last executing test programs: 39.760158363s ago: executing program 2 (id=142): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) inotify_init1(0x800) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r5, 0x1000, &(0x7f0000000740)=""/4096}) 39.651010927s ago: executing program 2 (id=143): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) (async) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) setpriority(0x0, 0x0, 0x9) (async) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r0, 0x0, 0x0, 0x5, 0x0) (async) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0xfffffcd8) (async) listen(r1, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001540)={'syztnl2\x00', &(0x7f00000014c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf2, 0xf8, 0x8a, 0x2, @empty, @mcast2, 0x7, 0x8000, 0xf97, 0xb4}}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x4, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="7d8100000000000000630000040000000000000001000000"], &(0x7f0000001400)='syzkaller\x00', 0x10000000, 0x5a, &(0x7f0000001440)=""/90, 0x40f00, 0x4, '\x00', r3, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x2, 0x5, 0x3ff}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001600)=[{0x1, 0x4, 0xe, 0x6}, {0x4, 0x2, 0x3, 0x5}, {0x5, 0x2, 0x2, 0x1}, {0x0, 0x1, 0x1, 0x1}, {0x1, 0x4, 0x1, 0xb}, {0x3, 0x2, 0x10, 0xc}], 0x10, 0x2}, 0x94) (async) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x10) (async) r4 = accept4(r1, 0x0, 0x0, 0x400000000000000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="6669d052337a00000000000000000000000000000000000000000000000000e304"], &(0x7f0000000bc0)=0x2c) io_setup(0x9, &(0x7f0000000400)) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x801) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) eventfd(0x1) socket$netlink(0x10, 0x3, 0x0) (async) r9 = fcntl$getown(r2, 0x9) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001700)={0x2d0, 0x35, 0x200, 0x6, 0x25dfdbfd, "", [@nested={0x163, 0x36, 0x0, 0x1, [@nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @u32=0xfffffffb}]}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r9}, @typed={0x26, 0x150, 0x0, 0x0, @binary="7cc72e950a517e56318c0451c777765bbfa37764a6c954c8d096298d91658fe6c558"}, @typed={0x63, 0x6c, 0x0, 0x0, @binary="0793c6e30580f000dc9aa46204a9e53c4672bb8e5a0338cd2e2ed19cd9811f2b34eefdbcf70cd09d7772b581c49db82081df1137d47ae08a8efaa1a504650f880ad95cb3a021cb79dfb6c72f133ddf2df426f89cc70646e18502307a4f433b"}, @generic="f26471fac41fd55e22ad3a79340fa769c5022f0cac73604db18265a238230e3d069729ccb6d6a27547ca0314d1c02a9df5adee101e2a1f9cbe7ab7c72bcdac59e93c4a09562e83aafeb3cc832d7cad641ea9b33fce3886f1bb24ca43785dd605d2e8e8ce377ed7e2927746df002be783e0374290f03229e76b20401f61cd9963a291907e7d79774a9c6667fa9938426642fb32e94c1fef2a86465e4a1ad0c3ac3dc60d7be7d1ef59b51ec9aa8602e1", @typed={0xc, 0x9, 0x0, 0x0, @u64=0x8001}, @nested={0x4, 0x59}]}, @generic="e4c5cb03a9d9e4b91b48f3de5be9e0c75426cc98bd8add8ea48d46fbbdd8ca30ea6c8ccdef1fbf3da35726cb0b9d7878c52201ce1c3eae568bb4bc70b42b78d06668338f035294d28ce7033cfc4c60c12f5ca17ac46a2a3646d8ae6d84b71f5cdb24dee4a9c24ca4bfd1eafdf7b5f0baa708a4ff0c51533efbeb2118aad6201ee55c7ced416238b4be00d8f118bc3980440dcd84a14c389453c3aa28e3241f9b9484bba68171f39d41d4c40510061e89bebe8cac09baa677fa05f68615f10c29041c", @generic="6acab1ffd4157d0b992b45f621b1940664a1abc5679ab187ff0d2648aef303dd71", @typed={0x78, 0x120, 0x0, 0x0, @binary="3737fcc466c9e1aabe38729cde6dffdd48297e2517d4f4652dbf492811add139580d525c6838c0aa11cbaa8364197437be1a400e9efdfd3c9538532a003ec9cb0c8511eed19805fb831512b4260ed646a7f3f49da79d5eda8b7ab27867c0fb1647d91eb454a00bb4536bf93b11772ceb5029fe46"}]}, 0x2d0}], 0x1, 0x0, 0x0, 0x40000}, 0x20001800) 39.570376898s ago: executing program 2 (id=144): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000ec0)=0x4) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) (async) syz_clone(0x0, &(0x7f0000000000)="b41cf03a556424d8a798d46d4785ca21165ef9d43065", 0x16, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 39.569877445s ago: executing program 2 (id=145): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 39.376805868s ago: executing program 2 (id=149): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0x18, 0x3c, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) ptrace$poke(0x21, r2, 0x0, 0x0) (async, rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) listen(r4, 0x0) (async) accept4(r4, 0x0, 0x0, 0x80800) 39.110197076s ago: executing program 0 (id=153): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x150) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) modify_ldt$read(0x0, &(0x7f0000000140)=""/100, 0x64) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 39.108995825s ago: executing program 0 (id=154): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x101002, 0x0) syz_io_uring_setup(0x5b8f, &(0x7f0000000880)={0x0, 0xcd4b, 0x20, 0x1, 0x91, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000200)) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000003300010000000000000000000500000a3c000000090a05000000000000000000050000090900020073797a31000000000c0010400000000000000004080005400000002d08000640000000001c000000120a01080000000000000500000508000340000000091400000011004abb00000000"], 0x80}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x80000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) preadv(r9, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1, 0xb7, 0x2) r10 = dup(r8) ioctl$KVM_GET_LAPIC(r10, 0x8400ae8e, &(0x7f0000000980)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0xfffffffb) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) 38.900150798s ago: executing program 0 (id=156): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x8c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'pim6reg\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}, @IFLA_PHYS_SWITCH_ID={0x13, 0x24, "676668dda0b0c8b58abb24294172be"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004001}, 0x26040090) 38.896801261s ago: executing program 0 (id=158): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b63, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (rerun: 32) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 38.477148485s ago: executing program 2 (id=161): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x152) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60f4742400403a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000066cf6cd53020033fffe800000000000000000000000000031fe8000000000000000000000000000aa2f0000000000000013d87159da0a7f6b1232da4ed8123a1f29cea8d1fe4ca5f62e6c94f281c2d5c5af36d10f776f0b1b69438f727fe358a67dd51b"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 37.44972225s ago: executing program 0 (id=164): syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000040)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\b', @ANYRES32], 0x50) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fchmodat(r3, &(0x7f0000000240)='./file0\x00', 0x100) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000084002, 0x0) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c100000", @ANYRESHEX=r6, @ANYRESHEX=r2], 0x2c}}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r8 = fanotify_init(0x8, 0x40001) r9 = dup2(r8, r3) write$nbd(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="6744669812000006"], 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c0016000aac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafffc4633449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f07976773dca76fd21d52d4209e0397fa4f69ce475f00ac64337803f5eb4e5842f4d98fe3b5e02c629462c5370d47eb640dc5061dc35817c8a66c29be82fd3f8cd181aab508e2deea48d2f9591e1f5fb1ba837d5a7812eb3314ba35b599186d8dbf7487432a7eb7579bb978a5449e7233c99b1da01522ad52bdd7d085e51d8266ab729b4138c41fbd84eb8f07209fc915e956425ceeb3758a62dff3f3d3884bff774bfcb5a18e7f3aaf11eb039ef96fde3b16fca53f68bd"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 37.17935564s ago: executing program 0 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002100df4dfdffffff001a00000200000000000000000000000c000c407f"], 0x28}}, 0x0) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) 37.148287092s ago: executing program 32 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002100df4dfdffffff001a00000200000000000000000000000c000c407f"], 0x28}}, 0x0) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) 23.400198538s ago: executing program 33 (id=161): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x152) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60f4742400403a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000066cf6cd53020033fffe800000000000000000000000000031fe8000000000000000000000000000aa2f0000000000000013d87159da0a7f6b1232da4ed8123a1f29cea8d1fe4ca5f62e6c94f281c2d5c5af36d10f776f0b1b69438f727fe358a67dd51b"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 1.66951929s ago: executing program 4 (id=578): lsetxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380), 0x2, 0x3) r0 = socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x5, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x4, 0x100, 0x9004, 0x0, 0x3, 0x4, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x5, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x4, 0x4, 0x6, 0x6, 0x3, 0xa3de, 0x1020000000006, 0x8, 0x5c3e, 0x400, 0x10, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x1, 0x4, 0x2, 0xcdc, 0x7fffffff, 0x2, 0x5, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x100010000000004, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x8, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x4, 0x208}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0x0, 0x0, 0x0, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="011a1b0000009fd4e09f7a4a"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r4, 0x0, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfffc}, {0xa, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x14000004}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x10001, "d344e0fdd19586bc5a38027d8474cf03073deaf3f96e206e172391eff75caa0b"}) 1.439864555s ago: executing program 4 (id=582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) close_range(r0, r1, 0x0) 1.439075616s ago: executing program 4 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd300000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x64}}, 0x44080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) 1.355594982s ago: executing program 4 (id=587): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@delqdisc={0x160, 0x25, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x3}, {0xd, 0xe}, {0xb, 0xc}}, [@q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x93}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x90}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x200}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x80}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}]}, 0x160}}, 0x10) syz_emit_ethernet(0x2136, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, 'VA-', 0x2100, 0x21, 0xff, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x8, 0x6, 0x4, 0x3, 0x8, 0x10, 0x81, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}, @hopopts={0x29, 0x2, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x7f}, @pad1]}, @dstopts={0x4, 0x202, '\x00', [@ra={0x5, 0x2, 0x200}, @jumbo, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x5, 0x1000, "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"}]}, @fragment={0x67, 0x0, 0x80, 0x0, 0x0, 0x15, 0x68}, @srh={0x3a, 0xa, 0x4, 0x5, 0xd, 0x38, 0x7, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2]}, @routing={0x67, 0x2, 0x2, 0x4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x2, 0x2, "5112a5", 0x1, "83cd9c"}, "6599d12ea31a485122c654bcd7c32d92ed263255efa2362cd7f8a328b0b109135ef175fd86492ca78c9322a54bfdc6cf881f1523e2b51bf24a95d822f1d111812b8c227d4b534abbeb96b063ef03d05656f37dec40e6726fdafd22e73c5981f2f29ce1627b813a29f471d7ed71f072ed86410eeb7d6acfb7af5c9b28bc63a6fa6946720ce1a6961b339df81d7ff4653d8c32081336d7818c036ac56946d134f52c5af52d0c7d48190f5e7c9c628067aecf3baf24f8044fd460763876c4f477161f194d92074a18215ef8e50f6feed40b57173d5981988a7e87e701ee69e597706d7c8e8b5fb352c957c2fb74098512a124b0aa29a3622efa457af80fb562670f9748de74faaa1aec9abfa07c7ea115d04f7ec139113f4219eb4bb8c2089ba877e572ada91a819ea74eed7d3f69179e6b59522e47fbbb99e2eb1cade5cced53f724f16e1b522d6d7bf273dd4418a081dc672e8ef7e3bf16883a8c4a431da687b941606ff99550038b0eff5ea9795ff223deb5c904ddbd78e6acd7e9309367b981b38f9bb5d876393618a7bd4cc5468b0d8fc544a2fb22b7a36653a080629fde451206dad92dc1327f30496dd8c66767349fcb336886d63681f7b81cc34f181067fc51d8785e1eb80e2a4a5d319de0cea599ed122bd8aa930496a48e09049b3917b4fdf880cb27bd906a9c436d42854ef2d5e58f2c8ef2147817b1494f89dc0bc9e956e23d47cdd7136aad0cf64b5633aad088d3f6966e57095e182c88443c49c7ea493ad953daed8b4a44ad5afafe50e073c331a038fb5519dab7ad5872cc7727e259750c1605d115b351b612de148e5148379736fcc686ee8899f6abe0b07ce776395c31122b10384e8f4822064b3875df74b65e9ccc7dda84b2280e5a8272501554b24f4e09650479cf7c342e593742a1c9b27e6af46884ccf0caaf1ed7c7b699b24390f546dda23916b6908332f634388ff31abf9f310d7c5330aa32475959d1812dafeac0ff2bf3cea58db3c10596a90a3d55e22dd5686bc672199544da38ec0cfaf4d26ec6c7a18ec10dfe6ad8c54abd102e584cb3c0fb3005893e767b7a4dcb139caad70c23d7944eaccff08bda04987adb4296a1388aa323d1eac26d53c31e1adb40ae8fb60144289c761948a1de27a2bc72de5874724c331640926fbe5d014e90538ac4addcd62bb6de846e9cd88c82196f44ff1790ac606c744623269a26ab92e017b220ad2915754cf680cc6537736d715545fc84065151bdafc21ee88c1ed0e03b74cbc702f29126f8edcca3439cae0ae8eb502026b4492281505b340fe404abd76f5bf7a935e34fa0b32fe427a9274f0bce182f845ad3360bec3895a789886bc22b400ddbfcaa09246a380f9a860a6c63a7ac02dcff39f56d43b92544c016cc1c64ed102813375f20516afe31aef51689112c1a420e23addcafeacc25973ef08acce40a6908cbf0a6ab1a4581349973e15903dbf3579dc5df57872cdd11d9f9fba4cc82e7d4c1b1b9680640d549f385d4b3255a904e2c37af30fd9fd7a86ee42f6fc311b5ba759c8e8444a3ed2edd826703dc5f2626b592e94e57f2bacac9e6475869c49ca2abc2a8f0f4af6e1d420038211039d9b159b296bd6a15a011c7485fe08f4031604c500e8f36e1192d56cc35544f83755a645e9d1fcf251950b2b3dcfd9fa1d738935eb1d29993cc45e1ca32c6f8f4ee541693cc882a694159bc5360441ca778a6611e6f80cbac4c062555e99daff235e9572c7b757f8cc2ead414d167207b7f112d922cafe482d8c32a0a35a030dedad8320f26d6ea1c42c2a43cf42b4b43d1d29256a411e87abf3f57dd219749383b143b134a007c9b73301f5a720c4cd281810a5fcb7600926932f306