413190][ T7916] overlayfs: missing 'lowerdir' [ 81.432296][ T7916] overlayfs: missing 'lowerdir' [ 81.442175][ T7916] overlayfs: missing 'lowerdir' [ 81.452605][ T7916] overlayfs: missing 'lowerdir' [ 81.455425][ T7916] overlayfs: missing 'lowerdir' [ 81.457564][ T7916] overlayfs: missing 'lowerdir' [ 81.459489][ T7916] overlayfs: missing 'lowerdir' [ 81.461490][ T7916] overlayfs: missing 'lowerdir' [ 81.471987][ T7916] overlayfs: missing 'lowerdir' [ 81.474169][ T7916] overlayfs: missing 'lowerdir' [ 81.476386][ T7916] overlayfs: missing 'lowerdir' [ 81.478332][ T7916] overlayfs: missing 'lowerdir' [ 81.480240][ T7916] overlayfs: missing 'lowerdir' [ 81.483583][ T7916] overlayfs: missing 'lowerdir' [ 81.486766][ T7916] overlayfs: missing 'lowerdir' [ 81.488771][ T7916] overlayfs: missing 'lowerdir' [ 81.490579][ T7916] overlayfs: missing 'lowerdir' [ 81.492888][ T7916] overlayfs: missing 'lowerdir' [ 81.494840][ T7916] overlayfs: missing 'lowerdir' [ 81.497025][ T7916] overlayfs: missing 'lowerdir' [ 81.498914][ T7916] overlayfs: missing 'lowerdir' [ 81.501514][ T7916] overlayfs: missing 'lowerdir' [ 81.501726][ T5994] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 81.508405][ T7916] overlayfs: missing 'lowerdir' [ 81.510890][ T7916] overlayfs: missing 'lowerdir' [ 81.513499][ T7916] overlayfs: missing 'lowerdir' [ 81.515479][ T7916] overlayfs: missing 'lowerdir' [ 81.517616][ T7916] overlayfs: missing 'lowerdir' [ 81.520148][ T7916] overlayfs: missing 'lowerdir' [ 81.523193][ T7916] overlayfs: missing 'lowerdir' [ 81.526210][ T7916] overlayfs: missing 'lowerdir' [ 81.529257][ T7916] overlayfs: missing 'lowerdir' [ 81.531709][ T7916] overlayfs: missing 'lowerdir' [ 81.533956][ T7916] overlayfs: missing 'lowerdir' [ 81.536578][ T7916] overlayfs: missing 'lowerdir' [ 81.538663][ T7916] overlayfs: missing 'lowerdir' [ 81.541464][ T7916] overlayfs: missing 'lowerdir' [ 81.544586][ T7916] overlayfs: missing 'lowerdir' [ 81.547103][ T7916] overlayfs: missing 'lowerdir' [ 81.549155][ T7916] overlayfs: missing 'lowerdir' [ 81.551146][ T7916] overlayfs: missing 'lowerdir' [ 81.553347][ T7916] overlayfs: missing 'lowerdir' [ 81.555878][ T7916] overlayfs: missing 'lowerdir' [ 81.557949][ T7916] overlayfs: missing 'lowerdir' [ 81.559998][ T7916] overlayfs: missing 'lowerdir' [ 81.562531][ T7916] overlayfs: missing 'lowerdir' [ 81.564550][ T7916] overlayfs: missing 'lowerdir' [ 81.566967][ T7916] overlayfs: missing 'lowerdir' [ 81.568966][ T7916] overlayfs: missing 'lowerdir' [ 81.572293][ T7916] overlayfs: missing 'lowerdir' [ 81.663627][ T5994] usb 7-1: Using ep0 maxpacket: 16 [ 81.664236][ T5994] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 81.665221][ T5994] usb 7-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 81.678393][ T5994] usb 7-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 81.679590][ T5994] usb 7-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 81.687311][ T5994] usb 7-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 81.689391][ T5994] usb 7-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 81.690243][ T5994] usb 7-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 81.708088][ T5994] usb 7-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 81.708899][ T5994] usb 7-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 81.709852][ T5994] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 81.709872][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 81.709889][ T5994] usb 7-1: SerialNumber: syz [ 81.712315][ T5994] usb 7-1: config 0 descriptor?? [ 81.863600][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 81.863611][ T40] audit: type=1400 audit(1747033013.823:615): avc: denied { map } for pid=7931 comm="syz.1.552" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.873146][ T40] audit: type=1400 audit(1747033013.823:616): avc: denied { execute } for pid=7931 comm="syz.1.552" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.904042][ T40] audit: type=1400 audit(1747033013.863:617): avc: denied { ioctl } for pid=7931 comm="syz.1.552" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.937613][ T40] audit: type=1400 audit(1747033013.893:618): avc: denied { mounton } for pid=7910 comm="syz.2.545" path="/122/file0/file0" dev="9p" ino=35913899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.945704][ T40] audit: type=1400 audit(1747033013.893:619): avc: denied { associate } for pid=7910 comm="syz.2.545" name="pids.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.952522][ T40] audit: type=1400 audit(1747033013.903:620): avc: denied { read append open } for pid=7910 comm="syz.2.545" path="/122/file0/pids.current" dev="9p" ino=35913985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.959226][ T4223] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 82.047094][ T7936] [U] zͻi[27| [ 82.049466][ T7936] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 82.054146][ T7936] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 82.057548][ T7936] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 82.068355][ T7936] [U] 8)X)YvxRĻbmbN@ox;JD, [ 82.070553][ T7936] [U] *Cn3v7KEXgt_3 [ 82.072481][ T7936] [U] D/QazҬEHgE1$_ks=R@ [ 82.074307][ T7936] [U] ϼcEv @ [ 82.075590][ T7936] [U] a% [ 82.076693][ T7936] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 82.082842][ T7936] [U] f1p3 [ 82.083951][ T7936] [U] N0[L;a_l&kMC [ 82.085563][ T7936] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 82.111725][ T4223] usb 5-1: Using ep0 maxpacket: 32 [ 82.121131][ T4223] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.124263][ T4223] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 82.127393][ T4223] usb 5-1: can't read configurations, error -71 [ 82.195602][ T40] audit: type=1400 audit(1747033014.153:621): avc: denied { append } for pid=7935 comm="syz.1.553" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.466961][ T5994] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input10 [ 82.473267][ T5331] bcm5974 7-1:0.0: could not read from device [ 82.477033][ T5331] bcm5974 7-1:0.0: could not read from device [ 82.478865][ T5994] usb 7-1: USB disconnect, device number 9 [ 82.544039][ T40] audit: type=1400 audit(1747033014.493:622): avc: denied { map } for pid=7941 comm="syz.2.554" path="socket:[19319]" dev="sockfs" ino=19319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.637681][ T40] audit: type=1400 audit(1747033014.593:623): avc: denied { create } for pid=7955 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 82.734258][ T40] audit: type=1400 audit(1747033014.693:624): avc: denied { append } for pid=7966 comm="syz.3.560" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.804071][ T7975] devtmpfs: Cannot change global quota limit on remount [ 82.877406][ T7935] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4M0X:HGA KWRMBV5@w ^8)O' [ 83.258987][ T8031] ubi31: attaching mtd0 [ 83.262450][ T8031] ubi31: scanning is finished [ 83.263980][ T8031] ubi31: empty MTD device detected [ 83.275081][ T8033] netlink: 'syz.3.583': attribute type 12 has an invalid length. [ 83.277535][ T8033] netlink: 'syz.3.583': attribute type 29 has an invalid length. [ 83.311663][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 83.345137][ T8031] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 83.351736][ T8031] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 83.354074][ T8031] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 83.356293][ T8031] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 83.358515][ T8031] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 83.360697][ T8031] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 83.363215][ T8031] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2003635760 [ 83.366212][ T8031] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 83.369942][ T8040] ubi31: background thread "ubi_bgt31d" started, PID 8040 [ 83.493351][ T8051] __nla_validate_parse: 40 callbacks suppressed [ 83.493363][ T8051] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.587'. [ 83.521821][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.673951][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 83.677718][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 83.683213][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.687329][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.697821][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.703767][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.707577][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.922973][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 83.924830][ T34] usbtmc 5-1:16.0: can't read capabilities [ 84.278137][ T34] usb 5-1: USB disconnect, device number 9 [ 84.805868][ T8081] netlink: 'syz.2.596': attribute type 10 has an invalid length. [ 84.820367][ T8081] team0: Device hsr_slave_0 failed to register rx_handler [ 84.821093][ T8089] random: crng reseeded on system resumption [ 84.912710][ T8087] netlink: 'syz.2.596': attribute type 2 has an invalid length. [ 85.774956][ T4223] IPVS: starting estimator thread 0... [ 85.812085][ T8143] 9pnet_virtio: no channels available for device syz [ 85.817730][ T8143] syz.2.616(8143): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 85.848254][ T8143] netlink: 220 bytes leftover after parsing attributes in process `syz.2.616'. [ 85.876194][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 85.881762][ T8141] IPVS: using max 45 ests per chain, 108000 per kthread [ 85.901651][ T5973] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 86.040135][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 86.066475][ T5973] usb 5-1: Using ep0 maxpacket: 16 [ 86.070695][ T5973] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 86.075156][ T5973] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 86.079924][ T5973] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 86.086314][ T5973] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 86.091900][ T5973] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 86.097141][ T5973] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 86.102602][ T5973] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 86.107620][ T5973] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 86.113892][ T5973] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 86.119143][ T5973] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 86.131697][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 86.135035][ T5973] usb 5-1: SerialNumber: syz [ 86.139067][ T5973] usb 5-1: config 0 descriptor?? [ 86.206343][ T8172] tmpfs: Unknown parameter 'usrquotaY-HL1`G>#1xpJfUtY& IZ &' [ 86.541943][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 86.694265][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.697501][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.702088][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.705078][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.707720][ T24] usb 7-1: Product: syz [ 86.709403][ T24] usb 7-1: Manufacturer: syz [ 86.711315][ T24] usb 7-1: SerialNumber: syz [ 86.717341][ T24] usb 7-1: config 0 descriptor?? [ 86.737458][ T24] usb 7-1: selecting invalid altsetting 0 [ 86.791721][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 86.893439][ T5973] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11 [ 86.899986][ T5331] bcm5974 5-1:0.0: could not read from device [ 86.907525][ T5331] bcm5974 5-1:0.0: could not read from device [ 86.907609][ T5973] usb 5-1: USB disconnect, device number 10 [ 86.940384][ T833] usb 7-1: USB disconnect, device number 10 [ 87.099949][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 87.103798][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 87.384487][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 87.410722][ T8233] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 87.412760][ T8233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.415728][ T8233] vhci_hcd vhci_hcd.0: Device attached [ 87.418296][ T8234] vhci_hcd: cannot find the pending unlink 1023 [ 87.420266][ T8234] vhci_hcd: connection closed [ 87.421252][ T1142] vhci_hcd: stop threads [ 87.424692][ T1142] vhci_hcd: release socket [ 87.427236][ T1142] vhci_hcd: disconnect device [ 87.755112][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 87.755129][ T40] audit: type=1400 audit(1747033019.713:637): avc: denied { wake_alarm } for pid=8269 comm="syz.3.654" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.950906][ T8283] overlayfs: failed to resolve './file0': -2 [ 87.998499][ T8289] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 88.001130][ T8289] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.005281][ T8289] vhci_hcd vhci_hcd.0: Device attached [ 88.108078][ T40] audit: type=1400 audit(1747033020.063:638): avc: denied { ioctl } for pid=8293 comm="syz.1.662" path="socket:[23795]" dev="sockfs" ino=23795 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 88.251832][ T833] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 88.321983][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 88.439682][ T8319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'. [ 88.491651][ T10] usb 8-1: config 0 has no interfaces? [ 88.493634][ T10] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 88.496521][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.500355][ T10] usb 8-1: config 0 descriptor?? [ 88.704589][ T8289] fuse: Bad value for 'group_id' [ 88.706304][ T8289] fuse: Bad value for 'group_id' [ 88.720357][ T4223] usb 8-1: USB disconnect, device number 5 [ 88.722943][ T8290] vhci_hcd: connection closed [ 88.724071][ T89] vhci_hcd: stop threads [ 88.727803][ T89] vhci_hcd: release socket [ 88.731023][ T89] vhci_hcd: disconnect device [ 88.771753][ T833] vhci_hcd: vhci_device speed not set [ 88.806307][ T40] audit: type=1400 audit(1747033020.763:639): avc: denied { block_suspend } for pid=8332 comm="syz.3.673" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.817801][ T40] audit: type=1400 audit(1747033020.773:640): avc: denied { setopt } for pid=8332 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.181937][ T40] audit: type=1400 audit(1747033021.143:641): avc: denied { watch } for pid=8345 comm="syz.1.677" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.508350][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 89.508953][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 89.591047][ T40] audit: type=1400 audit(1747033021.543:642): avc: denied { write } for pid=8376 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.599681][ T40] audit: type=1400 audit(1747033021.543:643): avc: denied { read } for pid=8376 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.772267][ T8379] net_ratelimit: 14 callbacks suppressed [ 89.772287][ T8379] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.792731][ T40] audit: type=1326 audit(1747033021.753:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.3.675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b86b8e969 code=0x7fc00000 [ 89.802648][ T40] audit: type=1326 audit(1747033021.753:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.3.675" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b86b8e969 code=0x7fc00000 [ 89.813351][ T40] audit: type=1326 audit(1747033021.753:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.3.675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b86b8e969 code=0x7fc00000 [ 90.053631][ T8391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8391 comm=syz.3.689 [ 90.208544][ T8410] efs: device does not support 512 byte blocks [ 90.210431][ T8410] device does not support 512 byte blocks [ 90.210431][ T8410] [ 90.236663][ T8412] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 90.246520][ T8412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=545 sclass=netlink_route_socket pid=8412 comm=syz.3.694 [ 90.474047][ T8421] xt_hashlimit: size too large, truncated to 1048576 [ 90.506471][ T8424] xt_hashlimit: size too large, truncated to 1048576 [ 90.614363][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.617292][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.713328][ T8432] overlayfs: failed to resolve './bus/file0': -2 [ 90.815589][ T8436] Bluetooth: MGMT ver 1.23 [ 90.913202][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 90.951672][ T833] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 91.041731][ T10] usb 8-1: device descriptor read/64, error -71 [ 91.105069][ T833] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.107951][ T833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.111185][ T833] usb 7-1: Product: syz [ 91.112715][ T833] usb 7-1: Manufacturer: syz [ 91.114143][ T833] usb 7-1: SerialNumber: syz [ 91.120358][ T833] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.152694][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.282024][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 91.383564][ T8460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.412506][ T10] usb 8-1: device descriptor read/64, error -71 [ 91.522301][ T10] usb usb8-port1: attempt power cycle [ 91.587767][ T8484] netlink: 'syz.1.713': attribute type 7 has an invalid length. [ 91.590221][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 91.861916][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 91.881810][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 91.889663][ T10] usb 8-1: device descriptor read/8, error -71 [ 92.011634][ T24] usb 5-1: device descriptor read/64, error -71 [ 92.012615][ T8512] binder: 8511:8512 ioctl c0306201 200000000280 returned -14 [ 92.131681][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 92.152519][ T10] usb 8-1: device descriptor read/8, error -71 [ 92.191756][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 92.196651][ T9] ath9k_htc: Failed to initialize the device [ 92.228029][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 92.261853][ T10] usb usb8-port1: unable to enumerate USB device [ 92.272265][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 92.297736][ T8525] /dev/nullb0: Can't open blockdev [ 92.411960][ T24] usb 5-1: device descriptor read/64, error -71 [ 92.464094][ T8529] bond_slave_1: invalid flags given to default FDB implementation [ 92.524937][ T24] usb usb5-port1: attempt power cycle [ 92.861627][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 92.882135][ T24] usb 5-1: device descriptor read/8, error -71 [ 93.092487][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.141825][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 93.162105][ T24] usb 5-1: device descriptor read/8, error -71 [ 93.221618][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 93.221631][ T40] audit: type=1400 audit(2000000002.419:716): avc: granted { setsecparam } for pid=8544 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 93.268405][ T8550] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 93.275030][ T40] audit: type=1400 audit(2000000002.479:717): avc: denied { override_creds } for pid=8549 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.281731][ T24] usb usb5-port1: unable to enumerate USB device [ 93.302023][ T40] audit: type=1400 audit(2000000002.509:718): avc: denied { read } for pid=8551 comm="syz.1.729" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.333802][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 93.378488][ T8556] loop6: detected capacity change from 0 to 63 [ 93.392365][ T5934] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.396265][ T5934] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.399593][ T5934] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.403745][ T5934] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.407158][ T5934] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.410305][ T5934] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.414343][ T5934] Buffer I/O error on dev loop6, logical block 3, async page read [ 93.639944][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 93.688714][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 93.692561][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'. [ 93.712679][ T10] usb 7-1: USB