last executing test programs: 31.397850449s ago: executing program 3 (id=148): r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @multicast1}, &(0x7f0000000300)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x29, 0x2, 0x1, 0xfffffffa, 0x28, @local, @mcast1, 0x20, 0x7800, 0x2, 0x3}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0xfbfbfbfb}) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000080)={'s526\x00', [0x6f04, 0x80008000, 0x9, 0x2, 0x1000000, 0x1f, 0x9, 0x3, 0x1, 0xe, 0x7, 0x1, 0x1004, 0x28000000, 0xeb0, 0x8, 0xfdffffa7, 0x40000009, 0x400006, 0x4, 0x5, 0x10000, 0x8382, 0xe2df, 0x2, 0xa6, 0x1, 0x3, 0x7, 0x5, 0x2]}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r8 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="b25a8df54f445b3ec709f3289ff8820f6ac8ec86bbac0db1e90c052987412b7d78f821b38197cb531202fe6711352d66487b", @ANYRESOCT=r6, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000600)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xb}) getsockopt$sock_buf(r9, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000b40)=ANY=[@ANYBLOB="007cb2ba5813e892aa07ac4ea93755648ed9a7816f7214f5489cb40e37a97e5ed907747e0dcce68705b1f3a411696f73f36e5f2d622ce3a908bc20fcd02f53dc6ea4ebb50686ee374da81d4dafbd3ca34587d58311603ab473589841318cb1a4c31dbed78060f77ad98789ec681c7fc6cd917677da0430d770d2a67816a8439cd3d01a69b791ded81505653ceae273db6604fabbd7d7fcba31bc93a0737bbf1e77640b65b480cd6df45904550abee633c5b05afaa6bb1f94f63cfe3a942f90c11e4443f070de18b2023888c2b4a0c2165eb6fca87b58925d1c5559858d1202a5cb0400064ff086", @ANYRESOCT=r2, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100656e61626c656d0000000000000000000000000000000000000000100000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESOCT=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYRES8=r2], 0x198}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "f23dd16f1f1120f1", "09f700", "1ab6c0e5"}, 0x28) 30.787612006s ago: executing program 3 (id=150): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b706000035000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008510"], &(0x7f0000000000)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000640), 0x10) shutdown(r0, 0x1) r1 = dup(r0) write$FUSE_BMAP(r1, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a090000cd95a69c00000000000000000000ffff"], 0x4c}}, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b00000/0x2000)=nil) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000)) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 30.56802297s ago: executing program 3 (id=153): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100), 0x10) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_netdev_private(r2, 0x89fc, &(0x7f0000000180)="f5429b764bb7db9d89bd9d4d992333fc6590f0eace092542895ffb02f2180b16b0d17d64f1aa173be56c5b89f5e6c9e3f926cd32f01054f13bb7c3ac3c93edfeaf8fdf5fb09cd745bea0dfe048e889b29897d0ad453222258fec9fb9a18850ef79b7fad03346cbb188a21a741b246cf6cb6ea5018c8955e2ae6d4dca906bba53615883c1b8610961be8e2ff1fed5472d82b8ea94c9d43f7314579fb1114c41f50fae32da4a2d2a3a228c6f2e38ade9c913bb3968320124cb025a609ab73c") (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40007, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000600)={{0x1, 0x1, 0xfd}, 0x80000000, 0x100000001}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r7, 0x80045113, &(0x7f0000000280)) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ff"]) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@alg={0xf0, 0x10, 0x200, 0x70bd29, 0x25dfdbff, {{'sha384-avx2\x00'}, '\x00', '\x00', 0x2000, 0x1400}, [{0x8, 0x1, 0x712d}, {0x8, 0x1, 0xd0d}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) 30.487725135s ago: executing program 3 (id=156): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0xb]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff9}]}]}]}}]}, 0x9c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000040)='./file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r6, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/4096, 0x1000}, 0x2}], 0x1, 0x62, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0x1}}, './file1\x00'}) 30.127943754s ago: executing program 3 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010001304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e657665000010000280040006000500080040000000ce1b7ba26b9a04f57b0148d25760b05d8633cae63927bbe47deeea5a8a08ed71ffae9d8e91e3e66daeaf405d9d7664ea2c714281075b86f8d1d07fd769d443aaa065148cf0aa32e95ec4d263cf11d51b375c29f27d770335588a4816ad4b17f69d8f56636dad915bd8b6356c1e96aec8993c0b893bb76e908242a264c5e5e8f49e2c210c4781efd735c2ce0d4ce09fab82fb162003f23aedc68724cfdc1aff2681e2e7321d02e3b61f099684de5dc92c87"], 0x40}}, 0x0) 28.275225076s ago: executing program 3 (id=184): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000080)={r5, 0x0, r6, 0xfffffffd, 0x9, 0x80000003, 0xffffffff, 0x0, 0x1000005, 0x7fff, 0xd, 0x322}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x49, 0x8003, 0x4}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x3e48, 0xfffffffe, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000240)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 28.183679093s ago: executing program 32 (id=184): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000080)={r5, 0x0, r6, 0xfffffffd, 0x9, 0x80000003, 0xffffffff, 0x0, 0x1000005, 0x7fff, 0xd, 0x322}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x49, 0x8003, 0x4}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x3e48, 0xfffffffe, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000240)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 9.878497638s ago: executing program 2 (id=463): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x2100) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40, 0x0, r1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2}, 0x20) lseek(r0, 0x0, 0x1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000680)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x5, 0x9, 0x44be791d, 0x2, 0x9]}, &(0x7f0000000280)=0x78) 9.817197512s ago: executing program 2 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x8, 0x0, 0x0, {0x0, 0x6, 0x8, 0x0, 0x80000000003, 0x7, 0x0, 0x0, 0xfffffffe, 0xa000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x7100422, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080)={0x406, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006111680000000000950000000000000068dd253aa0e2332c817c5e9376eaf9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="9c", 0x1}], 0x300, 0x300000, 0x0) sendto$inet(r4, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r6, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0012000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 9.714027716s ago: executing program 2 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) 9.633254906s ago: executing program 2 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0xfffffffc}, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 9.527973285s ago: executing program 2 (id=473): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) (async) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 9.527685764s ago: executing program 2 (id=474): socket(0x1d, 0x5, 0x7) (async) r0 = socket(0x1d, 0x5, 0x7) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) (async) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000067c0), 0x0, 0x0) preadv(r5, &(0x7f00000080c0)=[{&(0x7f0000007f80)=""/206, 0xce}], 0x1, 0x10000, 0x47d) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') (async) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffffbd, &(0x7f0000000000)={0x0, 0x59}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) open_tree(r6, &(0x7f0000000280)='\x00', 0x89901) (async) r8 = open_tree(r6, &(0x7f0000000280)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.429615302s ago: executing program 4 (id=584): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xa, 0x4, 0x6, 0xfffa}, 0x20, [0x0, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x8, 0x6, 0x4d, 0x8, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x20000000, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x2, 0x3e, 0x8f, 0x6, 0x6, 0x1, 0x80092a3, 0x4, 0xcbee, 0x20000000, 0x400082, 0x10, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x9, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xb6, 0xf9, 0xd, 0x2bf, 0x5, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x73775975, 0x2f, 0xe, 0x312, 0x10000, 0x0, 0xfffffffe, 0x6, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x6, 0x8, 0x9, 0x6, 0x80000001, 0x8, 0x1, 0x40009, 0x2, 0x8, 0x7f, 0x8, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0x0, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53ce697f, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xb, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1e, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0x103], [0x10, 0xbb31, 0x3, 0xb, 0x5, 0x10001, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x1, 0x2, 0x4001, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xfffffffd, 0x6, 0x6, 0x7, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0x100ffff, 0x6, 0x1, 0x10080, 0x6, 0x900000, 0x30b1d693, 0x5a2d, 0x20000000, 0x7, 0x1, 0x10, 0x0, 0xd499, 0x4, 0xb17, 0x1, 0x1fe, 0xffff3441, 0xfff]}, 0x45c) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 2.428854029s ago: executing program 4 (id=586): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x2f25, "99bdb1b826641b0894d002060074b7b94d3c10db57c3f7484d9ed4190db800f3"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0x4000, 0x200}, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0285700, &(0x7f0000000180)=0x8) 2.317076611s ago: executing program 4 (id=587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/123, 0x7b, 0x1, &(0x7f0000000400)=""/230, 0xe6}, &(0x7f0000000280)=0x40) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (rerun: 32) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) 1.514284819s ago: executing program 0 (id=597): r0 = io_uring_setup(0x394d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_ts_info}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001300)=[{&(0x7f0000000240)={0x27, r6, 0xffffffffffffffff, 0x7, 0x0, 0x8, "1a2f0ce2e8232d58f0d82a8ed7e4eed8d7fe8db6e8d284c11b7927bb15ccaa9b99ca7f7486962dd094865d84eba32a8f442f6fe014e9191b9e5a6d29ad1449", 0xd}, 0x60, &(0x7f0000000a00)=[{&(0x7f00000002c0)="fa085d0aa58214ea3b703e01003cb64e958018e674a10738b5f36e81b6bfe5596eb0bf8568a369bc3d03ae07167fb07049253e0ddfb2b81bb2e511145de1424da5df324b5ea8f84c7b4e", 0x4a}, {&(0x7f0000000380)="85df9e01bb56697f02a6e992dcb406560190589c1b371ee483379131516ec7d353ba756d4ca96f87e4cc57655bcca9075f871eb6c6fcfe1a39cf0d", 0x3b}, {&(0x7f00000003c0)="347205430a04cfa6bca7ac79180c39f2ac6cad7ca1eb4e2341b5781fdea07ee9ec2e5130c7253a794744cd88796374de3a3f278e655bbf527c9dc90787a5c2573b", 0x41}, {&(0x7f0000000440)="4fe6d68abc820774d59cb5c2e277c51ad0d63ccc86d61046251c1fa91c146cb675632ea32714343175846ea9ffcfc87855c3c846f5900bcc33002143272eb27cdcb91def7e25b94560d4fcff23e200d87d9b4950ba6ffa49c97854efbcd6a8aa0f62c8493df4a4792adfdac576ff7170d1bf3a3c63441f89211dad1586df6f0e9b793a239be474911867fabf6ca8a205901ca8eb1260ec5f918452e967f2209fbd7bf3e11f75e58589bc9d", 0xab}, {&(0x7f0000000500)="e318638a96a3f56fefc3dad6a4a89ec5899a1399d0e6a28844159e5c5df7ec8fb78cfbc29ace97a619ee62e2e883f7b1a9d9403912ae5e3e273a3a", 0x3b}, {&(0x7f0000000780)="6379a83c2ba302be362c76f0302347f1fc220479869b7098a0be985525ec7791587b2efefb54e1695b5b0a4c2d589c52e3640b0e7611cf22b25918c292fbd7bfbf969bc3281c7d3494db3df441aeb96e1cf200e29285d0ab2f18be63bd0b2aaf1b0b1d8a54db47d3d850a97b60d9fbb715f08d9c72481abed7509dcbde50d6d9db600038ef3fd2a95e260dbf17854d04738b4884b829af282d14d11124ed629acd4b37ba09a4d745c91df85ecc89a5fcbfa95ef19b10348f5fb468241585f3d4a027d7790e6e3b784ac3dea2c38d6ba4da90ec536189c8a383a7270b76c0e7b8058007d640f3", 0xe6}, {&(0x7f0000000640)="4b809090ec185832726e558db619044e994d03803e97eed9f84202755c703093e175b86b8ba56fb9b6341da9784d71451bf9cd568bf0f1f85ca9222f4c986eb2da8ea5c3", 0x44}, {&(0x7f0000000880)="045ebf3803cafb9d1108d52358664b48be91e0adf9c53410d82a78f76210e5c4ee11c763e96296c5796264b757b58cf3ae4481663e51d84c49f82046087f63666b13b76c702a660455e0c57f18159cdd2fda0b5e72ae15a195e796c3e7fdfaf2ee4717769b1de2fabd93578343862e4cd43b039e478070a5b939e10511453189c87fc813742693556a83625932c888c9dfbf82dc8de561eefe5afe319d6a75b0aa48d2e6dcd6b7786dee3c", 0xab}, {&(0x7f0000000940)="53e2a34c01be129cc62ce8a331482823d56e98758ea34f7b166700b9dc99f78bac8400d477ff7236a12c643bf9df87d228fee0f998007d693d90a57967ff740950b5ab9ccf98a7401c42e034dfd4a4fa348eb781f7bdbc00323bf7f6ef2d0221391a3abbeabafa9d9992432af6370540e942fa686a21e60c74924fff64b32e0bf7493d964df207eb20ccf2ef5294db9fa78916b2bd0702aeea780be14e45", 0x9e}, {&(0x7f0000001e00)="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", 0x1000}], 0xa, 0x0, 0x0, 0x85}, {&(0x7f0000000bc0)={0x27, r7, 0x1, 0x1, 0x1, 0x3, "a7c5767c7d374ab20510a762f747963f845404cf162442f85316a01480f111b8bc0a63d810e5e2c69728a4806bbb06dd9e115103a89124102b393fa38d6cf0", 0x2f}, 0x60, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="a53a59c85dca957fdf689adf15d653222e5922e8f87f95294a0cc5435ea6bee89eab42a580ad23da32ae84cd350e4bf0c5d9131ebfb14f471bb5f5cf89dbb18de72541c0492f1827ed9b8634bf0bd178b27a95b98d7231dea90c720ae85d531f44fa", 0x62}, {&(0x7f0000000cc0)="05b270b71cbb68cbe0c0014d50a331b86cd4495a00beb5136a9fdd5a3b784121926b4883550643fbe3b7daba3e773d3c93555bcbd5ee37944ed76505049c2d1619a0cb8d55a74b1e585e2d2e417c367f4977fc69edbf096040bfc74e11c4aec2c166eb607109b8223e1686d540aeca00c574e590158966bc5606e66858c6d97209db63918ee36f4447f3ef8c5c4d8b5afa3c9b1ef5240ce985bd9d3fa0868506a04467bb8a17be8d02311cc4d2a85dec9d105fe5cdf3db765f408cb4c5fecb38dfbb7d445dc3b21acecfe34b0abd6da25cd9f92ee979a22d9ed0d6a40cb321dc57ec082bd1102162ad8eab0f2031fee425543033988434345f", 0xf9}, {&(0x7f0000000f00)="4c67ac8a104b5b2dd5c5c5b6ca573c16fef52438042fb13172cd5cc4665bef1b93d094dd4c546709866ad01799c51b0db80aa290984e667b31cd0cf4734268c27737d8fc22e022e811c7c889dbdbad2c605ef6c2589661762df34dbc26c5606118c1837bfef73a40882d1de4b077eab0da37f4a9e9ee5f48689ede8e3c2b53f55002d97870b14df096612398e569b57ded43e5dd81b62e7bb31b8012bd75ddfa8aa323cfd169cf7774c79e3977a72e65a76f2d4b7d1dc19e063d1cce346429635a122db2f06c278427c647f11774c17dc67dbad69bb8cc6326245adabe4f3a9f51e85c7ff45f82", 