ce630f92f40169058cf155123ac91b624c9c55b41c9d4d960f757bbaaf0600bb97f06af4173ff9ec1709d210b789d8b58e8bda70add3f5a51dc353f06d950c5f887fe30de86e8d6e2ffbb312c9495ef190ef225561752872fb389c92b85c83a5a1d352dc7448a1debfccec3830a981e091e33125af2c38e9cc3af75ca832c0f6b3f48e4b0243add982d76cc03e5e26f97c5373210963a00d1398ed61dcaecb11985cc823f8ca6410e18e6858ca1ce760c9b465b1e5c70f4f1a4818c32870f4bcff21884730c934aee388e4f467dc6e02799197d913bd27d2c356bb12c66912b00a0c5bcf9da5099d42dca6900348ab1a0961a42434e51d607d830f17217e9d82021f0f29d1ba7678a3849b45527fff0f6abb7338a52c608a57f6ef86c030dfa57478b797c33f4b2946fa42a052edf68b877cfad4fce22f9f97324f534451fcb90e9267cec74b98d5fca5f03002468e07045401cbe1aa2046d6363c895cbdcf32a5b549b2a38eadd8a3f8d7733b2640b21465e40896eae42f630470d9660e2be9e36d42574c64bf2238242db2277119074f1db92beeae0656ca7686dadd815f5f1a8d8c4dd3631537ca7eae8d73a4f72af1289dfa84441a729f1870818520e91db51838da0c4925ad6fea6d3214db24d1ba9fc35f80c327e5817d1bb03a48a7a1c87286852d2950f45aedbffc6c82bc72f527b3d376fec4781e0e88f297299d94b7b854da0e8b1199d5fd10d101f6926fe9229b8e3aff4da327870773087c8a34b09b994e10d73b876042133149656cd3d1bfbb886a5596ef3b2f7501e0a9cb1822d1b435e838f67aa014cec28463ab6fc65b64e84fd2ab634bfd375a62f64d5c6b14e7f6cc4bb0ad372b487752771f1bcefa696550f025bc4d1fb386793ce1d8a27f59fb4790d6fb38351427633fc4ba74beddef2b4109dde58b149a4733d1a186332aa1997b1c35517e8950243b73ef4f3de3eec3fbd6116f671066eaf64a98fd440412422523da3f8c50a02b07017a00e63ee7074533f1e767471664d4d1d7c548eac5a22e9da9bced3d5a0e604223f43c938fe9ce36648c484f9cab379455cfbd4aab9dda0ea6068666530f7e8a67491d6a39a11edb2ce1eec13942f5b29290726acc576fae312b0c7c6f50777f03c64774ad0b38aafedd1b54da9b5b1577df2c8f592e73f3d8cce2bf794a8bc3d57ac7f6e81a069873fdaf2bf04121e6ad8ed58436a2c64a4ee8e74289da6206b818df4c8c232dd607a427b209a8321d939485922ca59c1a6cb790c0057470c769559d5456de772f6e2d888959785ff8d24cdc8ca53bc3160682d6bb17e1d53bd6f687fe0c4cbac1f26b8e07e50df36e18a598f0867d70d37a0946db4c8c2ba95ffee24d9bfc265586deb066b6af57f0e5e8423e8a4cc6676b15141a6e877edb21f47e73d973a884672043c81bdb6ec05cb1808967f3ff0501e23ad5c240a261867d6db8cff0b84daebe7608ec74f99b3f7f81f87783c7cb4b164f20d51467c66c3154d1eb8f7f542fae46bcb6b8f71847764ccda2d75c2c05eb9d18c15c58cd0a9f93ff0557f2ec11e755d556a2e7207b8dcea204742c9f6e710d812de6d390d0d02a63bf36f06972d6f05a4b066496b653b22d5d645eb43649b759fb6e1506ee534f0efd823c8c569b2d91a0ae4088ea3a09d23d8ed4f1cf82fb4a0dbd24cebf2eb1c4dc77e6276103b9301e0d2e32a7eadd7ecb58fc67f81db405595d2d0f3d130ffe4177a22d219abdcd54886e034bdf57de942bd2218ebcf3d7c9f6731165a3c5326acc55a44df72aaf61a2592062541f200d548fded6e6a993ec574e5d0f99946f4d62ca107569f2a1bfb88b3a5fca817ffaf414928d3b0f1733f375739b26be69ffbcb7b8b3b35d6585aae63e8cb51c1a74192d28111deca1cb17fa1b0c8309dcb7700ec0b94d3a39c3f8f1ad9dc8e93e9de06698f2984ea8e5d42d4e6998f80843225058815d3246c323986621423bf6bb2ee421957e525faac285685cfec85f38950e5d92529e91f456838ce61ae2a83c70761558385aa6db2c721502b231f2ed432748ef7faeeb8c2fa3d25d94b2e767a2c1350f4846430b8013e64a86376aa1f82e040b20d0bdad8c7ac1a3c3a63ba4dd920fe5b15ac342c550d758e833adbd0c5b414f16464c5029ef465d41306b6d2ee25c2623b2419037de3016e9532b6cc716824a65ed8fa1e0c66702a88a1becbd36451abb443f2dea61ea3842181d7b20499b713da1c6c78ae45b5bdd6548b5c62423cec8cdcbed038607330a28f58e1d9e954955e5087c39d857cd8d0d70cfb6760fa2f422fd7a655a772b0b80b92f552e155769a13a1dde6f6dceeb906f8c0bee9b6ed07d085b2aea0598751426863a8313d0db3a0817a2dbcddea9cc6a3695c214492f6b5fee4c248d2b791ae8002e5c88fcae0db149c34ceda3d154356719e396bafd00dbd25fbf73a388f8721d570c330b00a391496f17c93afcb395cfffac644ec379cb2bc3926914f3d2a3bee16ae8aa1243fb72834e3a1262bb703c92fe2ac44b61540974f8ae740e050ce25455445fe054d14ebe69851af4671e83692e0fa0ff6a47edcef0037a11a7cb938feb57dfd88999c79beeadc99021ac484e42d85865146bbc3b9c49fe210fd0140b6a711af9772e6e4723e85c522b36491efc757bf3e9d260cb96e7f161fc5ad39ac7eb799595e2b605a0ba42ad8a7aae43e8bb506680d42e92510a948c548f2c43c3a14ecc3603b3416976bbb4908940b4639530bc7d052012bde850e88583da45557b6184692e58e0fac25615b8b7c966c74f214a57f2857612b6859cda9858b77164f3ed44c4fe6bc6e0b5de7eb3a00179a1b15e5f4e54cfd774c7025cec2bdd5d3fb7ec556d22af4f7983f79b0e1434f6c22105b81f27e49950ec4355a8b464dbedaa7237ed83ac47554227f66dafa38a658da6235f5261a5b40b525e0816b16e3a2f70bc18d3678f94c7214d4ca9269ed0093a9bcb5e17734796fd3edfb8a39092ee9eb16494ab82f98a2f8c7dfef7679095cd3a08654c773ad2af7d98fd60a047da68828ab3263399907b7de91809dfe2a7bdd4c2cd17efd9fd5aca069af8df59f8f22c485f13edade8f9d50a565066926a1c98230639489d81e3a91ea7de49acea15c5f93ef8698a755d59543a5154f8708481e394b25725cdd6cee80cf77b1eb8c28574d1f4e3e1a1160c66a34653e03570f69fefe8705e56ca0505ee2415497deb6777f02f9cb51d936c9381edf2a66e224c43ba473d7bf29de09c3d70bdf2712fb602e374d13c224079bcc297fa96ebab4e094d4220eade3b9914c5bcd7956531376dcf692be0b1bee72d08c316bcfda83ce8db66d0a48799c40c2d130f49e24c350d4eac5286aa516e7a72b7ce54dd4ff2bbd98c59f708903c6fd2533cc771ea9e89c7cfd1922e3acd01012c6f404644af6f59a32aaeaa384711780361beba31569c5ebcc5b96a1f071255ddd037be0d5de883fb5ceccff8c9ea15c0c1818be24b066b2a22a4efac1af33ca354c5a0d3e825c5d5e05aec72b82cef023dcd8d056737e8356d9ad257507d2cf4b2cc843996b30722ff776ef6a638aa67e8a2ac6c74a9e0595e2c12e65346b952b94506faf18789ae18ec9ea21747d8d769532bd851a424b5099391aa55a90204c0de3cc8223b78f62b57d9fcd9d17433fced832f704c741323d6c95def3a163e5d88f4c5808c3ca6def3e20daa120b6602cda852165f972bdf549c23a8d84123d6304e9b6c5df1e7fd3ec9fffa22de4da478c7153c766820e29c1efffdeb135cb9c96d944af0eb6d83dce48d43e4b26f669eb1025d83d7e837f1cff885f03717d36bf956fdb5b4d2035bb6a8fec0b6e56fbed67072f19405f5e71c5c76c8e17d51574ec5eab1"}}}}}}, 0x0) 1.249321007s ago: executing program 5 (id=591): mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x7, 0x604000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x68, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="cc9914bd83d4"}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x37}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x295}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '/^.&\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='vfat\x00', 0x8080, &(0x7f00000001c0)='discard') 1.247829712s ago: executing program 4 (id=592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sync() openat$iommufd(0xffffffffffffff9c, 0x0, 0x2001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) 1.247002863s ago: executing program 5 (id=593): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a034d532ee3432d2210796eb298794b076e60046d98f7b0d857657b26b00ca81", "749271046ac8a596855227e00bcd7f1ebec5de80a44f799faadb8092addb37261cc2a31eb206d1342585bbe72565efda", "86aec9e041768d530d61351616d9316455abe3284c8b453fee110d51", {"2bf6ed2ab65ebfbc4d0b72d1152050fc", "7af82a7f928d62623d7ad271c15cd385"}}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}, 0x1, 0x0, 0x0, 0x404c080}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='gfs2\x00', 0x80, &(0x7f00000001c0)='discard') ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000100)={0x7a, 0x0, 0x1ff, 0x6}) 1.177224283s ago: executing program 4 (id=594): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000340)="4c9c1e1d260743ce030550f956d77df2e4aa3ae632a91e179d6fb2f4647d0aeb4cbdb16b96b8280c7d634f8f2ac9614272c90a106f5713ac02b27d3277a4a389329a502a655b15dc3bcbe1bfdacc6484a9b2071692f8262e7ca71c498bcaf5c77e0ebf6f2aa630c6826ac1ccb94395dcad93883f3766dd398a711a70011d1e2a641f4c271e47bd43d87d4c9f6f1349f3014eeb65b51e63828c92caa6d1ae0e73845003086d066c547851a3c5a3fb7a6a11d729b640023ffb0af9c911a86b", &(0x7f0000000400)="03ba86a84e0e7a55b73d542d75cef2f4636c7b2c269dc39d9f86dbcff51def194c3d9c30204218099afd742131841dbe32d34a69ba3e30ba25659e30ffad98775e94473a2e42f0f9ac5dbca382f6b7d29e5e279e42f000d80c0a017c840e4f94f7d8645a9a77cdb8e5f0acaee41788127a69f3d14d55b679b7c1496a83ff"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(0xffffffffffffffff, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00005b0000/0x3000)=nil, 0x3000}}) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@x25, 0x0, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") sendto$inet6(r4, &(0x7f00000002c0), 0x0, 0x10800, &(0x7f0000000480)={0xa, 0x4e21, 0x1, @local, 0x4}, 0x1c) read$char_usb(r5, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="e1", 0x1, 0x0, 0x0, 0x0) 1.176950205s ago: executing program 5 (id=595): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff00000000390000000e0001006e657464657673697675d1e301e6ca0000000f0002006e657464657673696d3000000800730000000000116b38701566472d04d64023f0df13761727645452e1007a10c31cb9ab6b325f7832b5c9521334a07bf6249a4598d757ea9dc726957e6666206402d33fc84ad48f61db9f1b3ad648c4facf11dde660c938c4697313dc9cc98746fa30971f92a4a286a3f5d8e01c1137e395"], 0x3c}, 0x1, 0x0, 0x0, 0xc000894}, 0x24048800) (async) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff00000000390000000e0001006e657464657673697675d1e301e6ca0000000f0002006e657464657673696d3000000800730000000000116b38701566472d04d64023f0df13761727645452e1007a10c31cb9ab6b325f7832b5c9521334a07bf6249a4598d757ea9dc726957e6666206402d33fc84ad48f61db9f1b3ad648c4facf11dde660c938c4697313dc9cc98746fa30971f92a4a286a3f5d8e01c1137e395"], 0x3c}, 0x1, 0x0, 0x0, 0xc000894}, 0x24048800) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05002dbd7000fcdbdf25442b20e07cc871491ced61d876b6b040ab219362d2f2adb4a6e7322660c28bfe69a1786cadaf23c162036879d6ea6e71904dde81fd16eb738c98aa91d52a5a3616d266293ed56a702b131188e0b894eba30a90f025768739708d648a48ebf089c8feffb0578db9ea4ef9d8", @ANYRES32=r8, @ANYBLOB="0c00238005000f0001000000"], 0x28}}, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x110, r10, 0xffffd000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x110, r10, 0xffffd000) r11 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r11, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) connect$inet6(r11, &(0x7f0000000280)={0xa, 0x4e21, 0x10001, @local, 0x7f}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd8) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x480fd) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x480fd) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40400) 1.108603044s ago: executing program 5 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x40080) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) sendmsg$NL80211_CMD_SET_KEY(r6, 0x0, 0xc080) splice(r7, 0x0, r6, 0x0, 0x4ff9c, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r5, 0x0}]) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 927.580753ms ago: executing program 1 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x683) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r3, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0x4c08, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff0000000000000800650000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000010007ac1414aa640101ffffffff000ce256b28c59881681fb520009020007651442eb5637e584b703c80009e706d30bd224f80207cfa1675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8f46976e79ea788f03d9d3205927e3d060600000020000000"], 0x0) 828.982923ms ago: executing program 1 (id=606): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00') write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) getsockopt$nfc_llcp(r4, 0x118, 0x4, &(0x7f0000000380)=""/178, 0xb2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x88, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=any,access=client,cache=mmap']) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000079184000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 824.601796ms ago: executing program 1 (id=607): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000a40)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x3b, 0x20, 0x64, 0x0, 0x3, 0x2, 0x0, @private=0xa010102, @local, {[@generic={0x94, 0x2}]}}, {0x1e, 0x6, 0x0, @empty}}}}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_proto_private(r3, 0x8b22, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r6 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0xcb, &(0x7f0000000040)=0x7fff, 0xfffffffffffffd64) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) sendmmsg(r8, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="1000"], 0x10}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) 823.667768ms ago: executing program 5 (id=608): r0 = fsopen(&(0x7f00000005c0)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x0, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) socket(0x21, 0x6, 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000500)=r7}, 0x20) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$setregs(0xd, r11, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r10, 0xc048aec8, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x52102aef, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x5, 0x0, 0x6, 0x200, 0x51e}, @generic={0x5, 0x2, 0xc, 0x4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0xb, 0x1, 0x0, r8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, r7, 0x6}, 0x94) dup(r5) 469.70852ms ago: executing program 3 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=""/80, 0x1af, 0x50, 0x1, 0x1, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020080000000000000000000009a23950000002ccda4850f871dcb5d7700000095000000003b0124cf9483ab2a086d8f675e90a9f10000004495e980d4ab43a654dbda"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1006, &(0x7f00000005c0)=""/4102, 0x0, 0x0, '\x00', 0x0, @xdp, r1}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd700000000000000000004e71c2e21dae419fea76735a66fe3f12e0f0f5cc7ec6e946360475427d9a15a66d2ce4c0768ebd1dbfaf5add1b14120445389d450dc11ae5097bf7128c993253050b302b778ce425", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) 469.441591ms ago: executing program 3 (id=616): r0 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x4000, 0x2, 0x3ad}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xfc1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000010"]) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) syz_clone(0x8040000, &(0x7f0000000140)="8c85960336a47bbc526d635b43fac569d8e88269b55b42a2fa6f8c88b328c2f6dd414160e87d5e8bd5a4452550eff02ab69e2e7ea7e4725c85b8db3c1fcf1976623d974b1dce", 0x46, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="7df4a0efef0a4a27c08e0f81c7e742f651b8f8ef27347600fb804960aaeed330f54610ebca") migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x4000, 0x2, 