last executing test programs: 48.747502289s ago: executing program 3 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000c1c0f1b899a0839d0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x80, 0x1, 0x0, "cb9649f4ad7d527a0e7447de4048315cdd8a771b391c208d2bd399e0a56bade4"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0xcc, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x3, 0x9, 0xd, 0x2, 0x1, 0x2, 0x9, 0x5, [{0x10020, 0x1ff, 0x500, 0x9ef}, {0x3, 0x5, 0xd1e, 0x2}, {0xd, 0x9, 0xffff, 0x1}, {0xfffffff8, 0x8, 0x2b0, 0x7}, {0x7ff, 0x7, 0x80, 0x1e87}, {0x7, 0x7, 0x9, 0x8a}, {0x4, 0x1, 0x513, 0x1}, {0x97, 0x7, 0x8001, 0x5}]}}, @TCA_U32_LINK={0x8, 0x3, 0x6}]}}]}, 0xcc}}, 0x20040074) r10 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r11, 0x89ea, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="85aaf1ccd115b24034d7c1f53e7ad244c2bc4bc02519af7e397ee6e9667771c157a9af48877308659aa3a33581ee756c6a220b7063d71444fcc01a47cd5e4f8319e09fca28f95ec776c0c585bfb4140eeff64e3bdd61f650665ff4d68198fffbf1e88acc833e2b3d043f9f60597a144bc01eaa58a1e8ac7e669e932b9af30f1b53cc76d92f2e26ffb99ea3c60a8cf1437a388a5d5e66c5318a2d2e895b97ca184427c3ed7dae786d501dce7f8df7f6404a16b33e2e3b806fe02afd4ea5852e887c78001a98708970"}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x10000, 0x1, {0x0, 0x2710}, {0x2, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close(r10) 48.495740384s ago: executing program 3 (id=576): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x120000000000000, 0xffffffffffffffff, 0x1}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44018}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x8800) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44018}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x8800) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x98ec, 0x238, 0x3, 0x2, 0x2, 0x401}) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x98ec, 0x238, 0x3, 0x2, 0x2, 0x401}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000180)=0x7) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0xfffffeae, 0x2, 0x1, 0x1, 0x19f, 0x400, 0x8, 0x91d, 0x3, 0x9, 0x81, 0x7, 0x80000001, 0x2, 0x0, 0x0, {0x31, 0xfffffff8}, 0x4, 0x1}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r2, &(0x7f00000026c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002680)={&(0x7f0000002480)=@updsa={0x200, 0x1a, 0x8, 0x70bd28, 0x25dfdbfb, {{@in=@empty, @in6=@local, 0x4e21, 0x10, 0x4e22, 0xbb7, 0x2, 0xa0, 0x0, 0x89, r3, r4}, {@in=@local, 0x4d2, 0x32}, @in=@private=0xa010101, {0x8, 0x4, 0x7, 0x0, 0x1d2, 0x53, 0x9, 0x4ba}, {0xfe3, 0xffffffffffffbe29, 0xae, 0x1}, {0x493, 0xff, 0x2}, 0x70bd2b, 0x3503, 0xa, 0x1, 0xf, 0x42}, [@algo_auth_trunc={0x10f, 0x14, {{'digest_null\x00'}, 0x618, 0x180, "09777f22a2b69a0afffb4599d5bf4dede871fe942a553fd2d6a90bb0aa6911c118c2b9541564d504726b5ff2fe29323f3734087e07c28dc323dc65384f67d471946b561b0f464d23c2e826639d6151e0810a3ea66d48b8f5a6ce115ccc20d3bd0e0ef504e8b8408880b52171e8013968d0f945bd4073a50b02a2dd771331e4d965fb62812c4eb03a075bc59eb10e91a274679e4f590e5cd44510b71cf686c8303b44f160a64917db25d66d7f8cd88e2678f7e9f09a3b5fa2975d8fbb8f9311168b0474"}}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x48081) syz_emit_vhci(&(0x7f0000002700)=@HCI_VENDOR_PKT, 0x2) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000002740)={0x18, 0x0, {0x4, @random="79ac0ac12a0d", 'bridge_slave_1\x00'}}) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000002740)={0x18, 0x0, {0x4, @random="79ac0ac12a0d", 'bridge_slave_1\x00'}}) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000002780)={0xde, "4b8b1793c97ec0632ee353b2c2b520c3ea69260f7f1f938eaa47b7f8cf44e02403d88a88138739cbe9e58a583e3d50fee11ad7c085e179bd4331d48554c4d5a424a16d1120aad5c346d7dc5891fd2cc16bc29d4ed245b86394a66c07ccad1f57c1c11f31c4f1b3127d368d78c0f0211f1aa0959f7d7844be0c647c2783b9950eb8e221690ee42f3286dd5762e96234f5cb25f8f714da1941d9d2ea77882d57a4bb16c9cf147865a6ee8ce87de01c35de0cd4e57b3cb4aa5e79af833b0846e2b4c53542ee582c6dec6f5dcbbd37e7e8d6c2b5d62d7dcf22c003724ae77acd"}) r5 = accept4$llc(r0, &(0x7f0000002880)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000028c0)=0x10, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000002900), &(0x7f0000002940)=0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000029c0)={r7, r8/1000+60000}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000002a00)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xb7, 0x0, 0x9, 0x100, 0x4, 0x401, "d67182e63dfe9715cd4df93c57797b5660c01c308324ca2d211230ed23f249b23f0b80837de442f605cdeee54cb55277ba9736c907b8d1a009850770360fb3901cfdd0321a2a9b993755c334add74fe7c8ee60416ee02570373ab816b1cd77e8d2a6be54c141e0afb15d8e6d9884c37412046857f61cbb20fae19f67bd1060d6fb1b174544bd1bd26cf223049852fb4763ab8dc4e4fcb206fbbe30841479bc43fbc7076ec84e43937b9095584355dc118f5c0cc88861b3"}}, 0x1cf) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002c00), 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002c40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002c40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000003040)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000003440)={0x20, 0x4, {0xfffffffffffffffe, @usage=0xc34, 0x0, 0xfffffffffffffff0, 0x10000, 0x849, 0x6, 0x9a0, 0x400, @usage=0x400, 0x4b, 0x5, [0x9d44, 0x8, 0x379fc04, 0x3, 0x2, 0x9]}, {0x2, @struct={0x41, 0x4}, 0x0, 0x9, 0x0, 0xffff, 0x6, 0x2e41, 0x0, @struct={0xe, 0xd028}, 0x2, 0x1, [0x7, 0x1, 0x8, 0x0, 0x80, 0x9]}, {0x3809c8fa, @usage=0x2, 0x0, 0x5, 0x6, 0x1000, 0x5, 0xfffffffffffff33b, 0x0, @struct={0xfbc, 0x7}, 0x1, 0x401, [0x435e, 0x7, 0x2, 0x9, 0x100, 0x9]}, {0x9, 0x2, 0x4}}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000003840)={0x3, 0x0, {0x7, @struct={0x1, 0x9}, r9, 0x4, 0x2, 0xfffffffffffffff4, 0x1, 0x9, 0x15, @usage=0x21f, 0x7434, 0x400, [0x51, 0xff, 0x7, 0xfff, 0x1, 0x83]}, {0x1d89, @usage=0x4, r10, 0x5, 0x3, 0xfffffffffffff9f0, 0x6, 0xd8, 0x17, @struct={0x8001, 0x3}, 0x7, 0x8, [0x2, 0xd, 0x4, 0xffffffff7fffffff, 0x7fffffffffffffff, 0x6]}, {0xa28, @usage=0x70, r11, 0xa24, 0x7, 0x5ad8, 0xca, 0x8000000000000000, 0x18, @struct={0x7, 0x7}, 0x4769, 0x5, [0x800, 0xfffffffffffffff9, 0x9, 0xde16, 0x1, 0x8001]}, {0x6, 0xfff, 0x7}}) syz_emit_vhci(&(0x7f0000003c40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xb6, 0x2}, {0x48}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000003c40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xb6, 0x2}, {0x48}}}}, 0xf) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000003d40)={0x3, 0xfa08, 0x8d, &(0x7f0000003c80)=""/141}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000003d40)={0x3, 0xfa08, 0x8d, &(0x7f0000003c80)=""/141}) socket$inet(0x2, 0x4, 0x861) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003dc0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x30, r12, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004805}, 0x20008800) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x30, r12, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004805}, 0x20008800) 48.495262362s ago: executing program 3 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20641) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r3, 0x54a6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20641) (async) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r3, 0x54a6) (async) 48.342851829s ago: executing program 3 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pipe2(&(0x7f00000001c0), 0x40800) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 48.264605178s ago: executing program 3 (id=584): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x3, 0x2) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000007c0)={'pimreg0\x00', 0x40, 0x7}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 47.957897681s ago: executing program 3 (id=590): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x88, 0x1, 0x9c9b, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5}) ioctl$TCXONC(r0, 0x540a, 0x2) 47.895967384s ago: executing program 32 (id=590): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x88, 0x1, 0x9c9b, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5}) ioctl$TCXONC(r0, 0x540a, 0x2) 11.559494833s ago: executing program 1 (id=1222): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x25d}], 0x1c) read$eventfd(r4, &(0x7f0000000100), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0xf, 0x1}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x5}, @var={0xff, 0x0, 0x0, 0xe, 0x2}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x3}]}, @float={0x8}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f, 0x0, 0x30]}}, &(0x7f0000000300)=""/146, 0x75, 0x92, 0x1, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x16f, '\x00', r5, r6, 0x3, 0x3, 0x4}, 0x50) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r2, 0x0, r1}) 11.559295426s ago: executing program 1 (id=1223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x6003}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x4, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0xe000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x7f, 0x0, @void}}}}}}}}, 0x3a) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) 11.379002725s ago: executing program 1 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xc71, 0x4000) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)=""/21) 10.812092899s ago: executing program 1 (id=1233): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') link(&(0x7f0000000600)='./bus\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x10000) sendmmsg$alg(r1, &(0x7f0000002c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x200000d1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) unshare(0x38010380) 9.89245721s ago: executing program 1 (id=1243): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r2 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000300)={&(0x7f00000004c0)="423e20ff6a957f2ddaaa170190f08312d7dfbcf62658091c709d774d8a3620506cd6e4e3b76adab3a8ce98ab2f450c5f8765dc9c7c20eb013b4f1061a456f15397786a5a0589a9ada86e253dc57113dc37fa78481da4bdc6420eb9a65cf2797cda00", 0x62}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 9.628517859s ago: executing program 1 (id=1245): unshare(0x6a040000) openat$pmem0(0xffffffffffffff9c, 0x0, 0x80d01, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) ioctl$KVM_CAP_VM_TYPES(r0, 0x4068aea3, &(0x7f0000000040)={0xeb, 0x0, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x84, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x7}, {0xe, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x9, 0x2, 0x1, 0x1, 0x2, 0x8000, 0x6, 0x8}}, {0x14, 0x2, [0x8, 0x9, 0x6, 0x7, 0x9, 0x4e9a, 0x1, 0x81]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 8.887377516s ago: executing program 0 (id=1253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000880)={0x1, 0x10000, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x80080, 0x1a8) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x30a429b, 0x3ff, 0x80, 0x0, 0x80000001, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7fff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x40b, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0xa, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0xffffffff, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffffff80, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "aaa7e021942ba06d", "2ca345d08a39b6954870b51888315027fcf78f67866cee991710923353a8299f", "63512df4", "d2314c6d04b9066b"}, 0x38) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000880)={0x1, 0x10000, 0x0, 'queue0\x00'}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x80080, 0x1a8) (async) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x50) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x30a429b, 0x3ff, 0x80, 0x0, 0x80000001, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7fff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x40b, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0xa, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0xffffffff, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffffff80, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "aaa7e021942ba06d", "2ca345d08a39b6954870b51888315027fcf78f67866cee991710923353a8299f", "63512df4", "d2314c6d04b9066b"}, 0x38) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) 8.833969514s ago: executing program 0 (id=1254): r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x2000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003880)={&(0x7f000011e000/0x1000)=nil, &(0x7f0000700000/0x4000)=nil, &(0x7f0000703000/0x4000)=nil, &(0x7f0000702000/0x1000)=nil, &(0x7f0000702000/0x2000)=nil, &(0x7f0000703000/0xb000)=nil, &(0x7f0000709000/0x2000)=nil, &(0x7f00006ff000/0x2000)=nil, &(0x7f000070a000/0x1000)=nil, &(0x7f0000706000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)="3dd9f3df31524825a8db35d909ff70e95f37dc2c72cdaaca57a039bec843ef5195c13899ee95a346f2986e0859a169c4f5c9709791e5767d69e177bff1cb9ff945dc37a13e177c3491c637e85c0bd27180193096171709a531ba0c8902212160476883400b37f4a9efb3791449af4999c7fe35208d7249663b033be070b63a877416824d54bc0aa1544cc7062663ff508715077a63e0b36403e53d011bcceaa3ebf1f22057efb0", 0xa7, r0}, 0x68) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x80000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_pidfd_open(0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)={0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078ac1e00015d1c14aa030490781206183f2500000000670000008900007f000001e000000200186371ae9b1c03"], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) madvise(&(0x7f00004b4000/0x2000)=nil, 0x2000, 0x12) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000600)={0x0, "0c950163ff5dfb376e584d8eb92f9ee3"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001600)={r6, 0x80000000, 0x1, [0x58, 0x168, 0xf35f, 0x9ffe, 0xfffffffffffffffe], [0xfffffffffffffffc, 0xf, 0xfffffffffffffffd, 0x2b, 0xffffffffffffffff, 0x9, 0x2, 0x9b9, 0xf, 0x6, 0x9, 0x9, 0x9, 0x0, 0x2, 0x2, 0x2, 0x7, 0x6, 0x80, 0x837, 0x100000000, 0x80000004, 0x10, 0x6, 0xa, 0xd, 0x1000, 0x3, 0x8000000000000001, 0x1000, 0x4, 0x5, 0x7, 0x5, 0xfe35, 0x2, 0x9, 0x1, 0x6, 0xffffffffffffffff, 0x6171, 0x9, 0x80000001, 0x8, 0xffff, 0x8000, 0x5, 0x9, 0x10000, 0x401, 0x80000000, 0x9, 0x9, 0x8, 0x7, 0x80, 0x3, 0x7, 0x7, 0x593b0960, 0x10001, 0x6, 0x5, 0x6, 0x625, 0xffffffff80000001, 0x6, 0x3, 0x5, 0x10001, 0xc, 0x0, 0x7, 0x7fff, 0x633a, 0x0, 0x1, 0x83f, 0x5, 0x4e91, 0x100000001, 0x3ff, 0x8000, 0x8001, 0x9, 0x8001, 0x2a8279b, 0x5, 0x1, 0x400, 0xfffffffffffffffc, 0x9, 0xfffffffffffffbff, 0x0, 0x1, 0x5, 0x7c, 0x78a0, 0x8, 0x6, 0x5d, 0xffffffffffffff3a, 0x1, 0x800, 0x5612, 0x800, 0x7fffffff, 0x5, 0x1, 0x7f, 0x401, 0xba, 0xe82, 0x7f, 0x6, 0x4, 0x8, 0xa6e, 0x9, 0x5]}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x210000, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYRES16=r3, @ANYRES64]) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') read$FUSE(r8, &(0x7f0000002240)={0x2020}, 0x202c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) pwritev(r7, &(0x7f0000000380)=[{&(0x7f00000003c0)}, {&(0x7f0000000300)="3e316bcbca1e290c4103", 0xa}, {&(0x7f0000000340)="525dd10dd5cf084446b9f00cdc2cc6e628fee0019673ffc0e9f1b98a89", 0x1d}], 0x3, 0x8, 0x5) clock_gettime(0x0, &(0x7f0000003580)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x5001, 0x80, 0x7, 0x4794, 0x6, 0x1}) lseek(r3, 0xad4a, 0x1) 8.705229959s ago: executing program 0 (id=1255): ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x8001, 0xe) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0xe, 0x10, 0xfff, 0x1, 0x0}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000440)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x9, 0xff, {r0}, {0xee00}, 0xffffffffffff4095, 0x3}) r6 = getegid() r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000680)=[@wr_crn={0x46, 0x20, {0x3, 0x2}}, @rdmsr={0x32, 0x18, {0xb9a}}, @code={0xa, 0x53, {"64400f23710f8006000000c4e219aceec481f950ff48b89c8a48ca000000000f23c80f21f8350c0050000f23f8cfb9730b00000f32440f79d5450f0836440fc77500"}}, @out_dx={0xaa, 0x28, {0x6ac, 0x5, 0x6}}, @wr_crn={0x46, 0x20, {0x8, 0x3}}, @wr_drn={0x6e, 0x20, {0x0, 0x7ff}}], 0xf3}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x80000, 0x0) r10 = creat(&(0x7f0000000800)='./file0\x00', 0x41) r11 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000840), 0x440522, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000880)={0x0}, &(0x7f00000008c0)=0xc) r13 = getegid() r14 = openat$incfs(0xffffffffffffffff, &(0x7f0000000dc0)='.pending_reads\x00', 0x240, 0x40) r15 = signalfd(0xffffffffffffffff, &(0x7f0000000e00)={[0xffffffffffffffff]}, 0x8) r16 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r17 = syz_open_dev$hiddev(&(0x7f0000000e40), 0xffff, 0x40400) r18 = syz_open_dev$radio(&(0x7f0000000e80), 0x2, 0x2) getgroups(0x1, &(0x7f0000000ec0)=[0xee00]) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000f00)={0x3, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000f40)=0xffffffffffffffff) r22 = syz_open_dev$sndpcmc(&(0x7f0000000f80), 0x47c2fd0a, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000fc0)={0x0, 0x1, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) r25 = dup(0xffffffffffffffff) r26 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001040)='devices.deny\x00', 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000003c80)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)="2afb568543700e0c4beff12c8daf747baf03ee1865fa21b1abf5308dac94e62f66c31703d635425d06366596f9403ce00aa9d9965639e2febd6dc62c8e2a6e8e90aabfad33f37ed537eae3a0ba2921b1563bde0acfc4619bd22db468af83e62926fed00c85d6b9ff3d9d8408f7cc7fddb8f5076775fd18cc6e15cecfda4f4fad36f440d025b12784582ce45154ec1ef03619a5c49925ac070f93a01e5bebcdab3e67e6aba2", 0xa5}, {&(0x7f0000000200)="283cbcf54973468a6c0e44297d7f36f2836a57af6d0bc4f73fd297c704dbba3a459879b1c81208ebc2b06b954f9ba07fb2ce7437937fb5358ecf9de2399480579af00e83b06c63a59e66e60d0b9713dc2d61428401c6dc654a49fb3311e01520cbadf15fb64ba808d926855319f9402075aa235240ec0c3ecac4a11a2c365e4dfc90b9865041284bfa9963ff16e0335a4f73856bc8c3e929936832a73f0359ce2b0ab06f0de7ddb477922edea6087adb28b3d9c03c63bb927390f83cdb86ffe7d4a91a39e67e32b3cc9eb19fbe177f78f892a82f81a5c93d663a7679db4c00a5e1a1c8178f41db4d4716d5", 0xeb}], 0x2, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, r4}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, r6}}}, @rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, r8, r9, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}], 0xc0, 0x800}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000009c0)="cba62d7f0d4ed6bd797c52a4006efa6c5b2bf3996eafa1dc33a239e7914e77ce43e31d50322853a7790183e984fc1536f99f81d49c4d5116a5fff475eea7662e3420316b90d58a6fee6c20537cf0aa2f377cd595954a343b968c8608f718a832dae3b768085bc5f933c9f1655ae6183c19e710d00c", 0x75}, {&(0x7f0000000a40)="c318db3e1eb247fd26e66a11426fdbfb9c7305a66e9a652582ac4066a07a1fed7e63b0d6e9530315c7f09aaf1cbba0243addb3f7c169c107dcd239c8e83b6c8096b6a3c9e10b1b191b027f07c6c57fdf0a9c0dc7fd7a1ad5f7f86615df3c379279123157e9f49beb56ee0afd40f9da8ed6c04e43c792f0517b3cc87f0b261fbc772662fa693fee5c7dc81aaa2d4c891151df58a8f29af9ac431400e7a04a8b30ac258bc282dcb0cf1eb299b9d5ad884d58737e4ed6f85b9a11601b7844923f960e0b298d6c2b28a3b0", 0xc9}, {&(0x7f0000000b40)="cc21e1ea5d40c48befb308770c188dff8f7edacf2f13b759c018adf3e93c6b2d9c817054c412b92fe15f767e449203038e4e92417b5671883047e484ac0d6e3d5675401607ee5e7acb2562141597352026083af5da03e2b685d931c7cfe1e33d9d4a57242446317e8482cae7b750c59b25a269fd4ddc4d707c955101d8a884f713a74f154eeef7a1994d0322dd25ca13ba0d8831a74c5015b89203893ad799f96024", 0xa2}, {&(0x7f0000000c00)="d1c8d08e600bedc7ee8b4da6d28b88c028b87b9e94f84aaef7245e0aeaf4becffe2d20cd6c861bc8a77f075ae5ce9c37d89d83316d8115e1a98106aad11b6aa8f6bd67dc9e20d751739e9e6a39291eee1e279fee326dade5d2fc89c6", 