disconnect, device number 11 [ 93.738841][ T40] audit: type=1400 audit(2000000002.939:719): avc: denied { getopt } for pid=8578 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.891918][ T6178] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 94.051727][ T6178] usb 6-1: Using ep0 maxpacket: 16 [ 94.056346][ T6178] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 94.061454][ T6178] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 94.065798][ T6178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.070809][ T6178] usb 6-1: config 0 descriptor?? [ 94.080725][ T6178] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 94.121660][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 94.251982][ T10] usb 7-1: device descriptor read/64, error -71 [ 94.274965][ T5331] bcm5974 6-1:0.0: could not read from device [ 94.281243][ T5331] bcm5974 6-1:0.0: could not read from device [ 94.283355][ T6178] usb 6-1: USB disconnect, device number 13 [ 94.288761][ T5331] bcm5974 6-1:0.0: could not read from device [ 94.292666][ T5331] bcm5974 6-1:0.0: could not read from device [ 94.501635][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 94.631697][ T10] usb 7-1: device descriptor read/64, error -71 [ 94.742284][ T10] usb usb7-port1: attempt power cycle [ 94.750942][ T67] Bluetooth: hci2: Dropping invalid advertising data [ 94.755878][ T67] Bluetooth: hci2: Malformed LE Event: 0x02 [ 94.854094][ T40] audit: type=1400 audit(2000000004.059:720): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 94.886034][ T8593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8593 comm=syz.1.743 [ 94.886165][ T8594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8594 comm=syz.1.743 [ 94.890445][ T8593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8593 comm=syz.1.743 [ 95.081774][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 95.084401][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 95.102525][ T10] usb 7-1: device descriptor read/8, error -71 [ 95.231688][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 95.285969][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.290357][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 95.292958][ T9] usb 5-1: can't read configurations, error -71 [ 95.351633][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 95.382064][ T10] usb 7-1: device descriptor read/8, error -71 [ 95.491858][ T10] usb usb7-port1: unable to enumerate USB device [ 95.816762][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 95.821736][ T8619] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 95.824536][ T8619] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 95.831201][ T8619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.746'. [ 95.850777][ T40] audit: type=1400 audit(2000000005.049:721): avc: denied { mounton } for pid=8618 comm="syz.0.746" path="/190/file0/bus" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 95.855451][ T8619] overlay: filesystem on ./bus not supported [ 96.075375][ T8636] netlink: 788 bytes leftover after parsing attributes in process `syz.1.752'. [ 96.212187][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 96.309503][ T8649] netlink: 100 bytes leftover after parsing attributes in process `syz.1.756'. [ 96.341251][ T8653] No control pipe specified [ 96.431374][ T8658] sp0: Synchronizing with TNC [ 96.662203][ T8664] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 96.761201][ T40] audit: type=1400 audit(2000000005.959:722): avc: denied { mount } for pid=8669 comm="syz.3.762" name="/" dev="rpc_pipefs" ino=22404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 96.771269][ T40] audit: type=1400 audit(2000000005.969:723): avc: denied { watch } for pid=8669 comm="syz.3.762" path="/214/file0" dev="rpc_pipefs" ino=22404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 96.780395][ T40] audit: type=1400 audit(2000000005.969:724): avc: denied { unmount } for pid=8669 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 96.826307][ T40] audit: type=1400 audit(2000000006.029:725): avc: denied { create } for pid=8678 comm="syz.0.765" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.843374][ T8682] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 97.012624][ T8711] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 97.411653][ T6178] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 97.439339][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'. [ 97.442885][ T8737] netlink: 224 bytes leftover after parsing attributes in process `syz.1.787'. [ 97.481674][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 97.561746][ T6178] usb 5-1: Using ep0 maxpacket: 16 [ 97.565357][ T6178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 97.568820][ T6178] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 97.573451][ T6178] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 97.576767][ T6178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.582533][ T6178] usb 5-1: config 0 descriptor?? [ 97.643998][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 97.648361][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.651843][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.654789][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 97.659519][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 97.662481][ T9] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 97.665038][ T9] usb 8-1: Manufacturer: syz [ 97.667785][ T9] usb 8-1: config 0 descriptor?? [ 97.791526][ T8725] xt_hashlimit: max too large, truncated to 1048576 [ 97.799578][ T8725] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 97.913293][ T6178] usbhid 5-1:0.0: can't add hid device: -71 [ 97.917281][ T6178] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.926417][ T6178] usb 5-1: USB disconnect, device number 17 [ 98.054923][ T8758] binder: Unknown parameter '/proc/self' [ 98.077011][ T9] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 98.080049][ T9] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 98.090335][ T9] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 98.386888][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.389747][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.603066][ T8769] support for cryptoloop has been removed. Use dm-crypt instead. [ 98.616375][ T8769] syz_tun: left promiscuous mode [ 98.618101][ T8769] bridge0: port 3(syz_tun) entered disabled state [ 98.624981][ T8769] batman_adv: batadv0: Interface deactivated: dummy0 [ 98.628034][ T8769] batman_adv: batadv0: Removing interface: dummy0 [ 98.632577][ T8769] bridge0: port 4(batadv0) entered disabled state [ 98.639029][ T8769] bridge_slave_0: left allmulticast mode [ 98.641051][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.648207][ T8769] bridge_slave_1: left allmulticast mode [ 98.650041][ T8769] bridge_slave_1: left promiscuous mode [ 98.651988][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.658896][ T8769] bond0: (slave bond_slave_0): Releasing backup interface [ 98.664585][ T8769] bond0: (slave bond_slave_1): Releasing backup interface [ 98.679757][ T8769] team0: Port device team_slave_0 removed [ 98.686199][ T8769] team0: Port device team_slave_1 removed [ 98.688459][ T8769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.690735][ T8769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.694294][ T8769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.696795][ T8769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.714055][ T8769] team0: Port device wlan1 removed [ 98.728334][ T10] syz!: Port: 1 Link DOWN [ 98.941854][ T65] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 99.051737][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 99.051748][ T40] audit: type=1400 audit(2000000264.255:737): avc: denied { append } for pid=8788 comm="syz.1.806" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.093501][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.097788][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.100850][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.105380][ T65] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.108270][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.114470][ T65] usb 5-1: config 0 descriptor?? [ 99.204054][ T8800] /dev/nullb0: Can't open blockdev [ 99.491840][ T5994] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 99.520935][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.524444][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.526953][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.529326][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.532204][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.534512][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.538232][ T65] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 99.546433][ T65] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.642945][ T5994] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 99.645566][ T5994] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 99.648075][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 99.650838][ T5994] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 99.654549][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 99.658035][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 99.664248][ T5994] usb 6-1: string descriptor 0 read error: -22 [ 99.666272][ T5994] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 99.669093][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.677631][ T5994] usb 6-1: config 0 descriptor?? [ 99.680714][ T8804] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 99.683690][ T5994] hub 6-1:0.0: bad descriptor, ignoring hub [ 99.685611][ T5994] hub 6-1:0.0: probe with driver hub failed with error -5 [ 99.689738][ T5994] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input13 [ 99.697736][ C1] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 99.823919][ T5994] usb 5-1: USB disconnect, device number 18 [ 99.884452][ T40] audit: type=1400 audit(2000000265.095:738): avc: denied { append } for pid=8803 comm="syz.1.811" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 