0x3ad}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xfc1) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000010"]) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async) syz_clone(0x8040000, &(0x7f0000000140)="8c85960336a47bbc526d635b43fac569d8e88269b55b42a2fa6f8c88b328c2f6dd414160e87d5e8bd5a4452550eff02ab69e2e7ea7e4725c85b8db3c1fcf1976623d974b1dce", 0x46, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="7df4a0efef0a4a27c08e0f81c7e742f651b8f8ef27347600fb804960aaeed330f54610ebca") (async) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) (async) 306.491885ms ago: executing program 3 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) listen(r4, 0x0) (rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 306.231964ms ago: executing program 1 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockname$qrtr(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000180), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b23000000000000200012800b000100627269646765001214000280080001001a0000000800050001000000"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 249.910603ms ago: executing program 3 (id=619): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x13, 0x42, 0xa01, 0x4, 0xffffffff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0xd0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xfc) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="cde96aafaf767472616e733d72646d612c706f72743d3078303030303030303030303030346532332c74696d656f75743d30783030307b27b9841e404e107a2208d05a8d58b4fe257945d6bf6bad814b4f6205dc7eb3c6574ce932ffcfa7780b4e9b2b7d410b4bc66f126a6832"]) 246.776451ms ago: executing program 1 (id=620): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000022c0)={0x73622a85, 0x108a, 0x2}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x18, 0x3]}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_clone3(&(0x7f0000000040)={0x20801400, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, {r3}}, 0x58) 246.1549ms ago: executing program 3 (id=621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) (async) socket$netlink(0x10, 0x3, 0xe) (async) copy_file_range(r0, &(0x7f0000000000)=0xc, r0, &(0x7f0000000080)=0x5, 0x8001, 0x0) 168.29024ms ago: executing program 1 (id=622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_inodes=p,usrquota_block_hardlimit=5']) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x1000000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000480)) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000004a00000426bd7000fcdbdf250a007800", @ANYRES32=0x0, @ANYBLOB="050000000800020000000000080002000200000014000100fc0200000000000000000000000000010800020000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x200040d0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x40880) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 168.018053ms ago: executing program 3 (id=623): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000200)) (async) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) (async) read(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async, rerun: 64) r4 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000340)={r3}) (async) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) 0s ago: executing program 5 (id=624): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000001c0)={r2, r2, 0x4, 0x100010001, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f00000004c0)=[r2], 0x0, 0x1}) kernel console output (not intermixed with test programs): [ 38.084345][ T40] audit: type=1400 audit(1752066987.187:61): avc: denied { siginh } for pid=5856 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:8964' (ED25519) to the list of known hosts. [ 39.025245][ T40] audit: type=1400 audit(1752066988.147:62): avc: denied { name_bind } for pid=5863 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.052876][ T40] audit: type=1400 audit(1752066988.177:63): avc: denied { write } for pid=5864 comm="sh" path="pipe:[501]" dev="pipefs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.064463][ T40] audit: type=1400 audit(1752066988.187:64): avc: denied { execute } for pid=5864 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.071012][ T40] audit: type=1400 audit(1752066988.187:65): avc: denied { execute_no_trans } for pid=5864 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.875884][ T40] audit: type=1400 audit(1752066989.997:66): avc: denied { mounton } for pid=5864 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.880255][ T5864] cgroup: Unknown subsys name 'net' [ 41.007571][ T5864] cgroup: Unknown subsys name 'cpuset' [ 41.012221][ T5864] cgroup: Unknown subsys name 'rlimit' [ 41.262326][ T5911] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.972579][ T5864] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.093525][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.093540][ T40] audit: type=1400 audit(1752066994.217:80): avc: denied { execmem } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.290208][ T40] audit: type=1400 audit(1752066994.407:81): avc: denied { create } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.301058][ T40] audit: type=1400 audit(1752066994.407:82): avc: denied { read write } for pid=5948 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.308386][ T40] audit: type=1400 audit(1752066994.407:83): avc: denied { open } for pid=5948 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.315922][ T40] audit: type=1400 audit(1752066994.427:84): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="socket:[520]" dev="sockfs" ino=520 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.335982][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.336672][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.338741][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.341512][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.343764][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.345919][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.348897][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.351030][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.356815][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.359683][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.360913][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.362289][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.366376][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.368195][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.368897][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.369703][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.370962][ T40] audit: type=1400 audit(1752066994.487:85): avc: denied { read } for pid=5948 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.372274][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.373179][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.373666][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.374862][ T5312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.375320][ T40] audit: type=1400 audit(1752066994.487:86): avc: denied { open } for pid=5948 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.375360][ T40] audit: type=1400 audit(1752066994.487:87): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.593335][ T40] audit: type=1400 audit(1752066994.707:88): avc: denied { module_request } for pid=5948 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.627601][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 45.697546][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 45.779876][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 45.851558][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.854785][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.857167][ T5948] bridge_slave_0: entered allmulticast mode [ 45.859868][ T5948] bridge_slave_0: entered promiscuous mode [ 45.878990][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.881398][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.883847][ T5954] bridge_slave_0: entered allmulticast mode [ 45.887656][ T5954] bridge_slave_0: entered promiscuous mode [ 45.911476][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.916693][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.919075][ T5948] bridge_slave_1: entered allmulticast mode [ 45.922099][ T5948] bridge_slave_1: entered promiscuous mode [ 45.925257][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.927676][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.930496][ T5954] bridge_slave_1: entered allmulticast mode [ 45.933751][ T5954] bridge_slave_1: entered promiscuous mode [ 45.936696][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 46.038014][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.047177][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.069792][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.127406][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.161946][ T5954] team0: Port device team_slave_0 added [ 46.165446][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.167702][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.170312][ T5949] bridge_slave_0: entered allmulticast mode [ 46.173642][ T5949] bridge_slave_0: entered promiscuous mode [ 46.177012][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.179279][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.181627][ T5949] bridge_slave_1: entered allmulticast mode [ 46.184665][ T5949] bridge_slave_1: entered promiscuous mode [ 46.218931][ T5954] team0: Port device team_slave_1 added [ 46.269260][ T5948] team0: Port device team_slave_0 added [ 46.276347][ T5948] team0: Port device team_slave_1 added [ 46.292220][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.385083][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.387299][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.395276][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.400741][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.419738][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.422009][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.424380][ T5961] bridge_slave_0: entered allmulticast mode [ 46.427017][ T5961] bridge_slave_0: entered promiscuous mode [ 46.430376][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.432815][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.435608][ T5961] bridge_slave_1: entered allmulticast mode [ 46.438664][ T5961] bridge_slave_1: entered promiscuous mode [ 46.441631][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.444031][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.452194][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.456734][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.458985][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.467341][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.471214][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.473572][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.483023][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.525907][ T5949] team0: Port device team_slave_0 added [ 46.566075][ T5949] team0: Port device team_slave_1 added [ 46.570507][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.621367][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.626815][ T5954] hsr_slave_0: entered promiscuous mode [ 46.629048][ T5954] hsr_slave_1: entered promiscuous mode [ 46.713067][ T5948] hsr_slave_0: entered promiscuous mode [ 46.715343][ T5948] hsr_slave_1: entered promiscuous mode [ 46.717361][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.719891][ T5948] Cannot create hsr debugfs directory [ 46.721925][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.724171][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.732065][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.736417][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.738584][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.746625][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.752177][ T5961] team0: Port device team_slave_0 added [ 46.774612][ T5961] team0: Port device team_slave_1 added [ 46.835805][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.838054][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.846029][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.884605][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.887240][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.897231][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.931994][ T5949] hsr_slave_0: entered promiscuous mode [ 46.934373][ T5949] hsr_slave_1: entered promiscuous mode [ 46.936388][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.938764][ T5949] Cannot create hsr debugfs directory [ 47.106382][ T5961] hsr_slave_0: entered promiscuous mode [ 47.108585][ T5961] hsr_slave_1: entered promiscuous mode [ 47.110842][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.113356][ T5961] Cannot create hsr debugfs directory [ 47.231512][ T5954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.257428][ T5954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.273642][ T5954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.284119][ T5954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.324314][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.329994][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.334435][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.338273][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.390696][ T5961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.404288][ T5961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.411728][ T5961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.413556][ T5312] Bluetooth: hci3: command tx timeout [ 47.414738][ T5951] Bluetooth: hci2: command tx timeout [ 47.414777][ T63] Bluetooth: hci0: command tx timeout [ 47.414918][ T5959] Bluetooth: hci1: command tx timeout [ 47.425482][ T5961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.473831][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.478375][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.484450][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.489253][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.496713][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.535116][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.554486][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.556808][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.560580][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.562879][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.569714][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.607916][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.621394][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.625063][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.627348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.638079][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.640671][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.649001][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.670643][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.679840][ T40] audit: type=1400 audit(1752066996.797:89): avc: denied { sys_module } for pid=5954 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.681541][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.696183][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.698449][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.701581][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.704018][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.713969][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.716219][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.720250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.722560][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.780814][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.810338][ T5954] veth0_vlan: entered promiscuous mode [ 47.820784][ T5954] veth1_vlan: entered promiscuous mode [ 47.847192][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.850576][ T5954] veth0_macvtap: entered promiscuous mode [ 47.854861][ T5954] veth1_macvtap: entered promiscuous mode [ 47.879963][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.889212][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.898293][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.908841][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.913539][ T5954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.916327][ T5954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.919033][ T5954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.921780][ T5954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.928179][ T5948] veth0_vlan: entered promiscuous mode [ 47.944924][ T5948] veth1_vlan: entered promiscuous mode [ 47.975174][ T5961] veth0_vlan: entered promiscuous mode [ 47.989272][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.989885][ T5961] veth1_vlan: entered promiscuous mode [ 47.993265][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.023675][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.026269][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.026863][ T5948] veth0_macvtap: entered promiscuous mode [ 48.035833][ T5949] veth0_vlan: entered promiscuous mode [ 48.039697][ T5948] veth1_macvtap: entered promiscuous mode [ 48.047865][ T5949] veth1_vlan: entered promiscuous mode [ 48.056698][ T5961] veth0_macvtap: entered promiscuous mode [ 48.064818][ T5961] veth1_macvtap: entered promiscuous mode [ 48.065752][ T5954] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.086720][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.092585][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.104184][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.109228][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.115697][ T5949] veth0_macvtap: entered promiscuous mode [ 48.119444][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.122219][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.126109][ T5948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.128880][ T5948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.134867][ T5961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.137656][ T5961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.140332][ T5961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.143921][ T5961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.148991][ T5949] veth1_macvtap: entered promiscuous mode [ 48.187297][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.210901][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.219771][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.220233][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.222205][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.226087][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.230435][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.233944][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.245980][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.248384][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.255721][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.258097][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.276477][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.279068][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.306400][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.308875][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.334606][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.337689][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.392273][ T6052] mmap: syz.0.7 (6052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.509706][ T6070] Zero length message leads to an empty skb [ 48.652950][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 48.714543][ T6088] can0: slcan on ttyS3. [ 48.815505][ T6088] can0 (unregistered): slcan off ttyS3. [ 48.952558][ T837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.980025][ T6113] netlink: 'syz.3.20': attribute type 20 has an invalid length. [ 49.069560][ T6117] overlay: Bad value for 'workdir' [ 49.111159][ T6119] No source specified [ 49.143661][ T837] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 49.148443][ T837] usb 7-1: config 0 interface 0 has no altsetting 0 [ 49.164810][ T837] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 49.167674][ T837] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 49.170286][ T837] usb 7-1: Product: syz [ 49.171563][ T837] usb 7-1: Manufacturer: syz [ 49.173271][ T837] usb 7-1: SerialNumber: syz [ 49.177464][ T837] usb 7-1: config 0 descriptor?? [ 49.185503][ T837] usb 7-1: selecting invalid altsetting 0 [ 49.492817][ T5951] Bluetooth: hci3: command tx timeout [ 49.503225][ T5951] Bluetooth: hci1: command tx timeout [ 49.505018][ T5951] Bluetooth: hci0: command tx timeout [ 49.567054][ T6152] syz.0.28: attempt to access beyond end of device [ 49.567054][ T6152] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 49.571112][ T6152] (syz.0.28,6152,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 49.579327][ T6152] (syz.0.28,6152,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 49.581708][ T6152] (syz.0.28,6152,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 49.585800][ T6152] (syz.0.28,6152,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 49.589948][ T6155] syz.0.28: attempt to access beyond end of device [ 49.589948][ T6155] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 49.594082][ T6155] (syz.0.28,6155,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 49.596898][ T6155] (syz.0.28,6155,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 49.599336][ T6155] (syz.0.28,6155,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 49.602046][ T6155] (syz.0.28,6155,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 49.696948][ T6163] program syz.0.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.767089][ T6165] syz.0.32: attempt to access beyond end of device [ 49.767089][ T6165] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 49.771371][ T6165] XFS (nbd0): SB validate failed with error -5. [ 49.808278][ T6177] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.34'. [ 49.871106][ T6179] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 50.020894][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 50.184526][ T6196] program syz.0.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.193090][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 50.193103][ T40] audit: type=1400 audit(1752066999.317:204): avc: denied { name_connect } for pid=6193 comm="syz.0.38" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 50.910415][ T6196] syz.0.38 (6196) used greatest stack depth: 20312 bytes left [ 50.943878][ T40] audit: type=1400 audit(1752067000.067:205): avc: denied { read } for pid=6197 comm="syz.0.39" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.950911][ T40] audit: type=1400 audit(1752067000.067:206): avc: denied { open } for pid=6197 comm="syz.0.39" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.958190][ T40] audit: type=1400 audit(1752067000.067:207): avc: denied { ioctl } for pid=6197 comm="syz.0.39" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.973543][ T40] audit: type=1400 audit(1752067000.097:208): avc: denied { create } for pid=6199 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 50.979575][ T40] audit: type=1400 audit(1752067000.097:209): avc: denied { write } for pid=6199 comm="syz.0.40" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.050641][ T40] audit: type=1400 audit(1752067000.167:210): avc: denied { ioctl } for pid=6199 comm="syz.0.40" path="socket:[9584]" dev="sockfs" ino=9584 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 51.552942][ T40] audit: type=1400 audit(1752067000.667:211): avc: denied { mount } for pid=6206 comm="syz.1.41" name="/" dev="hugetlbfs" ino=8915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 51.582959][ T5312] Bluetooth: hci0: command tx timeout [ 51.583261][ T5951] Bluetooth: hci1: command tx timeout [ 51.585225][ T5312] Bluetooth: hci3: command tx timeout [ 51.772348][ T836] usb 7-1: USB disconnect, device number 2 [ 51.846211][ T40] audit: type=1400 audit(1752067000.967:212): avc: denied { read write } for pid=6211 comm="syz.0.44" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 51.853928][ T6212] usb usb8: usbfs: process 6212 (syz.0.44) did not claim interface 0 before use [ 51.854623][ T40] audit: type=1400 audit(1752067000.967:213): avc: denied { open } for pid=6211 comm="syz.0.44" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 51.900108][ T6214] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 51.902249][ T6214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.905823][ T6214] vhci_hcd vhci_hcd.0: Device attached [ 51.911539][ T6215] vhci_hcd: cannot find the pending unlink 1023 [ 51.914902][ T6215] vhci_hcd: connection closed [ 51.915619][ T68] vhci_hcd: stop threads [ 51.918762][ T68] vhci_hcd: release socket [ 51.920189][ T68] vhci_hcd: disconnect device [ 52.032528][ T1331] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.193738][ T1331] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 52.197167][ T1331] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 52.200336][ T1331] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 52.203399][ T1331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.208730][ T6210] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.215784][ T1331] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 52.234630][ T837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.377135][ T6225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.403328][ T837] usb 7-1: Using ep0 maxpacket: 32 [ 52.406166][ T837] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 52.410769][ T837] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 52.413753][ T837] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 52.417241][ T837] usb 7-1: Product: syz [ 52.418617][ T837] usb 7-1: Manufacturer: syz [ 52.420470][ T837] usb 7-1: SerialNumber: syz [ 52.421016][ T6210] xt_l2tp: missing protocol rule (udp|l2tpip) [ 52.426813][ T837] usb 7-1: config 0 descriptor?? [ 52.429174][ T6223] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 52.499692][ T838] usb 6-1: USB disconnect, device number 2 [ 52.523901][ T6237] bridge0: entered promiscuous mode [ 52.526648][ T6237] macvlan2: entered promiscuous mode [ 52.592218][ T6243] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 52.634415][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 52.634747][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 52.651385][ T6253] syzkaller0: entered promiscuous mode [ 52.654125][ T6253] syzkaller0: entered allmulticast mode [ 52.657950][ T6223] tipc: Started in network mode [ 52.660117][ T6223] tipc: Node identity 0611299bf4e4, cluster identity 4711 [ 52.665435][ T6223] tipc: Enabled bearer , priority 0 [ 52.668141][ T6254] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.669677][ T6223] tipc: Resetting bearer [ 52.687189][ T6223] tipc: Resetting bearer [ 52.697086][ T6223] tipc: Disabling bearer [ 52.760428][ T6260] random: crng reseeded on system resumption [ 52.767556][ T6258] netlink: 'syz.0.55': attribute type 11 has an invalid length. [ 52.770059][ T6258] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.55'. [ 52.773329][ T837] usb 7-1: USB disconnect, device number 3 [ 52.774029][ T6257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.854342][ T5951] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 52.856949][ T5951] Bluetooth: hci2: Injecting HCI hardware error event [ 52.859477][ T5951] Bluetooth: hci2: hardware error 0x00 [ 52.898665][ T6269] syz.2.57: attempt to access beyond end of device [ 52.898665][ T6269] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 52.902826][ T6269] vxfs: unable to read disk superblock at 1 [ 52.904913][ T6269] syz.2.57: attempt to access beyond end of device [ 52.904913][ T6269] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 52.908835][ T6269] vxfs: unable to read disk superblock at 8 [ 52.910787][ T6269] vxfs: can't find superblock. [ 53.244069][ T6279] kvm: Disabled LAPIC found during irq injection [ 53.249809][ T6279] bond0: Error: Cannot enslave bond to itself. [ 53.377045][ T6287] openvswitch: netlink: Flow key attribute not present in set flow. [ 53.418840][ T6289] Device name cannot be null; rc = [-22] [ 53.606267][ T6305] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 53.621220][ T6310] libceph: resolve '40' (ret=-3): failed [ 53.656237][ T5959] Bluetooth: hci1: command tx timeout [ 53.663103][ T5959] Bluetooth: hci3: command tx timeout [ 53.665081][ T5959] Bluetooth: hci0: command tx timeout [ 53.683042][ T6318] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 53.708230][ T6324] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 53.914821][ T6349] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 53.918398][ T6349] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 54.262543][ T1331] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.412507][ T1331] usb 6-1: Using ep0 maxpacket: 16 [ 54.416611][ T1331] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 54.420995][ T1331] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 54.425628][ T1331] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9280, setting to 1024 [ 54.430050][ T1331] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 54.435192][ T6355] xt_l2tp: invalid flags combination: c [ 54.439562][ T1331] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.443395][ T1331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.446623][ T1331] usb 6-1: SerialNumber: syz [ 54.451775][ T6340] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.458317][ T1331] hub 6-1:1.0: bad descriptor, ignoring hub [ 54.461219][ T1331] hub 6-1:1.0: probe with driver hub failed with error -5 [ 54.465371][ T1331] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 54.587092][ T6369] validate_nla: 1 callbacks suppressed [ 54.587102][ T6369] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 54.591223][ T6369] netlink: 236 bytes leftover after parsing attributes in process `syz.2.92'. [ 54.605720][ T6369] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 54.608164][ T6369] netlink: 236 bytes leftover after parsing attributes in process `syz.2.92'. [ 54.624634][ T6365] overlayfs: workdir and upperdir must be separate subtrees [ 54.655061][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'. [ 54.662114][ T6340] binder: BINDER_SET_CONTEXT_MGR already set [ 54.668094][ T6340] binder: 6338:6340 ioctl 4018620d 200000000040 returned -16 [ 54.671352][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.674768][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.783338][ T836] usb 6-1: USB disconnect, device number 3 [ 54.932751][ T5951] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 55.263614][ T6383] Falling back ldisc for ttyS3. [ 55.278312][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 55.278326][ T40] audit: type=1400 audit(1752067004.397:277): avc: denied { remount } for pid=6384 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.289333][ T40] audit: type=1400 audit(1752067004.407:278): avc: denied { read } for pid=5664 comm="dhcpcd" name="n105" dev="tmpfs" ino=2487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.296815][ T40] audit: type=1400 audit(1752067004.407:279): avc: denied { open } for pid=5664 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=2487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.305064][ T40] audit: type=1400 audit(1752067004.407:280): avc: denied { getattr } for pid=5664 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=2487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.374487][ T40] audit: type=1400 audit(1752067004.497:281): avc: denied { create } for pid=6393 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.381276][ T40] audit: type=1400 audit(1752067004.497:282): avc: denied { write } for pid=6393 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.389943][ T40] audit: type=1400 audit(1752067004.497:283): avc: denied { append } for pid=6393 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.425510][ T40] audit: type=1400 audit(1752067004.547:284): avc: denied { unlink } for pid=6399 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.521618][ T40] audit: type=1400 audit(1752067004.637:285): avc: denied { setopt } for pid=6409 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.528965][ T40] audit: type=1400 audit(1752067004.647:286): avc: denied { read } for pid=6408 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.571817][ T6420] program syz.3.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.685880][ T6443] syzkaller0: entered promiscuous mode [ 55.687742][ T6443] syzkaller0: entered allmulticast mode [ 55.717348][ T6442] syzkaller0: entered promiscuous mode [ 55.719145][ T6442] syzkaller0: entered allmulticast mode [ 55.822965][ T6453] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 57.289610][ T6489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 57.291727][ T6489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.303649][ T6489] vhci_hcd vhci_hcd.0: Device attached [ 57.361003][ T6491] vhci_hcd: connection closed [ 57.361790][ T1246] vhci_hcd: stop threads [ 57.365232][ T1246] vhci_hcd: release socket [ 57.366693][ T1246] vhci_hcd: disconnect device [ 57.458607][ T6502] program syz.0.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.546461][ T6498] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 58.016611][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 58.358304][ T6534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=6534 comm=syz.0.130 [ 58.421686][ T6542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.133'. [ 58.477298][ T6541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=6541 comm=syz.0.130 [ 58.493062][ T5312] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 58.493281][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 58.495176][ T5312] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 58.501347][ T5312] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 58.503526][ T5312] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 58.540733][ T6549] 9pnet_fd: Insufficient options for proto=fd [ 58.548140][ T6547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.134'. [ 58.704278][ T6555] devpts: Bad value for 'max' [ 58.777678][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 58.783412][ T6562] vivid-000: disconnect [ 58.802709][ T6561] vivid-000: reconnect [ 58.854899][ T6568] random: crng reseeded on system resumption [ 58.925594][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'. [ 59.176375][ T6590] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.236910][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 59.432235][ T6613] process 'syz.0.151' launched '/dev/fd/7' with NULL argv: empty string added [ 59.468217][ T6616] netlink: 'syz.0.152': attribute type 7 has an invalid length. [ 59.471414][ T6616] netlink: 'syz.0.152': attribute type 8 has an invalid length. [ 59.543641][ T6619] overlayfs: failed to resolve './file0': -2 [ 59.613058][ T1331] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 59.733226][ T6625] Illegal XDP return value 4294967274 on prog (id 20) dev syz_tun, expect packet loss! [ 59.766114][ T6627] geneve1: entered allmulticast mode [ 59.780956][ T1331] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 59.783548][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 59.787048][ T1331] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.791836][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 59.795597][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 59.799810][ T1331] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 59.802040][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 59.805819][ T1331] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.809481][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 59.813149][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 59.817633][ T1331] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 59.819984][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 59.823376][ T1331] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.827013][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 59.830434][ T1331] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 59.841534][ T1331] usb 8-1: string descriptor 0 read error: -22 [ 59.843622][ T1331] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.846402][ T1331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.867944][ T1331] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 60.018483][ T6640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 60.020646][ T6640] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.025102][ T6640] vhci_hcd vhci_hcd.0: Device attached [ 60.031351][ T6640] syz.1.160: attempt to access beyond end of device [ 60.031351][ T6640] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 60.035666][ T6640] vxfs: unable to read disk superblock at 1 [ 60.037586][ T6640] syz.1.160: attempt to access beyond end of device [ 60.037586][ T6640] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 60.041731][ T6640] vxfs: unable to read disk superblock at 8 [ 60.042613][ T6041] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.043875][ T6640] vxfs: can't find superblock. [ 60.053865][ T6642] vhci_hcd: connection closed [ 60.056280][ T68] vhci_hcd: stop threads [ 60.059159][ T68] vhci_hcd: release socket [ 60.060542][ T68] vhci_hcd: disconnect device [ 60.192541][ T6041] usb 5-1: Using ep0 maxpacket: 32 [ 60.195500][ T6041] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.198393][ T6041] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.201083][ T6041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.206216][ T6041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.209362][ T6041] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.213088][ T6041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.217148][ T6041] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.221141][ T6041] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.226513][ T6041] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.229998][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.238685][ T6041] usb 5-1: config 0 descriptor?? [ 60.443653][ T6041] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 60.652490][ T40] kauditd_printk_skb: 48003 callbacks suppressed [ 60.652500][ T40] audit: type=1400 audit(1752067009.767:48290): avc: denied { mount } for pid=6628 comm="syz.0.158" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.663241][ T6041] usb 5-1: USB disconnect, device number 2 [ 60.671831][ T6041] usblp1: removed [ 60.962524][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.122549][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 61.126063][ T10] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 61.128896][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.133296][ T10] usb 6-1: config 0 descriptor?? [ 61.138873][ T10] as10x_usb: device has been detected [ 61.140981][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 61.152342][ T10] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 61.163061][ T40] audit: type=1400 audit(1752067010.287:48291): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 61.163694][ T10] as10x_usb: error during firmware upload part1 [ 61.175170][ T10] Registered device nBox DVB-T Dongle [ 61.182649][ T40] audit: type=1400 audit(1752067010.307:48292): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.463326][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.522087][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.535856][ T40] audit: type=1400 audit(1752067010.657:48293): avc: denied { execute } for pid=6652 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.543109][ T40] audit: type=1400 audit(1752067010.657:48294): avc: denied { execute_no_trans } for pid=6652 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.610872][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.652125][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.655537][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.658333][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.661119][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.664289][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.677712][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.788645][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 61.820257][ T13] bridge_slave_1: left allmulticast mode [ 61.822923][ T13] bridge_slave_1: left promiscuous mode [ 61.825718][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.830510][ T13] bridge_slave_0: left allmulticast mode [ 61.832273][ T13] bridge_slave_0: left promiscuous mode [ 61.834222][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.043157][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.049264][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.054624][ T13] bond0 (unregistering): Released all slaves [ 62.113368][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.115688][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.117940][ T6653] bridge_slave_0: entered allmulticast mode [ 62.120678][ T6653] bridge_slave_0: entered promiscuous mode [ 62.124192][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.127055][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.129385][ T6653] bridge_slave_1: entered allmulticast mode [ 62.131966][ T6653] bridge_slave_1: entered promiscuous mode [ 62.180948][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.211671][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.284069][ T6653] team0: Port device team_slave_0 added [ 62.299999][ T6653] team0: Port device team_slave_1 added [ 62.329825][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.332035][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.340183][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.346924][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.349188][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.357191][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.372238][ T13] hsr_slave_0: left promiscuous mode [ 62.375341][ T13] hsr_slave_1: left promiscuous mode [ 62.377772][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.380187][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.385013][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.387426][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.413251][ T13] veth1_macvtap: left promiscuous mode [ 62.415201][ T13] veth0_macvtap: left promiscuous mode [ 62.417510][ T13] veth1_vlan: left promiscuous mode [ 62.419757][ T13] veth0_vlan: left promiscuous mode [ 62.891435][ T13] team0 (unregistering): Port device team_slave_1 removed [ 62.937949][ T13] team0 (unregistering): Port device team_slave_0 removed [ 63.322489][ T6653] hsr_slave_0: entered promiscuous mode [ 63.324738][ T6653] hsr_slave_1: entered promiscuous mode [ 63.326749][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.329127][ T6653] Cannot create hsr debugfs