0x5c}, {&(0x7f0000000c80)="88e2a8178d2ea5ecf82ebbd2fe093fef356def910d2b29d41e39979a4d663b544b82b8b8c7ba84091eddd6d9dd3d5da4f6fdf94b7d592eba6261e2362ce1f50c43ff40f685467ddd242de10a8ba88be615fc644c22325497354603c5f5b0782862fb575fa62f086844a4767887d285eeb0aa4e28962cb4a4cb6fb8cdf7ea9b9cc63e42a75795d26be8e87891838a70132d292c1654e04a290848360c82960825a5adf2beb01eb886357b3d3a74", 0xad}], 0x5, &(0x7f0000001200)=[@rights={{0x2c, 0x1, 0x1, [r14, r15, 0xffffffffffffffff, r16, r17, r18, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, r19}}}, @rights={{0x34, 0x1, 0x1, [r20, r21, r22, r23, r24, r25, r26, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}], 0xc0, 0x800}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000012c0)="63c7e75b6953550c6b2589", 0xb}, {&(0x7f0000001300)="01d57e50a8422085e342bf6545aadc076766516551a917b023cc882898b8ff832a2932e10e0d5cf2a5a448d201", 0x2d}, {&(0x7f0000001340)="dd9753cb341933ceed2452686c11474fad1bb9166924cb08ff4440de373e20d9b64fdb17595700e5b18479d53f143a01b185d9131607a1e4251900e6bf841adbc69ae25c86d1ceb86b5cc956166b947e29fec899465e94fa7f24cb2af4d31cd2fd5d41cf7c89ae50579c1c47fab55689b7c70e5a19069f2812966f15342e", 0x7e}, {&(0x7f00000013c0)="183ead5a61b17791aab67466d7c62a904e2ba7c5035e0d8ee6efde80e70aa8a04a2a2bde9140ad0bba54e0b41e2158e893469cdc71f4aee50e0a83e45b3c32e3a1495cf432635d26fdb9e2a6836941a65914abfdf4de005b7ab11918480a76e5880bf98de2b6a0970207cc", 0x6b}, {&(0x7f0000001440)="6f7d3b45b303f9b15ea7e931fc47139d5f1efe461aa11ba8d35d3019bb9a103894037fb59b7a79e60e92c55e9608070f9393252a02d5ca67ac6c94c01a2cde9a99632d16368937ef44acb163b6362e461a859b6f87651eb8875df9eceac4d1db9667ea50f4356fef57d3fc2b576cf7979b5696e6e6ba7e426e91679ea26e2f69945ca018fa66271115db0eb39194c9f92f7cf7e18c3540cf0ba016addca1e150faa299e33e7d098d1f0a7bd18ffcb9d7f0d5f0fdeeed58472f8d35220a33975f5ecb93f0d9fdf08b38d355bbbfba", 0xce}, {&(0x7f0000001540)="04e1ca1510238e7edbfc02434a574a774d621aa083c33827fd9eff44879ebf2036071a52145b0a9b8c3fa3397c91", 0x2e}], 0x6, &(0x7f0000003b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108, 0x4000000}}], 0x3, 0x20000000) 8.704927689s ago: executing program 0 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b5) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000200)='./file1\x00', 0x0, 0xee01) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@weak_handle={0x77682a85, 0x100b, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000180)='./bus\x00', 0x0) (async) linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000180)='./bus\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6], 0x1, 0x80000}) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') execve(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_nofollow}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_nofollow}]}) chdir(&(0x7f00000001c0)='./bus\x00') 8.641241553s ago: executing program 0 (id=1257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x101000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000f00000000020100000400000e00000000000000"]) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfd, &(0x7f0000001480)) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[], 0x0}, 0x94) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000840)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = geteuid() mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ufs\x00', 0x200000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=@allocspi={0x258, 0x16, 0x8, 0x70bd26, 0x25dfdbff, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e21, 0x400, 0x4e23, 0x9, 0xa, 0xe0, 0xa0, 0x33, 0x0, r7}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d2, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, {0xfffffffffffffffd, 0x5, 0x7, 0x9, 0x8, 0x6, 0x4da, 0x1d}, {0x5, 0x447a, 0x2, 0xd}, {0x0, 0x10}, 0x70bd27, 0x3502, 0xa, 0x4, 0x9, 0x25}, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd29, 0x8}}, @offload={0xc, 0x1c, {r9, 0x2}}, @algo_aead={0x128, 0x12, {{'morus1280-avx2\x00'}, 0x6e0, 0x100, "e11702d930364bf2fb73304c37da20170f95391e8b569bd194584ea975dee1ae5fcd281d3e279bbc941938836723fd49071653baaba2d35e0ea7b1e891ed5f4737f9391418039983655280da3b9241d70377bcfe4e138787873e64b654e20c999c2f837280c3be5f153c08f5dcc8dd22fd4255bb45f1be3a6f716c4d2c80972670e7fe3c91bb15bf159320c98608faefc6665349a0dba27aba3ea34284af3dbd0acbb51a47f0fb4c486ba3e44486cc652f533d921ae352fb5881f3aeee9c7fe8e1e737021b5288d0515b420c21cef2c6065d662ecc0fe471b6f9fe60"}}, @extra_flags={0x8, 0x18, 0x100}]}, 0x258}, 0x1, 0x0, 0x0, 0x48014}, 0x40040c4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @generic={0x89, 0x2}]}}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0x61}}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) epoll_pwait2(r5, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000440)={r11, r12+10000000}, &(0x7f0000000940)={[0x4]}, 0x8) 8.457930219s ago: executing program 0 (id=1259): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x3, 0x9}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0x124a6333d1185a5c}}}, 0x14) r2 = getpid() kcmp(r2, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xffffffff, 0x4) shutdown(r0, 0x0) 8.371528388s ago: executing program 33 (id=1259): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x3, 0x9}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0x124a6333d1185a5c}}}, 0x14) r2 = getpid() kcmp(r2, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xffffffff, 0x4) shutdown(r0, 0x0) 1.109464398s ago: executing program 5 (id=1335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) ioctl$KDDELIO(r5, 0x4b35, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0xff0d, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x16c, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x5}}, @algo_auth={0x0, 0x1, {{'sm3-ce\x00'}, 0x0, "48f7414ddd986bee1c92af4e165f86f7e5c1f658ec5fb21789f9fa6e571dfb8a0d206b65e98da383b13aaa5062ecaf60f1a54c619fc9f409ee3d148afd28fe20deed30e74bc3b400d93395dc6013542673d6427bcc41777c46cc631315f4a92ffdce7e86143fd5e81b2bc2e8cec971af32ddc6"}}]}, 0x16c}}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e2a, 0x1, @empty, 0x1000}}, 0x3, 0x0, 0x20000, 0x0, 0x2c, 0x5, 0x3}, 0x9c) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="080000000000000081000040"]) 931.51092ms ago: executing program 5 (id=1339): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) write$P9_RVERSION(r8, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r10, 0x0, 0x30, 0x10, @void}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000200)=r7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="b00100001e00000827bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00400e008000000008001c00", @ANYRES32=r8, @ANYBLOB="08001f004dffffff1800198014000500270c0ea4249bdfc505adce0c811aa96e68011a800400070004001c00580002805400018008001f0009000000080003000300000008001a00390000000800200081000000080019000300000008001f000500000008000500040000000800080040000000080020000600000008000d00e300000058000a80050008007f000000140007000000000000000000000000000000000014000700fe8000000000000000000000000000aa050008000600000014000700ff020000000000000000000000000001050008000600000004001c0004001c0080000a80050008001c00000014000700fe88000000000000000000000000000114000700ff02000000000000000000000000000114000700200100000000000000000000000000021400070000000000000000000000ffffac1414bb050008000b00000014000700ff020000000000000000000000000001050008000000000004001c001c000a8005000800c4000000050008000f000000050008000600000004001c00"], 0x1b0}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 739.687297ms ago: executing program 5 (id=1344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x0, 0xb, 0x81, 0x0, 0x4, 0x6, 0x1, 0x10, 0x8, 0x8, 0x7, 0x7, 0x0, 0x51e, 0x1f, 0x1, 0x45, 0xff, 0x2, '\x00', 0x8, 0x4}) 600.492807ms ago: executing program 5 (id=1349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x5}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@cpuid={0x14, 0x18, {0xd22, 0xfe0}}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404200, 0x0) ioctl$KDSETLED(r8, 0x4b32, 0x3) 599.76465ms ago: executing program 2 (id=1351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x1691, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000001380)={0x2020}, 0x2030) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3ff}]}}}]}, 0x3c}}, 0x0) 504.601105ms ago: executing program 2 (id=1352): prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x6d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=""/120, 0x78, 0x40000000, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x40}}, 0x24) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r1, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1578c858be9d3a5b2aff8f4f37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0x8e, 0x0, &(0x7f0000000700)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000100)='=', 0x1, 0x4fed3) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r8, 0x118, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffff5b) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 405.433803ms ago: executing program 5 (id=1354): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x84c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x337341fef48d726c}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0xfffffffe, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb17, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0xb, 0x1, 0x116f, 0x8, 0x4, 0x4, 0x40, 0x1, 0xf, 0x3ff, 0x3079, 0x200, 0x9, 0x8, 0xabce, 0x7, 0x400, 0x4, 0x6, 0xc, 0x8, 0x0, 0xd, 0x0, 0x2000000, 0x80000001, 0x2, 0x10001, 0x1, 0x1, 0x2, 0x5, 0xffffff81, 0x4, 0x7, 0x80000001, 0x8, 0x3ff, 0x3, 0x2, 0x1000, 0x40, 0x1000, 0x7, 0x7fff, 0x5, 0x8, 0x40, 0x7, 0x6, 0x5, 0x5, 0xe, 0x5, 0x6, 0x5, 0x6, 0x8001, 0x0, 0x4, 0x9, 0xa7, 0xe, 0x9, 0x8, 0x3, 0x1, 0xbd, 0x7, 0x6, 0x9, 0xd, 0x10, 0x4, 0x3, 0x8, 0x3, 0x8, 0x3, 0xf, 0x1000, 0x0, 0x3, 0x5, 0x40dc, 0x0, 0x89, 0x7, 0x3, 0x7, 0x40, 0x5, 0x4090000, 0x4, 0x200, 0x6, 0x7, 0x1, 0x5, 0x81, 0x1, 0x800, 0x3e, 0x80, 0x1de3, 0x9, 0x80000001, 0x5, 0x9, 0x4, 0xffffffff, 0x1a, 0x2, 0x2, 0x1, 0xff, 0x4, 0x0, 0x9, 0x5, 0x9, 0x2, 0x5, 0x3, 0x2, 0xffffffff, 0x7, 0x7773276c, 0x7f, 0x8000, 0x4, 0x2, 0xfffffffe, 0xd, 0xf11, 0xd, 0x9, 0x6, 0x5e7c4a39, 0x5, 0x6, 0x22f, 0x2, 0x6, 0x3, 0x6, 0x0, 0x1ff, 0x6, 0xfffffffc, 0xe1, 0x7, 0x4, 0x7ff, 0xa2, 0x5, 0x3, 0x4, 0x7ff, 0x6, 0x4, 0x10000, 0xfffffff8, 0x24, 0x2, 0x3, 0x5944, 0x1, 0x1, 0xe, 0x7, 0x0, 0xbe70, 0x2, 0x7, 0xb9, 0x80000000, 0x0, 0xb, 0xffffffdf, 0x5, 0xa60, 0x4, 0xff, 0x2b, 0x8, 0xffffb2cb, 0x892, 0x9, 0xfffffac7, 0x2, 0x1, 0x1, 0x6, 0xc0ef, 0x40, 0x6, 0x8, 0x6, 0x3, 0x7f, 0x3, 0xfffffffc, 0x6, 0x0, 0x5, 0x42c3, 0x10000, 0x2, 0x1, 0x10000, 0x6, 0x2, 0x0, 0xe, 0x1, 0x1, 0xff, 0x8, 0x284, 0xcd4e, 0x9d, 0x0, 0xd6, 0xfffffffb, 0xd6df, 0x800, 0x71e, 0x5, 0x3ff, 0x5, 0xff, 0x2, 0x3, 0x9, 0x1, 0x3ff, 0x8, 0x9, 0x7, 0x9, 0xd, 0xca, 0x8001, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7fffffff, 0x9, 0x3, 0x5, 0x3, 0x1]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r2, 0x89f3, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000002c0)={0x80, "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"}) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) 354.189753ms ago: executing program 2 (id=1355): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') fsopen(&(0x7f0000000080)='omfs\x00', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200), &(0x7f0000000240), 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 277.259654ms ago: executing program 2 (id=1357): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004fce9000000040001000ce1cfdc9ac7fa8150162ba3e7aa6204a9d4aa9ebbfd13871750aa60f94f9a0e007a7d5e470a85bfcbeb0caa9af9d55a51e2f032efa3991ae43fcdf8b7a4aefd2aeef1743da0c7b9fddc4e82bc4de9b254689a3e8868c367cb47b545298161118c9f4453b995028c47a273222d302d0ac0f670c0e8f23cf21d0cbe891d944c78d61ad660e31cf2e7bb76293c972bd72acd4ccd1b722e38dea5816dd0ca497e92aa0ce9a16641eb61afaf05bfec0132a1838a6556ec07cf0ef3502ca79f952f6f"], 0x48) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) r1 = socket(0x40000000015, 0x5, 0xfffffffd) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c0000001a001100000000000000000002000000000000000000000005001b0006000000080001007f000001"], 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 276.112651ms ago: executing program 2 (id=1359): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, 0x0, 0x40}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VT_RESIZE(r1, 0x800455cc, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000240)={0x24000000, 0x0, 0x0, 0x0, {0x23}, &(0x7f00000000c0)=""/193, 0xc1, 0x0, 0x0}, 0x58) 213.710383ms ago: executing program 5 (id=1361): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9b00, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x100000000, 0x3, 0x0, 0x6, 0x7fffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@generic={0xa, 0x3, 0xe, 0x3, 0x850}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x7, 0x4, 0x4, 0x101, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x1, 0x6, 0x2, 0x3, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0xc7, 0x3d, &(0x7f0000000740)=""/61, 0x41100, 0xb, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x2, 0x4, 0x81}, 0x10, 0x8a96, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xf}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0, {0x7a9b}}, './file0\x00'}) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x1050) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%ps \x00'}, 0x20) (async) r10 = openat$mice(0xffffffffffffff9c, &(0x7f00000009c0), 0x40000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1a, 0x9, 0x6, 0x789, 0x8800, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xd, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000800000000000f8ffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500cef9ae722994"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x6e, &(0x7f0000000200)=""/110, 0x40f00, 0x34, '\x00', r3, @fallback=0x13, r4, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x80, 0xca9}, 0x10, r5, r7, 0x6, &(0x7f0000000ac0)=[r9, r10, r11, r0, r12], &(0x7f0000000b00)=[{0x5, 0x2, 0xe, 0x8}, {0x0, 0x1, 0x2, 0xa}, {0x1, 0x4, 0x5, 0xd}, {0x2, 0x4, 0xe, 0x3}, {0x2, 0x5, 0x10}, {0x1, 0x4, 0x1, 0x5}], 0x10, 0x100}, 0x94) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010104, 0x4e22, 0xfffffffe, 'ovf\x00', 0x0, 0xfffffff8, 0x15}, 0x2c) r13 = socket(0x10, 0x3, 0x0) sendto$inet6(r13, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00200049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 212.773693ms ago: executing program 2 (id=1362): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000400)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@overlay={0x2, 0x1, 0x4, 0x70012, 0x3, {}, {0x5, 0x2, 0x0, 0x9, 0x8, 0x0, "f58888de"}, 0x9, 0x3, {}, 0x8}) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000100)=@bpq0, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x500000a, 0x12, r4, 0x180000000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x1e) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000208000340000000000800014000000015140001800b00010072656a6563740000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000007dd473678d7f2c129281d5327a8510bd42ed93a083718f561eaf9c91ef8ec0e69aef10a9f06b942f74631a4cc351e42f1a95d22e337fd4572d045af737108392276ff135b6bf46665a7e2b355db395e96149c3c4c0872006e560cbe92f983586b22a530087b974c209cd6032487494da54c3765b5bef660574cff40195a6e1a42c5cb6984505e429d2535714321fe2b933804b78721e2022155fd2ebaeea32ff254af29d84fde9e32afd7540bcc4927a79f4f3bd623c8049f0b19692af31414c1865f8edfc11906d5fc143230f138e0df855cee2d6da5e8f732cf207a0452b6c", @ANYRES32=0x0, @ANYBLOB="1720000021200000240012800c0001006d6163766c616e00140002800800030002000000080001001000000008000500", @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 211.802336ms ago: executing program 4 (id=1363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r2, 0x2004, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000380)=""/203, 0xcb}], 0x2, 0x7, 0x7fff) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000002600)={0x1f, @none, 0x6}, 0xa) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsync(r5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mctp_key_acquire\x00', r5, 0x0, 0xfe}, 0x18) 130.057071ms ago: executing program 4 (id=1364): keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={'xcbc(aes)\x00'}}) r0 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2fb}, &(0x7f0000000000), &(0x7f0000000200)) io_uring_enter(r0, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) 66.017478ms ago: executing program 4 (id=1365): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180000eb0800000000000000b75d000005b20600ffffffff18140000", @ANYRES32=0x1, @ANYBLOB="000000000000000018140000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x10, 0x13, &(0x7f0000000200)=""/19, 0x41000, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x1, 0x800, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000640)=[{0x5, 0x5, 0x8, 0x2}, {0x4, 0x1, 0xb, 0xb}, {0x0, 0x1, 0xe, 0x1}, {0x4, 0x4, 0x9, 0x9}, {0x4, 0x1, 0xf, 0x8}, {0x1, 0x2, 0x0, 0x5}, {0x0, 0x4, 0xd, 0x1}, {0x2, 0x5, 0x1, 0xa}], 0x10, 0x8001}, 0x94) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180000eb0800000000000000b75d000005b20600ffffffff18140000", @ANYRES32=0x1, @ANYBLOB="000000000000000018140000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x10, 0x13, &(0x7f0000000200)=""/19, 0x41000, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x1, 0x800, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000640)=[{0x5, 0x5, 0x8, 0x2}, {0x4, 0x1, 0xb, 0xb}, {0x0, 0x1, 0xe, 0x1}, {0x4, 0x4, 0x9, 0x9}, {0x4, 0x1, 0xf, 0x8}, {0x1, 0x2, 0x0, 0x5}, {0x0, 0x4, 0xd, 0x1}, {0x2, 0x5, 0x1, 0xa}], 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x5, 0xb68, 0xaf62f10e3034b708, &(0x7f0000000580)="88bbd5669b40401e0c286768ccaa6954f9a9dac7734629353dad166495248d305e11254c50b097671790a2310da50e7a857895d856a84f9422ca5cc03759e97a9df0e4a2f9ab1bf339acb19ffe776a41c64c230610ef37092e26d6c31a0ea9dc81e7271fa6a3ca2120cfa3eccbd79924579c91f79ee0b8bb4a4521171318aef655c1f18eaf4b6ab618a719cf9283fbd6ef295afb7d", 0x0, 0x4, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe, 0xe}, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(xeta-generic)\x00'}, 0x4a) (async) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(xeta-generic)\x00'}, 0x4a) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newneigh={0x60, 0x1c, 0x0, 0x70bd25, 0x25dfdbfe, {0x10, 0x0, 0x0, 0x0, 0x2, 0x40, 0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x85a, 0x7, 0x77f}}, @NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_FDB_EXT_ATTRS={0x4}, @NDA_LLADDR={0xa, 0x2, @random="4310f28e2329"}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x7482363949a16da0) r7 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r8, 0x541b, &(0x7f0000000000)={0x3, @null}) (async) ioctl$SIOCAX25DELUID(r8, 0x541b, &(0x7f0000000000)={0x3, @null}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)=[r0]}, 0x1) close_range(r4, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x4, 0x4, 0xfd, 0x0, 0xfe, 0x6, 0x100}, [@RTA_NH_ID={0x8, 0x1e, 0x87b}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x84, 0x0, 0x4, 0x0, 0xf8, 0x60, 0x2000}}}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 65.665121ms ago: executing program 4 (id=1366): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) 418.424µs ago: executing program 4 (id=1367): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x1, 0x3e8, 0x4d381dd943d72cde, 0x3, 0x80, 0x21, 0x5, 0x200, &(0x7f0000000240)=[0x4], 0x1, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f, 0x61]}}, 0x0, 0x29}, 0x28) 0s ago: executing program 4 (id=1368): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) (async, rerun: 32) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70100400000005000000080009000200000008000b0000000000060001000500000008000c"], 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x30) (async) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79"}}}}}}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): ame="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.667058][ T40] audit: type=1400 audit(1761388136.530:487): avc: denied { search } for pid=5643 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.673986][ T40] audit: type=1400 audit(1761388136.530:488): avc: denied { read } for pid=5643 comm="dhcpcd" name="n103" dev="tmpfs" ino=4083 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.681252][ T40] audit: type=1400 audit(1761388136.530:489): avc: denied { open } for pid=5643 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=4083 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.688488][ T40] audit: type=1400 audit(1761388136.530:490): avc: denied { getattr } for pid=5643 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=4083 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.706466][ T40] audit: type=1400 audit(1761388136.577:491): avc: denied { read open } for pid=7493 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.716756][ T40] audit: type=1400 audit(1761388136.586:492): avc: denied { getattr } for pid=7493 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.326106][ T7515] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 79.368421][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 79.371785][ T7516] bridge: RTM_NEWNEIGH with invalid ether address [ 79.374200][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 79.415046][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 79.422205][ T7530] FAT-fs (loop0): unable to read boot sector [ 80.373390][ T7555] netlink: 'syz.1.418': attribute type 16 has an invalid length. [ 80.379166][ T7555] netlink: 'syz.1.418': attribute type 2 has an invalid length. [ 80.379727][ T7557] netlink: 'syz.2.419': attribute type 3 has an invalid length. [ 80.381558][ T7555] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.418'. [ 80.381802][ T7560] NILFS (nbd0): device size too small [ 80.391923][ T7559] netlink: 'syz.2.419': attribute type 3 has an invalid length. [ 80.423982][ T7564] usb usb8: usbfs: process 7564 (syz.3.422) did not claim interface 0 before use [ 80.430232][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.422'. [ 80.453855][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.418'. [ 80.460097][ T7568] netlink: 3 bytes leftover after parsing attributes in process `syz.1.418'. [ 80.498357][ T7573] netlink: 'syz.2.426': attribute type 7 has an invalid length. [ 80.498364][ T7574] netlink: 'syz.2.426': attribute type 7 has an invalid length. [ 80.534812][ T7578] warning: `syz.2.