99.891425][ T40] audit: type=1400 audit(2000000265.095:739): avc: denied { ioctl } for pid=8803 comm="syz.1.811" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 99.919681][ T8810] syzkaller0: entered promiscuous mode [ 99.921502][ T8810] syzkaller0: entered allmulticast mode [ 100.003511][ T24] usb 6-1: USB disconnect, device number 14 [ 100.172018][ T6178] usb 8-1: USB disconnect, device number 10 [ 100.186615][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.814'. [ 100.213701][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 100.357574][ T8819] netlink: 'syz.0.816': attribute type 2 has an invalid length. [ 100.517426][ T40] audit: type=1400 audit(2000000265.725:740): avc: denied { mounton } for pid=8816 comm="syz.2.815" path="/164/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 100.570446][ T40] audit: type=1400 audit(2000000265.775:741): avc: denied { shutdown } for pid=8838 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.577977][ T40] audit: type=1400 audit(2000000265.785:742): avc: denied { read } for pid=8838 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.701703][ T5973] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 100.835160][ T8850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.824'. [ 100.838146][ T8850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 100.840920][ T8850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.824'. [ 100.843899][ T8850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.824'. [ 100.864898][ T5973] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.868271][ T5973] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.873583][ T5973] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.877328][ T5973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 100.881699][ T5973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 100.887145][ T5973] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.890808][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.894038][ T5973] usb 5-1: Product: syz [ 100.895663][ T5973] usb 5-1: Manufacturer: syz [ 100.900796][ T5973] cdc_wdm 5-1:1.0: skipping garbage [ 100.903154][ T5973] cdc_wdm 5-1:1.0: skipping garbage [ 100.907111][ T5973] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 100.909561][ T5973] cdc_wdm 5-1:1.0: Unknown control protocol [ 101.101243][ T40] audit: type=1400 audit(2000000266.305:743): avc: denied { read write } for pid=8831 comm="syz.0.820" name="cdc-wdm0" dev="devtmpfs" ino=3004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 101.110642][ T40] audit: type=1400 audit(2000000266.315:744): avc: denied { open } for pid=8831 comm="syz.0.820" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 101.236652][ T8871] overlayfs: failed to resolve './file1': -2 [ 101.286894][ T40] audit: type=1400 audit(2000000266.495:745): avc: denied { mount } for pid=8874 comm="syz.3.834" name="/" dev="9p" ino=35913833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.308378][ T40] audit: type=1400 audit(2000000266.515:746): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.428648][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 101.493956][ T6178] usb 5-1: USB disconnect, device number 19 [ 101.588364][ T8883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8883 comm=syz.1.836 [ 101.605235][ T8883] ip6gretap1: entered promiscuous mode [ 101.911813][ T8922] overlayfs: unescaped trailing colons in lowerdir mount option. [ 101.943689][ T8925] binder: BINDER_SET_CONTEXT_MGR already set [ 101.945952][ T8925] binder: 8923:8925 ioctl 4018620d 200000000040 returned -16 [ 101.977163][ T8931] overlayfs: failed to resolve './file0': -2 [ 101.978304][ T8929] netlink: 'syz.1.850': attribute type 8 has an invalid length. [ 101.981847][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.850'. [ 102.029687][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.852'. [ 102.035379][ T833] IPVS: starting estimator thread 0... [ 102.040895][ T8933] pim6reg: entered allmulticast mode [ 102.132424][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 102.152027][ T8938] IPVS: using max 45 ests per chain, 108000 per kthread [ 102.209038][ T8964] overlayfs: failed to resolve './file0': -2 [ 102.267083][ T8970] overlayfs: invalid redirect ((null)) [ 102.269620][ T8970] overlayfs: invalid redirect ((null)) [ 102.286548][ T8975] syz_tun: entered allmulticast mode [ 102.304068][ T8977] netlink: 56 bytes leftover after parsing attributes in process `syz.3.867'. [ 102.371992][ T5994] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 102.442938][ T8982] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 102.524213][ T5994] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.527501][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.530464][ T5994] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 102.533685][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.548885][ T5994] usb 7-1: config 0 descriptor?? [ 102.551201][ T8974] syz_tun: left allmulticast mode [ 102.554621][ T5994] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 102.556971][ T5994] dvb-usb: bulk message failed: -22 (3/0) [ 102.571303][ T5994] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 102.579647][ T5994] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 102.584186][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 102.584751][ T5994] usb 7-1: media controller created [ 102.590820][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.602482][ T5994] dvb-usb: bulk message failed: -22 (6/0) [ 102.604924][ T5994] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 102.625140][ T5994] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input14 [ 102.642295][ T8997] overlayfs: failed to resolve './file0': -2 [ 102.643588][ T5994] dvb-usb: schedule remote query interval to 150 msecs. [ 102.651606][ T5994] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 102.812754][ T5994] dvb-usb: bulk message failed: -22 (1/0) [ 102.815166][ T5994] dvb-usb: error while querying for an remote control event. [ 102.863235][ T34] usb 7-1: USB disconnect, device number 16 [ 102.882239][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 103.331356][ T9009] program syz.3.876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.400914][ T9012] fuse: Bad value for 'fd' [ 103.434524][ T9017] ucma_write: process 783 (syz.3.879) changed security contexts after opening file descriptor, this is not allowed. [ 103.523192][ T9023] netlink: 'syz.2.878': attribute type 27 has an invalid length. [ 103.774785][ T9054] @: renamed from bridge_slave_0 (while UP) [ 103.825846][ T9059] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 104.275967][ T9069] tc_dump_action: action bad kind [ 104.278709][ T9069] program syz.2.897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.384840][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 104.384851][ T40] audit: type=1400 audit(2000000269.595:760): avc: denied { accept } for pid=9070 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.404962][ T9080] netlink: 'syz.1.901': attribute type 64 has an invalid length. [ 104.408105][ T9080] netlink: 'syz.1.901': attribute type 4 has an invalid length. [ 104.577897][ T40] audit: type=1400 audit(2000000269.785:761): avc: denied { mounton } for pid=9097 comm="syz.1.905" path="/249/bus" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 104.579007][ T9099] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 104.605783][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.608830][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.611193][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.613835][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.616442][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.618847][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.621238][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.623730][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.626966][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.629394][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.631967][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.634357][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.636792][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.639200][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.641706][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.644079][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.646471][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.648850][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.651211][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.654102][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.656627][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.658314][ T9108] openvswitch: netlink: Missing valid actions attribute. [ 104.658994][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.659014][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.659037][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.659118][ T9109] openvswitch: netlink: Missing valid actions attribute. [ 104.659132][ T9109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.661363][ T9108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.663865][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.663888][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.681259][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.683689][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.686080][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.689040][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.691379][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.694414][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.696823][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.699174][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.701641][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.704008][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.706372][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.708759][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.711123][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.713618][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.715991][ T67] Bluetooth: hci3: ISO packet for unknown connection handle 96 [ 104.721165][ T9116] nftables ruleset with unbound set [ 105.002074][ T9135] tipc: Started in network mode [ 105.003678][ T9135] tipc: Node identity 080211, cluster identity 4711 [ 105.005949][ T9135] tipc: Enabled bearer , priority 0 [ 105.257751][ T9144] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 105.291938][ T9149] overlayfs: failed to resolve './file0': -2 [ 105.430164][ T9155] syz.0.923: attempt to access beyond end of device [ 105.430164][ T9155] sr0: rw=0, sector=4, nr_sectors = 4 limit=0 [ 105.435951][ T9155] vxfs: unable to read disk superblock at 1 [ 105.438898][ T9155] syz.0.923: attempt to access beyond end of device [ 105.438898][ T9155] sr0: rw=0, sector=32, nr_sectors = 4 limit=0 [ 105.445042][ T9155] vxfs: unable to read disk superblock at 8 [ 105.446993][ T9155] vxfs: can't find superblock. [ 105.581763][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 105.602855][ T9167] xt_socket: unknown flags 0xc [ 105.633359][ T40] audit: type=1400 audit(2000000270.845:762): avc: denied { bind } for pid=9168 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.640933][ T40] audit: type=1400 audit(2000000270.845:763): avc: denied { write } for pid=9168 comm="syz.0.929" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.649971][ T40] audit: type=1400 audit(2000000270.845:764): avc: denied { connect } for pid=9168 comm="syz.0.929" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.742832][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 105.746611][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.749827][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 105.753422][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 105.758048][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 105.760769][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.763498][ T34] usb 7-1: Product: syz [ 105.764874][ T34] usb 7-1: Manufacturer: syz [ 105.766563][ T34] usb 7-1: SerialNumber: syz [ 105.769747][ T34] usb 7-1: config 0 descriptor?? [ 105.976943][ T34] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 106.123436][ T65] tipc: Node number set to 134353152 [ 106.176878][ T9153] usb 7-1: Couldn't submit interrupt_out_urb -90 [ 106.177299][ T9177] __nla_validate_parse: 6 callbacks suppressed [ 106.177312][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 106.204551][ T40] audit: type=1400 audit(2000000271.415:765): avc: denied { mount } for pid=9152 comm="syz.2.922" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.228633][ T34] usb 7-1: USB disconnect, device number 17 [ 106.242525][ T9180] veth1_macvtap: left promiscuous mode [ 106.487773][ T9185] overlayfs: failed to resolve './file1': -2 [ 106.550791][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.932'. [ 106.802505][ T40] audit: type=1400 audit(2000000272.015:766): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.829767][ T40] audit: type=1400 audit(2000000272.035:767): avc: denied { getopt } for pid=9199 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.876688][ T9203] netlink: 11 bytes leftover after parsing attributes in process `syz.2.939'. [ 106.906040][ T9207] program syz.2.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.931914][ T9213] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 106.931914][ T9213] program syz.2.943 not setting count and/or reply_len properly [ 106.932574][ T9212] overlayfs: failed to resolve './file1': -2 [ 107.089031][ T40] audit: type=1400 audit(2000000272.295:768): avc: denied { listen } for pid=9225 comm="syz.2.946" lport=50626 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.090319][ T9226] atomic_op ffff88805141c998 conn xmit_atomic 0000000000000000 [ 107.096335][ T40] audit: type=1400 audit(2000000272.295:769): avc: denied { accept } for pid=9225 comm="syz.2.946" lport=50626 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.252997][ T9245] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 107.297898][ T9262] netlink: 'syz.1.959': attribute type 11 has an invalid length. [ 107.299239][ T9261] qnx6: unable to set blocksize [ 107.394559][ T9273] netlink: 52 bytes leftover after parsing attributes in process `syz.2.963'. [ 107.397645][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 107.400496][ T9273] tipc: MTU too low for tipc bearer [ 107.410966][ T9273] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 107.562281][ T5994] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 107.601896][ T833] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 107.772951][ T833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.776211][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 107.779713][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.783604][ T833] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.788856][ T833] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.793220][ T833] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.795830][ T833] usb 6-1: Manufacturer: syz [ 107.799675][ T833] usb 6-1: config 0 descriptor?? [ 108.041831][ T833] rc_core: IR keymap rc-hauppauge not found [ 108.044500][ T833] Registered IR keymap rc-empty [ 108.046853][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.071712][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.102377][ T833] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 108.108071][ T833] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 108.114869][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.131677][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.161703][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.181782][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.201760][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.210339][ T9268] input: syz0 as /devices/virtual/input/input15 [ 108.221797][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.241753][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.272410][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.291705][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.311814][ T833] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 108.345986][ T833] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 108.349515][ T833] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 108.359076][ T833] usb 6-1: USB disconnect, device number 15 [ 114.031708][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.928272][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 117.931145][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 118.075420][ T9410] /dev/nullb0: Can't open blockdev [ 118.105980][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 118.108779][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 118.166693][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 118.166702][ T40] audit: type=1400 audit(2000000283.375:779): avc: denied { remount } for pid=9412 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 118.175488][ T9417] openvswitch: netlink: Missing valid actions attribute. [ 118.177766][ T9417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.441654][ T9428] nbd: must specify a size in bytes for the device [ 118.480788][ T40] audit: type=1400 audit(2000000283.685:780): avc: denied { execute } for pid=9435 comm="syz.0.991" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=30865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 118.543053][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 118.627788][ T9442] NILFS (nbd0): device size too small [ 118.635839][ T9442] input: syz1 as /devices/virtual/input/input17 [ 118.650108][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'. [ 118.853868][ T9447] team0: Device gtp0 is of different type [ 119.107570][ T9456] tmpfs: Bad value for 'mpol' [ 119.136667][ T40] audit: type=1400 audit(2000000284.345:781): avc: denied { getopt } for pid=9453 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.144545][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 119.147788][ T9459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.150201][ T9459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.155414][ T9459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.158007][ T9459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.176262][ T9459] batadv0 (unregistering): left promiscuous mode [ 119.675906][ T40] audit: type=1400 audit(2000000284.885:782): avc: denied { ioctl } for pid=9488 comm="syz.2.1005" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.122896][ T40] audit: type=1400 audit(2000000285.335:783): avc: denied { getopt } for pid=9516 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.209352][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1019'. [ 120.212410][ T9532] netlink: 'syz.1.1019': attribute type 7 has an invalid length. [ 120.214959][ T9532] netlink: 'syz.1.1019': attribute type 8 has an invalid length. [ 120.230394][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 120.251683][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 120.292240][ T9532] syz.1.1019 (9532): /proc/9531/oom_adj is deprecated, please use /proc/9531/oom_score_adj instead. [ 120.293647][ T9538] tmpfs: Bad value for 'mpol' [ 120.402285][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 120.405129][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 120.407848][ T10] usb 7-1: config 0 has no interface number 0 [ 120.409707][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.413078][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 120.417319][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.420607][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.425207][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 120.427939][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.432052][ T10] usb 7-1: config 0 descriptor?? [ 120.437601][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 120.479717][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 