directory [ 63.469012][ T6653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.488371][ T6653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.493698][ T6653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.498986][ T6653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.546832][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.559562][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.565389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.568050][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.575696][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.578006][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.619422][ T838] usb 6-1: USB disconnect, device number 4 [ 63.647408][ T838] Unregistered device nBox DVB-T Dongle [ 63.648131][ T838] as10x_usb: device has been disconnected [ 63.730217][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.732562][ T5312] Bluetooth: hci0: command tx timeout [ 63.790800][ T40] audit: type=1400 audit(1752067012.907:48295): avc: denied { watch } for pid=6699 comm="syz.1.168" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.865581][ T6653] veth0_vlan: entered promiscuous mode [ 63.870787][ T6653] veth1_vlan: entered promiscuous mode [ 63.887329][ T6653] veth0_macvtap: entered promiscuous mode [ 63.892006][ T6653] veth1_macvtap: entered promiscuous mode [ 63.901850][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.907220][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.911676][ T6653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.915244][ T6653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.917942][ T6653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.920655][ T6653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.955938][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.958411][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.974468][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.977309][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.013554][ T40] audit: type=1400 audit(1752067013.137:48296): avc: denied { create } for pid=6713 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.019524][ T40] audit: type=1400 audit(1752067013.137:48297): avc: denied { write } for pid=6713 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.373518][ T6034] usb 8-1: USB disconnect, device number 2 [ 64.789876][ T6791] hpfs: hpfs_map_sector(): read error [ 64.874732][ T40] audit: type=1400 audit(1752067013.997:48298): avc: denied { listen } for pid=6796 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.926437][ T6797] __nla_validate_parse: 2 callbacks suppressed [ 64.926450][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 64.931277][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 65.044850][ T6805] ======================================================= [ 65.044850][ T6805] WARNING: The mand mount option has been deprecated and [ 65.044850][ T6805] and is ignored by this kernel. Remove the mand [ 65.044850][ T6805] option from the mount to silence this warning. [ 65.044850][ T6805] ======================================================= [ 65.111660][ T40] audit: type=1400 audit(1752067014.227:48299): avc: denied { mounton } for pid=6803 comm="syz.4.173" path="/3/file0" dev="autofs" ino=13765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 65.113620][ T6806] 9p: Unknown access argument 18446744073709551615: -34 [ 65.133731][ T6804] /dev/sr0: Can't open blockdev [ 65.189778][ T6804] overlay: Unknown parameter 'measure' [ 65.213688][ T6805] /dev/sr0: Can't open blockdev [ 65.560184][ T6833] openvswitch: netlink: IP tunnel TTL not specified. [ 65.608145][ T6837] [U] zͻi[27| [ 65.609622][ T6837] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 65.615338][ T6837] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 65.618735][ T6837] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 65.633902][ T6837] [U] 8)X)YvxRĻbmbN@ox;JD, [ 65.636107][ T6837] [U] *Cn3v7KEXgt_3 [ 65.637747][ T6837] [U] D/QazҬEHgE1$_ks=R@ [ 65.639828][ T6837] [U] ϼcEv @ [ 65.641316][ T6837] [U] a% [ 65.643278][ T6837] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 65.649858][ T6837] [U] f1p3 [ 65.650998][ T6837] [U] N0[L;a_l&kMC [ 65.652865][ T6837] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 65.657414][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.180'. [ 65.722091][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 65.726308][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 65.822961][ T5312] Bluetooth: hci0: command tx timeout [ 65.845791][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 65.845800][ T40] audit: type=1400 audit(1752067014.967:48305): avc: denied { watch watch_reads } for pid=6849 comm="syz.3.181" path="/38" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.879498][ T40] audit: type=1400 audit(1752067014.997:48306): avc: denied { create } for pid=6851 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.893505][ T6852] sp0: Synchronizing with TNC [ 65.896593][ T6852] sp0: Found TNC [ 65.900062][ T40] audit: type=1400 audit(1752067015.017:48307): avc: denied { connect } for pid=6851 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.996590][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 65.998948][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 66.088648][ T40] audit: type=1400 audit(1752067015.207:48308): avc: denied { setopt } for pid=6857 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.440370][ T6836] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 1 [ 75.436454][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.440224][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.444138][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.447455][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.550352][ T7182] xt_NFQUEUE: number of total queues is 0 [ 75.579663][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 75.697456][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.700499][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.703352][ T7172] bridge_slave_0: entered allmulticast mode [ 75.706076][ T7172] bridge_slave_0: entered promiscuous mode [ 75.709132][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.711525][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.714600][ T7172] bridge_slave_1: entered allmulticast mode [ 75.717618][ T7172] bridge_slave_1: entered promiscuous mode [ 75.760309][ T7208] capability: warning: `syz.4.275' uses 32-bit capabilities (legacy support in use) [ 75.777090][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.793086][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.858589][ T7172] team0: Port device team_slave_0 added [ 75.862234][ T7172] team0: Port device team_slave_1 added [ 75.915013][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.917247][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.927655][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.933854][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.936806][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.946550][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.997490][ T7172] hsr_slave_0: entered promiscuous mode [ 75.999844][ T7172] hsr_slave_1: entered promiscuous mode [ 76.002060][ T7172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.005170][ T7172] Cannot create hsr debugfs directory [ 76.120035][ T7172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.124232][ T7172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.128682][ T7172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.133097][ T7172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.166358][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 76.166368][ T40] audit: type=1400 audit(1752067025.287:48361): avc: denied { read } for pid=7230 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.180614][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.196454][ T40] audit: type=1400 audit(1752067025.317:48362): avc: denied { map } for pid=7232 comm="syz.3.278" path="/proc/242/fdinfo/3" dev="proc" ino=15948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 76.208163][ T7233] syz.3.278: attempt to access beyond end of device [ 76.208163][ T7233] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 76.208884][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.214975][ T7233] XFS (nbd3): SB validate failed with error -5. [ 76.257678][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.260474][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.270752][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.273061][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.279534][ T7246] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 76.282381][ T7246] PKCS7: Only support pkcs7_signedData type [ 76.309858][ T7172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.313732][ T7172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.350798][ T40] audit: type=1400 audit(1752067025.467:48363): avc: denied { write } for pid=7249 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.353183][ T7251] QAT: failed to copy from user cfg_data. [ 76.373278][ T7255] bond1: entered promiscuous mode [ 76.375891][ T7255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.382240][ T7255] xt_hashlimit: size too large, truncated to 1048576 [ 76.435910][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.438451][ T7269] __nla_validate_parse: 1 callbacks suppressed [ 76.438459][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 76.445125][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 76.448544][ T7274] overlay: Bad value for 'workdir' [ 76.483509][ T7277] tipc: Started in network mode [ 76.485101][ T7277] tipc: Node identity 7f000001, cluster identity 4711 [ 76.487823][ T7277] tipc: Enabled bearer , priority 10 [ 76.551585][ T7288] wireguard0: entered promiscuous mode [ 76.553441][ T7288] wireguard0: entered allmulticast mode [ 76.585626][ T7172] veth0_vlan: entered promiscuous mode [ 76.589015][ T40] audit: type=1400 audit(1752067025.707:48364): avc: denied { shutdown } for pid=7293 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.590841][ T7172] veth1_vlan: entered promiscuous mode [ 76.612040][ T7172] veth0_macvtap: entered promiscuous mode [ 76.619055][ T7172] veth1_macvtap: entered promiscuous mode [ 76.628350][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.636681][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.640765][ T7172] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.644076][ T7172] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.647112][ T7172] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.650120][ T7172] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.681831][ T7299] tmpfs: Invalid gid '0x00000000ffffffff' [ 76.683096][ T40] audit: type=1400 audit(1752067025.797:48365): avc: denied { getopt } for pid=7298 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.692098][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.695585][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.710186][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.713161][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.715841][ T40] audit: type=1400 audit(1752067025.837:48366): avc: denied { mount } for pid=7298 comm="syz.3.293" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 76.784281][ T40] audit: type=1400 audit(1752067025.907:48367): avc: denied { load_policy } for pid=7305 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.784718][ T7306] SELinux: policydb magic number 0xb9 does not match expected magic number 0xf97cff8c [ 76.792554][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 76.795167][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.295'. [ 76.795960][ T7306] SELinux: failed to load policy [ 76.804478][ T7309] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 76.808411][ T40] audit: type=1400 audit(1752067025.927:48368): avc: denied { relabelto } for pid=7308 comm="syz.5.295" name="1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 76.822688][ T40] audit: type=1400 audit(1752067025.927:48369): avc: denied { associate } for pid=7308 comm="syz.5.295" name="1" dev="tmpfs" ino=18 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 76.844132][ T7313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7313 comm=syz.5.297 [ 76.868119][ T40] audit: type=1400 audit(1752067025.987:48370): avc: denied { connect } for pid=7315 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.868766][ T7317] tipc: Enabling of bearer rejected, already enabled [ 76.879821][ T7320] tipc: Enabling of bearer rejected, already enabled [ 76.918867][ T7328] fuse: Unknown parameter 'gjoiz' [ 76.952520][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 76.958169][ T34] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 76.960945][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.968101][ T34] usb 6-1: config 0 has no interfaces? [ 76.970404][ T34] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 76.974710][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.980327][ T34] usb 6-1: config 0 descriptor?? [ 77.011306][ T7343] syzkaller1: entered promiscuous mode [ 77.013997][ T7343] syzkaller1: entered allmulticast mode [ 77.143291][ T7359] pimreg: entered allmulticast mode [ 77.437619][ T7385] netlink: 76 bytes leftover after parsing attributes in process `syz.4.316'. [ 77.464808][ T5959] Bluetooth: hci4: ACL packet too small [ 77.493732][ T6912] tipc: Node number set to 2130706433 [ 77.502744][ T5959] Bluetooth: hci4: command tx timeout [ 77.544498][ T7397] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 77.548626][ T7399] xt_hashlimit: size too large, truncated to 1048576 [ 77.550946][ T7393] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 77.558252][ T7393] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1726973370 (3453946740 ns) > initial count (200000 ns). Using initial count to start timer. [ 77.558739][ T7397] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 77.617284][ T7404] binder: 7403:7404 ioctl c0845657 200000000080 returned -22 [ 77.666319][ T7404] binder: 7403:7404 ioctl 8138ae83 7f2d095c4aa0 returned -22 [ 77.882808][ T6912] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 77.898302][ T7420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.914914][ T7423] syzkaller1: entered promiscuous mode [ 77.916623][ T7423] syzkaller1: entered allmulticast mode [ 78.020480][ T7429] binder: 7428:7429 ioctl c0046209 0 returned -22 [ 78.031975][ T7429] binder: 7428:7429 ioctl c0306201 2000000001c0 returned -22 [ 78.032832][ T6912] usb 8-1: device descriptor read/64, error -71 [ 78.179875][ T7439] ipt_ECN: cannot use operation on non-tcp rule [ 78.272465][ T6912] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 78.412496][ T6912] usb 8-1: device descriptor read/64, error -71 [ 78.532726][ T6912] usb usb8-port1: attempt power cycle [ 78.872472][ T6912] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 78.893187][ T6912] usb 8-1: device descriptor read/8, error -71 [ 79.133649][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.5.335'. [ 79.138556][ T7451] program syz.5.