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.596615][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 80.696904][ T1127] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 80.700300][ T1127] sr 2:0:0:0: [sr0] tag#2 Sense Key : Illegal Request [current] [ 80.702986][ T1127] sr 2:0:0:0: [sr0] tag#2 Add. Sense: Invalid command operation code [ 80.705571][ T1127] sr 2:0:0:0: [sr0] tag#2 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 80.708384][ T1127] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 80.711714][ T1127] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 80.826595][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 80.829989][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 80.959141][ T7602] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.061462][ T7617] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 81.064447][ T7617] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 81.242279][ T7622] block nbd2: shutting down sockets [ 81.295118][ T7629] input: syz1 as /devices/virtual/input/input13 [ 81.359093][ T7642] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 81.370371][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 81.375981][ T7644] loop2: detected capacity change from 0 to 7 [ 81.381102][ T6087] loop2: [POWERTEC] p1 p2 [ 81.383018][ T6087] loop2: p1 start 25165824 is beyond EOD, truncated [ 81.385094][ T6087] loop2: p2 start 4294901760 is beyond EOD, truncated [ 81.389125][ T7644] loop2: [POWERTEC] p1 p2 [ 81.391443][ T7644] loop2: p1 start 25165824 is beyond EOD, truncated [ 81.393599][ T7644] loop2: p2 start 4294901760 is beyond EOD, truncated [ 81.398639][ T7644] overlayfs: missing 'workdir' [ 81.553035][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.556058][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.560037][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.563008][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.766988][ T10] cfg80211: failed to load regulatory.db [ 81.783059][ T9] usb 5-1: usb_control_msg returned -32 [ 81.785097][ T9] usbtmc 5-1:16.0: can't read capabilities [ 81.801229][ T7682] could not allocate digest TFM handle cryptd(blake2b-160) [ 81.859909][ T7700] program syz.1.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.859915][ T7699] program syz.1.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.162935][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.167192][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.267992][ T7719] xt_hashlimit: size too large, truncated to 1048576 [ 82.720262][ T7732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=983953270 (1967906540 ns) > initial count (914717820 ns). Using initial count to start timer. [ 83.055096][ T7742] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 83.057602][ T7742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.563007][ T7772] policy can only be matched on NF_INET_PRE_ROUTING [ 83.563023][ T7772] unable to load match [ 83.700949][ T7779] can: request_module (can-proto-0) failed. [ 83.717884][ T7779] can: request_module (can-proto-0) failed. [ 83.735519][ T7779] can: request_module (can-proto-0) failed. [ 83.881693][ T1148] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.887204][ T1148] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.891422][ T1148] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.894743][ T1148] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.948722][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 83.948785][ T40] audit: type=1400 audit(1761388141.487:515): avc: denied { ioctl } for pid=7795 comm="syz.3.493" path="socket:[22020]" dev="sockfs" ino=22020 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.119169][ T6648] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.231513][ T7807] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.279099][ T6648] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 84.281906][ T6648] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.286025][ T6648] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 84.290273][ T6648] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 84.292863][ T6648] usb 7-1: Manufacturer: syz [ 84.296466][ T6648] usb 7-1: config 0 descriptor?? [ 84.352944][ T6648] rc_core: IR keymap rc-hauppauge not found [ 84.355775][ T6648] Registered IR keymap rc-empty [ 84.360284][ T6648] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 84.366529][ T6648] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input15 [ 84.445339][ T6648] usb 5-1: USB disconnect, device number 8 [ 84.518286][ T6012] usb 7-1: USB disconnect, device number 5 [ 84.529999][ T40] audit: type=1400 audit(1761388142.029:516): avc: denied { map } for pid=7816 comm="syz.0.500" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 85.090362][ T40] audit: type=1400 audit(1761388142.553:517): avc: denied { setopt } for pid=7823 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.365049][ T7829] netlink: 'syz.3.503': attribute type 2 has an invalid length. [ 85.368748][ T7829] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 85.373077][ T7829] __nla_validate_parse: 74 callbacks suppressed [ 85.373090][ T7829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.503'. [ 85.605977][ T40] audit: type=1400 audit(1761388143.039:518): avc: denied { accept } for pid=7848 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 85.686261][ T40] audit: type=1400 audit(1761388143.114:519): avc: denied { create } for pid=7856 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.694110][ T40] audit: type=1400 audit(1761388143.114:520): avc: denied { write } for pid=7856 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.705180][ T40] audit: type=1400 audit(1761388143.114:521): avc: denied { nlmsg_write } for pid=7856 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.752919][ T7854] could not allocate digest TFM handle hmac(sha256-avx2) [ 85.773062][ T40] audit: type=1400 audit(1761388143.189:522): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 85.805519][ T40] audit: type=1400 audit(1761388143.217:523): avc: denied { mounton } for pid=7864 comm="syz.0.513" path="/117/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 86.202649][ T6648] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 86.227974][ T107] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 86.405720][ T6648] usb 5-1: Using ep0 maxpacket: 8 [ 86.409233][ T6648] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.412978][ T6648] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.416431][ T6648] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.420506][ T6648] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.424118][ T6648] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 86.426701][ T6648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.433775][ T6648] hub 5-1:1.0: bad descriptor, ignoring hub [ 86.436130][ T6648] hub 5-1:1.0: probe with driver hub failed with error -5 [ 86.439252][ T6648] cdc_wdm 5-1:1.0: skipping garbage [ 86.441264][ T6648] cdc_wdm 5-1:1.0: skipping garbage [ 86.446283][ T6648] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 86.449685][ T6648] cdc_wdm 5-1:1.0: Unknown control protocol [ 86.623433][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 86.629422][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.649017][ T40] audit: type=1400 audit(1761388144.012:524): avc: denied { read write } for pid=7869 comm="syz.0.514" name="cdc-wdm0" dev="devtmpfs" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 86.652584][ T7885] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 86.658246][ T7885] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 86.728139][ T7870] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 86.749144][ T53] usb 5-1: USB disconnect, device number 9 [ 87.260589][ T7895] dlm: Unknown command passed to DLM device : 255 [ 87.260589][ T7895] [ 87.324779][ T7903] tmpfs: Group quota block hardlimit too large. [ 87.343126][ T7903] comedi: valid board names for 8255 driver are: [ 87.345383][ T7903] 8255 [ 87.346313][ T7903] comedi: valid board names for vmk80xx driver are: [ 87.348587][ T7903] vmk80xx [ 87.349625][ T7903] comedi: valid board names for usbduxsigma driver are: [ 87.351962][ T7903] usbduxsigma [ 87.353044][ T7903] comedi: valid board names for usbduxfast driver are: [ 87.355143][ T7903] usbduxfast [ 87.356296][ T7903] comedi: valid board names for usbdux driver are: [ 87.358537][ T7903] usbdux [ 87.359591][ T7903] comedi: valid board names for ni6501 driver are: [ 87.359992][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 87.361787][ T7903] ni6501 [ 87.366472][ T7903] comedi: valid board names for dt9812 driver are: [ 87.368743][ T7903] dt9812 [ 87.369693][ T7903] comedi: valid board names for ni_labpc_cs driver are: [ 87.372049][ T7903] ni_labpc_cs [ 87.373132][ T7903] comedi: valid board names for ni_daq_700 driver are: [ 87.375758][ T7903] ni_daq_700 [ 87.377146][ T7903] comedi: valid board names for labpc_pci driver are: [ 87.380534][ T7903] labpc_pci [ 87.381689][ T7903] comedi: valid board names for adl_pci9118 driver are: [ 87.383930][ T7903] pci9118dg [ 87.385036][ T7903] pci9118hg [ 87.386136][ T7903] pci9118hr [ 87.387248][ T7903] comedi: valid board names for 8255_pci driver are: [ 87.390532][ T7903] 8255_pci [ 87.391542][ T7903] comedi: valid board names for s526 driver are: [ 87.393454][ T7903] s526 [ 87.394300][ T7903] comedi: valid board names for multiq3 driver are: [ 87.396279][ T7903] multiq3 [ 87.397259][ T7903] comedi: valid board names for pcmuio driver are: [ 87.399269][ T7903] pcmuio48 [ 87.400808][ T7903] pcmuio96 [ 87.401830][ T7903] comedi: valid board names for pcmmio driver are: [ 87.403798][ T7903] pcmmio [ 87.404715][ T7903] comedi: valid board names for pcmda12 driver are: [ 87.406698][ T7903] pcmda12 [ 87.407671][ T7903] comedi: valid board names for pcmad driver are: [ 87.409590][ T7903] pcmad12 [ 87.410586][ T7903] pcmad16 [ 87.411894][ T7903] comedi: valid board names for ni_labpc driver are: [ 87.413868][ T7903] lab-pc-1200 [ 87.414931][ T7903] lab-pc-1200ai [ 87.416080][ T7903] lab-pc+ [ 87.417066][ T7903] comedi: valid board names for atmio16 driver are: [ 87.419379][ T7903] atmio16 [ 87.420401][ T7903] atmio16d [ 87.421517][ T7903] comedi: valid board names for ni_at_ao driver are: [ 87.423607][ T7903] at-ao-6 [ 87.424628][ T7903] at-ao-10 [ 87.425665][ T7903] comedi: valid board names for ni_at_a2150 driver are: [ 87.427840][ T7903] ni_at_a2150 [ 87.428973][ T7903] comedi: valid board names for adq12b driver are: [ 87.431005][ T7903] adq12b [ 87.431998][ T7903] comedi: valid board names for mpc624 driver are: [ 87.434125][ T7903] mpc624 [ 87.435089][ T7903] comedi: valid board names for c6xdigio driver are: [ 87.435971][ T7908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=7908 comm=syz.1.525 [ 87.437218][ T7903] c6xdigio [ 87.437225][ T7903] comedi: valid board names for aio_iiro_16 driver are: [ 87.441720][ T7908] Bluetooth: MGMT ver 1.23 [ 87.442186][ T7903] aio_iiro_16 [ 87.442194][ T7903] comedi: valid board names for aio_aio12_8 driver are: [ 87.442199][ T7903] aio_aio12_8 [ 87.442202][ T7903] aio_ai12_8 [ 87.442205][ T7903] aio_ao12_4 [ 87.442209][ T7903] comedi: valid board names for fl512 driver are: [ 87.448139][ T7908] macvlan0: entered promiscuous mode [ 87.449163][ T7903] fl512 [ 87.450272][ T7908] macvlan0: entered allmulticast mode [ 87.451387][ T7903] comedi: valid board names for dmm32at driver are: [ 87.452948][ T7908] bond2: entered promiscuous mode [ 87.454546][ T7903] dmm32at [ 87.454552][ T7903] comedi: valid board names for dt282x driver are: [ 87.454556][ T7903] dt2821 [ 87.454560][ T7903] dt2821-f [ 87.456594][ T7908] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 87.457177][ T7903] dt2821-g [ 87.471295][ T7903] dt2823 [ 87.472267][ T7903] dt2824-pgh [ 87.473361][ T7903] dt2824-pgl [ 87.474437][ T7903] dt2825 [ 87.475202][ T7908] bond2: left promiscuous mode [ 87.475449][ T7903] dt2827 [ 87.477951][ T7903] dt2828 [ 87.478921][ T7903] dt2829 [ 87.479880][ T7903] dt21-ez [ 87.480895][ T7903] dt23-ez [ 87.481902][ T7903] dt24-ez [ 87.482905][ T7903] dt24-ez-pgl [ 87.483516][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 87.484002][ T7903] comedi: valid board names for dt2817 driver are: [ 87.484009][ T7903] dt2817 [ 87.484012][ T7903] comedi: valid board names for dt2815 driver are: [ 87.484017][ T7903] dt2815 [ 87.484020][ T7903] comedi: valid board names for dt2814 driver are: [ 87.484024][ T7903] dt2814 [ 87.484028][ T7903] comedi: valid board names for dt2811 driver are: [ 87.484032][ T7903] dt2811-pgh [ 87.484035][ T7903] dt2811-pgl [ 87.484039][ T7903] comedi: valid board names for dt2801 driver are: [ 87.484043][ T7903] dt2801 [ 87.484046][ T7903] comedi: valid board names for das6402 driver are: [ 87.484051][ T7903] das6402-12 [ 87.484054][ T7903] das6402-16 [ 87.484058][ T7903] comedi: valid board names for das1800 driver are: [ 87.484063][ T7903] das-1701st [ 87.484066][ T7903] das-1701st-da [ 87.484069][ T7903] das-1702st [ 87.484073][ T7903] das-1702st-da [ 87.484076][ T7903] das-1702hr [ 87.484080][ T7903] das-1702hr-da [ 87.484083][ T7903] das-1701ao [ 87.484087][ T7903] das-1702ao [ 87.484090][ T7903] das-1801st [ 87.484094][ T7903] das-1801st-da [ 87.484097][ T7903] das-1802st [ 87.484101][ T7903] das-1802st-da [ 87.484104][ T7903] das-1802hr [ 87.484108][ T7903] das-1802hr-da [ 87.484111][ T7903] das-1801hc [ 87.484115][ T7903] das-1802hc [ 87.484118][ T7903] das-1801ao [ 87.484122][ T7903] das-1802ao [ 87.484125][ T7903] comedi: valid board names for das800 driver are: [ 87.484129][ T7903] das-800 [ 87.484133][ T7903] cio-das800 [ 87.484136][ T7903] das-801 [ 87.484139][ T7903] cio-das801 [ 87.484143][ T7903] das-802 [ 87.484146][ T7903] cio-das802 [ 87.484150][ T7903] cio-das802/16 [ 87.484154][ T7903] comedi: valid board names for isa-das08 driver are: [ 87.484158][ T7903] isa-das08 [ 87.484161][ T7903] das08-pgm [ 87.484165][ T7903] das08-pgh [ 87.484168][ T7903] das08-pgl [ 87.484172][ T7903] das08-aoh [ 87.484175][ T7903] das08-aol [ 87.484178][ T7903] das08-aom [ 87.484182][ T7903] das08/jr-ao [ 87.484185][ T7903] das08jr-16-ao [ 87.484189][ T7903] pc104-das08 [ 87.484192][ T7903] das08jr/16 [ 87.484196][ T7903] comedi: valid board names for das16m1 driver are: [ 87.484200][ T7903] das16m1 [ 87.484203][ T7903] comedi: valid board names for dac02 driver are: [ 87.484208][ T7903] dac02 [ 87.484211][ T7903] comedi: valid board names for rti802 driver are: [ 87.484215][ T7903] rti802 [ 87.484219][ T7903] comedi: valid board names for rti800 driver are: [ 87.484224][ T7903] rti800 [ 87.484227][ T7903] rti815 [ 87.484231][ T7903] comedi: valid board names for pcm3724 driver are: [ 87.484235][ T7903] pcm3724 [ 87.484239][ T7903] comedi: valid board names for pcl818 driver are: [ 87.484243][ T7903] pcl818l [ 87.484247][ T7903] pcl818h [ 87.484250][ T7903] pcl818hd [ 87.484253][ T7903] pcl818hg [ 87.484257][ T7903] pcl818 [ 87.484260][ T7903] pcl718 [ 87.484264][ T7903] pcm3718 [ 87.484267][ T7903] comedi: valid board names for pcl816 driver are: [ 87.484272][ T7903] pcl816 [ 87.484275][ T7903] pcl814b [ 87.484278][ T7903] comedi: valid board names for pcl812 driver are: [ 87.484283][ T7903] pcl812 [ 87.484286][ T7903] pcl812pg [ 87.484290][ T7903] acl8112pg [ 87.484293][ T7903] acl8112dg [ 87.484296][ T7903] acl8112hg [ 87.484300][ T7903] a821pgl [ 87.484303][ T7903] a821pglnda [ 87.484307][ T7903] a821pgh [ 87.484310][ T7903] a822pgl [ 87.484314][ T7903] a822pgh [ 87.484317][ T7903] a823pgl [ 87.484320][ T7903] a823pgh [ 87.484324][ T7903] pcl813 [ 87.484327][ T7903] pcl813b [ 87.484330][ T7903] acl8113 [ 87.484334][ T7903] iso813 [ 87.484337][ T7903] acl8216 [ 87.484341][ T7903] a826pg [ 87.484344][ T7903] comedi: valid board names for pcl730 driver are: [ 87.484349][ T7903] pcl730 [ 87.484352][ T7903] iso730 [ 87.484355][ T7903] acl7130 [ 87.484359][ T7903] pcm3730 [ 87.484362][ T7903] pcl725 [ 87.484365][ T7903] p8r8dio [ 87.484369][ T7903] acl7225b [ 87.484372][ T7903] p16r16dio [ 87.484376][ T7903] pcl733 [ 87.484379][ T7903] pcl734 [ 87.484383][ T7903] opmm-1616-xt [ 87.484386][ T7903] pearl-mm-p [ 87.484390][ T7903] ir104-pbf [ 87.484393][ T7903] comedi: valid board names for pcl726 driver are: [ 87.484398][ T7903] pcl726 [ 87.484401][ T7903] pcl727 [ 87.484405][ T7903] pcl728 [ 87.484408][ T7903] acl6126 [ 87.484411][ T7903] acl6128 [ 87.484415][ T7903] comedi: valid board names for pcl724 driver are: [ 87.484419][ T7903] pcl724 [ 87.484423][ T7903] pcl722 [ 87.484426][ T7903] pcl731 [ 87.484429][ T7903] acl7122 [ 87.484433][ T7903] acl7124 [ 87.484436][ T7903] pet48dio [ 87.484440][ T7903] pcmio48 [ 87.484443][ T7903] onyx-mm-dio [ 87.484447][ T7903] comedi: valid board names for pcl711 driver are: [ 87.484451][ T7903] pcl711 [ 87.484455][ T7903] pcl711b [ 87.484458][ T7903] acl8112hg [ 87.484462][ T7903] acl8112dg [ 87.484465][ T7903] comedi: valid board names for amplc_pc263 driver are: [ 