120.615092][ T9558] netlink: 'syz.0.1029': attribute type 5 has an invalid length. [ 120.757683][ T40] audit: type=1400 audit(2000000285.965:784): avc: denied { mounton } for pid=9560 comm="syz.0.1030" path="/250/file1" dev="autofs" ino=30308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 120.762211][ T9561] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 120.777533][ T9561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.787314][ T9561] bond4: (slave gretap1): making interface the new active one [ 120.790101][ T9561] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 121.292060][ T9587] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9587 comm=syz.3.1037 [ 121.296545][ T9585] kvm: user requested TSC rate below hardware speed [ 121.373990][ T40] audit: type=1400 audit(2000000286.585:786): avc: denied { accept } for pid=9589 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.379963][ T40] audit: type=1400 audit(2000000286.585:785): avc: denied { accept } for pid=9589 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.514814][ T9601] cgroup: release_agent respecified [ 121.517492][ T9601] 9pnet_fd: p9_fd_create_unix (9601): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 121.559293][ T40] audit: type=1400 audit(2000000286.765:787): avc: denied { write } for pid=9602 comm="syz.3.1042" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 121.955147][ T9623] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 121.984178][ T40] audit: type=1400 audit(2000000287.195:788): avc: denied { ioctl } for pid=9625 comm="syz.1.1048" path="socket:[30494]" dev="sockfs" ino=30494 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.142516][ T9631] overlayfs: failed to resolve './file1': -2 [ 122.180829][ T9633] tipc: Enabling of bearer rejected, already enabled [ 122.184847][ T9633] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 122.187530][ T9633] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 122.472581][ T9659] futex_wake_op: syz.0.1060 tries to shift op by 32; fix this program [ 122.674846][ T10] usb 7-1: USB disconnect, device number 18 [ 122.678532][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 122.764713][ T9677] program syz.1.1065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.779855][ T67] Bluetooth: hci1: link tx timeout [ 122.783215][ T67] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 122.786907][ T67] Bluetooth: hci1: link tx timeout [ 122.788554][ T67] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.790831][ T67] Bluetooth: hci1: killing stalled connection 5a:66:45:4a:6a:75 [ 122.878082][ T9684] zonefs (nbd3) ERROR: Not a zoned block device [ 123.179960][ T9697] __nla_validate_parse: 4 callbacks suppressed [ 123.179974][ T9697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1070'. [ 123.205742][ T9700] syz.2.1071: attempt to access beyond end of device [ 123.205742][ T9700] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 123.211772][ T9700] EXT4-fs (nbd2): unable to read superblock [ 123.256450][ T9707] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 123.301881][ T4223] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 123.423417][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 123.431698][ T4223] usb 6-1: device descriptor read/64, error -71 [ 123.518844][ T9725] tipc: Started in network mode [ 123.520438][ T9725] tipc: Node identity 6e9d7a557307, cluster identity 4711 [ 123.523139][ T9725] tipc: Enabled bearer , priority 0 [ 123.527087][ T9724] tipc: Resetting bearer [ 123.542750][ T9734] QAT: Stopping all acceleration devices. [ 123.567256][ T9736] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1083'. [ 123.571173][ T9737] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1083'. [ 123.682405][ T4223] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 123.821671][ T4223] usb 6-1: device descriptor read/64, error -71 [ 123.931711][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 123.934601][ T4223] usb usb6-port1: attempt power cycle [ 124.081742][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 124.086734][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.093886][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 124.097642][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.107339][ T10] usb 5-1: config 0 descriptor?? [ 124.291662][ T4223] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 124.322512][ T4223] usb 6-1: device descriptor read/8, error -71 [ 124.521824][ T5994] tipc: Node number set to 496663125 [ 124.524543][ T9724] tipc: Disabling bearer [ 124.550110][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 124.552204][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.558563][ T10] usb 5-1: USB disconnect, device number 20 [ 124.582781][ T4223] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 124.603044][ T4223] usb 6-1: device descriptor read/8, error -71 [ 124.682436][ T9770] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 124.685048][ T9770] SELinux: failed to load policy [ 124.712741][ T4223] usb usb6-port1: unable to enumerate USB device [ 124.729958][ T9781] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 124.781884][ T9782] support for the xor transformation has been removed. [ 124.798859][ T9787] overlay: filesystem on ./bus not supported as upperdir [ 124.831819][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 124.862977][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 124.862989][ T40] audit: type=1804 audit(2000000290.075:792): pid=9799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1103" name="/newroot/275/file0" dev="tmpfs" ino=1486 res=1 errno=0 [ 124.873175][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 124.941511][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 124.945061][ T9810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.993656][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 125.084184][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 125.152479][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 125.229158][ T9825] netlink: 'syz.2.1111': attribute type 11 has an invalid length. [ 125.231533][ T9825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1111'. [ 125.232365][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 125.241087][ T40] audit: type=1400 audit(2000000290.445:793): avc: denied { map } for pid=9824 comm="syz.2.1111" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.272176][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 125.310241][ T40] audit: type=1400 audit(2000000290.515:794): avc: denied { accept } for pid=9826 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.402259][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 125.513491][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 125.605359][ T9799] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 125.840544][ T40] audit: type=1400 audit(2000000291.045:795): avc: denied { map } for pid=9850 comm="syz.0.1120" path="/proc/832/numa_maps" dev="proc" ino=31257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 125.875993][ T40] audit: type=1400 audit(2000000291.085:796): avc: denied { watch watch_reads } for pid=9852 comm="syz.0.1121" path="/" dev="ramfs" ino=31258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 125.882806][ T40] audit: type=1400 audit(2000000291.085:797): avc: denied { execute_no_trans } for pid=9852 comm="syz.0.1121" path="/file0" dev="ramfs" ino=31260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 126.170943][ T9872] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1126'. [ 126.419506][ T9885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=9885 comm=syz.1.1130 [ 126.457862][ T9888] program syz.2.1132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.544610][ T9897] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1131'. [ 126.639192][ T9906] overlayfs: workdir and upperdir must reside under the same mount [ 126.758066][ T9914] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1140'. [ 126.839502][ T40] audit: type=1804 audit(2000000292.045:798): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1142" name="/newroot/246/file0/file0" dev="9p" ino=35913899 res=1 errno=0 [ 126.869672][ T40] audit: type=1400 audit(2000000292.075:799): avc: denied { mounton } for pid=9922 comm="syz.0.1143" path="/282/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.869785][ T9923] cgroup2: Unknown parameter 'euid' [ 126.884473][ T9923] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.887889][ T9923] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 126.905430][ T40] audit: type=1400 audit(2000000292.115:800): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.913207][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 126.938645][ T40] audit: type=1400 audit(2000000292.145:801): avc: denied { write } for pid=9925 comm="syz.0.1145" lport=55254 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 127.055383][ T9935] overlayfs: workdir and upperdir must reside under the same mount [ 127.187302][ T9942] tmpfs: Unknown parameter '{' [ 127.214964][ T9949] netlink: 'syz.2.1152': attribute type 11 has an invalid length. [ 127.335585][ T9960] overlayfs: workdir and upperdir must reside under the same mount [ 127.404364][ T9962] xt_hashlimit: invalid rate [ 127.432962][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 127.502214][ T9971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9971 comm=syz.2.1160 [ 127.511356][ T9971] sctp: [Deprecated]: syz.2.1160 (pid 9971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.511356][ T9971] Use struct sctp_sack_info instead [ 128.155335][T10001] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 128.159053][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.161619][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.168482][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.170684][T10001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.173093][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.175236][T10001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.181283][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.183726][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.227223][T10003] __nla_validate_parse: 