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.142507][ T6912] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 79.163257][ T6912] usb 8-1: device descriptor read/8, error -71 [ 79.273408][ T6912] usb usb8-port1: unable to enumerate USB device [ 79.493890][ T53] usb 6-1: USB disconnect, device number 7 [ 79.563185][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 79.582672][ T5312] Bluetooth: hci4: command tx timeout [ 80.715507][ T7460] overlayfs: failed to resolve './file1': -2 [ 80.807286][ T7464] dlm: no locking on control device [ 80.877285][ T7469] netlink: 76 bytes leftover after parsing attributes in process `syz.3.343'. [ 81.172770][ T40] kauditd_printk_skb: 25526 callbacks suppressed [ 81.172781][ T40] audit: type=1326 audit(1752067030.297:73897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.181821][ T40] audit: type=1326 audit(1752067030.297:73898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.189170][ T40] audit: type=1326 audit(1752067030.297:73899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.196253][ T40] audit: type=1326 audit(1752067030.297:73900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.203341][ T40] audit: type=1326 audit(1752067030.297:73901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.210238][ T40] audit: type=1326 audit(1752067030.297:73902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.217225][ T40] audit: type=1326 audit(1752067030.297:73903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.224381][ T40] audit: type=1326 audit(1752067030.297:73904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.231331][ T40] audit: type=1326 audit(1752067030.297:73905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.238374][ T40] audit: type=1326 audit(1752067030.297:73906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.5.336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x50000 [ 81.425034][ T61] cfg80211: failed to load regulatory.db [ 81.483494][ T7478] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 81.572991][ T5959] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 81.573598][ T5312] Bluetooth: hci5: command 0x1003 tx timeout [ 81.653536][ T5959] Bluetooth: hci4: command tx timeout [ 81.686178][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 81.790886][ T7491] block device autoloading is deprecated and will be removed. [ 81.863886][ T7493] [U] zͻi[27| [ 81.865255][ T7493] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 81.869716][ T7493] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 81.871764][ T7493] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 81.887313][ T7493] [U] 8)X)YvxRĻbmbN@ox;JD, [ 81.890667][ T7493] [U] *Cn3v7KEXgt_3 [ 81.894448][ T7493] [U] D/QazҬEHgE1$_ks=R@ [ 81.896219][ T7493] [U] ϼcEv @ [ 81.897420][ T7493] [U] a% [ 81.898459][ T7493] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 81.905313][ T7493] [U] f1p3 [ 81.906535][ T7493] [U] N0[L;a_l&kMC [ 81.908070][ T7493] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 81.965632][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 81.968427][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 81.971147][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 81.976094][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 81.978829][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 82.155656][ T7508] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 82.158443][ T7508] SELinux: failed to load policy [ 82.192339][ T7513] netlink: 'syz.1.358': attribute type 10 has an invalid length. [ 82.200525][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.359'. [ 82.492678][ T6002] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 82.688419][ T7492] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 32) [ 93.377330][ T7947] binder_alloc: 7943: binder_alloc_buf, no vma [ 93.415599][ T7955] netlink: 'syz.5.489': attribute type 1 has an invalid length. [ 93.430183][ T7955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.439006][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.489'. [ 93.449435][ T7955] vlan2: entered promiscuous mode [ 93.451590][ T7955] bond2: entered promiscuous mode [ 93.456614][ T7955] dummy0: entered promiscuous mode [ 93.467564][ T7955] bond2: (slave dummy0): making interface the new active one [ 93.470717][ T7955] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 93.496195][ T7967] syz.1.490: attempt to access beyond end of device [ 93.496195][ T7967] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 93.500451][ T7967] qnx4: unable to read the superblock [ 93.546339][ T7975] netlink: 189416 bytes leftover after parsing attributes in process `syz.3.493'. [ 93.587116][ T7981] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 93.591274][ T40] audit: type=1400 audit(1752067042.707:85472): avc: denied { relabelfrom } for pid=7979 comm="syz.3.494" name="PACKET" dev="sockfs" ino=20729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.601086][ T40] audit: type=1400 audit(1752067042.717:85473): avc: denied { relabelto } for pid=7979 comm="syz.3.494" name="PACKET" dev="sockfs" ino=20729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:audit_spool_t:s0" [ 93.799912][ T7998] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.883795][ T8006] netlink: 152 bytes leftover after parsing attributes in process `syz.5.500'. [ 93.958777][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.5.504'. [ 94.008714][ T8029] netlink: 596 bytes leftover after parsing attributes in process `syz.5.507'. [ 94.066988][ T8038] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.510' sets config #1 [ 94.243369][ T6912] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 94.248149][ T8053] netlink: 64 bytes leftover after parsing attributes in process `syz.5.515'. [ 94.344213][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 94.394134][ T6912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.399709][ T6912] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.407973][ T6912] usb 6-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 94.411540][ T6912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 94.414854][ T6912] usb 6-1: Product: syz [ 94.416519][ T6912] usb 6-1: Manufacturer: syz [ 94.418102][ T6912] usb 6-1: SerialNumber: syz [ 94.420980][ T6912] usb 6-1: config 0 descriptor?? [ 94.542694][ T8067] SELinux: policydb version 755000912 does not match my version range 15-34 [ 94.545357][ T8067] SELinux: failed to load policy [ 94.755688][ T8079] syz.5.523 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.822252][ T8080] block nbd5: shutting down sockets [ 94.876003][ T6912] usb 6-1: USB disconnect, device number 11 [ 94.880442][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.981010][ T8093] syz.5.528 (8093) used greatest stack depth: 19640 bytes left [ 95.221133][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.533'. [ 95.224918][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.533'. [ 95.496083][ T8125] netlink: 'syz.4.540': attribute type 2 has an invalid length. [ 95.498587][ T8125] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 95.501354][ T8125] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 95.559627][ T8138] overlayfs: failed to resolve './file0': -2 [ 95.865328][ T8144] xfrm1: entered promiscuous mode [ 95.866990][ T8144] xfrm1: entered allmulticast mode [ 95.961804][ T8148] input: syz1 as /devices/virtual/input/input11 [ 96.438668][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 96.438678][ T40] audit: type=1400 audit(1752067045.557:85490): avc: denied { accept } for pid=8166 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.576910][ T8176] binder: 8175:8176 ioctl c0306201 200000000080 returned -14 [ 96.579906][ T8176] binder: 8175:8176 ioctl c0306201 2000000003c0 returned -14 [ 96.588647][ T8176] binder: 8175:8176 ioctl c0306201 2000000001c0 returned -14 [ 96.605203][ T8181] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.608164][ T8181] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.610924][ T8181] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.614512][ T8181] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.674240][ T40] audit: type=1400 audit(1752067045.797:85491): avc: denied { map } for pid=8195 comm="syz.4.564" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.691290][ T40] audit: type=1400 audit(1752067045.797:85492): avc: denied { getopt } for pid=8195 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.722895][ T8204] binder: BINDER_SET_CONTEXT_MGR already set [ 96.725140][ T8205] binder: BINDER_SET_CONTEXT_MGR already set [ 96.733576][ T8205] binder: 8203:8205 ioctl 4018620d 200000000040 returned -16 [ 96.736032][ T8204] binder: 8203:8204 ioctl 4018620d 2000000000c0 returned -16 [ 96.747000][ T8209] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 96.757287][ T8209] veth0_vlan: left promiscuous mode [ 96.761567][ T8209] veth0_vlan: entered promiscuous mode [ 96.767450][ T8209] team0: Device veth0_vlan failed to register rx_handler [ 96.830272][ T8216] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.912983][ T837] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 96.949878][ T40] audit: type=1400 audit(1752067046.067:85493): avc: denied { setopt } for pid=8229 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 96.982904][ T8237] overlayfs: failed to resolve './file1': -2 [ 97.009034][ T40] audit: type=1400 audit(1752067046.127:85494): avc: denied { bind } for pid=8238 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.096669][ T837] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.099711][ T837] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.104049][ T837] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.106904][ T837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.182226][ T8249] QAT: Invalid ioctl -2144835806 [ 97.253155][ T40] audit: type=1400 audit(1752067046.367:85495): avc: denied { attach_queue } for pid=8256 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.313444][ T837] usb 10-1: usb_control_msg returned -32 [ 97.315281][ T837] usbtmc 10-1:16.0: can't read capabilities [ 97.321676][ T8193] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 97.349827][ T837] usb 10-1: USB disconnect, device number 5 [ 97.401269][ T8279] syz.5.591: attempt to access beyond end of device [ 97.401269][ T8279] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 97.406147][ T8279] FAT-fs (nbd5): unable to read boot sector [ 97.449648][ T8284] /dev/sg0: Can't lookup blockdev [ 97.497896][ T40] audit: type=1400 audit(1752067046.617:85496): avc: denied { map } for pid=8287 comm="syz.5.595" path="socket:[24211]" dev="sockfs" ino=24211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 97.506656][ T40] audit: type=1400 audit(1752067046.617:85497): avc: denied { create } for pid=8291 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 97.648801][ T40] audit: type=1400 audit(1752067046.767:85498): avc: denied { ioctl } for pid=8304 comm="syz.3.600" path="socket:[23069]" dev="sockfs" ino=23069 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.656667][ T40] audit: type=1400 audit(1752067046.767:85499): avc: denied { getopt } for pid=8304 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.688316][ T8313] netlink: 'syz.1.602': attribute type 10 has an invalid length. [ 97.694955][ T8313] team0: Cannot enslave team device to itself [ 97.712650][ T6016] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 97.728094][ T8321] loop7: detected capacity change from 0 to 524255232 [ 97.785557][ T12] tipc: Subscription rejected, illegal request [ 97.843160][ T6016] usb 9-1: device descriptor read/64, error -71 [ 98.103931][ T6016] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 98.142282][ T8351] syz_tun: entered promiscuous mode [ 98.146953][ T8351] batadv_slave_1: entered promiscuous mode [ 98.153248][ T8351] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.153284][ T8351] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.153299][ T8351] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.153313][ T8351] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.183027][ T8357] syz.3.615: attempt to access beyond end of device [ 98.183027][ T8357] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 98.183068][ T8357] gfs2: error -5 reading superblock [ 98.193497][ T8357] __nla_validate_parse: 21 callbacks suppressed [ 98.193507][ T8357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.615'. [ 98.227745][ T8359] kvm: user requested TSC rate below hardware speed [ 98.232510][ T6016] usb 9-1: device descriptor read/64, error -71 [ 98.337371][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 98.352830][ T6016] usb usb9-port1: attempt power cycle [ 98.354282][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 98.357373][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'. [ 98.364645][ T8369] bridge2: entered promiscuous mode [ 98.366342][ T8369] bridge2: entered allmulticast mode [ 98.369430][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.617'. [ 98.371260][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 98.401997][ T8371] 9pnet_virtio: no channels available for device 127.0.0.1 [ 98.404200][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'. [ 98.437877][ T8373] loop3: detected capacity change from 0 to 1 [ 98.442307][ T8373] Dev loop3: unable to read RDB block 1 [ 98.444168][ T8373] loop3: unable to read partition table [ 98.446029][ T8373] loop3: partition table beyond EOD, truncated [ 98.448943][ T8373] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 98.489547][ T8381] tmpfs: Cannot change global quota limit on remount [ 98.504728][ T8381] xt_hashlimit: size too large, truncated to 1048576 [ 98.535506][ T5959] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 98.538061][ T5959] Bluetooth: hci4: Injecting HCI hardware error event [ 98.541364][ T5959] Bluetooth: hci4: hardware error 0x00 [ 98.620975][ T8381] evm: overlay not supported [ 98.624832][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 98.627572][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 98.659720][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 98.701126][ T6016] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 98.707749][ T6041] ================================================================== [ 98.711073][ T6041] BUG: KASAN: slab-use-after-free in __mutex_lock+0xa65/0xb90 [ 98.714132][ T6041] Read of size 8 at addr ffff888027250b20 by task kworker/2:4/6041 [ 98.718740][ T6041] [ 98.719766][ T6041] CPU: 2 UID: 0 PID: 6041 Comm: kworker/2:4 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 98.719789][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.719801][ T6041] Workqueue: events l2cap_chan_timeout [ 98.719827][ T6041] Call Trace: [ 98.719833][ T6041] [ 98.719840][ T6041] dump_stack_lvl+0x116/0x1f0 [ 98.719864][ T6041] print_report+0xcd/0x680 [ 98.719888][ T6041] ? __virt_addr_valid+0x81/0x610 [ 98.719908][ T6041] ? __phys_addr+0xe8/0x180 [ 98.719928][ T6041] ? __mutex_lock+0xa65/0xb90 [ 98.719950][ T6041] kasan_report+0xe0/0x110 [ 98.719973][ T6041] ? __mutex_lock+0xa65/0xb90 [ 98.719999][ T6041] __mutex_lock+0xa65/0xb90 [ 98.720021][ T6041] ? add_lock_to_list+0x9d/0x130 [ 98.720045][ T6041] ? l2cap_chan_timeout+0x6d/0x310 [ 98.720067][ T6041] ? __pfx___mutex_lock+0x10/0x10 [ 98.720092][ T6041] ? debug_object_deactivate+0x1ec/0x3a0 [ 98.720135][ T6041] ? l2cap_chan_timeout+0x6d/0x310 [ 98.720157][ T6041] l2cap_chan_timeout+0x6d/0x310 [ 98.720180][ T6041] process_one_work+0x9cf/0x1b70 [ 98.720202][ T6041] ? __pfx_process_one_work+0x10/0x10 [ 98.720230][ T6041] ? assign_work+0x1a0/0x250 [ 98.720247][ T6041] worker_thread+0x6c8/0xf10 [ 98.720268][ T6041] ? __kthread_parkme+0x19e/0x250 [ 98.720292][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 98.720309][ T6041] kthread+0x3c5/0x780 [ 98.720324][ T6041] ? __pfx_kthread+0x10/0x10 [ 98.720341][ T6041] ? rcu_is_watching+0x12/0xc0 [ 98.720362][ T6041] ? __pfx_kthread+0x10/0x10 [ 98.720378][ T6041] ret_from_fork+0x5d7/0x6f0 [ 98.720402][ T6041] ? __pfx_kthread+0x10/0x10 [ 98.720418][ T6041] ret_from_fork_asm+0x1a/0x30 [ 98.720442][ T6041] [ 98.720447][ T6041] [ 98.776656][ T6041] Allocated by task 6534: [ 98.778015][ T6041] kasan_save_stack+0x33/0x60 [ 98.779485][ T6041] kasan_save_track+0x14/0x30 [ 98.780948][ T6041] __kasan_kmalloc+0xaa/0xb0 [ 98.782405][ T6041] l2cap_conn_add.part.0+0x60/0xa60 [ 98.784054][ T6041] l2cap_chan_connect+0x15e5/0x2020 [ 98.785666][ T6041] l2cap_sock_connect+0x3b7/0x740 [ 98.787262][ T6041] kernel_connect+0x107/0x180 [ 98.788743][ T6041] rfcomm_dlc_open+0x821/0xaa0 [ 98.790273][ T6041] rfcomm_sock_connect+0x423/0x670 [ 98.791876][ T6041] __sys_connect_file+0x141/0x1a0 [ 98.793450][ T6041] __sys_connect+0x13b/0x160 [ 98.794978][ T6041] __x64_sys_connect+0x72/0xb0 [ 98.796470][ T6041] do_syscall_64+0xcd/0x4c0 [ 98.797897][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.799731][ T6041] [ 98.800490][ T6041] Freed by task 5961: [ 98.801731][ T6041] kasan_save_stack+0x33/0x60 [ 98.803213][ T6041] kasan_save_track+0x14/0x30 [ 98.804704][ T6041] kasan_save_free_info+0x3b/0x60 [ 98.806277][ T6041] __kasan_slab_free+0x51/0x70 [ 98.807801][ T6041] kfree+0x2b4/0x4d0 [ 98.809040][ T6041] l2cap_conn_del+0x59c/0x730 [ 98.810514][ T6041] l2cap_disconn_cfm+0x96/0xd0 [ 98.812030][ T6041] hci_conn_hash_flush+0x10e/0x260 [ 98.813635][ T6041] hci_dev_close_sync+0x602/0x11d0 [ 98.815322][ T6041] hci_dev_do_close+0x2e/0x90 [ 98.816804][ T6041] hci_unregister_dev+0x227/0x640 [ 98.818388][ T6041] vhci_release+0x79/0xf0 [ 98.819744][ T6041] __fput+0x402/0xb70 [ 98.820999][ T6041] task_work_run+0x14d/0x240 [ 98.822458][ T6041] do_exit+0x86c/0x2bd0 [ 98.823790][ T6041] do_group_exit+0xd3/0x2a0 [ 98.825305][ T6041] __x64_sys_exit_group+0x3e/0x50 [ 98.826929][ T6041] x64_sys_call+0x1530/0x1730 [ 98.828404][ T6041] do_syscall_64+0xcd/0x4c0 [ 98.829846][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.831681][ T6041] [ 98.832459][ T6041] The buggy address belongs to the object at ffff888027250800 [ 98.832459][ T6041] which belongs to the cache kmalloc-1k of size 1024 [ 98.836766][ T6041] The buggy address is located 800 bytes inside of [ 98.836766][ T6041] freed 1024-byte region [ffff888027250800, ffff888027250c00) [ 98.840953][ T6041] [ 98.841720][ T6041] The buggy address belongs to the physical page: [ 98.843703][ T6041] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27250 [ 98.846523][ T6041] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 98.849108][ T6041] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 98.851435][ T6041] page_type: f5(slab) [ 98.852686][ T6041] raw: 00fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 98.855646][ T6041] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 98.858600][ T6041] head: 00fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 98.861244][ T6041] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 98.863910][ T6041] head: 00fff00000000003 ffffea00009c9401 00000000ffffffff 00000000ffffffff [ 98.866599][ T6041] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 98.869262][ T6041] page dumped because: kasan: bad access detected [ 98.871244][ T6041] page_owner tracks the page as allocated [ 98.872998][ T6041] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12, tgid 12 (kworker/u32:0), ts 49547940772, free_ts 49544015142 [ 98.879090][ T6041] post_alloc_hook+0x1c0/0x230 [ 98.880602][ T6041] get_page_from_freelist+0x1321/0x3890 [ 98.882336][ T6041] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 98.884199][ T6041] alloc_pages_mpol+0x1fb/0x550 [ 98.885739][ T6041] new_slab+0x23b/0x330 [ 98.887072][ T6041] ___slab_alloc+0xd9c/0x1940 [ 98.888556][ T6041] __slab_alloc.constprop.0+0x56/0xb0 [ 98.890291][ T6041] __kmalloc_noprof+0x2f2/0x510 [ 98.891854][ T6041] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 98.893704][ T6041] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 98.895663][ T6041] ieee80211_iface_work+0xbf4/0x1020 [ 98.897309][ T6041] cfg80211_wiphy_work+0x3dc/0x550 [ 98.898911][ T6041] process_one_work+0x9cf/0x1b70 [ 98.900466][ T6041] worker_thread+0x6c8/0xf10 [ 98.901916][ T6041] kthread+0x3c5/0x780 [ 98.903196][ T6041] ret_from_fork+0x5d7/0x6f0 [ 98.904662][ T6041] page last free pid 5948 tgid 5948 stack trace: [ 98.906626][ T6041] __free_frozen_pages+0x7fe/0x1180 [ 98.908307][ T6041] __put_partials+0x16d/0x1c0 [ 98.909808][ T6041] qlist_free_all+0x4d/0x120 [ 98.911282][ T6041] kasan_quarantine_reduce+0x195/0x1e0 [ 98.912982][ T6041] __kasan_slab_alloc+0x69/0x90 [ 98.914583][ T6041] __kmalloc_cache_node_noprof+0x217/0x420 [ 98.916422][ T6041] __get_vm_area_node+0x101/0x330 [ 98.918017][ T6041] __vmalloc_node_range_noprof+0x271/0x14b0 [ 98.919872][ T6041] __vmalloc_node_noprof+0xad/0xf0 [ 98.921526][ T6041] do_ipt_get_ctl+0x6b6/0xaa0 [ 98.923035][ T6041] nf_getsockopt+0x79/0xe0 [ 98.924466][ T6041] ip_getsockopt+0x18c/0x1e0 [ 98.926182][ T6041] tcp_getsockopt+0xa1/0x100 [ 98.927659][ T6041] do_sock_getsockopt+0x3ff/0x800 [ 98.929238][ T6041] __sys_getsockopt+0x12f/0x260 [ 98.930769][ T6041] __x64_sys_getsockopt+0xbd/0x160 [ 98.932374][ T6041] [ 98.933140][ T6041] Memory state around the buggy address: [ 98.934911][ T6041] ffff888027250a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.937377][ T6041] ffff888027250a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.939854][ T6041] >ffff888027250b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.942360][ T6041] ^ [ 98.943954][ T6041] ffff888027250b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.946425][ T6041] ffff888027250c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.948896][ T6041] ================================================================== [ 98.952129][ T6041] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.954394][ T6041] CPU: 2 UID: 0 PID: 6041 Comm: kworker/2:4 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 98.958069][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.961410][ T6041] Workqueue: events l2cap_chan_timeout [ 98.963123][ T6041] Call Trace: [ 98.964190][ T6041] [ 98.965135][ T6041] dump_stack_lvl+0x3d/0x1f0 [ 98.966652][ T6041] panic+0x71c/0x800 [ 98.967908][ T6041] ? __pfx_panic+0x10/0x10 [ 98.969328][ T6041] ? mark_held_locks+0x49/0x80 [ 98.970860][ T6041] ? __mutex_lock+0xa65/0xb90 [ 98.972357][ T6041] ? check_panic_on_warn+0x1f/0xb0 [ 98.974023][ T6041] ? __mutex_lock+0xa65/0xb90 [ 98.975499][ T6041] check_panic_on_warn+0xab/0xb0 [ 98.977051][ T6041] end_report+0x107/0x170 [ 98.978418][ T6041] kasan_report+0xee/0x110 [ 98.979826][ T6041] ? __mutex_lock+0xa65/0xb90 [ 98.981305][ T6041] __mutex_lock+0xa65/0xb90 [ 98.982734][ T6041] ? add_lock_to_list+0x9d/0x130 [ 98.984300][ T6041] ? l2cap_chan_timeout+0x6d/0x310 [ 98.985952][ T6041] ? __pfx___mutex_lock+0x10/0x10 [ 98.987546][ T6041] ? debug_object_deactivate+0x1ec/0x3a0 [ 98.989294][ T6041] ? l2cap_chan_timeout+0x6d/0x310 [ 98.990892][ T6041] l2cap_chan_timeout+0x6d/0x310 [ 98.992437][ T6041] process_one_work+0x9cf/0x1b70 [ 98.994010][ T6041] ? __pfx_process_one_work+0x10/0x10 [ 98.995772][ T6041] ? assign_work+0x1a0/0x250 [ 98.997242][ T6041] worker_thread+0x6c8/0xf10 [ 98.998698][ T6041] ? __kthread_parkme+0x19e/0x250 [ 99.000271][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 99.001876][ T6041] kthread+0x3c5/0x780 [ 99.003150][ T6041] ? __pfx_kthread+0x10/0x10 [ 99.004617][ T6041] ? rcu_is_watching+0x12/0xc0 [ 99.006120][ T6041] ? __pfx_kthread+0x10/0x10 [ 99.007580][ T6041] ret_from_fork+0x5d7/0x6f0 [ 99.009044][ T6041] ? __pfx_kthread+0x10/0x10 [ 99.010519][ T6041] ret_from_fork_asm+0x1a/0x30 [ 99.012021][ T6041] [ 99.013701][ T6041] Kernel Offset: disabled [ 99.015066][ T6041] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:17:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000002 RBX=ffff88806a43b500 RCX=ffffffff81aff013 RDX=ffff88801e29c880 RSI=ffffffff81afefed RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9fae R12=1ffff9200002af80 R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4876a1 RIP=ffffffff81bbf74b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6716000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe506dc0e9c CR3=000000002517b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056385e4b1f80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd8d9ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 7373737373737340 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4203431e161e035c 431e161e035c1810 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00336963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fdd367e48af58063 0000563d3dc9fa90 0000000000000101 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fdd367e48af58063 000000056385e4c4 0000000000000021 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000035170 RBX=ffffffff93ef1920 RCX=0000000000035176 RDX=00000000000000c0 RSI=0000000000035173 RDI=0000000000016f4a RBP=0000000000000006 RSP=ffffc90000067d18 R8 =0000000000035174 R9 =ffffffff95f70c88 R10=0000000000000000 R11=0000000000000001 R12=ffffffff974cca70 R13=00000000000007bd R14=ffffffff975569f8 R15=dead000000000122 RIP=ffffffff81982a23 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6816000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe50712fb4c CR3=0000000024f1b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7385488 00007f65a7385480 00007f65a7385478 00007f65a7385450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7eed100 00007f65a7385440 00007f65a7385458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7385498 00007f65a7385490 00007f65a7385488 00007f65a7385480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bc355 RDI=ffffffff9b0c42a0 RBP=ffffffff9b0c4260 RSP=ffffc900042df540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b0c4260 R15=ffffffff855bc2f0 RIP=ffffffff855bc37f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6916000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f40a9f726e0 CR3=0000000063f3f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0078000a25dfdbfc 0070bd260400004a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f623d011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f623d011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f623d011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f623d011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f623d011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f623d011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4fa924b59bdb3b3d 96c3a24d9c543ae3 82db16d807ef9218 e22463d76eb34a4d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8ae2f0b103f53e12 2f4b8338ab97f847 db03591581830004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4577949d395f14b8 4aed618cf7f59c42 9298bf50963d71b3 b9564cf60ebd82cc ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e87ea97d83341bf4 45df57d91b93da85 23f96aad69233e1a a2caa8a75ec75a81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb6ce87ea97d8334 1bf445df57d91b93 da8523f96aad6923 3e1aa2caa8a75ec7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a814577949d395f 14b84aed618cf7f5 9c429298bf50963d 71b3b9564cf60ebd ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82cc8ae2f0b103f5 3e122f4b8338ab97 f847db0359158183 9f80c3f981aeba9c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64d34fa924b59bdb 3b3d96c3a24d9c54 3ae382db16d807ef 9218e22463d76eb3 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c4e80 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e5c4e80 RBP=0000000000000002 RSP=ffffc900075a71b8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffea00016bea87 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a16ed0 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a16000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f65a7f83d58 CR3=0000000050aaf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8ac99750 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a7211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000