87.484470][ T7903] pc263 [ 87.484473][ T7903] comedi: valid board names for amplc_pc236 driver are: [ 87.484478][ T7903] pc36at [ 87.484481][ T7903] comedi: valid board names for amplc_dio200 driver are: [ 87.484486][ T7903] pc212e [ 87.484489][ T7903] pc214e [ 87.484493][ T7903] pc215e [ 87.484496][ T7903] pc218e [ 87.484499][ T7903] pc272e [ 87.484503][ T7903] comedi: valid board names for comedi_parport driver are: [ 87.484507][ T7903] comedi_parport [ 87.484511][ T7903] comedi: valid board names for comedi_test driver are: [ 87.484516][ T7903] comedi_test [ 87.484519][ T7903] comedi: valid board names for comedi_bond driver are: [ 87.484524][ T7903] comedi_bond [ 87.484595][ T7907] comedi comedi3: comedi_config --init_data is deprecated [ 87.696157][ T7912] sp0: Synchronizing with TNC [ 87.819496][ T7924] QAT: Device 2 not found [ 87.821101][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 88.066801][ T7943] overlayfs: failed to resolve './file1/file0': -2 [ 88.071039][ T7944] syz_tun: entered allmulticast mode [ 89.029736][ T7987] nfs: Unknown parameter 'u]\ýµåL¬LìL%ˆ#güi\ý‰®'Èb ìöh‚4#Ýûp‚b$Ãþ‘‘$ÒÛKž|yÐFC¹õTî®9úsØôÿL)¡' [ 89.033703][ T7987] netlink: 'syz.0.552': attribute type 27 has an invalid length. [ 89.040861][ T7989] netlink: 'syz.2.551': attribute type 13 has an invalid length. [ 89.086004][ T7987] bridge0: port 3(team0) entered disabled state [ 89.089871][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.093401][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.156064][ T7987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.165910][ T7987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.286888][ T7987] macsec1: left promiscuous mode [ 89.310897][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.313687][ T7990] bridge0: port 3(team0) entered blocking state [ 89.315816][ T7990] bridge0: port 3(team0) entered forwarding state [ 89.318866][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.325573][ T7990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.332934][ T107] bridge0: port 3(team0) entered disabled state [ 89.335821][ T1190] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.340021][ T1190] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.344884][ T1190] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.351335][ T1190] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.380963][ T8004] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.386373][ T8004] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 89.440654][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 89.440663][ T40] audit: type=1400 audit(1761388146.621:542): avc: denied { map } for pid=8007 comm="syz.1.560" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.546018][ T40] audit: type=1400 audit(1761388146.724:543): avc: denied { view } for pid=8013 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.582375][ T8018] tipc: Started in network mode [ 89.583970][ T8018] tipc: Node identity ac14140f, cluster identity 4711 [ 89.586420][ T8018] tipc: New replicast peer: 255.255.255.255 [ 89.588731][ T8018] tipc: Enabled bearer , priority 10 [ 89.591021][ T8018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8018 comm=syz.0.562 [ 89.655237][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.564'. [ 89.681525][ T8024] team0: Device is already in use. [ 89.694985][ T8029] xt_hashlimit: invalid interval [ 89.741725][ T5996] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 89.891403][ T5996] usb 6-1: device descriptor read/64, error -71 [ 90.158751][ T5996] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.308427][ T5996] usb 6-1: device descriptor read/64, error -71 [ 90.437031][ T5996] usb usb6-port1: attempt power cycle [ 90.782805][ T4149] tipc: Node number set to 2886997007 [ 90.800679][ T8066] netlink: 'syz.0.575': attribute type 29 has an invalid length. [ 90.803858][ T8066] netlink: 'syz.0.575': attribute type 29 has an invalid length. [ 90.811530][ T5996] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 90.817338][ T8066] netlink: 500 bytes leftover after parsing attributes in process `syz.0.575'. [ 90.819156][ T40] audit: type=1400 audit(1761388147.912:544): avc: denied { ioctl } for pid=8067 comm="syz.3.576" path="socket:[21232]" dev="sockfs" ino=21232 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.821939][ T8066] unsupported nla_type 66 [ 90.825431][ T5291] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 90.825478][ T5291] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 90.840640][ T5996] usb 6-1: device descriptor read/8, error -71 [ 91.009842][ T40] audit: type=1400 audit(1761388148.090:545): avc: denied { write } for pid=8080 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.050958][ T8088] /dev/nullb0: Can't open blockdev [ 91.121974][ T5996] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 91.143756][ T5996] usb 6-1: device descriptor read/8, error -71 [ 91.260379][ T5291] Bluetooth: hci4: command 0x1003 tx timeout [ 91.260783][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.274192][ T5996] usb usb6-port1: unable to enumerate USB device [ 91.313475][ T8099] openvswitch: netlink: Duplicate or invalid key (type 0). [ 91.315845][ T8099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.372324][ T8103] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8720 sclass=netlink_xfrm_socket pid=8103 comm=syz.0.589 [ 91.376824][ T40] audit: type=1400 audit(1761388148.426:546): avc: denied { write } for pid=8102 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.387675][ T8103] xt_connbytes: Forcing CT accounting to be enabled [ 91.409298][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 91.495385][ T40] audit: type=1400 audit(1761388148.548:547): avc: denied { execute } for pid=8107 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 91.505009][ T40] audit: type=1400 audit(1761388148.548:548): avc: denied { execute_no_trans } for pid=8107 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 91.638971][ T5291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.642883][ T5291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.647593][ T5291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.651403][ T5291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.655251][ T5291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.702342][ T40] audit: type=1400 audit(1761388148.744:549): avc: denied { append } for pid=8117 comm="syz.0.595" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.702374][ T8118] tmpfs: Cannot change global quota limit on remount [ 91.721664][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.725392][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.748530][ T8120] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 91.752984][ T8120] ALSA: seq fatal error: cannot create timer (-22) [ 91.755793][ T8120] mmap: syz.0.596 (8120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.790748][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.794377][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.798759][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 91.831281][ T8114] chnl_net:caif_netlink_parms(): no params data found [ 91.861631][ T8129] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.890195][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.893984][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.902891][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.600'. [ 91.906124][ T8131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.600'. [ 91.956681][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.958977][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.961279][ T8114] bridge_slave_0: entered allmulticast mode [ 91.964767][ T8114] bridge_slave_0: entered promiscuous mode [ 91.968521][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.970781][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.973140][ T8114] bridge_slave_1: entered allmulticast mode [ 91.976217][ T8114] bridge_slave_1: entered promiscuous mode [ 91.995764][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.999856][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.043827][ T8141] bridge0: entered promiscuous mode [ 92.047916][ T8114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.054419][ T8114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.107686][ T8114] team0: Port device team_slave_0 added [ 92.111720][ T8114] team0: Port device team_slave_1 added [ 92.167182][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.171915][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.183903][ T8114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.189853][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.192920][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.205448][ T8114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.230807][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.605'. [ 92.234687][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.605'. [ 92.270526][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.605'. [ 92.274431][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.605'. [ 92.335695][ T8114] hsr_slave_0: entered promiscuous mode [ 92.338876][ T8114] hsr_slave_1: entered promiscuous mode [ 92.342346][ T8114] debugfs: 'hsr0' already exists in 'hsr' [ 92.344846][ T8114] Cannot create hsr debugfs directory [ 92.390498][ T1148] bridge0: port 4(batadv0) entered disabled state [ 92.395185][ T1148] team0: left allmulticast mode [ 92.396904][ T1148] team_slave_0: left allmulticast mode [ 92.398676][ T1148] team_slave_1: left allmulticast mode [ 92.400672][ T1148] bridge0: port 3(team0) entered disabled state [ 92.405995][ T1148] bridge_slave_1: left allmulticast mode [ 92.408496][ T1148] bridge_slave_1: left promiscuous mode [ 92.411048][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.416104][ T1148] bridge_slave_0: left allmulticast mode [ 92.418529][ T1148] bridge_slave_0: left promiscuous mode [ 92.421077][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.465151][ T8153] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.607382][ T6648] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 92.747346][ T8163] mmap: syz.1.612 (8163): VmData 29339648 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 92.790272][ T6648] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 92.793672][ T6648] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 92.797835][ T6648] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.803481][ T6648] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.807206][ T6648] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 92.807248][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.811055][ T6648] usb 7-1: Product: syz [ 92.816073][ T6648] usb 7-1: Manufacturer: syz [ 92.817980][ T6648] usb 7-1: SerialNumber: syz [ 92.820710][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.822699][ T6648] usb 7-1: config 0 descriptor?? [ 92.829228][ T1148] bond0 (unregistering): Released all slaves [ 92.830753][ T6648] hub 7-1:0.0: bad descriptor, ignoring hub [ 92.835438][ T6648] hub 7-1:0.0: probe with driver hub failed with error -5 [ 92.839753][ T1148] bond1 (unregistering): Released all slaves [ 92.841160][ T6648] usb 7-1: selecting invalid altsetting 0 [ 92.846143][ T8169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=8169 comm=syz.1.614 [ 92.950162][ T40] audit: type=1400 audit(1761388149.913:550): avc: denied { read write } for pid=8170 comm="syz.0.615" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.957338][ T40] audit: type=1400 audit(1761388149.913:551): avc: denied { open } for pid=8170 comm="syz.0.615" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.996268][ T5341] Dev loop6: unable to read RDB block 2 [ 92.998129][ T5341] loop6: unable to read partition table [ 92.999961][ T5341] loop6: partition table beyond EOD, truncated [ 93.046093][ T8151] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 93.055072][ T8151] CIFS mount error: No usable UNC path provided in device string! [ 93.055072][ T8151] [ 93.058632][ T8151] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 93.067779][ T8151] /dev/nullb0: Can't open blockdev [ 93.107313][ T8177] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.110461][ T8177] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 93.114913][ T8177] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.117460][ T8177] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 93.121736][ T8177] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.124293][ T8177] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 93.127756][ T8114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.132494][ T8114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.136904][ T8114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.145812][ T8114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.184781][ T6012] usb 7-1: USB disconnect, device number 6 [ 93.210601][ T8193] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.227179][ T8193] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 93.285628][ T1148] hsr_slave_0: left promiscuous mode [ 93.288082][ T1148] hsr_slave_1: left promiscuous mode [ 93.290263][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.293387][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.298017][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.300403][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.321293][ T8211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8211 comm=syz.1.622 [ 93.328790][ T1148] veth1_macvtap: left promiscuous mode [ 93.330815][ T1148] veth0_macvtap: left promiscuous mode [ 93.332727][ T1148] veth1_vlan: left promiscuous mode [ 93.337298][ T1148] veth0_vlan: left promiscuous mode [ 93.463381][ T8219] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 93.743050][ T8224] netlink: 92 bytes leftover after parsing attributes in process `syz.2.625'. [ 93.982335][ T1148] team_slave_1 (unregistering): left promiscuous mode [ 93.986131][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 94.063933][ T1148] team_slave_0 (unregistering): left promiscuous mode [ 94.068296][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 94.634481][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.644666][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.653749][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.656746][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.665907][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.668108][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.728998][ T8234] CIFS mount error: No usable UNC path provided in device string! [ 94.728998][ T8234] [ 94.732206][ T8234] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 94.795753][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 94.795764][ T40] audit: type=1400 audit(1761388151.634:564): avc: denied { setopt } for pid=8241 comm="syz.1.630" lport=56890 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.858306][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.913791][ T8250] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 95.015120][ T8114] veth0_vlan: entered promiscuous mode [ 95.020099][ T8114] veth1_vlan: entered promiscuous mode [ 95.042157][ T8114] veth0_macvtap: entered promiscuous mode [ 95.047247][ T8114] veth1_macvtap: entered promiscuous mode [ 95.057962][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.063602][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.071109][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.078703][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.082846][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.087533][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.159118][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.162309][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.180234][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.182690][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.242752][ T40] audit: type=1400 audit(1761388152.046:565): avc: denied { accept } for pid=8287 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.431274][ T8296] veth1_macvtap: left promiscuous mode [ 95.433655][ T8296] macsec0: entered promiscuous mode [ 95.435787][ T8296] macsec0: entered allmulticast mode [ 95.442449][ T8296] macsec0: left allmulticast mode [ 95.620253][ T40] audit: type=1400 audit(1761388152.401:566): avc: denied { bind } for pid=8315 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.628376][ T40] audit: type=1400 audit(1761388152.410:567): avc: denied { getopt } for pid=8315 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.770297][ T8330] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.795324][ T8333] usb usb9: usbfs: process 8333 (syz.4.646) did not claim interface 33 before use [ 95.804656][ T40] audit: type=1400 audit(1761388152.569:568): avc: denied { map } for pid=8335 comm="syz.0.647" path="socket:[26632]" dev="sockfs" ino=26632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 95.849273][ T40] audit: type=1400 audit(1761388152.616:569): avc: denied { load_policy } for pid=8339 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.849984][ T8342] SELinux: policydb string length 14080 does not match expected length 8 [ 95.861960][ T8342] SELinux: failed to load policy [ 95.864878][ T8340] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 95.867859][ T8340] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 95.879507][ T40] audit: type=1400 audit(1761388152.654:570): avc: denied { write } for pid=8343 comm="syz.1.650" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.331116][ T8359] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.336186][ T8359] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 96.384339][ T8363] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 96.390563][ T8363] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.414755][ T8365] binder: binder_mmap: 8364 200000ffc000-200001000000 bad vm_flags failed -1 [ 96.415604][ T40] audit: type=1400 audit(1761388153.149:571): avc: denied { map } for pid=8364 comm="syz.2.658" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.455380][ T8371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.501502][ T8375] __nla_validate_parse: 4 callbacks suppressed [ 96.501516][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 96.525245][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 96.529254][ T8379] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.601803][ T8387] Mount JFS Failure: -5 [ 96.603351][ T8387] jfs_mount failed w/return code = -5 [ 96.663912][ T40] audit: type=1400 audit(1761388153.383:572): avc: denied { getopt } for pid=8391 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.737004][ T8409] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.753852][ T8409] syzkaller0: entered promiscuous mode [ 96.756096][ T8409] syzkaller0: entered allmulticast mode [ 96.939564][ T40] audit: type=1400 audit(1761388153.636:573): avc: denied { ioctl } for pid=8423 comm="syz.1.675" path="socket:[25268]" dev="sockfs" ino=25268 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 97.921265][ T8462] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 97.965203][ T8467] kvm: user requested TSC rate below hardware speed [ 97.966199][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'. [ 97.970380][ T8467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1523369646 (12186957168 ns) > initial count (699924040 ns). Using initial count to start timer. [ 97.972086][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'. [ 97.984861][ T8475] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.986609][ T8475] @0Ù: renamed from bond_slave_1 (while UP) [ 98.114098][ T8488] futex_wake_op: syz.4.695 tries to shift op by -1; fix