2 callbacks suppressed [ 128.227233][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 128.232325][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 128.427609][T10016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1177'. [ 128.536444][T10023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1180'. [ 128.541735][ T63] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 128.694031][ T63] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.697419][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 128.701385][ T63] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.704795][ T63] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.707755][ T63] usb 6-1: Product: syz [ 128.709102][ T63] usb 6-1: Manufacturer: syz [ 128.710524][ T63] usb 6-1: SerialNumber: syz [ 128.718559][ T63] usb 6-1: config 0 descriptor?? [ 128.724857][ T63] usb 6-1: selecting invalid altsetting 0 [ 128.869285][T10039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10039 comm=syz.2.1186 [ 128.879286][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1186'. [ 128.923655][ T65] usb 6-1: USB disconnect, device number 20 [ 128.992069][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 129.018007][ T8188] syz_tun (unregistering): left allmulticast mode [ 129.063414][T10061] loop2: detected capacity change from 0 to 7 [ 129.067685][T10061] Dev loop2: unable to read RDB block 7 [ 129.069408][T10061] loop2: unable to read partition table [ 129.071218][T10061] loop2: partition table beyond EOD, truncated [ 129.074334][T10061] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 129.258960][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.263460][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.353469][T10091] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.372690][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.376378][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.403820][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.407769][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.410527][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.414270][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.417611][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.452883][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.456329][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.574466][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.577686][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.639656][T10097] chnl_net:caif_netlink_parms(): no params data found [ 129.651102][T10110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1208'. [ 129.711676][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 129.776154][T10120] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1209'. [ 129.814836][T10111] team0: Port device team_slave_0 removed [ 129.837626][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.840553][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.844264][T10097] bridge_slave_0: entered allmulticast mode [ 129.847267][T10097] bridge_slave_0: entered promiscuous mode [ 129.850927][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.854038][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.856331][T10097] bridge_slave_1: entered allmulticast mode [ 129.859018][T10097] bridge_slave_1: entered promiscuous mode [ 129.902884][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.912949][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.044392][T10125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.178513][T10131] netlink: 'syz.0.1212': attribute type 4 has an invalid length. [ 131.471757][ T5945] Bluetooth: hci1: command tx timeout [ 132.605550][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.607687][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.551759][ T5945] Bluetooth: hci1: command tx timeout [ 133.631674][ T1139] bond0 (unregistering): Released all slaves [ 133.640279][T10097] team0: Port device team_slave_0 added [ 133.645015][T10097] team0: Port device team_slave_1 added [ 133.690767][T10153] overlayfs: workdir and upperdir must reside under the same mount [ 133.691068][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 133.691077][ T40] audit: type=1326 audit(2000000298.895:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.1.1219" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7d478e969 code=0x0 [ 133.717678][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.720061][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.729476][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.733253][T10152] mac80211_hwsim hwsim9 `: renamed from wlan1 (while UP) [ 133.738741][ T1139] : left promiscuous mode [ 133.749530][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.752305][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.760162][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.767589][T10166] tipc: Enabling of bearer rejected, failed to enable media [ 133.794726][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 133.807116][ T1139] IPVS: stopping backup sync thread 8711 ... [ 133.852191][T10097] hsr_slave_0: entered promiscuous mode [ 133.854372][T10097] hsr_slave_1: entered promiscuous mode [ 133.856400][T10097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.858895][T10097] Cannot create hsr debugfs directory [ 134.075171][T10097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.079258][T10097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.085966][T10097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.097387][T10097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.197453][T10097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.208698][ T1139] hsr_slave_0: left promiscuous mode [ 134.211075][ T1139] hsr_slave_1: left promiscuous mode [ 134.241356][ T1139] veth1_macvtap: left promiscuous mode [ 134.243904][ T1139] veth0_macvtap: left promiscuous mode [ 134.245746][ T1139] veth1_vlan: left promiscuous mode [ 134.247576][ T1139] veth0_vlan: left promiscuous mode [ 134.921521][T10203] CIFS mount error: No usable UNC path provided in device string! [ 134.921521][T10203] [ 134.924719][T10203] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 134.937527][ T40] audit: type=1400 audit(2000000300.145:815): avc: denied { execute } for pid=10200 comm="syz.2.1226" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 134.938471][T10203] fuse: Unknown parameter '4s@St00000000000000000000' [ 134.972337][ T46] smc: removing ib device syz! [ 135.527251][T10097] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.536789][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.539037][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.539557][T10207] overlayfs: workdir and upperdir must reside under the same mount [ 135.550573][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.552956][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.619373][T10213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10213 comm=syz.1.1229 [ 135.631705][ T5945] Bluetooth: hci1: command tx timeout [ 135.655076][T10213] bond1: (slave dummy0): Releasing active interface [ 135.659639][T10213] bridge_slave_1: left allmulticast mode [ 135.661468][T10213] bridge_slave_1: left promiscuous mode [ 135.666751][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.703659][T10213] bond0: (slave bond_slave_0): Releasing backup interface [ 135.716553][T10213] bond_slave_0: left promiscuous mode [ 135.726902][T10213] bond0: (slave bond_slave_1): Releasing backup interface [ 135.730053][T10213] bond_slave_1: left promiscuous mode [ 135.746122][T10213] team0: Port device team_slave_1 removed [ 135.831238][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.970793][ T1139] IPVS: stop unused estimator thread 0... [ 136.066671][T10254] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 136.068173][T10097] veth0_vlan: entered promiscuous mode [ 136.084832][T10097] veth1_vlan: entered promiscuous mode [ 136.101865][T10097] veth0_macvtap: entered promiscuous mode [ 136.105517][T10097] veth1_macvtap: entered promiscuous mode [ 136.113425][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.118105][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.121122][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.125747][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.129634][T10097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.138146][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.141414][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.144737][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.148031][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.155155][T10097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.160520][T10097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.167121][T10097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.169839][T10097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.172702][T10097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.209191][T10273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1238'. [ 136.230503][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.234984][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.257372][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.260749][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.271379][ T40] audit: type=1400 audit(2000000301.475:816): avc: denied { mounton } for pid=10097 comm="syz-executor" path="/syzkaller.xXfd0B/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 136.285337][ T40] audit: type=1400 audit(2000000301.475:817): avc: denied { mounton } for pid=10097 comm="syz-executor" path="/syzkaller.xXfd0B/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 136.381727][ T40] audit: type=1400 audit(2000000301.585:818): avc: denied { transfer } for pid=10282 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 136.529903][T10302] tipc: Started in network mode [ 136.531611][T10302] tipc: Node identity , cluster identity 4711 [ 136.533521][T10302] tipc: Failed to obtain node identity [ 136.535331][T10302] tipc: Enabling of bearer rejected, failed to enable media [ 136.539135][ T65] libceph: connect (1)[c::]:6789 error -101 [ 136.540286][T10302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 136.546078][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 136.555248][T10295] ceph: No mds server is up or the cluster is laggy [ 136.631917][ T833] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 136.663181][T10319] input: syz0 as /devices/virtual/input/input18 [ 136.665973][T10319] input: failed to attach handler leds to device input18, error: -6 [ 136.766161][ T40] audit: type=1400 audit(2000000301.975:819): avc: denied { listen } for pid=10331 comm="syz.4.