0xe7}, {&(0x7f0000001000)="a5db6d415d4295175e23011d19a02ef7f8daa61033e569e98fc979a43398ce789a0a878105d20934602c203a9667f219236b74b2f5e859a475d25bde6160b63f026a0f5620c92eb190462d93701cff56f4abc827ac404f7954d1a8bf3c0102668d17c6ebf5e35831c54b2e01892e5a1cb025dcfa1fa89b9557fb74c84e7d3295be2e7c2712b0044979f04f47523afe3d4088848dd226291c5987153171b44eab99c14616e5916c8e3f6dcecc7c23dfcdf6726f4b6eb91a1b59ff7e4d438422fe3ad970eaa31f77c0226c47cdd3bc377d28dff93ef640295631efb1697d33a7be605ae5ba3a69112513f326d6fc3c0e8d829df8fedc1944a0ef", 0xf9}, {&(0x7f0000001100)="4a5a469668a2ceaedb97eddd4356bb907e77af5ee22b980a81fdc91a1efe6868d8a4b8ed84fa0bc2d5068ec7d52cd9d989018ba9eef94b1336cad0d56c40e89d7ef32ba534f23b58fe00a5c647d2ac540c4bda586da03be6fa2c7d508de73235be422d20b9a1397337cd724e5d7926d8f3d586369aecee3fd3414b05bbd6978a2e5ff41fd27a7d19111e9dbfcd5c2b26f9c04b8f5a24896c43a5819927c645b651d9a5ce55d94d9f9b8a31ccacf1d57bada3825aa00d04aed85cc9458b624df1b48eeaa756d14d1d78cf1810ddb295e0c4717770ba609ed04bbce1fb3c2064810d5be95461d856e3efd0781eff1bdd10b1e5d2864d9c8638b08b6ceb9e83", 0xfe}], 0x5, &(0x7f0000001200)={0xe0, 0x111, 0x1, "5d297e707ae07afd76c6a82517aca9663a10ac14c08a07f23f4e985ad2c770296df7669b1b2a07dfe1d4bbb95f35262f19bb79c698005eb1c8d39b066d0c91fd488bab07f8b400a518857ff24175f74fe802453b312ee05f447f34dae298299044db748e044cd6ed3a25fa5fb16d59a0b60117d71d5a71c14d2041216ef311dc76ab31db102df22179188b462d73016ac21292293a8d87b0004df9697baa35725711df5459b5d3502f997a1d01fae0eb04859e54b1127db00a0f7166f8f991308d8e91ba63d6200faa9b"}, 0xe0, 0x811}], 0x2, 0x4000010) close_range(r0, 0xffffffffffffffff, 0x0) 1.453838793s ago: executing program 4 (id=598): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa02c0614900000000000800450000260000000000119078000000000000000000006e200012907800"/52], 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x101ff, 0x1, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r6, 0xae80, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r7 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000180)=0xfffffffffffffd4c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20080, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.342260735s ago: executing program 0 (id=599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) fanotify_init(0x20, 0x800) r3 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f00000001c0)=""/136, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)={0x50, r5, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vbi#\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x50}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r7, 0x6, 0x1e, 0x0, &(0x7f0000000500)) getsockopt$inet6_int(r6, 0x29, 0x38, 0x0, &(0x7f0000000140)) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 1.34192801s ago: executing program 1 (id=600): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000080)={&(0x7f0000000300)="33415e10157e8f2ede4961f2750b0f2912d8c8cd27a972193a2e9232d45b1bd755343c60376fe570b53e5aa786e2a2ed8468fc4cfa310939578eec4854a3a4ff065c0263ef3e6c9cb20dbcdb80f922044419290cca68d44fb9405e3f2a2647acd26c1b4c13df6f94ced944f640a7a694d4f7c2b0b2e35160c2015cf128d4af84d84e85537562c4707c9a1778bc4bd740c2d011d3340f1774366fb6ca6e3b625211ebf05bc71d5c7306c9b40ab0a12b2842b732ad154779c799de9cff7278", 0x16}, 0x1, 0x0, 0x0, 0x4000050}, 0x850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800926040000000000000000002400028008000240000000020500030001000000080004400000000208000140000000030900010073797a30000000000900020073790c33a4be7a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) connect(r0, &(0x7f0000000280)=@ieee802154={0x24, @short={0x2, 0x1, 0xfffe}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000005d69000b000000ea000000518200000000000000000000000000c61ef7a0a7c460213e2116a292cffc3f3452dc25c347ee05dcb14964a7227fa43fb329f8381b53243681527e3cf0239366dc75006f4ea1985c54a459d2e6cd78c0ec988122308606ae70a3c5bbcf2d68c00d04eea9d0548bbbbbede0b91a5f78b1cd65c104234a8b974b03a36ab54ec81d0d53f240e0475100c467126d48b27e0670211dbc1f38f4f3c083d30741dcd3d617ddc072c5ad624d7f6a6763cc540a3351e5d6"], 0x20}}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x841, 0x2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1, 0x3}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) close_range(r6, r7, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r8, 0x80045500, &(0x7f0000000000)) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000001c0)=@req={0x1, 0x79cc, 0xfffffffa, 0x7ff}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x4}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r10, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) sendto$packet(r6, &(0x7f0000000180)="02030c65d66402000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0x26, 0x4008840, &(0x7f0000000140)={0x11, 0x6a, 0x0, 0x1, 0xff}, 0x14) 1.150321608s ago: executing program 0 (id=601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) 941.930892ms ago: executing program 0 (id=602): getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'nicvf0\x00', @local}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) connect$nfc_raw(r2, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) r3 = mq_open(&(0x7f0000001bc0)='security.selinux\x00', 0x8c0, 0x1, &(0x7f0000001c00)={0x400, 0x4, 0x20, 0x9}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="550089f9", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25010000000000000001410000001800170000001c000000817564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x40091}, 0xfd9f4b76e9f284ce) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00'}, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000001600)=0x6, 0xfd81) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x14, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@generic={0x6004, "e943bba7bc1c"}}}, 0x0) mq_timedreceive(r3, &(0x7f0000001c40)=""/229, 0xe5, 0xbd5, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x4800, 0x44) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x24, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x2}}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008a04"]) 771.830554ms ago: executing program 1 (id=603): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa000000004e2200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x15) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) (async) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xebd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff1}, {}, {0x4, 0x8}}}, 0x24}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8008040}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getaddr={0x6c, 0x16, 0x800, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x8, 0xff, r5}, [@IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0xe4, 0xf56e, 0x3ff}}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x401}, @IFA_CACHEINFO={0x14, 0x6, {0x100, 0x80000000, 0x8, 0x26e}}, @IFA_FLAGS={0x8, 0x8, 0x422}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 771.185785ms ago: executing program 1 (id=604): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) 720.647952ms ago: executing program 1 (id=605): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREAD(r0, &(0x7f0000000080)={0x6f, 0x75, 0x2, {0x64, "1099b7e904f7b099dad2bb08b56ea396a1c2b4e08134d0b5391522963ca80430407d0034b067de1c7e5ee43e07797fcf0b59013cecc462ef806ee01029196cd0ab06d1975f1a34fd94569c0aca57864df03b4ebb70227ed451cd25e97b0b25b726ec7a3c"}}, 0x6f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 720.204025ms ago: executing program 1 (id=606): r0 = timerfd_create(0x7, 0x80000) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x8000}, {r1, 0x4}, {r2, 0x2a00}, {r3, 0x4000}, {r4, 0x2008}, {r5, 0x4}], 0x6, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x400]}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x3a42, &(0x7f0000000280)={0x0, 0xcf95, 0x400, 0x2, 0x3ba}, &(0x7f0000000300), &(0x7f0000000340)) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000380)=0xca8) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000003c0)={0x101, 0x34343452, 0x3, @discrete={0x4, 0x4}}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000480)={r9, 0x7}, &(0x7f00000004c0)=0x8) socket$igmp(0x2, 0x3, 0x2) r10 = geteuid() quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r10, &(0x7f0000000500)) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@null, 0x5, 'bridge_slave_0\x00'}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x8800, 0x0) ioctl$SNDCTL_TMR_TEMPO(r11, 0xc0045405, &(0x7f0000000680)=0x108) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f00000006c0)={0x6, 0x6, 0x2, 0x4}, 0x10) bind$rxrpc(r7, &(0x7f0000000700)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000740)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x7, [@bcast, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r4, 0x3ba0, &(0x7f00000008c0)={0x48, 0x8, r2, 0x0, 0x0, 0x33e60f, 0x50, &(0x7f0000000840)="87db204cbbb3884bba73a149470258ec74587f2eb60c6b20dd81819cb3c6be9ff1b5ae687bc7a3d63b4d6dcff4a74431c26a127c631c62c96b3f7191ecb0e7279d915313ea27ac4dada9984891c1fb56"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000980)=0x0) read$FUSE(r4, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r1, &(0x7f0000000940)='system.posix_acl_access\x00', &(0x7f0000002b00)={{}, {0x1, 0x1}, [{0x2, 0x6, r12}, {0x2, 0x7, r13}, {0x2, 0x4, r10}, {0x2, 0x5, r10}, {0x2, 0x2, r10}, {0x2, 0x2, r10}, {0x2, 0x1, r10}, {0x2, 0x3}], {0x4, 0x5}, [{0x8, 0x4}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x5}, {0x8, 0x0, 0xee01}, {0x8, 0x5}], {}, {0x20, 0x4}}, 0x8c, 0x1) 601.205374ms ago: executing program 1 (id=607): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0xffffffff) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8eff, 0x4, 0x20}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000b00)=""/169, 0xffffff76}], 0x2) (async) r4 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, &(0x7f0000000080)=0xc) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r6}, 0x3f) (async) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, &(0x7f0000000140)='grpquota') 371.34481ms ago: executing program 4 (id=608): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0, 0x3, 0x7a, 0x9}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)=@userptr={0x3, 0x3, 0x4, 0x2000, 0xa, {0x0, 0x2710}, {0x3, 0xc, 0x3, 0x4, 0x4, 0x0, "060cebb8"}, 0x10000, 0x2, {&(0x7f0000000140)}, 0x9, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 370.91899ms ago: executing program 4 (id=609): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$mouse(0x0, 0x7, 0xc0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x0, 0x0, 0x0, 0xffffffff, 0x0}) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getitimer(0x0, 0x0) socket(0x3, 0x1, 0x3ca) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) sendto$inet(r3, &(0x7f0000000040)="8932ed209b230927", 0x8, 0x4004c044, 0x0, 0x0) recvmsg(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1, &(0x7f0000000280)=""/58, 0x3a}, 0x2) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000380)={0x556, 0x40, 0x356, 0x670, 0x7, 0x2, 0x1, 0x0, {0x3, 0x6, 0x1}, {0x3, 0x2}, {0x0, 0xc570}, {0x2, 0x0, 0x1}, 0x1, 0x2, 0x4, 0x88, 0x0, 0x6, 0x0, 0xff, 0x1, 0xc36a, 0x800, 0x5, 0x24, 0x1, 0x1aae9bbf137a76b8, 0xc}) 745.479µs ago: executing program 0 (id=610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x18b, 0x2}) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'fl512\x00', [0x10, 0x2166, 0x0, 0x100000, 0x88d7, 0x2, 0x1, 0x10, 0x1002, 0xffffffff, 0x600, 0x60e7b7b4, 0x1344, 0x1, 0x7, 0x1, 0x8, 0x3, 0x9, 0xb, 0x103, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x4, 0x8, 0x400007, 0x1]}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4c044) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048851}, 0x20000004) dup3(r3, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x13e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000580)="a881"}) 0s ago: executing program 0 (id=611): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaaaaaaaaaa01800600000308004500002800000000fe0690784e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'das16m1\x00', [0x5d98, 0xa566, 0xfffffffe, 0xffffd, 0x8, 0x7, 0x5, 0x10, 0x1000, 0x3, 0x0, 0x205, 0x4, 0x4, 0x207, 0x1, 0x7, 0x3, 0x9, 0x5, 0x102, 0x3, 0x9, 0xa, 0x5, 0x1, 0xb0c4, 0x7dd, 0x3, 0x400007, 0x2]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000000)="b8364b00000f23c80f21f835000020000f23f83e0f01cab9b5000040b80a3f24aeba000000000f300f20e035000001000f22e00f01cfc4c1e173da0066baf80cb8d4b5e08fef66bafc0cb8920c5effefc4e2b1bc548200b9800000c00f3235010000000f300f015feb", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 38.135350][ T40] audit: type=1400 audit(1752375513.498:59): avc: denied { write } for pid=5857 comm="sh" path="pipe:[6259]" dev="pipefs" ino=6259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.142506][ T40] audit: type=1400 audit(1752375513.498:60): avc: denied { rlimitinh } for pid=5857 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.149076][ T40] audit: type=1400 audit(1752375513.498:61): avc: denied { siginh } for pid=5857 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:47607' (ED25519) to the list of known hosts. [ 39.324488][ T40] audit: type=1400 audit(1752375514.698:62): avc: denied { name_bind } for pid=5866 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.342019][ T40] audit: type=1400 audit(1752375514.718:63): avc: denied { write } for pid=5867 comm="sh" path="pipe:[6281]" dev="pipefs" ino=6281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.354104][ T40] audit: type=1400 audit(1752375514.728:64): avc: denied { execute } for pid=5867 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.363028][ T40] audit: type=1400 audit(1752375514.728:65): avc: denied { execute_no_trans } for pid=5867 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.401262][ T40] audit: type=1400 audit(1752375516.778:66): avc: denied { mounton } for pid=5867 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.404669][ T5867] cgroup: Unknown subsys name 'net' [ 41.513828][ T5867] cgroup: Unknown subsys name 'cpuset' [ 41.519379][ T5867] cgroup: Unknown subsys name 'rlimit' [ 41.728942][ T5883] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.415525][ T5867] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.363480][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.363489][ T40] audit: type=1400 audit(1752375520.738:80): avc: denied { execmem } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.545136][ T40] audit: type=1400 audit(1752375520.918:81): avc: denied { create } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.555818][ T40] audit: type=1400 audit(1752375520.918:82): avc: denied { read write } for pid=5947 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.563481][ T40] audit: type=1400 audit(1752375520.918:83): avc: denied { open } for pid=5947 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.570856][ T40] audit: type=1400 audit(1752375520.928:84): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="socket:[5836]" dev="sockfs" ino=5836 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.611564][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.613097][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.614954][ T5965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.616961][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.618920][ T5965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.619472][ T5963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.620354][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.620703][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.621605][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.621865][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.622854][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.623668][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.625684][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.628088][ T5965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.629328][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.631038][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.635468][ T40] audit: type=1400 audit(1752375521.008:85): avc: denied { read } for pid=5950 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.639047][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.647988][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.654038][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.657842][ T40] audit: type=1400 audit(1752375521.008:86): avc: denied { open } for pid=5950 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.660121][ T5963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.666688][ T40] audit: type=1400 audit(1752375521.008:87): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.825586][ T40] audit: type=1400 audit(1752375521.198:88): avc: denied { module_request } for pid=5951 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.875892][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 45.915154][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.007349][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.010164][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.013121][ T5951] bridge_slave_0: entered allmulticast mode [ 46.016778][ T5951] bridge_slave_0: entered promiscuous mode [ 46.022161][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.024911][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.027284][ T5951] bridge_slave_1: entered allmulticast mode [ 46.030809][ T5951] bridge_slave_1: entered promiscuous mode [ 46.121549][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.132250][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.150293][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.152540][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.154957][ T5950] bridge_slave_0: entered allmulticast mode [ 46.157540][ T5950] bridge_slave_0: entered promiscuous mode [ 46.192243][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.194465][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.196686][ T5950] bridge_slave_1: entered allmulticast mode [ 46.199374][ T5950] bridge_slave_1: entered promiscuous mode [ 46.221055][ T5951] team0: Port device team_slave_0 added [ 46.227213][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 46.245903][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 46.254003][ T5951] team0: Port device team_slave_1 added [ 46.264267][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.305395][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.324648][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.326928][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.335213][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.385829][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.387936][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.395839][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.439010][ T5950] team0: Port device team_slave_0 added [ 46.443636][ T5950] team0: Port device team_slave_1 added [ 46.476668][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.479457][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.481824][ T5956] bridge_slave_0: entered allmulticast mode [ 46.484667][ T5956] bridge_slave_0: entered promiscuous mode [ 46.528198][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.530480][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.532622][ T5947] bridge_slave_0: entered allmulticast mode [ 46.535136][ T5947] bridge_slave_0: entered promiscuous mode [ 46.565407][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.567655][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.570079][ T5956] bridge_slave_1: entered allmulticast mode [ 46.572614][ T5956] bridge_slave_1: entered promiscuous mode [ 46.575492][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.578418][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.588857][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.593823][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.596233][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.598491][ T5947] bridge_slave_1: entered allmulticast mode [ 46.601155][ T5947] bridge_slave_1: entered promiscuous mode [ 46.629792][ T5951] hsr_slave_0: entered promiscuous mode [ 46.631990][ T5951] hsr_slave_1: entered promiscuous mode [ 46.660739][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.662918][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.673176][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.694882][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.699452][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.706459][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.726209][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.758741][ T5947] team0: Port device team_slave_0 added [ 46.797195][ T5956] team0: Port device team_slave_0 added [ 46.800882][ T5947] team0: Port device team_slave_1 added [ 46.837779][ T5956] team0: Port device team_slave_1 added [ 46.880827][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.883184][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.891126][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.946667][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.949745][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.960658][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.968856][ T5950] hsr_slave_0: entered promiscuous mode [ 46.972090][ T5950] hsr_slave_1: entered promiscuous mode [ 46.974964][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.978322][ T5950] Cannot create hsr debugfs directory [ 46.981412][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.983693][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.992139][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.007915][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.010377][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.019783][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.111374][ T5947] hsr_slave_0: entered promiscuous mode [ 47.113619][ T5947] hsr_slave_1: entered promiscuous mode [ 47.115726][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.118075][ T5947] Cannot create hsr debugfs directory [ 47.212602][ T5956] hsr_slave_0: entered promiscuous mode [ 47.215661][ T5956] hsr_slave_1: entered promiscuous mode [ 47.218508][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.221972][ T5956] Cannot create hsr debugfs directory [ 47.491838][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.503547][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.509610][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.516013][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.554688][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.563834][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.568043][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.572406][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.614885][ T5947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.622717][ T5947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.626721][ T5947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.631106][ T5947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.650119][ T63] Bluetooth: hci2: command tx timeout [ 47.650122][ T5963] Bluetooth: hci1: command tx timeout [ 47.691453][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.696753][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.703204][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.709234][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.729552][ T63] Bluetooth: hci0: command tx timeout [ 47.739331][ T63] Bluetooth: hci3: command tx timeout [ 47.739774][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.766415][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.791763][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.804265][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.810921][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.813822][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.821176][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.832232][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.835153][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.850170][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.853186][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.857762][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.860727][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.871941][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.888674][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.890897][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.900207][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.902374][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.931741][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.969866][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.984768][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.987642][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.997058][ T40] audit: type=1400 audit(1752375523.368:89): avc: denied { sys_module } for pid=5951 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.008155][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.011122][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.022507][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.076968][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.094259][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.114670][ T5951] veth0_vlan: entered promiscuous mode [ 48.122337][ T5951] veth1_vlan: entered promiscuous mode [ 48.148027][ T5950] veth0_vlan: entered promiscuous mode [ 48.160791][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.166571][ T5950] veth1_vlan: entered promiscuous mode [ 48.174455][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.181932][ T5951] veth0_macvtap: entered promiscuous mode [ 48.192487][ T5951] veth1_macvtap: entered promiscuous mode [ 48.226885][ T5956] veth0_vlan: entered promiscuous mode [ 48.230731][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.240437][ T5950] veth0_macvtap: entered promiscuous mode [ 48.246361][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.251597][ T5950] veth1_macvtap: entered promiscuous mode [ 48.258713][ T5956] veth1_vlan: entered promiscuous mode [ 48.263320][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.266450][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.269940][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.272688][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.293499][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.312374][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.324041][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.327628][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.331543][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.334998][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.340330][ T5947] veth0_vlan: entered promiscuous mode [ 48.364395][ T5956] veth0_macvtap: entered promiscuous mode [ 48.372138][ T5947] veth1_vlan: entered promiscuous mode [ 48.380873][ T5956] veth1_macvtap: entered promiscuous mode [ 48.380889][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.388115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.412843][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.415860][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.424969][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.437360][ T5947] veth0_macvtap: entered promiscuous mode [ 48.443866][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.462230][ T5956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.462317][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.465473][ T5956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.467413][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.471533][ T5956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.475554][ T5956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.479610][ T5947] veth1_macvtap: entered promiscuous mode [ 48.481944][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.502452][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.511038][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.514782][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.517475][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.520996][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.523059][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.523721][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.537113][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.539881][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.606194][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.609587][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.612732][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.615188][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.647397][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.651186][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.668097][ T6045] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 48.686688][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.690688][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.745854][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.767229][ T6056] tipc: Enabling of bearer rejected, failed to enable media [ 48.771239][ T6057] tipc: Enabling of bearer rejected, failed to enable media [ 48.784800][ T6060] nbd: couldn't find a device at index -1605786504 [ 48.846056][ T6067] sp0: Synchronizing with TNC [ 48.853671][ T6066] [U] è [ 48.864229][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7'. [ 48.873977][ T6060] nbd: couldn't find a device at index -1605786504 [ 48.883511][ T6072] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 49.024186][ T6084] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.056382][ T6093] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 49.060911][ T6093] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18'. [ 49.155334][ T6103] ======================================================= [ 49.155334][ T6103] WARNING: The mand mount option has been deprecated and [ 49.155334][ T6103] and is ignored by this kernel. Remove the mand [ 49.155334][ T6103] option from the mount to silence this warning. [ 49.155334][ T6103] ======================================================= [ 49.168050][ T6103] MTD: Couldn't look up '/dev/rnullb0': -2 [ 49.188403][ T6118] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.277118][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 49.359711][ T6146] Zero length message leads to an empty skb [ 49.361720][ T6150] rtc_cmos 00:05: Alarms can be up to one day in the future [ 49.397624][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 49.405533][ T6159] process 'syz.2.39' launched './file2' with NULL argv: empty string added [ 49.431436][ T6155] overlayfs: unescaped trailing colons in lowerdir mount option. [ 49.440472][ T6155] overlay: Unknown parameter 'fowner>00000000000000000000' [ 49.519838][ T6168] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 49.558130][ T6175] tipc: Can't bind to reserved service type 1 [ 49.562235][ T6175] netlink: 'syz.0.43': attribute type 10 has an invalid length. [ 49.574964][ T6175] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 49.692730][ T6181] binder: 6180:6181 unknown command 0 [ 49.694982][ T6181] binder: 6180:6181 ioctl c0306201 200000000180 returned -22 [ 49.729603][ T63] Bluetooth: hci1: command tx timeout [ 49.731390][ T63] Bluetooth: hci2: command tx timeout [ 49.789458][ T6190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.809114][ T5963] Bluetooth: hci3: command tx timeout [ 49.818974][ T5963] Bluetooth: hci0: command tx timeout [ 50.068989][ T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.222412][ T61] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 50.225154][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.229202][ T61] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 50.232052][ T61] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 50.234603][ T61] usb 5-1: Manufacturer: syz [ 50.238361][ T61] usb 5-1: config 0 descriptor?? [ 50.289372][ T61] rc_core: IR keymap rc-hauppauge not found [ 50.291819][ T61] Registered IR keymap rc-empty [ 50.295312][ T61] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 50.300487][ T61] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 50.760236][ T40] kauditd_printk_skb: 134 callbacks suppressed [ 50.760246][ T40] audit: type=1400 audit(1752375526.138:224): avc: denied { mount } for pid=6209 comm="syz.3.54" name="/" dev="ramfs" ino=9798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.834819][ T40] audit: type=1400 audit(1752375526.208:225): avc: denied { create } for pid=6215 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.840407][ T6216] program syz.3.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.843425][ T40] audit: type=1400 audit(1752375526.218:226): avc: denied { read write } for pid=6215 comm="syz.3.56" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.905202][ T40] audit: type=1400 audit(1752375526.278:227): avc: denied { create } for pid=6220 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.913565][ T40] audit: type=1400 audit(1752375526.278:228): avc: denied { ioctl } for pid=6220 comm="syz.3.59" path="socket:[6978]" dev="sockfs" ino=6978 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.918677][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 50.927499][ T40] audit: type=1400 audit(1752375526.298:229): avc: denied { sys_module } for pid=6220 comm="syz.3.59" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.951916][ T40] audit: type=1400 audit(1752375526.328:230): avc: denied { setopt } for pid=6220 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.958827][ T40] audit: type=1400 audit(1752375526.328:231): avc: denied { getopt } for pid=6220 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.967817][ T40] audit: type=1400 audit(1752375526.328:232): avc: denied { bind } for pid=6220 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.973561][ T6229] netlink: 252 bytes leftover after parsing attributes in process `syz.2.60'. [ 50.973982][ T40] audit: type=1400 audit(1752375526.328:233): avc: denied { name_bind } for pid=6220 comm="syz.3.59" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.001376][ T9] usb 5-1: USB disconnect, device number 2 [ 51.056987][ T6241] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 51.185013][ T6257] warning: `syz.2.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.444933][ T5963] Bluetooth: hci1: unexpected cc 0x0c2d length: 2 < 4 [ 51.449991][ T6275] syz.2.74: attempt to access beyond end of device [ 51.449991][ T6275] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 51.454147][ T6275] syz.2.74: attempt to access beyond end of device [ 51.454147][ T6275] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 51.458171][ T6275] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 51.461889][ T6275] syz.2.74: attempt to access beyond end of device [ 51.461889][ T6275] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 51.465852][ T6275] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 51.468767][ T6275] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 51.471687][ T6275] UDF-fs: Scanning with blocksize 512 failed [ 51.474448][ T6275] syz.2.74: attempt to access beyond end of device [ 51.474448][ T6275] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 51.479511][ T6275] syz.2.74: attempt to access beyond end of device [ 51.479511][ T6275] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 51.483460][ T6275] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 51.485530][ T6276] xt_socket: unknown flags 0xc [ 51.486520][ T6275] syz.2.74: attempt to access beyond end of device [ 51.486520][ T6275] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 51.494174][ T6275] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 51.497324][ T6275] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 51.500279][ T6275] UDF-fs: Scanning with blocksize 1024 failed [ 51.502448][ T6275] syz.2.74: attempt to access beyond end of device [ 51.502448][ T6275] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 51.506448][ T6275] syz.2.74: attempt to access beyond end of device [ 51.506448][ T6275] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 51.510642][ T6275] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 51.513606][ T6275] syz.2.74: attempt to access beyond end of device [ 51.513606][ T6275] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 51.517648][ T6275] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 51.521229][ T6275] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 51.523611][ T6275] UDF-fs: Scanning with blocksize 2048 failed [ 51.525725][ T6275] syz.2.74: attempt to access beyond end of device [ 51.525725][ T6275] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 51.529832][ T6275] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 51.533043][ T6275] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 51.536001][ T6275] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 51.538416][ T6275] UDF-fs: Scanning with blocksize 4096 failed [ 51.540893][ T6275] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 51.809779][ T5963] Bluetooth: hci2: command tx timeout [ 51.889030][ T5963] Bluetooth: hci3: command tx timeout [ 52.200989][ T6289] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.332879][ T6292] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 52.337047][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.340651][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.344991][ T6292] bridge0: entered allmulticast mode [ 52.456873][ T6296] netlink: 60 bytes leftover after parsing attributes in process `syz.3.80'. [ 52.591041][ T838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.768924][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 52.773950][ T6291] loop2: detected capacity change from 0 to 2 [ 52.780326][ T5950] Dev loop2: unable to read RDB block 2 [ 52.782359][ T5950] loop2: AHDI p1 p2 p3 [ 52.783884][ T5950] loop2: partition table partially beyond EOD, truncated [ 52.787735][ T5950] loop2: p1 start 1869376613 is beyond EOD, truncated [ 52.790132][ T5950] loop2: p3 start 335544320 is beyond EOD, truncated [ 52.794853][ T6291] Dev loop2: unable to read RDB block 2 [ 52.796743][ T6291] loop2: AHDI p1 p2 p3 [ 52.798175][ T6291] loop2: partition table partially beyond EOD, truncated [ 52.800717][ T6291] loop2: p1 start 1869376613 is beyond EOD, truncated [ 52.802928][ T6291] loop2: p3 start 335544320 is beyond EOD, truncated [ 52.811511][ T838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 52.814331][ T838] usb 6-1: too many configurations: 115, using maximum allowed: 8 [ 52.818088][ T838] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 52.820770][ T838] usb 6-1: can't read configurations, error -71 [ 53.078744][ T6331] tipc: Started in network mode [ 53.081171][ T6331] tipc: Node identity 72a79818a191, cluster identity 4711 [ 53.084395][ T6331] tipc: Enabled bearer , priority 0 [ 53.089018][ T5963] Bluetooth: hci0: command tx timeout [ 53.164622][ T6331] tipc: Disabling bearer [ 53.471393][ T6348] netlink: 96 bytes leftover after parsing attributes in process `syz.1.99'. [ 53.489778][ T5963] Bluetooth: hci1: command tx timeout [ 53.501736][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 53.895854][ T6363] geneve1: entered allmulticast mode [ 53.899047][ T5963] Bluetooth: hci2: command tx timeout [ 53.949802][ T6366] openvswitch: netlink: Message has 8 unknown bytes. [ 53.956620][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 53.978992][ T5963] Bluetooth: hci3: command tx timeout [ 54.179724][ T6375] capability: warning: `syz.2.108' uses deprecated v2 capabilities in a way that may be insecure [ 54.321138][ T6389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.114'. [ 54.421660][ T6401] hfs: can't find a HFS filesystem on dev nbd0 [ 54.518760][ T6423] binder: 6422:6423 ioctl c0306201 2000000001c0 returned -11 [ 54.572457][ T6430] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 54.575320][ T6430] overlayfs: missing 'lowerdir' [ 54.901802][ T6459] trusted_key: syz.3.135 sent an empty control message without MSG_MORE. [ 54.906651][ T6454] openvswitch: netlink: ufid size 119 bytes exceeds the range (1, 16) [ 54.910429][ T6454] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 54.949632][ T6461] comedi comedi1: comedi_config --init_data is deprecated [ 55.004501][ T6470] input: syz1 as /devices/virtual/input/input8 [ 55.078191][ T6470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 55.094761][ T6475] sctp: [Deprecated]: syz.3.140 (pid 6475) Use of int in max_burst socket option. [ 55.094761][ T6475] Use struct sctp_assoc_value instead [ 55.104544][ T6476] sctp: [Deprecated]: syz.3.140 (pid 6476) Use of int in max_burst socket option. [ 55.104544][ T6476] Use struct sctp_assoc_value instead [ 55.122900][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.141'. [ 55.126230][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.141'. [ 55.136166][ T6475] sctp: [Deprecated]: syz.3.140 (pid 6475) Use of int in maxseg socket option. [ 55.136166][ T6475] Use struct sctp_assoc_value instead [ 55.355595][ T6497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=6497 comm=syz.3.147 [ 55.549066][ T837] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.700818][ T837] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 55.705230][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.708991][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.713369][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.716999][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.720717][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.725043][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.728629][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.732911][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.737429][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.741267][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.744919][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.749388][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.753537][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.757132][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.761595][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.765895][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.768737][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.772171][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.774947][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.777747][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.781181][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.784148][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.786945][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.790378][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.793929][ T837] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 55.796750][ T837] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 55.799423][ T837] usb 6-1: Product: syz [ 55.800751][ T837] usb 6-1: Manufacturer: syz [ 55.802230][ T837] usb 6-1: SerialNumber: syz [ 55.805970][ T837] usb 6-1: config 0 descriptor?? [ 55.812737][ T837] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 55.838995][ T839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.989029][ T839] usb 7-1: Using ep0 maxpacket: 32 [ 55.996676][ T839] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 55.999487][ T839] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 56.002895][ T839] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 56.006390][ T839] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 56.011616][ T839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 56.018336][ T839] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 56.021430][ T839] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 56.024046][ T839] usb 7-1: Product: syz [ 56.025341][ T839] usb 7-1: Manufacturer: syz [ 56.026807][ T839] usb 7-1: SerialNumber: syz [ 56.033178][ T839] usb 7-1: config 0 descriptor?? [ 56.038033][ T839] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 56.041291][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 56.041299][ T40] audit: type=1400 audit(1752375531.418:339): avc: denied { getopt } for pid=6511 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.042754][ T839] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 56.044772][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 56.055973][ T6512] bridge_slave_1: left allmulticast mode [ 56.057711][ T6512] bridge_slave_1: left promiscuous mode [ 56.062137][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.067288][ T6512] bridge_slave_0: left allmulticast mode [ 56.069658][ T6512] bridge_slave_0: left promiscuous mode [ 56.071562][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.111723][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 56.115075][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 56.126876][ T839] usb 6-1: USB disconnect, device number 4 [ 56.141215][ T839] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 56.146224][ T40] audit: type=1400 audit(1752375531.518:340): avc: denied { shutdown } for pid=6509 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.152891][ T6520] capability: warning: `syz.1.152' uses 32-bit capabilities (legacy support in use) [ 56.159736][ T6520] loop6: detected capacity change from 0 to 524287999 [ 56.171673][ T5959] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 56.217668][ T40] audit: type=1400 audit(1752375531.588:341): avc: denied { connect } for pid=6521 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.224490][ T40] audit: type=1400 audit(1752375531.588:342): avc: denied { setopt } for pid=6521 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.241881][ T6508] usb 7-1: USB disconnect, device number 2 [ 56.245415][ T6508] ldusb 7-1:0.0: LD USB Device #1 now disconnected [ 56.335505][ T40] audit: type=1400 audit(1752375531.708:343): avc: denied { read } for pid=6533 comm="syz.3.156" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.342774][ T40] audit: type=1400 audit(1752375531.708:344): avc: denied { open } for pid=6533 comm="syz.3.156" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.344576][ T6534] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.350378][ T40] audit: type=1400 audit(1752375531.708:345): avc: denied { mount } for pid=6533 comm="syz.3.156" name="/" dev="autofs" ino=13434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 56.352887][ T6534] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.352907][ T6534] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.359932][ T40] audit: type=1400 audit(1752375531.718:346): avc: denied { read } for pid=6533 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.362498][ T6534] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.379745][ T6534] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.383489][ T6534] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.386173][ T6534] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.388303][ T6534] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.390492][ T6534] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.390642][ T40] audit: type=1400 audit(1752375531.768:347): avc: denied { ioctl } for pid=6535 comm="syz.0.157" path="socket:[12406]" dev="sockfs" ino=12406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.392605][ T6534] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.392936][ T6536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6536 comm=syz.0.157 [ 56.406317][ T6534] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.408411][ T6534] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.427327][ T40] audit: type=1400 audit(1752375531.798:348): avc: denied { shutdown } for pid=6541 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.111272][ T6552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.162'. [ 57.805285][ T6580] xt_hashlimit: size too large, truncated to 1048576 [ 58.209576][ T6593] nbd: couldn't find a device at index -1605786504 [ 58.289476][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 58.351635][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 58.573755][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.577046][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.631832][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 58.679591][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.683375][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.750085][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.753815][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.757641][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.761534][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.765255][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.811385][ T6639] rtc_cmos 00:05: Alarms can be up to one day in the future [ 58.819593][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.822682][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.866301][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.869627][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.925667][ T6630] chnl_net:caif_netlink_parms(): no params data found [ 58.943101][ T6653] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 58.945331][ T6653] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 58.958361][ T6649] [U]  [ 59.030069][ T6657] tipc: Enabled bearer , priority 0 [ 59.033198][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.035533][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.037851][ T6630] bridge_slave_0: entered allmulticast mode [ 59.040619][ T6630] bridge_slave_0: entered promiscuous mode [ 59.067837][ T6657] syzkaller0: entered promiscuous mode [ 59.069815][ T6657] syzkaller0: entered allmulticast mode [ 59.072110][ T6657] tipc: Resetting bearer [ 59.074729][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.077049][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.079470][ T6630] bridge_slave_1: entered allmulticast mode [ 59.082154][ T6630] bridge_slave_1: entered promiscuous mode [ 59.114128][ T6655] tipc: Resetting bearer [ 59.197753][ T6664] vivid-000: ================= START STATUS ================= [ 59.202735][ T6664] vivid-000: Test Pattern: 75% Colorbar [ 59.208449][ T6664] vivid-000: Fill Percentage of Frame: 100 [ 59.211173][ T6664] vivid-000: Horizontal Movement: No Movement [ 59.213654][ T6664] vivid-000: Vertical Movement: No Movement [ 59.216042][ T6664] vivid-000: OSD Text Mode: All [ 59.218041][ T6664] vivid-000: Show Border: false [ 59.220649][ T6664] vivid-000: Show Square: false [ 59.222695][ T6664] vivid-000: Sensor Flipped Horizontally: false [ 59.225184][ T6664] vivid-000: Sensor Flipped Vertically: false [ 59.230680][ T6664] vivid-000: Insert SAV Code in Image: false [ 59.232572][ T6664] vivid-000: Insert EAV Code in Image: false [ 59.234494][ T6664] vivid-000: Insert Video Guard Band: false [ 59.236432][ T6664] vivid-000: Reduced Framerate: false [ 59.238153][ T6664] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 59.240631][ T6664] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 59.243845][ T6664] vivid-000: Enable Capture Cropping: false grabbed [ 59.246727][ T6664] vivid-000: Enable Capture Composing: true grabbed [ 59.250570][ T6664] vivid-000: Enable Capture Scaler: true grabbed [ 59.253075][ T6664] vivid-000: Timestamp Source: End of Frame [ 59.255543][ T6664] vivid-000: Colorspace: sRGB [ 59.257408][ T6664] vivid-000: Transfer Function: Default [ 59.259694][ T6664] vivid-000: Y'CbCr Encoding: Default [ 59.261976][ T6664] vivid-000: HSV Encoding: Hue 0-179 [ 59.264157][ T6664] vivid-000: Quantization: Default [ 59.266240][ T6664] vivid-000: Apply Alpha To Red Only: false [ 59.268624][ T6664] vivid-000: Standard Aspect Ratio: 4x3 [ 59.270930][ T6664] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 59.273871][ T6664] vivid-000: DV Timings: 640x480p59 inactive [ 59.276235][ T6664] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 59.279155][ T6664] vivid-000: Maximum EDID Blocks: 2 [ 59.281157][ T6664] vivid-000: Limited RGB Range (16-235): false [ 59.283525][ T6664] vivid-000: Rx RGB Quantization Range: Automatic [ 59.285976][ T6664] vivid-000: Power Present: 0x00000001 [ 59.288151][ T6664] tpg source WxH: 320x240 (Luma) [ 59.293785][ T6664] tpg field: 1 [ 59.295265][ T6664] tpg crop: (0,0)/320x240 [ 59.297062][ T6664] tpg compose: (0,0)/320x240 [ 59.298831][ T6664] tpg colorspace: 8 [ 59.300266][ T6664] tpg transfer function: 0/2 [ 59.301768][ T6664] tpg quantization: 0/1 [ 59.303107][ T6664] tpg RGB range: 0/2 [ 59.304451][ T6664] vivid-000: ================== END STATUS ================== [ 59.634961][ T6672] ata1.00: invalid cdb length 6 [ 59.843340][ T6655] tipc: Disabling bearer [ 59.849944][ T6630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.853446][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 59.873018][ T6630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.930540][ T6630] team0: Port device team_slave_0 added [ 59.934824][ T6630] team0: Port device team_slave_1 added [ 59.963988][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 59.994410][ T1143] bridge_slave_1: left allmulticast mode [ 59.997476][ T1143] bridge_slave_1: left promiscuous mode [ 60.000891][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.007213][ T1143] bridge_slave_0: left allmulticast mode [ 60.009817][ T1143] bridge_slave_0: left promiscuous mode [ 60.011705][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.210686][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.215228][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.218685][ T1143] bond0 (unregistering): Released all slaves [ 60.225587][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 60.231674][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.233945][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.243196][ T6630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.259665][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.261849][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.270950][ T6630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.378016][ T6630] hsr_slave_0: entered promiscuous mode [ 60.380306][ T6630] hsr_slave_1: entered promiscuous mode [ 60.381256][ T6697] bio_check_eod: 3 callbacks suppressed [ 60.381265][ T6697] syz.1.203: attempt to access beyond end of device [ 60.381265][ T6697] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 60.382323][ T6630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.383889][ T6697] syz.1.203: attempt to access beyond end of device [ 60.383889][ T6697] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 60.387783][ T6630] Cannot create hsr debugfs directory [ 60.390526][ T6697] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.398750][ T6697] syz.1.203: attempt to access beyond end of device [ 60.398750][ T6697] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 60.404032][ T6697] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.407617][ T6697] syz.1.203: attempt to access beyond end of device [ 60.407617][ T6697] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 60.411974][ T6697] syz.1.203: attempt to access beyond end of device [ 60.411974][ T6697] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 60.415921][ T6697] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.419055][ T6697] syz.1.203: attempt to access beyond end of device [ 60.419055][ T6697] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 60.423135][ T6697] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.426418][ T6697] syz.1.203: attempt to access beyond end of device [ 60.426418][ T6697] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 60.430878][ T6697] syz.1.203: attempt to access beyond end of device [ 60.430878][ T6697] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 60.434873][ T6697] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.438181][ T6697] syz.1.203: attempt to access beyond end of device [ 60.438181][ T6697] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 60.442989][ T6697] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.446169][ T6697] syz.1.203: attempt to access beyond end of device [ 60.446169][ T6697] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 60.452257][ T6697] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.455304][ T6697] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.458231][ T6697] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 60.635581][ T1143] hsr_slave_0: left promiscuous mode [ 60.638250][ T1143] hsr_slave_1: left promiscuous mode [ 60.640724][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.643269][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.646484][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.649404][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.668529][ T1143] veth1_macvtap: left promiscuous mode [ 60.670679][ T1143] veth0_macvtap: left promiscuous mode [ 60.672477][ T1143] veth1_vlan: left promiscuous mode [ 60.674207][ T1143] veth0_vlan: left promiscuous mode [ 60.849024][ T5963] Bluetooth: hci3: command tx timeout [ 61.029321][ T6749] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 61.248796][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 61.325108][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 61.325119][ T40] audit: type=1400 audit(1752375536.698:386): avc: denied { accept } for pid=6775 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.325270][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 61.421690][ T40] audit: type=1400 audit(1752375536.798:387): avc: denied { read } for pid=6780 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.788658][ T6630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.795669][ T6630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.801595][ T6630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.808291][ T6630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.871413][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.880100][ T6630] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.905951][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.909346][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.914287][ T40] audit: type=1400 audit(1752375537.288:388): avc: denied { read } for pid=6826 comm="syz.2.217" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 61.923788][ T40] audit: type=1400 audit(1752375537.288:389): avc: denied { open } for pid=6826 comm="syz.2.217" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 61.932371][ T40] audit: type=1400 audit(1752375537.298:390): avc: denied { ioctl } for pid=6826 comm="syz.2.217" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 61.935332][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.943184][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.961241][ T6832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=203 sclass=netlink_route_socket pid=6832 comm=syz.2.219 [ 61.974556][ T6832] netlink: 6 bytes leftover after parsing attributes in process `syz.2.219'. [ 62.106416][ T6630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.161199][ T40] audit: type=1400 audit(1752375537.538:391): avc: denied { listen } for pid=6846 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.307362][ T40] audit: type=1400 audit(1752375537.678:392): avc: denied { ioctl } for pid=6882 comm="syz.0.222" path="socket:[11261]" dev="sockfs" ino=11261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.324155][ T40] audit: type=1400 audit(1752375537.678:393): avc: denied { connect } for pid=6882 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.324841][ T6630] veth0_vlan: entered promiscuous mode [ 62.332411][ T40] audit: type=1400 audit(1752375537.688:394): avc: denied { write } for pid=6882 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.342242][ T40] audit: type=1400 audit(1752375537.698:395): avc: denied { ioctl } for pid=6882 comm="syz.0.222" path="socket:[11800]" dev="sockfs" ino=11800 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.351155][ T6630] veth1_vlan: entered promiscuous mode [ 62.375243][ T6630] veth0_macvtap: entered promiscuous mode [ 62.378755][ T6630] veth1_macvtap: entered promiscuous mode [ 62.395998][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.408610][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.414520][ T6630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.417688][ T6630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.421238][ T6630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.423996][ T6630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.470867][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.473278][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.490669][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.493130][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.939265][ T5963] Bluetooth: hci3: command tx timeout [ 63.046425][ T6950] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.444817][ T6987] netlink: 'syz.1.240': attribute type 239 has an invalid length. [ 63.455248][ T6983] netlink: 'syz.4.239': attribute type 4 has an invalid length. [ 63.457752][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'. [ 63.530935][ T6992] netlink: 112 bytes leftover after parsing attributes in process `syz.4.241'. [ 63.691985][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 63.713898][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'. [ 63.716901][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 63.885311][ T7041] netlink: 'syz.2.254': attribute type 13 has an invalid length. [ 63.911144][ T7041] gretap0: refused to change device tx_queue_len [ 63.913178][ T7041] net_ratelimit: 3322 callbacks suppressed [ 63.913185][ T7041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 63.927659][ T7041] nfs: Unknown parameter 'TIPCv2' [ 63.982310][ T7044] syz_tun: entered allmulticast mode [ 63.990154][ T7043] syz_tun: left allmulticast mode [ 64.228061][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 64.599018][ T837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.749390][ T837] usb 7-1: no configurations [ 64.750937][ T837] usb 7-1: can't read configurations, error -22 [ 64.778232][ T7084] kernel profiling enabled (shift: 7) [ 64.890078][ T837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.900556][ T7089] kAFS: unable to lookup cell '/,c¾ûL' [ 64.928598][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 64.999443][ T7103] overlayfs: overlapping lowerdir path [ 65.019705][ T5963] Bluetooth: hci3: command tx timeout [ 65.060046][ T837] usb 7-1: no configurations [ 65.061636][ T837] usb 7-1: can't read configurations, error -22 [ 65.065880][ T837] usb usb7-port1: attempt power cycle [ 65.428941][ T837] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 65.450276][ T837] usb 7-1: no configurations [ 65.451823][ T837] usb 7-1: can't read configurations, error -22 [ 65.579161][ T837] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.603210][ T837] usb 7-1: no configurations [ 65.605289][ T837] usb 7-1: can't read configurations, error -22 [ 65.608261][ T837] usb usb7-port1: unable to enumerate USB device [ 65.806604][ T7117] evm: overlay not supported [ 65.851203][ T7119] netlink: 'syz.4.276': attribute type 11 has an invalid length. [ 65.853616][ T7119] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.276'. [ 65.857411][ T7119] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 65.873129][ T7119] team0: Port device wlan1 added [ 65.879730][ T7118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.997596][ T7131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.279'. [ 66.001085][ T7131] netlink: 76 bytes leftover after parsing attributes in process `syz.4.279'. [ 66.104763][ T7134] kvm: pic: non byte read [ 66.107479][ T7134] kvm: pic: level sensitive irq not supported [ 66.107759][ T7134] kvm: pic: non byte read [ 66.112335][ T7134] kvm: pic: level sensitive irq not supported [ 66.112566][ T7134] kvm: pic: non byte read [ 66.116909][ T7134] kvm: pic: level sensitive irq not supported [ 66.117138][ T7134] kvm: pic: non byte read [ 66.329114][ T40] kauditd_printk_skb: 23631 callbacks suppressed [ 66.329130][ T40] audit: type=1326 audit(1752375541.708:24027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.339161][ T40] audit: type=1326 audit(1752375541.708:24028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.346812][ T40] audit: type=1326 audit(1752375541.708:24029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.355134][ T40] audit: type=1326 audit(1752375541.708:24030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.362445][ T40] audit: type=1326 audit(1752375541.708:24031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.369757][ T40] audit: type=1326 audit(1752375541.708:24032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.376897][ T40] audit: type=1326 audit(1752375541.708:24033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.384425][ T40] audit: type=1326 audit(1752375541.708:24034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.391681][ T40] audit: type=1326 audit(1752375541.708:24035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.399870][ T40] audit: type=1326 audit(1752375541.708:24036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2058e929 code=0x50000 [ 66.425379][ T7137] openvswitch: netlink: IP tunnel dst address not specified [ 66.678968][ T24] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 66.831707][ T24] usb 9-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 66.836073][ T24] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.840021][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 66.843699][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.849318][ T24] usb 9-1: config 0 descriptor?? [ 67.055692][ T837] usb 9-1: USB disconnect, device number 2 [ 67.089503][ T5963] Bluetooth: hci3: command tx timeout [ 67.426667][ T7145] bio_check_eod: 2 callbacks suppressed [ 67.426678][ T7145] syz.1.284: attempt to access beyond end of device [ 67.426678][ T7145] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 67.440097][ T7145] XFS (nbd1): SB validate failed with error -5. [ 67.488646][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.286'. [ 67.653443][ T7171] geneve2: entered promiscuous mode [ 67.658632][ T7171] hfsplus: Unknown parameter 'brrièD ¥ã5éer?Àb–' [ 67.773162][ T7182] delete_channel: no stack [ 67.890396][ T7189] IPVS: set_ctl: invalid protocol: 8 10.1.1.0:20000 [ 67.939662][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 67.945316][ T7195] macvlan0: entered promiscuous mode [ 67.948517][ T7195] batadv_slave_1: entered promiscuous mode [ 68.023948][ T7199] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 68.035270][ T7202] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 68.052611][ T7199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.056405][ T7199] bond1: (slave bond2): making interface the new active one [ 68.059104][ T7199] bond1: (slave bond2): Enslaving as an active interface with an up link [ 68.072897][ T7199] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 68.077692][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 68.082617][ T7199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.363699][ T7214] veth0_virt_wifi: entered allmulticast mode [ 68.810500][ T7236] JFS: discard option not supported on device [ 68.813836][ T7236] syz.2.313: attempt to access beyond end of device [ 68.813836][ T7236] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 68.817760][ T7236] syz.2.313: attempt to access beyond end of device [ 68.817760][ T7236] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 68.822060][ T7236] Mount JFS Failure: -5 [ 69.059828][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 69.507040][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 69.510295][ T7259] nbd: illegal input index 1879048192 [ 69.518258][ T7262] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 69.535132][ T7262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1283 sclass=netlink_route_socket pid=7262 comm=syz.1.322 [ 69.544191][ T7262] bond1: (slave gretap1): making interface the new active one [ 69.545071][ T7265] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 69.546739][ T7262] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 69.555113][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 69.556568][ T7265] IPv4: Oversized IP packet from 127.202.26.0 [ 69.558795][ T7262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.750670][ T7280] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 69.825272][ T7292] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 69.843969][ T10] cfg80211: failed to load regulatory.db [ 69.902642][ T7292] block device autoloading is deprecated and will be removed. [ 70.104409][ T7322] __nla_validate_parse: 3 callbacks suppressed [ 70.104419][ T7322] netlink: 36 bytes leftover after parsing attributes in process `syz.0.340'. [ 70.305020][ T7338] 9pnet_virtio: no channels available for device syz [ 70.481013][ T7348] netlink: 'syz.4.350': attribute type 2 has an invalid length. [ 70.483136][ T7352] ucma_write: process 243 (syz.0.352) changed security contexts after opening file descriptor, this is not allowed. [ 70.733300][ T7368] Bluetooth: MGMT ver 1.23 [ 70.778767][ T7372] netlink: 'syz.1.355': attribute type 10 has an invalid length. [ 70.784848][ T7372] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 70.897494][ T7384] openvswitch: netlink: Duplicate key (type 0). [ 70.926449][ T7387] netlink: 232 bytes leftover after parsing attributes in process `syz.1.361'. [ 70.938995][ T6018] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 71.068290][ T61] IPVS: starting estimator thread 0... [ 71.108957][ T6018] usb 9-1: Using ep0 maxpacket: 8 [ 71.111925][ T6018] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 71.114535][ T6018] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.117623][ T6018] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.121078][ T6018] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.124367][ T6018] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.128352][ T6018] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.131510][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.159615][ T7392] IPVS: using max 43 ests per chain, 103200 per kthread [ 71.175345][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.178069][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.199371][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.364'. [ 71.340306][ T6018] usb 9-1: GET_CAPABILITIES returned 0 [ 71.342603][ T6018] usbtmc 9-1:16.0: can't read capabilities [ 71.384712][ T40] kauditd_printk_skb: 11172 callbacks suppressed [ 71.384722][ T40] audit: type=1400 audit(1752375546.758:35209): avc: denied { write } for pid=7409 comm="syz.1.368" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.397096][ T40] audit: type=1400 audit(1752375546.768:35210): avc: denied { open } for pid=7409 comm="syz.1.368" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.404357][ T40] audit: type=1400 audit(1752375546.778:35211): avc: denied { ioctl } for pid=7409 comm="syz.1.368" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.413596][ T40] audit: type=1400 audit(1752375546.788:35212): avc: denied { append } for pid=7409 comm="syz.1.368" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.588736][ T40] audit: type=1400 audit(1752375546.958:35213): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.633275][ T40] audit: type=1400 audit(1752375547.008:35214): avc: denied { read } for pid=7414 comm="syz.1.369" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.641287][ T40] audit: type=1400 audit(1752375547.008:35215): avc: denied { open } for pid=7414 comm="syz.1.369" path="/dev/sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.650580][ T40] audit: type=1400 audit(1752375547.008:35216): avc: denied { ioctl } for pid=7414 comm="syz.1.369" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.659372][ T40] audit: type=1400 audit(1752375547.018:35217): avc: denied { create } for pid=7414 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.665552][ T40] audit: type=1400 audit(1752375547.018:35218): avc: denied { getopt } for pid=7414 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.694233][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.698095][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.703948][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 