this program [ 98.175723][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 98.281774][ T8498] netlink: 'syz.1.699': attribute type 15 has an invalid length. [ 98.614643][ T8522] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.663745][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.707'. [ 98.668707][ T8526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=8526 comm=syz.0.707 [ 98.969390][ T53] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 98.982944][ T8542] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 98.982944][ T8542] The task syz.0.711 (8542) triggered the difference, watch for misbehavior. [ 98.996952][ T8542] mkiss: ax0: crc mode is auto. [ 99.003011][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 99.108313][ T53] usb 9-1: device descriptor read/64, error -71 [ 99.166426][ T8548] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.363908][ T8577] tmpfs: Bad value for 'mpol' [ 99.365532][ T53] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 99.369971][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 99.376278][ T8577] macvlan3: entered allmulticast mode [ 99.378072][ T8577] veth1_vlan: entered allmulticast mode [ 99.412208][ T8579] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.443940][ T8581] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 99.503910][ T53] usb 9-1: device descriptor read/64, error -71 [ 99.621768][ T53] usb usb9-port1: attempt power cycle [ 99.678009][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 99.683292][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.687521][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.693911][ T8590] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000 [ 99.696420][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 99.845899][ T8603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.851187][ T8603] binder: 8601:8603 ioctl c0306201 2000000003c0 returned -14 [ 99.854615][ T8603] binder: 8601:8603 ioctl c400941d 200000001980 returned -22 [ 99.880286][ T8608] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.985058][ T53] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 100.006842][ T53] usb 9-1: device descriptor read/8, error -71 [ 100.273792][ T53] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 100.295553][ T53] usb 9-1: device descriptor read/8, error -71 [ 100.337939][ T54] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 100.413249][ T53] usb usb9-port1: unable to enumerate USB device [ 100.500084][ T54] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 27624, setting to 64 [ 100.504633][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.509629][ T54] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.513443][ T54] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.516903][ T54] usb 7-1: Product: syz [ 100.518726][ T54] usb 7-1: Manufacturer: syz [ 100.521388][ T54] usb 7-1: SerialNumber: syz [ 100.523573][ T8622] usb usb8: usbfs: process 8622 (syz.1.742) did not claim interface 0 before use [ 100.525435][ T54] usb 7-1: config 0 descriptor?? [ 100.530646][ T8620] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 100.538229][ T54] usb 7-1: selecting invalid altsetting 0 [ 100.552928][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 100.552942][ T40] audit: type=1326 audit(1761388157.021:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8621 comm="syz.1.742" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc0c4b85e67 code=0x0 [ 100.769255][ T8620] ALSA: seq fatal error: cannot create timer (-16) [ 100.775107][ T10] usb 7-1: USB disconnect, device number 7 [ 100.815944][ T8609] [U]  [ 100.934630][ T8635] : entered promiscuous mode [ 100.964186][ T40] audit: type=1400 audit(1761388157.395:593): avc: denied { lock } for pid=8636 comm="syz.0.745" path="socket:[27076]" dev="sockfs" ino=27076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 100.973942][ T40] audit: type=1400 audit(1761388157.395:594): avc: denied { read } for pid=8636 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.022585][ T1148] tipc: Subscription rejected, illegal request [ 101.094328][ T8644] tipc: Enabled bearer , priority 0 [ 101.133625][ T8646] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.248137][ T8649] comedi comedi2: dt2815: a I/O base address must be specified [ 101.435158][ T40] audit: type=1400 audit(1761388157.844:595): avc: denied { shutdown } for pid=8658 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.541746][ T8680] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.645104][ T40] audit: type=1400 audit(1761388158.041:596): avc: denied { shutdown } for pid=8685 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.831573][ T40] audit: type=1400 audit(1761388158.209:597): avc: denied { read append open } for pid=8691 comm="syz.2.762" path="/212/file0/cgroup.stat" dev="9p" ino=76546055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.853977][ T8707] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 101.858514][ T8707] __nla_validate_parse: 4 callbacks suppressed [ 101.858528][ T8707] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.764'. [ 102.027815][ T40] audit: type=1400 audit(1761388158.396:598): avc: denied { checkpoint_restore } for pid=8709 comm="syz.4.765" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.579391][ T8722] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.624752][ T8726] netlink: 52 bytes leftover after parsing attributes in process `syz.1.769'. [ 102.631921][ T8726] bridge_slave_0: invalid flags given to default FDB implementation [ 102.635540][ T40] audit: type=1400 audit(1761388158.957:599): avc: denied { mount } for pid=8724 comm="syz.1.769" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.638434][ T8726] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.670828][ T40] audit: type=1400 audit(1761388159.004:600): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.693704][ T8729] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 102.700834][ T8729] gtp1: entered promiscuous mode [ 102.718562][ T8733] qnx4: unable to read the superblock [ 102.959991][ T40] audit: type=1400 audit(1761388159.266:601): avc: denied { connect } for pid=8741 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.050856][ T8751] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 103.057113][ T8751] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.064691][ T8751] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 103.110401][ T8758] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.412632][ T8791] netlink: 36 bytes leftover after parsing attributes in process `syz.0.787'. [ 103.415445][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'. [ 103.422472][ T8793] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.453915][ T8799] program syz.1.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.458849][ T8795] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 103.458998][ T107] bond0: (slave bond_slave_0): interface is now down [ 103.469297][ T107] bond0: (slave bond_slave_1): interface is now down [ 103.476158][ T107] bond0: now running without any active interface! [ 103.479386][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.791'. [ 103.498211][ T8803] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 103.555353][ T8805] ./cgroup: Can't lookup blockdev [ 103.597811][ T8814] libceph: resolve ' [ 103.597811][ T8814] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 103.597811][ T8814] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 103.741233][ T8832] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.866988][ T8841] random: crng reseeded on system resumption [ 103.927858][ T8851] Bluetooth: MGMT ver 1.23 [ 103.982489][ T8859] netlink: 'syz.2.809': attribute type 2 has an invalid length. [ 104.026884][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 104.187171][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 104.195271][ T9] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 104.198411][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 104.200898][ T9] usb 9-1: Product: syz [ 104.202124][ T9] usb 9-1: Manufacturer: syz [ 104.203590][ T9] usb 9-1: SerialNumber: syz [ 104.216910][ T9] usb 9-1: config 0 descriptor?? [ 104.232961][ T8862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.810'. [ 104.279196][ T8884] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 104.315368][ T8884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.351419][ T8895] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.428442][ T8907] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 104.429072][ T8908] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 104.442404][ T8911] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.442946][ T8912] sit0: entered promiscuous mode [ 104.447684][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.452992][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.459442][ T8912] team0: Device sit0 is of different type [ 104.459502][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.467661][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.581101][ T8923] netlink: 'syz.0.829': attribute type 17 has an invalid length. [ 104.587330][ T34] usb 9-1: USB disconnect, device number 6 [ 104.592383][ T8923] netlink: 5 bytes leftover after parsing attributes in process `syz.0.829'. [ 104.600296][ T8923] macvtap0: entered allmulticast mode [ 104.602425][ T8923] veth0_macvtap: entered allmulticast mode [ 104.609709][ T8923] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 104.638398][ T8929] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.719302][ T8921] infiniband syz2: set down [ 104.721218][ T8921] infiniband syz2: added ipvlan0 [ 104.746701][ T8921] RDS/IB: syz2: added [ 104.754230][ T8921] smc: adding ib device syz2 with port count 1 [ 104.757153][ T8921] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 104.899019][ T8939] netlink: 'syz.1.833': attribute type 1 has an invalid length. [ 104.901472][ T8939] netlink: 1 bytes leftover after parsing attributes in process `syz.1.833'. [ 104.914309][ T6648] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.959628][ T8943] syz_tun: entered allmulticast mode [ 104.964927][ T8942] syz_tun: left allmulticast mode [ 105.037735][ T8950] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.048368][ T8950] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 105.051662][ T8950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.055075][ T8950] IPv6: NLM_F_CREATE should be set when creating new route [ 105.057851][ T8950] IPv6: NLM_F_CREATE should be set when creating new route [ 105.087754][ T6648] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 105.090604][ T6648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.094674][ T6648] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 105.098731][ T6648] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 105.101358][ T6648] usb 5-1: Manufacturer: syz [ 105.105122][ T6648] usb 5-1: config 0 descriptor?? [ 105.149489][ T6648] rc_core: IR keymap rc-hauppauge not found [ 105.151393][ T6648] Registered IR keymap rc-empty [ 105.153593][ T6648] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 105.159216][ T6648] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 105.206596][ T8963] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.216811][ T5341] Dev loop6: unable to read RDB block 2 [ 105.218647][ T5341] loop6: unable to read partition table [ 105.220544][ T5341] loop6: partition table beyond EOD, truncated [ 105.260330][ C3] Unknown status report in ack skb [ 105.333845][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.843'. [ 105.350621][ T8971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=8971 comm=syz.2.843 [ 105.358113][ T8971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8971 comm=syz.2.843 [ 105.381402][ T8976] Illegal XDP return value 406502613 on prog (id 135) dev N/A, expect packet loss! [ 105.630728][ T8994] netlink: 72 bytes leftover after parsing attributes in process `syz.4.848'. [ 105.819998][ T9008] dummy0: entered allmulticast mode [ 105.955015][ T9019] bond1 (unregistering): Released all slaves [ 106.128982][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 106.128993][ T40] audit: type=1400 audit(1761388162.230:613): avc: denied { watch } for pid=9032 comm="syz.4.861" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.173867][ T40] audit: type=1400 audit(1761388162.268:614): avc: denied { map } for pid=9034 comm="syz.4.862" path="pipe:[27443]" dev="pipefs" ino=27443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 106.182719][ T40] audit: type=1400 audit(1761388162.268:615): avc: denied { execute } for pid=9034 comm="syz.4.862" path="pipe:[27443]" dev="pipefs" ino=27443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 106.304527][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 106.338758][ T9042] overlayfs: failed to resolve './file1': -2 [ 106.469797][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.473480][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.477739][ T9] usb 7-1: Product: syz [ 106.479452][ T9] usb 7-1: Manufacturer: syz [ 106.481368][ T9] usb 7-1: SerialNumber: syz [ 106.486857][ T9] usb 7-1: config 0 descriptor?? [ 106.582382][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 106.753473][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 106.757931][ T34] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 106.761522][ T34] usb 6-1: config 0 has no interface number 0 [ 106.767793][ T34] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 106.771519][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.774951][ T34] usb 6-1: Product: syz [ 106.776628][ T34] usb 6-1: Manufacturer: syz [ 106.778704][ T34] usb 6-1: SerialNumber: syz [ 106.784202][ T842] usb 7-1: USB disconnect, device number 8 [ 106.787295][ T34] usb 6-1: config 0 descriptor?? [ 106.791656][ T34] hub 6-1:0.132: bad descriptor, ignoring hub [ 106.794244][ T34] hub 6-1:0.132: probe with driver hub failed with error -5 [ 106.802786][ T34] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input18 [ 107.142425][ T9065] netlink: 'syz.4.867': attribute type 6 has an invalid length. [ 107.277574][ T34] usb 6-1: USB disconnect, device number 8 [ 107.452010][ T9069] /dev/nullb0: Can't open blockdev [ 107.454167][ T9070] /dev/nullb0: Can't open blockdev [ 107.460283][ T9069] __nla_validate_parse: 4 callbacks suppressed [ 107.460293][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 107.484958][ T40] audit: type=1400 audit(1761388163.502:616): avc: denied { accept } for pid=9064 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.501931][ T40] audit: type=1400 audit(1761388163.512:617): avc: denied { create } for pid=9072 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 107.509587][ T40] audit: type=1400 audit(1761388163.521:618): avc: denied { ioctl } for pid=9072 comm="syz.2.869" path="socket:[27467]" dev="sockfs" ino=27467 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 107.551116][ T40] audit: type=1400 audit(1761388163.558:619): avc: denied { ioctl } for pid=9076 comm="syz.2.870" path="socket:[27476]" dev="sockfs" ino=27476 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.590300][ T9079] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 107.595065][ T9079] team0: Device ipvlan1 failed to register rx_handler [ 107.660508][ T9085] bridge_slave_0: left allmulticast mode [ 107.664420][ T9085] bridge_slave_0: left promiscuous mode [ 107.666658][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.671770][ T9085] bridge_slave_1: left allmulticast mode [ 107.675026][ T9085] bridge_slave_1: left promiscuous mode [ 107.677007][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.688062][ T9085] team0: Port device team_slave_0 removed [ 107.694791][ T9085] team0: Port device team_slave_1 removed [ 107.697035][ T9085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.699395][ T9085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.702507][ T9085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.705845][ T9085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.709222][ T9085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.724967][ T9086] team0: Mode changed to "loadbalance" [ 107.732029][ T9085] vlan0: entered promiscuous mode [ 107.739392][ T9085] team0: Port device vlan0 added [ 107.797461][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 107.836669][ T40] audit: type=1400 audit(1761388163.830:620): avc: denied { write } for pid=9089 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.842682][ T40] audit: type=1400 audit(1761388163.830:621): avc: denied { create } for pid=9089 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 107.868710][ T34] usb 5-1: USB disconnect, device number 10 [ 107.884760][ T9095] openvswitch: netlink: IP tunnel dst address not specified [ 107.898221][ T40] audit: type=1400 audit(1761388163.886:622): avc: denied { execute } for pid=9092 comm="syz.1.876" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.987496][ T9106] tmpfs: Bad value for 'mpol' [ 108.068142][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 108.071662][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 108.073090][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9117 comm=syz.0.884 [ 108.078768][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9117 comm=syz.0.884 [ 108.085041][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9117 comm=syz.0.884 [ 108.089334][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9117 comm=syz.0.884 [ 108.093938][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9117 comm=syz.0.884 [ 108.099278][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9117 comm=syz.0.884 [ 108.105140][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9117 comm=syz.0.884 [ 108.110671][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9117 comm=syz.0.884 [ 108.180756][ T9130] tmpfs: Bad value for 'size' [ 108.210746][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.890'. [ 108.224483][ T9140] netlink: 'syz.1.888': attribute type 12 has an invalid length. [ 108.227024][ T9140] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 108.230470][ T9140] netlink: 148 bytes leftover after parsing attributes in process `syz.1.888'. [ 108.233892][ T9140] netlink: 59 bytes leftover after parsing attributes in process `syz.1.888'. [ 108.245617][ T9145] overlayfs: overlapping lowerdir path [ 108.291505][ T9151] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 108.323079][ T5341] Dev loop6: unable to read RDB block 2 [ 108.324930][ T5341] loop6: unable to read partition table [ 108.328825][ T5341] loop6: partition table beyond EOD, truncated [ 108.338087][ T9163] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 108.352903][ T9163] 8021q: adding VLAN 0 to HW filter on device bond4 [ 108.364208][ T9168] netlink: 152 bytes leftover after parsing attributes in process `syz.0.897'. [ 108.366163][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 108.367115][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.897'. [ 108.444216][ T9163] bond4 (unregistering): Released all slaves [ 108.988447][ T9207] ip6gretap1: entered promiscuous mode [ 108.990211][ T9207] ip6gretap1: entered allmulticast mode [ 109.211821][ T9225] bridge0: entered promiscuous mode [ 109.215094][ T9225] macsec1: entered allmulticast mode [ 109.217055][ T9225] bridge0: entered allmulticast mode [ 109.219730][ T9225] bridge0: port 3(macsec1) entered blocking state [ 109.222087][ T9225] bridge0: port 3(macsec1) entered disabled state [ 109.231779][ T9225] bridge0: left allmulticast mode [ 109.233575][ T9225] bridge0: left promiscuous mode [ 109.264861][ T9229] SELinux: failed to load policy [ 110.038959][ T10] hid-generic 0362:07FF:7FFFFFFF.0002: item fetching failed