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.782890][ T833] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.786281][ T833] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 136.789758][ T833] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.793877][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.798637][T10285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.803442][ T833] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.837817][T10339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.949630][ T40] audit: type=1400 audit(2000000302.155:820): avc: denied { create } for pid=10343 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 136.999844][T10355] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 137.003580][T10355] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 137.007846][T10355] CPU: 0 UID: 0 PID: 10355 Comm: syz.0.1257 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 137.011721][T10355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.015034][T10355] RIP: 0010:h5_recv+0x104/0x910 [ 137.016627][T10355] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 01 da 5c f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 137.022350][T10355] RSP: 0018:ffffc90006befc00 EFLAGS: 00010293 [ 137.024210][T10355] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885e568a [ 137.026571][T10355] RDX: ffff8880229bc880 RSI: ffffffff885e56cf RDI: 0000000000000005 [ 137.029082][T10355] RBP: ffffc90006befd88 R08: 0000000000000005 R09: 0000000000000000 [ 137.031435][T10355] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 137.033797][T10355] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c9152a0 [ 137.036205][T10355] FS: 00007f64e6f486c0(0000) GS:ffff8880d69e1000(0000) knlGS:0000000000000000 [ 137.039008][T10355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.041029][T10355] CR2: 00007f64e6f47f98 CR3: 000000002ed93000 CR4: 0000000000352ef0 [ 137.043395][T10355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.045825][T10355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.048454][T10355] Call Trace: [ 137.049521][T10355] [ 137.050445][T10355] ? __pfx_h5_recv+0x10/0x10 [ 137.052015][T10355] hci_uart_tty_receive+0x251/0x7e0 [ 137.053611][T10355] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 137.055418][T10355] tty_ioctl+0x57d/0x1610 [ 137.056835][T10355] ? __pfx_tty_ioctl+0x10/0x10 [ 137.058354][T10355] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 137.060507][T10355] ? hook_file_ioctl_common+0x145/0x410 [ 137.062259][T10355] ? selinux_file_ioctl+0x180/0x270 [ 137.063909][T10355] ? selinux_file_ioctl+0xb4/0x270 [ 137.065543][T10355] ? __pfx_tty_ioctl+0x10/0x10 [ 137.067075][T10355] __x64_sys_ioctl+0x190/0x200 [ 137.068603][T10355] do_syscall_64+0xcd/0x260 [ 137.070051][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.072005][T10355] RIP: 0033:0x7f64e618e969 [ 137.073498][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.080223][T10355] RSP: 002b:00007f64e6f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.083597][T10355] RAX: ffffffffffffffda RBX: 00007f64e63b6080 RCX: 00007f64e618e969 [ 137.086821][T10355] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 137.089550][T10355] RBP: 00007f64e6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 137.092057][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.094512][T10355] R13: 0000000000000000 R14: 00007f64e63b6080 R15: 00007ffeb85727e8 [ 137.097139][T10355] [ 137.098134][T10355] Modules linked in: [ 137.099756][T10355] ---[ end trace 0000000000000000 ]--- [ 137.120913][T10355] RIP: 0010:h5_recv+0x104/0x910 [ 137.122579][T10355] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 01 da 5c f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 137.128736][T10355] RSP: 0018:ffffc90006befc00 EFLAGS: 00010293 [ 137.130665][T10355] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885e568a [ 137.132081][ T65] usb 6-1: USB disconnect, device number 21 [ 137.133245][T10355] RDX: ffff8880229bc880 RSI: ffffffff885e56cf RDI: 0000000000000005 [ 137.137664][T10355] RBP: ffffc90006befd88 R08: 0000000000000005 R09: 0000000000000000 [ 137.140158][T10355] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 137.142841][T10355] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c9152a0 [ 137.145354][T10355] FS: 00007f64e6f486c0(0000) GS:ffff8880d69e1000(0000) knlGS:0000000000000000 [ 137.146697][ T8096] PM: hibernation: Basic memory bitmaps freed [ 137.148158][T10355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.163242][ T40] audit: type=1400 audit(2000000302.375:821): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 137.170529][ T40] audit: type=1400 audit(2000000302.375:822): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.180798][ T40] audit: type=1400 audit(2000000302.375:823): avc: denied { write } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.182200][T10355] CR2: 00007fffe183ff32 CR3: 000000002ed93000 CR4: 0000000000352ef0 [ 137.190815][T10355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.195078][T10355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.197732][T10355] Kernel panic - not syncing: Fatal exception [ 137.200398][T10355] Kernel Offset: disabled [ 137.201813][T10355] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:57:49 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f60f5 RDI=ffffffff9adf7520 RBP=ffffffff9adf74e0 RSP=ffffc90006bef600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000002d R14=ffffffff9adf74e0 R15=ffffffff854f6090 RIP=ffffffff854f611f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f64e6f486c0 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f64e6f47f98 CR3=000000002ed93000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6383488 00007f64e6383480 00007f64e6383478 00007f64e6383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6eed100 00007f64e6383440 00007f64e6383458 00007f64e63834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6383498 00007f64e6383490 00007f64e6383488 00007f64e6383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000eabcc RBX=0000000000000001 RCX=ffffffff8b6ce419 RDX=ffffed100d4a65be RSI=ffffffff8bf483a0 RDI=ffffffff819198f1 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff9084f710 R15=0000000000000000 RIP=ffffffff8b6cccaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f64e6f26f98 CR3=00000000258b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe087ffc90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc9000477f3b0 RBX=0000000000000001 RCX=ffffc90004780001 RDX=1ffff920008efce1 RSI=ffffffff825486c8 RDI=ffffc9000477e6d0 RBP=ffffc9000477e718 RSP=ffffc9000477e658 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000477e6d0 R11=00000000000131e3 R12=ffffffff81a6f3b0 R13=ffffc9000477e6d0 R14=0000000000000000 R15=ffff88802deba440 RIP=ffffffff81a0c550 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb22692a880 CR3=0000000028cdd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64f2011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82788e1df7086373 2964a1d910b9462a 0b99a1926349641b 3a432ef8cd5701a3 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 af9c77f88eb5f074 1883af4e06b01e75 efc2205b90c073b9 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3150ec07b906ea59 abd149a6fd775884 d640c29fc4737ce0 792e215a07cf2bd0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a77eb99355f29977 f244c9dc81459d56 2b3041d21a53a841 c2cbf8a21f0e9a29 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9f76f0cba8cf7b46 32afe23c01ab72ae c2d63b34a2d6e3ab 0e219c4c60063442 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f23c7479c544ea6 73620ea93abec4c4 0a84588f9cde6c4d a71b68a77eb99355 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f29977f244c9dc81 459d562b3041d21a 53a841c2cbf8a21f 0e9a293150ec07b9 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06ea59abd149a6fd 775884d640c29fc4 737ce0792e215a07 cf2bd0af9c77f88e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a4415e0 RCX=ffffffff81af1999 RDX=ffff8880265b2440 RSI=ffffffff81af1973 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900016ff930 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4882bd R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a73b040 RIP=ffffffff81af197a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f10c08e7d60 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10bfd836a3 00007f10bfd836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6f9bd6b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555816b272d 00005555816b19a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555816a0fb2 00005555816a0ee0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104800401000002 0806021000010000 000806080104de00 1000048803048080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80a8080004800302 100002c082100004 01018425ba100002 10000c100006013c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c80010000cb01000 5ec0800401000002 0806080157e80180 0402d1a408000100 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002080606013aa4 108210000180030f ffffffffffff0400 1000000800021000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000002000800 00000125dfdbfb00 0c02000001018a08 268c030100000a04 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000