71.910928][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 71.913711][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 72.002076][ T7444] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 72.013491][ T7444] netlink: 'syz.0.378': attribute type 21 has an invalid length. [ 72.016045][ T7444] netlink: 156 bytes leftover after parsing attributes in process `syz.0.378'. [ 72.038801][ T7447] netlink: 'syz.1.379': attribute type 5 has an invalid length. [ 72.352802][ T7467] ipt_REJECT: ECHOREPLY no longer supported. [ 72.420962][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 72.547309][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 72.912146][ T7478] 9pnet_fd: Insufficient options for proto=fd [ 73.152530][ T7498] netlink: 104 bytes leftover after parsing attributes in process `syz.0.396'. [ 73.352337][ T7517] syz_tun: entered allmulticast mode [ 73.532489][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7536 comm=syz.2.408 [ 73.537694][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7536 comm=syz.2.408 [ 73.550355][ T7520] syz_tun: left allmulticast mode [ 73.632172][ T5963] Bluetooth: hci2: Dropping invalid advertising data [ 73.633617][ T7548] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 73.634579][ T5963] Bluetooth: hci2: Malformed LE Event: 0x02 [ 73.704578][ T10] usb 9-1: USB disconnect, device number 3 [ 73.733275][ T7553] netlink: 'syz.2.414': attribute type 4 has an invalid length. [ 73.736464][ T7553] netlink: 152 bytes leftover after parsing attributes in process `syz.2.414'. [ 73.747911][ T7553] : renamed from bond0 (while UP) [ 74.084126][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 74.219950][ T7588] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7588 comm=syz.1.421 [ 74.258992][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 74.263219][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 74.265974][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 74.268824][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.273122][ T10] usb 9-1: config 0 descriptor?? [ 74.704783][ T10] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 74.782375][ T7605] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 74.786271][ T7605] UDF-fs: Scanning with blocksize 2048 failed [ 74.793057][ T7605] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 74.797827][ T7605] UDF-fs: Scanning with blocksize 4096 failed [ 74.975005][ T7615] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 75.007016][ T7619] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 75.015515][ T7619] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 75.017875][ T7619] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 75.021431][ T7619] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 75.063591][ T7625] No source specified [ 75.182458][ T7639] netlink: 'syz.1.431': attribute type 9 has an invalid length. [ 75.341335][ T7648] __nla_validate_parse: 5 callbacks suppressed [ 75.341345][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 75.352400][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 75.393658][ T6508] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 75.558605][ T6508] usb 7-1: Using ep0 maxpacket: 16 [ 75.563163][ T6508] usb 7-1: config 0 has no interfaces? [ 75.565107][ T6508] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 75.572617][ T7662] trusted_key: encrypted_key: insufficient parameters specified [ 75.575584][ T6508] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.581336][ T7662] gfs2: gfs2 mount does not exist [ 75.587767][ T6508] usb 7-1: config 0 descriptor?? [ 75.743017][ T7676] xt_limit: Overflow, try lower: 1207959552/384 [ 75.802847][ T24] usb 7-1: USB disconnect, device number 7 [ 75.813682][ T7693] Bluetooth: MGMT ver 1.23 [ 75.832859][ T7693] IPv6: addrconf: prefix option has invalid lifetime [ 75.927024][ T7699] netlink: 'syz.0.446': attribute type 5 has an invalid length. [ 76.079892][ T7711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51987 sclass=netlink_route_socket pid=7711 comm=syz.0.450 [ 76.178580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.197960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.405591][ T7727] overlayfs: missing 'lowerdir' [ 76.442601][ T7727] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 76.444796][ T7727] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.448405][ T7727] vhci_hcd vhci_hcd.0: Device attached [ 76.452277][ T7731] vhci_hcd: connection closed [ 76.455519][ T12] vhci_hcd: stop threads [ 76.458926][ T12] vhci_hcd: release socket [ 76.460381][ T12] vhci_hcd: disconnect device [ 76.528944][ T40] kauditd_printk_skb: 316 callbacks suppressed [ 76.528955][ T40] audit: type=1400 audit(1752899839.811:35535): avc: denied { write } for pid=7728 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.549017][ T40] audit: type=1400 audit(1752899839.830:35536): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.643339][ T40] audit: type=1400 audit(1752899839.927:35537): avc: denied { create } for pid=7736 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.651368][ T40] audit: type=1400 audit(1752899839.937:35538): avc: denied { write } for pid=7736 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.657651][ T40] audit: type=1400 audit(1752899839.937:35539): avc: denied { read } for pid=7736 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.724631][ T40] audit: type=1400 audit(1752899840.005:35540): avc: denied { mount } for pid=7740 comm="syz.2.459" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.731425][ T40] audit: type=1400 audit(1752899840.005:35541): avc: denied { unlink } for pid=7740 comm="syz.2.459" name="#15" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.741560][ T40] audit: type=1400 audit(1752899840.005:35542): avc: denied { mount } for pid=7740 comm="syz.2.459" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.750072][ T40] audit: type=1400 audit(1752899840.005:35543): avc: denied { mounton } for pid=7740 comm="syz.2.459" path="/123/file0" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 76.757602][ T40] audit: type=1400 audit(1752899840.005:35544): avc: denied { mount } for pid=7740 comm="syz.2.459" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.788012][ T7746] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 76.830955][ T53] usb 9-1: USB disconnect, device number 4 [ 77.005577][ T7759] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 77.018088][ T7759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.022169][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 77.033923][ T7758] vlan2: entered allmulticast mode [ 77.035999][ T7758] veth1: entered allmulticast mode [ 77.154532][ T7776] netlink: 'syz.2.471': attribute type 4 has an invalid length. [ 77.157958][ T7778] ata3.00: invalid multi_count 1 ignored [ 77.214591][ T7787] netlink: 'syz.2.474': attribute type 10 has an invalid length. [ 77.217125][ T7787] lo: entered promiscuous mode [ 77.218791][ T7787] : (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.282836][ T7789] 9pnet_fd: p9_fd_create_unix (7789): problem connecting socket: éq‰Y’3aK: -512 [ 77.306809][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.460678][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 77.464198][ T54] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 77.469230][ T54] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 77.473314][ T54] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 77.476551][ T54] usb 5-1: Product: syz [ 77.477938][ T54] usb 5-1: Manufacturer: syz [ 77.479386][ T54] usb 5-1: SerialNumber: syz [ 77.482727][ T54] usb 5-1: config 0 descriptor?? [ 77.484841][ T7763] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.703379][ T61] usb 5-1: USB disconnect, device number 3 [ 78.410286][ T7824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.482'. [ 78.604695][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 78.730992][ T7842] serio: Serial port ptm1 [ 79.084568][ T6508] hid (null): unknown global tag 0xd [ 79.086732][ T6508] hid (null): unknown global tag 0xe [ 79.092901][ T6508] hid-generic 0008:0001:03FF.0003: unknown global tag 0xd [ 79.096460][ T6508] hid-generic 0008:0001:03FF.0003: item 0 2 1 13 parsing failed [ 79.099641][ T6508] hid-generic 0008:0001:03FF.0003: probe with driver hid-generic failed with error -22 [ 79.131264][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 79.170729][ T7862] tmpfs: Unknown parameter 'ÿ' [ 79.262905][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 79.307887][ T7864] mmap: syz.4.495 (7864) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.442329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.741783][ T7904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=7904 comm=syz.1.506 [ 79.800449][ T7904] Bluetooth: MGMT ver 1.23 [ 79.955951][ T7923] kvm: user requested TSC rate below hardware speed [ 79.967026][ T7923] kAFS: unable to lookup cell '/,c¾ûL' [ 80.059674][ T7934] tmpfs: Cannot disable swap on remount [ 80.065275][ T7937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.068487][ T7937] batadv_slave_0: entered promiscuous mode [ 80.070362][ T7937] batadv_slave_0: entered allmulticast mode [ 80.159954][ T7946] netfs: Couldn't get user pages (rc=-14) [ 80.379300][ T7958] loop2: detected capacity change from 0 to 7 [ 80.389396][ T7958] Dev loop2: unable to read RDB block 7 [ 80.392002][ T7958] loop2: unable to read partition table [ 80.394355][ T7958] loop2: partition table beyond EOD, truncated [ 80.394934][ T7960] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 80.399574][ T7958] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 80.445570][ T7960] pim6reg1: entered promiscuous mode [ 80.447611][ T7960] pim6reg1: entered allmulticast mode [ 80.490756][ T7964] mkiss: ax0: crc mode is auto. [ 81.356955][ T7992] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 81.458312][ T8001] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 81.498323][ T8006] netlink: 'syz.4.543': attribute type 2 has an invalid length. [ 81.721646][ T40] kauditd_printk_skb: 323 callbacks suppressed [ 81.721655][ T40] audit: type=1400 audit(1752899844.889:35868): avc: denied { sys_module } for pid=8025 comm="syz.1.550" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.732021][ T40] audit: type=1400 audit(1752899844.898:35869): avc: denied { ioctl } for pid=8018 comm="syz.4.547" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.795897][ T40] audit: type=1400 audit(1752899844.957:35870): avc: denied { create } for pid=8032 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.806107][ T40] audit: type=1400 audit(1752899844.957:35871): avc: denied { setopt } for pid=8032 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.837768][ T8035] mkiss: ax0: crc mode is auto. [ 81.842251][ T40] audit: type=1400 audit(1752899845.006:35872): avc: denied { read write } for pid=8034 comm="syz.0.553" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.853108][ T40] audit: type=1400 audit(1752899845.006:35873): avc: denied { open } for pid=8034 comm="syz.0.553" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.862899][ T40] audit: type=1400 audit(1752899845.006:35874): avc: denied { read } for pid=5666 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 81.871067][ T53] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 82.034592][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 82.038118][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.041955][ T53] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.045826][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.058436][ T40] audit: type=1400 audit(1752899845.212:35875): avc: denied { bind } for pid=8043 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.062890][ T53] usb 9-1: config 0 descriptor?? [ 82.064756][ T40] audit: type=1400 audit(1752899845.212:35876): avc: denied { accept } for pid=8043 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.083849][ T40] audit: type=1400 audit(1752899845.232:35877): avc: denied { read write } for pid=5951 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.283516][ T53] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 82.491168][ T61] usb 9-1: USB disconnect, device number 5 [ 82.677567][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.563'. [ 83.040761][ T8081] netlink: 'syz.4.567': attribute type 29 has an invalid length. [ 83.043999][ T8081] netlink: 'syz.4.567': attribute type 29 has an invalid length. [ 83.047504][ T8081] netlink: 500 bytes leftover after parsing attributes in process `syz.4.567'. [ 83.051576][ T8081] unsupported nla_type 58 [ 83.399455][ T53] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 83.562337][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 83.574002][ T63] Bluetooth: hci0: command 0x0406 tx timeout [ 83.577091][ T53] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.580949][ T53] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.584021][ T53] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.587868][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.591897][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.596056][ T53] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 83.599547][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.611582][ T8083] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.616583][ T53] hub 9-1:1.0: bad descriptor, ignoring hub [ 83.618484][ T53] hub 9-1:1.0: probe with driver hub failed with error -5 [ 83.621871][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 83.624206][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 83.627752][ T53] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 83.629589][ T53] cdc_wdm 9-1:1.0: Unknown control protocol [ 83.733642][ T8098] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 83.747136][ T5963] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 83.750201][ T5963] Bluetooth: hci2: Injecting HCI hardware error event [ 83.753825][ T5963] Bluetooth: hci2: hardware error 0x00 [ 83.911655][ T8119] fuse: Unknown parameter 'us]r_id' [ 83.943325][ T54] usb 9-1: USB disconnect, device number 6 [ 83.943709][ T8121] tmpfs: User quota block hardlimit too large. [ 84.231572][ T8135] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.246267][ T8135] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.581'. [ 84.398703][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 84.843152][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 85.061703][ T8172] syz.0.595: attempt to access beyond end of device [ 85.061703][ T8172] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 85.065877][ T8172] syz.0.595: attempt to access beyond end of device [ 85.065877][ T8172] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 85.070498][ T8172] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.073543][ T8172] syz.0.595: attempt to access beyond end of device [ 85.073543][ T8172] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 85.077984][ T8172] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.082345][ T8172] syz.0.595: attempt to access beyond end of device [ 85.082345][ T8172] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 85.086418][ T8172] syz.0.595: attempt to access beyond end of device [ 85.086418][ T8172] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 85.090934][ T8172] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.093957][ T8172] syz.0.595: attempt to access beyond end of device [ 85.093957][ T8172] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 85.098453][ T8172] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.102268][ T8172] syz.0.595: attempt to access beyond end of device [ 85.102268][ T8172] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 85.106223][ T8172] syz.0.595: attempt to access beyond end of device [ 85.106223][ T8172] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 85.110447][ T8172] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.113853][ T8172] syz.0.595: attempt to access beyond end of device [ 85.113853][ T8172] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 85.118335][ T8172] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.121870][ T8172] syz.0.595: attempt to access beyond end of device [ 85.121870][ T8172] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 85.127559][ T8172] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.130721][ T8172] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.133616][ T8172] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 85.149259][ T8170] nbd0: detected capacity change from 0 to 8589934592 [ 85.154752][ T5959] block nbd0: Send control failed (result -89) [ 85.157015][ T5959] block nbd0: Request send failed, requeueing [ 85.161101][ T63] block nbd0: Receive control failed (result -32) [ 85.161427][ T118] block nbd0: Dead connection, failed to find a fallback [ 85.165648][ T118] block nbd0: shutting down sockets [ 85.167771][ T118] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.172187][ T118] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.175630][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.178838][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.182724][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.186036][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.188755][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191755][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.194898][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.198096][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.203537][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.206980][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.209889][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.213013][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.215868][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.219213][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.221871][ T5959] ldm_validate_partition_table(): Disk read failed. [ 85.223989][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.226876][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.229973][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.233015][ T5959] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.235590][ T5959] Dev nbd0: unable to read RDB block 0 [ 85.237711][ T5959] nbd0: unable to read partition table [ 85.242524][ T5959] ldm_validate_partition_table(): Disk read failed. [ 85.244802][ T5959] Dev nbd0: unable to read RDB block 0 [ 85.246948][ T5959] nbd0: unable to read partition table [ 85.413736][ T8177] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.445495][ T8186] netlink: 48 bytes leftover after parsing attributes in process `syz.1.600'. [ 85.453570][ T8186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26973 sclass=netlink_route_socket pid=8186 comm=syz.1.600 [ 85.466045][ T8184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.639390][ T8189] can0: slcan on ttyS3. [ 85.715914][ T8189] can0 (unregistered): slcan off ttyS3. [ 85.844529][ T5963] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 85.848668][ T8201] syz.0.602 (8201): attempted to duplicate a private mapping with mremap. This is not supported. [ 86.407602][ T8221] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.608'. [ 86.440664][ T8223] pim6reg: entered allmulticast mode [ 86.443588][ T8223] pim6reg: left allmulticast mode [ 86.784920][ T8226] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 86.831665][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 86.831681][ T40] audit: type=1400 audit(1752899850.925:36082): avc: denied { create } for pid=8227 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.840818][ T40] audit: type=1400 audit(1752899850.925:36083): avc: denied { read write } for pid=8227 comm="syz.0.611" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.851839][ T40] audit: type=1400 audit(1752899850.925:36084): avc: denied { open } for pid=8227 comm="syz.0.611" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.853883][ T8228] ------------[ cut here ]------------ [ 86.861129][ T40] audit: type=1400 audit(1752899850.925:36085): avc: denied { ioctl } for pid=8227 comm="syz.0.611" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.863582][ T8228] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/das16m1.c:525:9 [ 86.875319][ T8228] shift exponent 42342 is too large for 32-bit type 'int' [ 86.879648][ T8228] CPU: 1 UID: 0 PID: 8228 Comm: syz.0.611 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 86.879666][ T8228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.879673][ T8228] Call Trace: [ 86.879677][ T8228] [ 86.879682][ T8228] dump_stack_lvl+0x16c/0x1f0 [ 86.879719][ T8228] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 86.879751][ T8228] das16m1_attach.cold+0x19/0x1e [ 86.879767][ T8228] comedi_device_attach+0x3b3/0x900 [ 86.879788][ T8228] do_devconfig_ioctl+0x1a7/0x580 [ 86.879807][ T8228] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 86.879835][ T8228] ? find_held_lock+0x2b/0x80 [ 86.879853][ T8228] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 86.879869][ T8228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.879883][ T8228] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 86.879896][ T8228] ? do_vfs_ioctl+0x523/0x1a60 [ 86.879910][ T8228] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 86.879926][ T8228] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 86.879943][ T8228] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 86.879961][ T8228] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 86.879983][ T8228] ? hook_file_ioctl_common+0x145/0x410 [ 86.880005][ T8228] ? selinux_file_ioctl+0x180/0x270 [ 86.880020][ T8228] ? selinux_file_ioctl+0xb4/0x270 [ 86.880037][ T8228] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 86.880050][ T8228] __x64_sys_ioctl+0x18e/0x210 [ 86.880065][ T8228] do_syscall_64+0xcd/0x4c0 [ 86.880083][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.880094][ T8228] RIP: 0033:0x7f22dd78e929 [ 86.880105][ T8228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.880116][ T8228] RSP: 002b:00007f22de6a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.880127][ T8228] RAX: ffffffffffffffda RBX: 00007f22dd9b5fa0 RCX: 00007f22dd78e929 [ 86.880134][ T8228] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000008 [ 86.880141][ T8228] RBP: 00007f22dd810b39 R08: 0000000000000000 R09: 0000000000000000 [ 86.880148][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.880154][ T8228] R13: 0000000000000000 R14: 00007f22dd9b5fa0 R15: 00007ffc1414d088 [ 86.880169][ T8228] [ 86.880173][ T8228] ---[ end trace ]--- [ 86.957517][ T8228] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 86.959860][ T8228] CPU: 0 UID: 0 PID: 8228 Comm: syz.0.611 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 86.963542][ T8228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.966899][ T8228] Call Trace: [ 86.967961][ T8228] [ 86.968912][ T8228] dump_stack_lvl+0x3d/0x1f0 [ 86.970418][ T8228] panic+0x71c/0x800 [ 86.971674][ T8228] ? __pfx_panic+0x10/0x10 [ 86.973102][ T8228] ? __pfx__printk+0x10/0x10 [ 86.974582][ T8228] check_panic_on_warn+0xab/0xb0 [ 86.976177][ T8228] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 86.978225][ T8228] das16m1_attach.cold+0x19/0x1e [ 86.979799][ T8228] comedi_device_attach+0x3b3/0x900 [ 86.981491][ T8228] do_devconfig_ioctl+0x1a7/0x580 [ 86.983104][ T8228] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 86.984863][ T8228] ? find_held_lock+0x2b/0x80 [ 86.986477][ T8228] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 86.988196][ T8228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.990089][ T8228] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 86.991922][ T8228] ? do_vfs_ioctl+0x523/0x1a60 [ 86.993393][ T8228] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 86.994973][ T8228] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 86.996997][ T8228] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 86.999014][ T8228] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.001133][ T8228] ? hook_file_ioctl_common+0x145/0x410 [ 87.002870][ T8228] ? selinux_file_ioctl+0x180/0x270 [ 87.004477][ T8228] ? selinux_file_ioctl+0xb4/0x270 [ 87.006106][ T8228] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 87.007913][ T8228] __x64_sys_ioctl+0x18e/0x210 [ 87.009416][ T8228] do_syscall_64+0xcd/0x4c0 [ 87.010853][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.012674][ T8228] RIP: 0033:0x7f22dd78e929 [ 87.014079][ T8228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.020029][ T8228] RSP: 002b:00007f22de6a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.022569][ T8228] RAX: ffffffffffffffda RBX: 00007f22dd9b5fa0 RCX: 00007f22dd78e929 [ 87.024944][ T8228] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000008 [ 87.027448][ T8228] RBP: 00007f22dd810b39 R08: 0000000000000000 R09: 0000000000000000 [ 87.029927][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.032300][ T8228] R13: 0000000000000000 R14: 00007f22dd9b5fa0 R15: 00007ffc1414d088 [ 87.034778][ T8228] [ 87.036493][ T8228] Kernel Offset: disabled [ 87.037919][ T8228] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:59:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000136007 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98650 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558b361808 CR3=0000000028e28000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a585488 00007fcc9a585480 00007fcc9a585478 00007fcc9a585450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9b0ed100 00007fcc9a585440 00007fcc9a580004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a585498 00007fcc9a585490 00007fcc9a585488 00007fcc9a585480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff8880132d3040 RCX=ffffffff89ed4b25 RDX=1ffff1100265a60b RSI=ffffffff89ed4b34 RDI=ffff8880132d3058 RBP=ffff888058c1b44e RSP=ffffc900006a0640 R8 =0000000000000007 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff888105fc0000 R14=ffffffff9b273fc0 R15=ffff8880132d3098 RIP=ffffffff89ed61e1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f22de6a06c0 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f22de69ff98 CR3=000000003bd2a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a585488 00007fcc9a585480 00007fcc9a585478 00007fcc9a585450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9b0ed100 00007fcc9a585440 00007fcc9a580004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc9a585498 00007fcc9a585490 00007fcc9a585488 00007fcc9a585480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=000000006e0fd038 RDX=ffffffff818a2fa2 RSI=ffffffff8de0d975 RDI=ffffffff8c158f60 RBP=ffffffff93d14c80 RSP=ffffc90000648aa0 R8 =d3a5d21617454912 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8df414c8 R14=0000000000000010 R15=ffff88806a527d00 RIP=ffffffff81a16a45 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c24695e CR3=00000000376ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff20611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff20611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff20611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff20611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff20611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff20611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff20785488 00007eff20785480 00007eff20785478 00007eff20785450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff212ed100 00007eff20785440 00007eff20785458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff20785498 00007eff20785490 00007eff20785488 00007eff20785480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000acec5 RBX=0000000000000003 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a98650 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000033a78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000060000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8f0a4fcb 00007ffc8f0a4fcb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8f0a54d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8f0a54d0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f00003635323d6e 6f697461636f6c20 2c3635323d6b636f 6c62202c64656c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6500003635323764 6563746163656620 2636353237616365 6662202664656600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726576697264206e 692073646e756f62 2d666f2d74756f2d 7466696873203a4e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6576697373696d 72657020656c6966 5f7268633d737361 6c637420745f6563 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f7268633d7373 616c637420745f65 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697665645f6d76 6b3a725f7463656a 626f3a755f6d6574 7379733d74786574 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637420745f6d 64617379733a725f 6d64617379733a74 6f6f723d74786574 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637320313065 6178303d646d636c 74636f692034383d 6f6e692022736670 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000