at offset 0/2 [ 110.042391][ T10] hid-generic 0362:07FF:7FFFFFFF.0002: probe with driver hid-generic failed with error -22 [ 110.415541][ T9268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.709800][ T54] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 110.825339][ T9277] 9pnet: Unknown protocol version 9p20\++} [ 110.893203][ T54] usb 9-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 110.897745][ T54] usb 9-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.905408][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 110.910384][ T54] usb 9-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 110.914400][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.917885][ T54] usb 9-1: Product: ဌ [ 110.919804][ T54] usb 9-1: Manufacturer: Ђ [ 110.921818][ T54] usb 9-1: SerialNumber: ëµ›Eウ䀧ꃇ⨷峇ï‰â៚쉆䩪疖놴鋊鴜鑶摽䎀ä‹á ˆ [ 110.929679][ T9270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.035908][ T9281] Bluetooth: (null): Too short H5 packet [ 111.049116][ T9283] qnx6: unable to set blocksize [ 111.148504][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.153219][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.159836][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.163552][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.168089][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.171886][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.172495][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.175593][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.190206][ T54] usbhid 9-1:1.0: can't add hid device: -71 [ 111.193361][ T54] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 111.201289][ T54] usb 9-1: USB disconnect, device number 7 [ 111.217973][ T9296] dlm: no locking on control device [ 111.267716][ T9299] macsec3: entered promiscuous mode [ 112.230824][ T9332] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 112.361701][ T9343] overlayfs: missing 'lowerdir' [ 112.382285][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 112.382297][ T40] audit: type=1400 audit(1761388168.076:628): avc: denied { call } for pid=9342 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 112.382420][ T9343] binder_alloc: 9342: binder_alloc_buf, no vma [ 112.487332][ T40] audit: type=1400 audit(1761388168.179:629): avc: denied { lock } for pid=9344 comm="syz.2.955" path="/dev/nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.691405][ T9361] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 112.695020][ T9361] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 112.702326][ T9361] overlayfs: failed to set uuid (251/file0, err=-13); falling back to uuid=null. [ 112.752510][ T9369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.873970][ T9376] __nla_validate_parse: 10 callbacks suppressed [ 112.873981][ T9376] netlink: 48 bytes leftover after parsing attributes in process `syz.2.965'. [ 112.891456][ T6012] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 112.942073][ T40] audit: type=1400 audit(1761388168.599:630): avc: denied { ioctl } for pid=9380 comm="syz.4.967" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.040622][ T9392] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 113.671438][ T5996] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 113.864138][ T5996] usb 5-1: Using ep0 maxpacket: 8 [ 113.872038][ T5996] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 113.876003][ T5996] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.879982][ T5996] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.884062][ T5996] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.888600][ T5996] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.893873][ T5996] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.897874][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.991023][ T9421] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.067084][ T54] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 114.119639][ T5996] usb 5-1: GET_CAPABILITIES returned 0 [ 114.121636][ T5996] usbtmc 5-1:16.0: can't read capabilities [ 114.188282][ T9428] ufs: You didn't specify the type of your ufs filesystem [ 114.188282][ T9428] [ 114.188282][ T9428] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 114.188282][ T9428] [ 114.188282][ T9428] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 114.198951][ T9428] ufs: failed to set blocksize [ 114.227431][ T54] usb 9-1: Using ep0 maxpacket: 8 [ 114.232977][ T54] usb 9-1: config 0 has no interfaces? [ 114.235189][ T54] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.239205][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.245337][ T54] usb 9-1: config 0 descriptor?? [ 114.259086][ T9432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.984'. [ 114.342198][ T54] usb 5-1: USB disconnect, device number 11 [ 114.464890][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.467771][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.473849][ T5996] usb 9-1: USB disconnect, device number 8 [ 114.500647][ T40] audit: type=1400 audit(1761388170.058:631): avc: denied { bind } for pid=9438 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.506964][ T40] audit: type=1400 audit(1761388170.058:632): avc: denied { ioctl } for pid=9438 comm="syz.1.986" path="socket:[33082]" dev="sockfs" ino=33082 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 114.573014][ T9444] overlay: Unknown parameter '/' [ 114.573137][ T9445] overlay: Unknown parameter '/' [ 114.913155][ T9450] nfs4: Bad value for 'source' [ 114.917939][ T9448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.928031][ T9450] netlink: 52 bytes leftover after parsing attributes in process `syz.0.989'. [ 114.964953][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 115.012043][ T9448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.014675][ T40] audit: type=1400 audit(1761388170.535:633): avc: denied { map } for pid=9455 comm="syz.0.991" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 115.050782][ T9460] selinux_netlink_send: 57 callbacks suppressed [ 115.050793][ T9460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9460 comm=syz.4.992 [ 115.057036][ T40] audit: type=1400 audit(1761388170.582:634): avc: denied { map } for pid=9459 comm="syz.4.992" path="/dev/radio7" dev="devtmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.057897][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 115.064911][ T40] audit: type=1400 audit(1761388170.582:635): avc: denied { execute } for pid=9459 comm="syz.4.992" path="/dev/radio7" dev="devtmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.076178][ T9460] netlink: 'syz.4.992': attribute type 30 has an invalid length. [ 115.085044][ T62] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.088470][ T62] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.102989][ T9448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.113254][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.116103][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.182518][ T9448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.240024][ T9465] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.312895][ T82] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.326730][ T62] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.339237][ T62] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.357887][ T62] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.422709][ T40] audit: type=1400 audit(1761388170.919:636): avc: denied { setopt } for pid=9471 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 115.431315][ T40] audit: type=1400 audit(1761388170.937:637): avc: denied { ioctl } for pid=9474 comm="syz.1.998" path="socket:[33331]" dev="sockfs" ino=33331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.432955][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 115.624631][ T9485] devpts: Bad value for 'max' [ 115.626981][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 115.682019][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1002'. [ 115.682037][ T9488] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 115.688642][ T9488] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 115.768902][ T9496] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1004'. [ 115.785767][ T9496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 115.788680][ T9496] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 115.792465][ T9496] vhci_hcd vhci_hcd.0: Device attached [ 115.796416][ T9498] vhci_hcd: connection closed [ 115.798539][ T82] vhci_hcd: stop threads [ 115.803644][ T82] vhci_hcd: release socket [ 115.805462][ T82] vhci_hcd: disconnect device [ 115.947384][ T9503] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1006'. [ 116.038523][ T82] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 116.070373][ T9511] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 116.136807][ T9515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.455496][ C3] hrtimer: interrupt took 33357 ns [ 116.708070][ T6012] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 116.892567][ T6012] usb 6-1: Invalid ep0 maxpacket: 64 [ 116.923412][ T9551] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.009809][ T9561] sit0: mtu less than device minimum [ 117.060858][ T6012] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 117.162248][ T9585] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.221251][ T6012] usb 6-1: Invalid ep0 maxpacket: 64 [ 117.223773][ T6012] usb usb6-port1: attempt power cycle [ 117.260153][ T9596] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.263284][ T9596] block device autoloading is deprecated and will be removed. [ 117.455239][ T9570] cgroup: fork rejected by pids controller in /syz4 [ 117.497474][ T9630] pimreg3: entered allmulticast mode [ 117.584673][ T9640] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.595646][ T6012] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 117.595657][ T841] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 117.617487][ T6012] usb 6-1: Invalid ep0 maxpacket: 64 [ 117.633557][ T9644] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 117.636679][ T9644] netlink: 'syz.4.1038': attribute type 13 has an invalid length. [ 117.669021][ T9644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.757667][ T841] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 27624, setting to 64 [ 117.762523][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.766648][ T6012] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 117.771017][ T841] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.774869][ T841] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.778631][ T841] usb 5-1: Product: syz [ 117.780476][ T841] usb 5-1: Manufacturer: syz [ 117.782530][ T841] usb 5-1: SerialNumber: syz [ 117.787620][ T841] usb 5-1: config 0 descriptor?? [ 117.797765][ T9610] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.801196][ T6012] usb 6-1: Invalid ep0 maxpacket: 64 [ 117.803228][ T841] usb 5-1: selecting invalid altsetting 0 [ 117.803916][ T6012] usb usb6-port1: unable to enumerate USB device [ 117.949527][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 117.949541][ T40] audit: type=1400 audit(1761388173.294:644): avc: denied { nlmsg_read } for pid=9654 comm="syz.2.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.121774][ T9659] block nbd2: shutting down sockets [ 118.229397][ T841] usb 5-1: USB disconnect, device number 12 [ 118.258998][ T9674] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 118.289637][ T9679] syz.2.1049 (9679) used obsolete PPPIOCDETACH ioctl [ 118.512237][ T9699] __nla_validate_parse: 69 callbacks suppressed [ 118.512247][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'. [ 118.549112][ T9706] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 118.804197][ T9721] vxcan1: entered allmulticast mode [ 118.908957][ T9731] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 119.014413][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.017504][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.022174][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.026231][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.030312][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.033279][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.036197][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.039560][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.042426][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'. [ 119.121712][ T40] audit: type=1804 audit(1761388174.379:645): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1070" name="bus" dev="ramfs" ino=33812 res=1 errno=0 [ 119.130712][ T40] audit: type=1804 audit(1761388174.379:646): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1070" name="bus" dev="ramfs" ino=33812 res=1 errno=0 [ 119.795300][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.803397][ T40] audit: type=1400 audit(1761388175.015:647): avc: denied { open } for pid=9775 comm="syz.1.1081" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.898433][ T40] audit: type=1326 audit(1761388175.109:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.1.1083" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0c4b8efc9 code=0x0 [ 120.186440][ T9802] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 120.219735][ T9805] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 120.247295][ T40] audit: type=1400 audit(1761388175.427:649): avc: denied { read } for pid=9806 comm="syz.0.1091" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.254833][ T40] audit: type=1400 audit(1761388175.427:650): avc: denied { open } for pid=9806 comm="syz.0.1091" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.415473][ T9827] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.707536][ T9846] netlink: 'syz.0.1106': attribute type 21 has an invalid length. [ 120.838102][ T9858] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 120.839596][ T40] audit: type=1400 audit(1761388175.988:651): avc: denied { lock } for pid=9853 comm="syz.1.1110" path="socket:[31399]" dev="sockfs" ino=31399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.841712][ T9857] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 120.844998][ T9859] tipc: New replicast peer: 255.255.255.255 [ 120.845220][ T9859] tipc: Enabled bearer , priority 10 [ 120.906911][ T40] audit: type=1400 audit(1761388176.053:652): avc: denied { mounton } for pid=9863 comm="syz.0.1113" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 120.910659][ T9864] MINIX-fs: blocksize too small for device [ 120.921432][ T841] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 120.949040][ T9867] input: syz1 as /devices/virtual/input/input20 [ 121.093510][ T841] usb 9-1: not running at top speed; connect to a high speed hub [ 121.096829][ T841] usb 9-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.100899][ T841] usb 9-1: config 1 interface 0 has no altsetting 0 [ 121.105572][ T841] usb 9-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.40 [ 121.111422][ T841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.114298][ T841] usb 9-1: Product: Ð [ 121.115612][ T841] usb 9-1: Manufacturer: à § [ 121.117073][ T841] usb 9-1: SerialNumber: ⑓鴉롄骻紳렧엿뙃ä’葱图᳆譣镦èºì¸£áœ·âŸâ´¼è”ƒè¨—㷾뛟è›Ì…쇌릇篇Ââ¡ã‹‡ä²ä¥¨í¾â‹¨ç¹ã†á‘†ëž²å›·é¡±å¦±îµ¸ë…–陚䉀 [ 121.179561][ T9884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=9884 comm=syz.0.1119 [ 121.181011][ T9885] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 121.219758][ T9890] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 121.270630][ T9419] hid (null): unknown global tag 0xd [ 121.274637][ T9419] hid-generic 0081:FFFFFFFF:0002.0003: unknown main item tag 0x0 [ 121.277106][ T9419] hid-generic 0081:FFFFFFFF:0002.0003: unknown global tag 0xd [ 121.279507][ T9419] hid-generic 0081:FFFFFFFF:0002.0003: item 0 1 1 13 parsing failed [ 121.282290][ T9419] hid-generic 0081:FFFFFFFF:0002.0003: probe with driver hid-generic failed with error -22 [ 121.756435][ T9922] 9pnet_virtio: no channels available for device syz [ 121.922095][ T841] usbhid 9-1:1.0: can't add hid device: -71 [ 121.924687][ T841] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 121.944942][ T841] usb 9-1: USB disconnect, device number 9 [ 122.032676][ T9935] ceph: No source [ 122.034532][ T9935] netlink: 'syz.2.1133': attribute type 64 has an invalid length. [ 122.038956][ T9935] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 122.052346][ T40] audit: type=1400 audit(1761388177.119:653): avc: denied { setopt } for pid=9932 comm="syz.0.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.105591][ T9941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1554 sclass=netlink_route_socket pid=9941 comm=syz.4.1134 [ 122.662848][ T9952] trusted_key: encrypted_key: master key parameter 'ŸZ¢‡‰`Ìa]ZubªßE§kCŸ‘^ ûäD¨»oxV¬jÊ# [ 122.662848][ T9952] ÍÏm3ƒ{B[¶æ*§§&éLÙ_%Ê ƒRôwÒÛÏ_ôá06€5¸¼åU…‹GPJ‡`^…&ÂàõùèwÊêh˯£;„óe¤>' is invalid [ 123.236533][ T9978] xt_hashlimit: max too large, truncated to 1048576 [ 123.306763][ T9984] netlink: zone id is out of range [ 123.484248][ T9997] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 123.496142][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 123.496153][ T40] audit: type=1400 audit(1761388178.466:658): avc: denied { setopt } for pid=9998 comm="syz.4.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 123.527662][T10003] overlayfs: conflicting options: userxattr,metacopy=on [ 123.534733][ T40] audit: type=1400 audit(1761388178.513:659): avc: denied { transfer } for pid=10002 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 123.573545][T10008] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 123.690328][T10018] tmpfs: Group quota inode hardlimit too large. [ 123.782358][T10022] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 123.870622][ T40] audit: type=1400 audit(1761388178.822:660): avc: denied { mounton } for pid=10035 comm="syz.1.1168" path="/252/file0" dev="proc" ino=4026533128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 123.899798][T10039] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 123.909971][ T40] audit: type=1400 audit(1761388178.859:661): avc: denied { bind } for pid=10040 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.924318][T10041] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.036152][T10041] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.080939][T10041] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.118036][ T841] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.176115][T10041] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.272592][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.283553][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.284792][ T841] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 124.291415][ T841] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 124.295942][ T841] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 124.296162][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.301693][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.307558][ T841] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 124.311382][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.314345][ T1148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.315024][ T841] usb 5-1: config 0 descriptor?? [ 124.447334][T10061] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.469953][T10059] binder: BINDER_SET_CONTEXT_MGR already set [ 124.473129][T10059] binder: 10058:10059 ioctl 4018620d 200000000280 returned -16 [ 124.538643][ T841] usb 5-1: string descriptor 0 read error: -71 [ 124.549727][ T841] usb 5-1: USB disconnect, device number 13 [ 124.577972][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 124.699626][T10071] __nla_validate_parse: 38 callbacks suppressed [ 124.699643][T10071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1178'. [ 124.738163][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 124.741975][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.746455][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.751298][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.758568][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 124.762493][ T9] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 124.765897][ T9] usb 9-1: Product: syz [ 124.767683][ T9] usb 9-1: Manufacturer: syz [ 124.769662][ T9] usb 9-1: SerialNumber: syz [ 124.780697][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input22 [ 124.902993][T10078] xt_socket: unknown flags 0xe4 [ 124.906772][T10078] XFS (nbd1): no-recovery mounts must be read-only. [ 125.006087][ T40] audit: type=1400 audit(1761388179.888:662): avc: denied { read } for pid=5326 comm="acpid" name="event6" dev="devtmpfs" ino=3088 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 125.013762][ T40] audit: type=1400 audit(1761388179.888:663): avc: denied { open } for pid=5326 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3088 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 125.022931][ T40] audit: type=1400 audit(1761388179.888:664): avc: denied { ioctl } for pid=5326 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3088 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 125.075633][ T6012] usb 9-1: USB disconnect, device number 10 [ 125.100902][ T6012] appletouch 9-1:1.0: input: appletouch disconnected [ 125.196993][ T40] audit: type=1400 audit(1761388180.056:665): avc: denied { getopt } for pid=10086 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.413976][T10151] overlayfs: missing 'lowerdir' [ 125.443020][T10156] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1191'. [ 125.447449][T10156] overlayfs: failed to resolve './file0': -2 [ 125.500166][T10159] openvswitch: netlink: Key type 31 is not supported [ 125.733106][ T6012] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 125.755532][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 125.796693][ T4149] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 125.914234][ T6012] usb 6-1: Using ep0 maxpacket: 32 [ 125.917496][ T6012] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.920191][ T6012] usb 6-1: config 0 has no interface number 0 [ 125.923779][ T6012] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 125.926937][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.929568][ T6012] usb 6-1: Product: syz [ 125.930896][ T6012] usb 6-1: Manufacturer: syz [ 125.932374][ T6012] usb 6-1: SerialNumber: syz [ 125.935074][ T6012] usb 6-1: config 0 descriptor?? [ 125.940295][ T6012] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 125.943075][ T6012] usb 6-1: selecting invalid altsetting 1 [ 125.944969][ T6012] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 125.949190][ T6012] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.952680][ T6012] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 125.955447][ T6012] usb 6-1: media controller created [ 125.966181][ T6012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.967713][ T4149] usb 5-1: Using ep0 maxpacket: 32 [ 125.971879][ T4149] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 125.974777][ T4149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.979238][ T4149] usb 5-1: config 0 descriptor?? [ 125.985229][ T4149] as10x_usb: device has been detected [ 125.987393][ T4149] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 125.998939][ T4149] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 126.007761][T10181] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 126.018045][ T40] audit: type=1400 audit(1761388180.832:666): avc: denied { firmware_load } for pid=4149 comm="kworker/2:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 126.018131][ T4149] as10x_usb: error during firmware upload part1 [ 126.031283][ T4149] Registered device nBox DVB-T Dongle [ 126.208080][ T9419] usb 5-1: USB disconnect, device number 14 [ 126.228361][ T9419] Unregistered device nBox DVB-T Dongle [ 126.230649][ T9419] as10x_usb: device has been disconnected [ 126.240273][ T40] audit: type=1400 audit(1761388181.038:667): avc: denied { create } for pid=10158 comm="syz.1.1193" name="#97" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.285098][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 126.790038][T10205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.096417][ T6012] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 127.099828][ T6012] zl10353_read_register: readreg error (reg=127, ret==-110) [ 127.099941][T10160] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 127.104895][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 127.108140][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 127.111616][T10215] netlink: 'syz.0.1210': attribute type 12 has an invalid length. [ 127.147669][T10222] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1211'. [ 127.154864][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1211'. [ 127.401159][T10226] nbd: must specify a size in bytes for the device [ 127.746919][T10243] capability: warning: `syz.1.1221' uses 32-bit capabilities (legacy support in use) [ 127.795932][T10248] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 127.972179][T10252] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 127.974782][T10252] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 127.977454][T10252] vhci_hcd vhci_hcd.0: Device attached [ 127.981593][T10253] vhci_hcd: connection closed [ 127.982467][T10093] vhci_hcd: stop threads [ 127.985394][T10093] vhci_hcd: release socket [ 127.986810][T10093] vhci_hcd: disconnect device [ 128.018119][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880323d9800: rx timeout, send abort [ 128.022439][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880323d9400: rx timeout, send abort [ 128.025122][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880323d9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.030496][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880323d9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.373703][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 128.377526][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1229'. [ 128.386558][T10270] geneve2: entered promiscuous mode [ 128.388915][T10270] geneve2: entered allmulticast mode [ 128.464720][T10274] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.469734][T10274] FAULT_INJECTION: forcing a failure. [ 128.469734][T10274] name failslab, interval 1, probability 0, space 0, times 1 [ 128.473662][T10274] CPU: 1 UID: 0 PID: 10274 Comm: syz.4.1230 Not tainted syzkaller #0 PREEMPT(full) [ 128.473676][T10274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.473682][T10274] Call Trace: [ 128.473695][T10274] [ 128.473699][T10274] dump_stack_lvl+0x16c/0x1f0 [ 128.473732][T10274] should_fail_ex+0x512/0x640 [ 128.473750][T10274] ? fs_reclaim_acquire+0xae/0x150 [ 128.473763][T10274] should_failslab+0xc2/0x120 [ 128.473775][T10274] __kmalloc_noprof+0xdd/0x880 [ 128.473791][T10274] ? tomoyo_encode2+0x100/0x3e0 [ 128.473805][T10274] ? tomoyo_encode2+0x100/0x3e0 [ 128.473816][T10274] tomoyo_encode2+0x100/0x3e0 [ 128.473829][T10274] tomoyo_encode+0x29/0x50 [ 128.473839][T10274] tomoyo_realpath_from_path+0x18f/0x6e0 [ 128.473855][T10274] tomoyo_path_number_perm+0x245/0x580 [ 128.473870][T10274] ? tomoyo_path_number_perm+0x237/0x580 [ 128.473888][T10274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.473904][T10274] ? find_held_lock+0x2b/0x80 [ 128.473929][T10274] ? find_held_lock+0x2b/0x80 [ 128.473941][T10274] ? hook_file_ioctl_common+0x145/0x410 [ 128.473958][T10274] ? __fget_files+0x20e/0x3c0 [ 128.473971][T10274] security_file_ioctl+0x9b/0x240 [ 128.473983][T10274] __x64_sys_ioctl+0xb7/0x210 [ 128.473999][T10274] do_syscall_64+0xcd/0xfa0 [ 128.474015][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.474025][T10274] RIP: 0033:0x7f9ce318efc9 [ 128.474035][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.474044][T10274] RSP: 002b:00007f9ce40e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.474054][T10274] RAX: ffffffffffffffda RBX: 00007f9ce33e5fa0 RCX: 00007f9ce318efc9 [ 128.474061][T10274] RDX: 0000200000000280 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 128.474067][T10274] RBP: 00007f9ce40e9090 R08: 0000000000000000 R09: 0000000000000000 [ 128.474073][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.474079][T10274] R13: 00007f9ce33e6038 R14: 00007f9ce33e5fa0 R15: 00007ffdc13bbc38 [ 128.474093][T10274] [ 128.474103][T10274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.484944][T10276] 9pnet_fd: p9_fd_create_tcp (10276): problem connecting socket to 127.0.0.1 [ 128.536880][T10279] 9pnet_fd: p9_fd_create_tcp (10279): problem connecting socket to 127.0.0.1 [ 128.562642][T10281] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.827930][T10293] IPVS: Error connecting to the multicast addr [ 128.996187][T10303] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.999783][T10303] FAULT_INJECTION: forcing a failure. [ 128.999783][T10303] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.004002][T10303] CPU: 2 UID: 0 PID: 10303 Comm: syz.2.1240 Not tainted syzkaller #0 PREEMPT(full) [ 129.004015][T10303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.004022][T10303] Call Trace: [ 129.004026][T10303] [ 129.004030][T10303] dump_stack_lvl+0x16c/0x1f0 [ 129.004048][T10303] should_fail_ex+0x512/0x640 [ 129.004063][T10303] _copy_from_user+0x2e/0xd0 [ 129.004076][T10303] iommufd_fops_ioctl+0x2f5/0x540 [ 129.004092][T10303] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 129.004108][T10303] ? hook_file_ioctl_common+0x145/0x410 [ 129.004125][T10303] ? selinux_file_ioctl+0x180/0x270 [ 129.004136][T10303] ? selinux_file_ioctl+0xb4/0x270 [ 129.004148][T10303] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 129.004162][T10303] __x64_sys_ioctl+0x18e/0x210 [ 129.004178][T10303] do_syscall_64+0xcd/0xfa0 [ 129.004194][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.004205][T10303] RIP: 0033:0x7f9b2ad8efc9 [ 129.004214][T10303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.004228][T10303] RSP: 002b:00007f9b2bbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.004250][T10303] RAX: ffffffffffffffda RBX: 00007f9b2afe5fa0 RCX: 00007f9b2ad8efc9 [ 129.004258][T10303] RDX: 0000200000000280 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 129.004263][T10303] RBP: 00007f9b2bbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.004269][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.004275][T10303] R13: 00007f9b2afe6038 R14: 00007f9b2afe5fa0 R15: 00007fff422f2fc8 [ 129.004289][T10303] [ 129.454800][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 129.454848][ T40] audit: type=1400 audit(1761388184.050:681): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 129.758855][T10315] kvm: emulating exchange as write [ 129.789443][ T40] audit: type=1400 audit(1761388184.358:682): avc: denied { append } for pid=10316 comm="syz.1.1245" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.789515][T10319] random: crng reseeded on system resumption [ 129.900911][T10321] xt_hashlimit: size too large, truncated to 1048576 [ 130.243494][T10342] syzkaller0: entered promiscuous mode [ 130.245314][T10342] syzkaller0: entered allmulticast mode [ 130.341505][ T53] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 130.513410][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 130.518910][ T53] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 130.522509][ T53] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.529652][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.534992][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.539117][ T53] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.543297][T10352] tmpfs: Unknown parameter '' [ 130.544886][ T53] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.549704][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.676443][T10356] overlayfs: failed to resolve './file1': -2 [ 130.775630][ T53] usb 9-1: usb_control_msg returned -32 [ 130.777656][ T53] usbtmc 9-1:16.0: can't read capabilities [ 130.885122][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 130.889126][T10360] __nla_validate_parse: 8 callbacks suppressed [ 130.889138][T10360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.896978][T10360] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.904423][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 130.918486][T10360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.921294][T10360] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.925947][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 130.928649][T10360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.934304][T10360] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.947676][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 130.950177][T10360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.953878][T10360] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.957599][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 130.960021][T10360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.962912][T10360] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1258'. [ 130.966544][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 130.969905][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 130.973708][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 130.978116][T10360] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 131.156803][T10362] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 131.172220][ T5291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.177253][ T34] usb 9-1: USB disconnect, device number 11 [ 131.178221][ T5291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.182239][ T5291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.185983][ T5291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.188688][ T5291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.374650][T10364] chnl_net:caif_netlink_parms(): no params data found [ 131.410160][ T60] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 131.467432][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.470427][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.473349][T10364] bridge_slave_0: entered allmulticast mode [ 131.479184][T10364] bridge_slave_0: entered promiscuous mode [ 131.483587][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.485914][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.488173][T10364] bridge_slave_1: entered allmulticast mode [ 131.490828][T10364] bridge_slave_1: entered promiscuous mode [ 131.521078][T10364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.525549][T10364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.555950][T10364] team0: Port device team_slave_0 added [ 131.559129][T10364] team0: Port device team_slave_1 added [ 131.559856][ T60] usb 7-1: device descriptor read/64, error -71 [ 131.590638][T10364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.593824][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.601989][T10364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.606645][T10364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.609050][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.617250][T10364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.660789][T10364] hsr_slave_0: entered promiscuous mode [ 131.662988][T10364] hsr_slave_1: entered promiscuous mode [ 131.665055][T10364] debugfs: 'hsr0' already exists in 'hsr' [ 131.667113][T10364] Cannot create hsr debugfs directory [ 131.784597][T10364] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.790570][T10364] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.794626][T10364] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.801605][T10364] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.824037][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.827146][T10364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.827227][ T60] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 131.829544][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.834068][T10364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.871549][T10364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.886591][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.898884][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.911240][T10364] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.920646][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.923793][T10094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.930211][T10126] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.933087][T10126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.977527][ T60] usb 7-1: device descriptor read/64, error -71 [ 132.030406][ T53] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 132.071460][T10364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.094833][ T60] usb usb7-port1: attempt power cycle [ 132.169343][ T53] usb 9-1: device descriptor read/64, error -71 [ 132.241362][T10364] veth0_vlan: entered promiscuous mode [ 132.249616][T10364] veth1_vlan: entered promiscuous mode [ 132.264358][T10364] veth0_macvtap: entered promiscuous mode [ 132.269775][T10364] veth1_macvtap: entered promiscuous mode [ 132.283657][T10364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.290177][T10364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.296642][T10126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.299746][T10126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.302836][T10126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.305644][T10126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.343122][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.345620][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.370778][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.374145][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.385013][ T40] audit: type=1400 audit(1761388186.790:683): avc: denied { mounton } for pid=10364 comm="syz-executor" path="/syzkaller.CSwHw0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 132.448418][ T53] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 132.458072][ T60] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 132.480106][ T60] usb 7-1: device descriptor read/8, error -71 [ 132.597167][ T53] usb 9-1: device descriptor read/64, error -71 [ 132.716211][ T53] usb usb9-port1: attempt power cycle [ 132.736920][ T60] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 132.767617][T10400] openvswitch: netlink: Flow key attribute not present in set flow. [ 132.768576][ T60] usb 7-1: device descriptor read/8, error -71 [ 132.886094][ T60] usb usb7-port1: unable to enumerate USB device [ 133.089864][ T53] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 133.121528][ T53] usb 9-1: device descriptor read/8, error -71 [ 133.377861][ T53] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 133.399595][ T53] usb 9-1: device descriptor read/8, error -71 [ 133.420425][ T5291] Bluetooth: hci3: command tx timeout [ 133.516953][ T53] usb usb9-port1: unable to enumerate USB device [ 133.805226][T10413] binder: 10412:10413 ioctl c0306201 2000000001c0 returned -14 [ 134.504300][T10421] validate_nla: 56 callbacks suppressed [ 134.504315][T10421] netlink: 'syz.2.1271': attribute type 2 has an invalid length. [ 134.625080][T10432] netlink: 'syz.2.1274': attribute type 13 has an invalid length. [ 134.641472][T10432] 0ªî{X¹¦: refused to change device tx_queue_len [ 134.645758][T10432] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 134.654126][T10433] netlink: 'syz.2.1274': attribute type 13 has an invalid length. [ 134.656908][T10433] 0ªî{X¹¦: refused to change device tx_queue_len [ 134.658959][T10433] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 135.119581][T10445] IPVS: length: 236 != 8 [ 135.136504][T10453] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 135.214361][T10463] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 135.309613][ T40] audit: type=1400 audit(1761388189.521:684): avc: denied { append } for pid=10472 comm="syz.5.1286" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 135.417339][T10474] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.618021][T10489] i2c i2c-1: Invalid block write size 34 [ 135.630925][T10489] Trying to write to read-only block-device nullb0 [ 135.644494][ T5291] Bluetooth: hci3: command tx timeout [ 135.650358][ T40] audit: type=1400 audit(1761388189.839:685): avc: denied { setopt } for pid=10488 comm="syz.2.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.748831][T10501] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 135.756306][T10501] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 135.772887][ T40] audit: type=1400 audit(1761388189.951:686): avc: denied { read write } for pid=10502 comm="syz.5.1294" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 135.780658][ T40] audit: type=1400 audit(1761388189.951:687): avc: denied { open } for pid=10502 comm="syz.5.1294" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 135.887800][ T40] audit: type=1400 audit(1761388190.063:688): avc: denied { bind } for pid=10511 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.462052][T10540] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.508242][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.511013][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.784955][T10549] __nla_validate_parse: 128 callbacks suppressed [ 136.784974][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1306'. [ 136.793641][T10549] netlink: 'syz.5.1306': attribute type 64 has an invalid length. [ 136.796937][T10549] netlink: 'syz.5.1306': attribute type 4 has an invalid length. [ 136.800933][T10549] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1306'. [ 136.963069][T10557] overlayfs: failed lookup in lower (newroot/18, name='bus', err=-40): overlapping layers [ 137.059117][ T40] audit: type=1400 audit(1761388191.157:689): avc: denied { execute } for pid=10554 comm="syz.4.1308" path="/dev/snd/pcmC5D1c" dev="devtmpfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 137.181111][T10574] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 137.265955][ T40] audit: type=1400 audit(1761388191.354:690): avc: denied { create } for pid=10569 comm="syz.5.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 137.272608][ T40] audit: type=1400 audit(1761388191.354:691): avc: denied { write } for pid=10569 comm="syz.5.1315" path="socket:[38476]" dev="sockfs" ino=38476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 137.540993][T10588] openvswitch: netlink: Missing key (keys=40, expected=100) [ 137.544545][T10588] openvswitch: netlink: Missing key (keys=40, expected=100) [ 137.619266][T10590] netlink: 'syz.4.1320': attribute type 1 has an invalid length. [ 137.646985][T10590] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 137.652767][T10093] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.653279][T10590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.773235][T10094] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.868757][ T5291] Bluetooth: hci3: command tx timeout [ 137.969107][T10607] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 138.070221][ T40] audit: type=1400 audit(1761388192.102:692): avc: denied { mounton } for pid=10610 comm="syz.5.1327" path="/23/file0" dev="gadgetfs" ino=10259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 138.075633][T10611] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.080021][ T40] audit: type=1400 audit(1761388192.111:693): avc: denied { watch } for pid=10610 comm="syz.5.1327" path="/23/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.128863][T10621] xt_hashlimit: invalid rate [ 138.159313][T10626] binder: Unknown parameter 'appraise_type' [ 138.165030][T10628] binder: Unknown parameter 'appraise_type' [ 138.204807][T10632] kvm: pic: non byte read [ 138.207516][T10632] kvm: pic: non byte read [ 138.217497][T10635] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1334'. [ 138.265101][T10641] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1335'. [ 138.304031][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 138.356878][T10644] comedi comedi2: dt2815: I/O port conflict (0x4f27,2) [ 138.435698][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1339'. [ 138.449766][T10648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.475507][T10655] : renamed from veth0_vlan (while UP) [ 138.483055][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1339'. [ 138.636857][T10671] overlayfs: failed to resolve './file0': -2 [ 138.803480][T10694] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 138.806748][T10695] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 138.951037][T10705] efs: device does not support 512 byte blocks [ 138.953792][T10705] device does not support 512 byte blocks [ 138.953792][T10705] [ 139.018516][T10710] /dev/nullb0: Can't open blockdev [ 139.077140][T10717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1357'. [ 139.131187][T10725] xt_time: unknown flags 0xf4 [ 139.320682][T10748] SELinux: failed to load policy [ 139.397450][ T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 139.448887][ C0] [ 139.449719][ C0] ============================= [ 139.451322][ C0] [ BUG: Invalid wait context ] [ 139.452884][ C0] syzkaller #0 Not tainted [ 139.454435][ C0] ----------------------------- [ 139.457040][ C0] syz.2.1359/10723 is trying to lock: [ 139.459427][ C0] ffff88802a7a9430 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 139.462366][ C0] other info that might help us debug this: [ 139.464202][ C0] context-{2:2} [ 139.465307][ C0] 1 lock held by syz.2.1359/10723: [ 139.466920][ C0] #0: ffff88802a7a9980 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 139.470062][ C0] stack backtrace: [ 139.471232][ C0] CPU: 0 UID: 0 PID: 10723 Comm: syz.2.1359 Not tainted syzkaller #0 PREEMPT(full) [ 139.471244][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.471250][ C0] Call Trace: [ 139.471254][ C0] [ 139.471258][ C0] dump_stack_lvl+0x116/0x1f0 [ 139.471281][ C0] __lock_acquire+0xa12/0x1c90 [ 139.471297][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 139.471312][ C0] lock_acquire+0x179/0x350 [ 139.471320][ C0] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 139.471335][ C0] _raw_read_lock_irqsave+0x46/0x90 [ 139.471349][ C0] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 139.471361][ C0] kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 139.471373][ C0] ? kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 139.471387][ C0] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 139.471400][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 139.471410][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 139.471423][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 139.471445][ C0] ? __pfx_xen_timer_callback+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 139.471457][ C0] xen_timer_callback+0x1db/0x2a0 [ 139.471470][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 139.471483][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 139.471493][ C0] __hrtimer_run_queues+0x5ed/0xad0 [ 139.471506][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 139.471517][ C0] ? read_tsc+0x9/0x20 [ 139.471529][ C0] hrtimer_interrupt+0x397/0x8e0 [ 139.471543][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 139.471553][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 139.471567][ C0] [ 139.471569][ C0] [ 139.471573][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.471583][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 139.471597][ C0] Code: 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <48> 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd ff ff 0f 1f 84 00 00 00 [ 139.471606][ C0] RSP: 0018:ffffc9000358f3b8 EFLAGS: 00000246 [ 139.471614][ C0] RAX: dffffc0000000000 RBX: ffffea0000d3f740 RCX: ffffffff820159a6 [ 139.471620][ C0] RDX: 1ffffd40001a7ee9 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.471625][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 139.471631][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffea0000d3f740 [ 139.471636][ C0] R13: 0000000000000000 R14: ffffc9000358f718 R15: 000000000000001e [ 139.471643][ C0] ? const_folio_flags.constprop.0+0x36/0x70 [ 139.471656][ C0] const_folio_flags.constprop.0+0x36/0x70 [ 139.471665][ C0] folio_mapping+0xf9/0x190 [ 139.471674][ C0] truncate_cleanup_folio+0xc6/0x490 [ 139.471685][ C0] truncate_inode_folio+0x3f/0x70 [ 139.471695][ C0] shmem_undo_range+0x376/0x1150 [ 139.471710][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 139.471728][ C0] ? find_held_lock+0x2b/0x80 [ 139.471739][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 139.471750][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 139.471767][ C0] ? stack_trace_save+0x8e/0xc0 [ 139.471780][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 139.471794][ C0] ? kasan_save_stack+0x42/0x60 [ 139.471804][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 139.471817][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 139.471832][ C0] ? find_held_lock+0x2b/0x80 [ 139.471843][ C0] ? evict+0x3a2/0x920 [ 139.471854][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 139.471868][ C0] evict+0x3e6/0x920 [ 139.471878][ C0] ? __pfx_evict+0x10/0x10 [ 139.471890][ C0] ? iput.part.0+0x6a1/0xb00 [ 139.471902][ C0] iput.part.0+0x6a9/0xb00 [ 139.471912][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 139.471927][ C0] iput+0x35/0x40 [ 139.471937][ C0] dentry_unlink_inode+0x29c/0x480 [ 139.471949][ C0] __dentry_kill+0x1d0/0x600 [ 139.471960][ C0] dput.part.0+0x4b1/0x9b0 [ 139.471972][ C0] dput+0x1f/0x30 [ 139.471982][ C0] __fput+0x51c/0xb70 [ 139.471995][ C0] task_work_run+0x150/0x240 [ 139.472005][ C0] ? __pfx_task_work_run+0x10/0x10 [ 139.472016][ C0] do_exit+0x86f/0x2bf0 [ 139.472033][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 139.472046][ C0] ? __pfx_do_exit+0x10/0x10 [ 139.472060][ C0] do_group_exit+0xd3/0x2a0 [ 139.472073][ C0] get_signal+0x2671/0x26d0 [ 139.472086][ C0] ? force_sig_fault+0xc4/0x100 [ 139.472097][ C0] ? __pfx_get_signal+0x10/0x10 [ 139.472109][ C0] arch_do_signal_or_restart+0x8f/0x7c0 [ 139.472120][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 139.472132][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 139.472146][ C0] irqentry_exit_to_user_mode+0x176/0x310 [ 139.472160][ C0] asm_exc_page_fault+0x26/0x30 [ 139.472169][ C0] RIP: 0033:0x7f9b2ad8efc9 [ 139.472176][ C0] Code: Unable to access opcode bytes at 0x7f9b2ad8ef9f. [ 139.472180][ C0] RSP: 002b:0000200000000181 EFLAGS: 00010246 [ 139.472186][ C0] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f9b2ad8efc9 [ 139.472192][ C0] RDX: 00007f9b2bbd6f20 RSI: 0000000000000058 RDI: 00007f9b2bbd6f20 [ 139.472198][ C0] RBP: 00007f9b2ae11f91 R08: 0000000000000000 R09: 0000000000000058 [ 139.472203][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.472208][ C0] R13: 00007f9b2afe6038 R14: 00007f9b2afe5fa0 R15: 00007fff422f2fc8 [ 139.472217][ C0] [ 139.631465][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.656859][ T53] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 139.660393][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.663493][ T53] usb 10-1: Product: syz [ 139.665418][ T53] usb 10-1: Manufacturer: syz [ 139.667301][ T53] usb 10-1: SerialNumber: syz [ 139.670393][ T53] usb 10-1: config 0 descriptor?? [ 139.706110][T10319] PM: hibernation: Basic memory bitmaps freed [ 139.709090][ T6012] usb 6-1: USB disconnect, device number 13 [ 139.823751][ T8979] syz_tun (unregistering): left allmulticast mode [ 140.085361][ T62] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.106478][ T919] usb 10-1: USB disconnect, device number 2 [ 140.222477][ T62] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.351800][ T62] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.414804][ T62] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.877019][ T62] tipc: Disabling bearer [ 140.883334][ T62] tipc: Left network mode [ 141.154632][ T62] hsr_slave_0: left promiscuous mode [ 141.156698][ T62] hsr_slave_1: left promiscuous mode [ 141.159386][ T62] veth1_vlan: left allmulticast mode [ 141.160961][ T62] veth1_macvtap: left promiscuous mode [ 141.162804][ T62] veth1_vlan: left promiscuous mode [ 141.183744][ T62] pimreg3 (unregistering): left allmulticast mode [ 141.220793][T10093] smc: removing ib device syz2 [ 141.236254][ T62] team0 (unregistering): Port device vlan0 removed [ 142.056468][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.060945][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.149732][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.153946][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.236258][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.240552][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.330556][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.333788][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.426478][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.493935][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.555309][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.653419][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.743905][ T62] bridge_slave_1: left allmulticast mode [ 142.746445][ T62] bridge_slave_1: left promiscuous mode [ 142.748744][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.752613][ T62] bridge_slave_0: left allmulticast mode [ 142.754522][ T62] bridge_slave_0: left promiscuous mode [ 142.757103][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.762803][ T62] bridge_slave_1: left allmulticast mode [ 142.765059][ T62] bridge_slave_1: left promiscuous mode [ 142.767582][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.771477][ T62] bridge_slave_0: left allmulticast mode [ 142.773836][ T62] bridge_slave_0: left promiscuous mode [ 142.781191][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.821814][ T62] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 142.825480][ T62] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 143.116201][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.120740][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.124576][ T62] bond0 (unregistering): Released all slaves [ 143.129535][ T62] bond1 (unregistering): Released all slaves [ 143.136894][ T62] bond2 (unregistering): Released all slaves [ 143.282497][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.286131][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.289544][ T62] bond0 (unregistering): Released all slaves [ 143.765698][ T62] hsr_slave_0: left promiscuous mode [ 143.768415][ T62] hsr_slave_1: left promiscuous mode [ 143.771153][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.774279][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.777741][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.780878][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.785452][ T62] hsr_slave_0: left promiscuous mode [ 143.787501][ T62] hsr_slave_1: left promiscuous mode [ 143.789395][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.791801][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.794522][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.796972][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.804898][ T62] veth0_macvtap: left promiscuous mode [ 143.807417][ T62] veth1_vlan: left promiscuous mode [ 143.809438][ T62] veth0_vlan: left promiscuous mode [ 143.811699][ T62] veth1_macvtap: left promiscuous mode [ 143.814133][ T62] veth0_macvtap: left promiscuous mode [ 143.816488][ T62] veth1_vlan: left promiscuous mode [ 143.818635][ T62] veth0_vlan: left promiscuous mode [ 144.004195][ T62] team0 (unregistering): Port device team_slave_1 removed [ 144.040671][ T62] team0 (unregistering): Port device team_slave_0 removed [ 144.335908][ T62] team0 (unregistering): Port device team_slave_1 removed [ 144.368556][ T62] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 10:29:57 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85294e35 RDI=ffffffff9add6700 RBP=ffffffff9add66c0 RSP=ffffc900000076a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9add66c0 R15=ffffffff85294dd0 RIP=ffffffff85294e5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f763fff CR3=0000000048ae1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce321307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce321315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce33b74a8 00007f9ce33b74a0 00007f9ce33b7498 00007f9ce33b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3f1d100 00007f9ce33b7460 00007f9ce33b7478 00007f9ce33b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce33b74b8 00007f9ce33b74b0 00007f9ce33b74a8 00007f9ce33b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=1ffffffff3561a18 RDX=0000000000000000 RSI=ffffffff8bf06c40 RDI=0000000000000001 RBP=000000559f25b92c RSP=ffffc900231dfaa8 R8 =0000000000000001 R9 =000000000000e13c R10=ffff88816dd42897 R11=0000000000000010 R12=0000000000000001 R13=00000000000032c9 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8189b640 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ce40e8f98 CR3=0000000048ae1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce321307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce321315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce33b74a8 00007f9ce33b74a0 00007f9ce33b7498 00007f9ce33b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3f1d100 00007f9ce33b7460 00007f9ce33b7478 00007f9ce33b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce33b74b8 00007f9ce33b74b0 00007f9ce33b74a8 00007f9ce33b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000e6814 RBX=0000000000000002 RCX=ffffffff8b6052a9 RDX=ffffed100d4c6656 RSI=ffffffff8bf06c40 RDI=ffffffff8192567d RBP=ffffed1003b51920 RSP=ffffc90000187de8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801da8c900 R14=ffffffff9081f6d0 R15=0000000000000000 RIP=ffffffff8b603d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2df987 CR3=000000004a28b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000001000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2ae12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2ae12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2ae12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2ae12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2ae1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2ae1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2afb74a8 00007f9b2afb74a0 00007f9b2afb7498 00007f9b2afb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2bb1d100 00007f9b2afb7460 00007f9b2afb7478 00007f9b2afb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2afb74b8 00007f9b2afb74b0 00007f9b2afb74a8 00007f9b2afb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a442700 RCX=ffffffff81b0fd91 RDX=ffff888056bd0000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003cef870 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4884e1 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81bd0412 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555584dd3808 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc13bbfc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce3212ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce321307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce321315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000