last executing test programs: 3m43.622657057s ago: executing program 0 (id=201): r0 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/84, 0x54}], 0x2, &(0x7f0000000740)=""/65, 0x41}, 0x6}, {{&(0x7f0000000d00)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/155, 0x9b}, {&(0x7f00000005c0)}, {&(0x7f0000000880)=""/118, 0x76}, {&(0x7f0000000900)=""/168, 0xa8}], 0x4, &(0x7f00000036c0)=""/4097, 0x1001}, 0x40}, {{&(0x7f00000009c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000001400)=""/160, 0xa0}, {&(0x7f0000000b80)=""/185, 0xb9}], 0x2}, 0x8}, {{&(0x7f0000000c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001300)=""/242, 0xf2}, {&(0x7f0000000e00)=""/99, 0x63}, {&(0x7f0000000e80)=""/72, 0x48}, {&(0x7f0000000f00)=""/123, 0x7b}, {&(0x7f0000000f80)=""/250, 0xfa}, {&(0x7f0000001080)=""/70, 0x46}], 0x6, &(0x7f0000001180)=""/66, 0x42}, 0x8}], 0x4, 0x43, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x40, 0x0, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0000000000f0000000000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e10427bd7000fedbdf256b0000000c00990000000000690000000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a0008021100000100001a70fd32339d3edf9270fe685fe1ba860b3a8a30169151f8ecb592ec0c650573b43455fa5c1973c0f1e2303db2a7b1e34d3637e98796830b52e661240dbd41baafe86e2de17aa095eb7f4520a45c14d5538318936146c7fa8829a853ac774d7939da661255e7039474487a45f3b7830b5c8b8bb68839bffaabe60ea12bb4"], 0x44}, 0x1, 0x0, 0x0, 0x24004180}, 0x4000000) vmsplice(r7, &(0x7f0000000600)=[{&(0x7f0000000100)="04", 0x1}], 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r7) 3m43.622278002s ago: executing program 0 (id=202): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) chdir(0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x1003, r1}, 0x38) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 3m42.75184192s ago: executing program 0 (id=215): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000000) 3m42.632171622s ago: executing program 0 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="f77900b805000000b9d248e7c90f01c1f3400fc73126430f01c9360f01c866ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f784228b805000000b9c0000100c744240008010000c744240204000000ff1c24b8010000000f01d9c4033921820f47a753fd", 0x6d}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 3m42.482798316s ago: executing program 0 (id=220): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}]}, 0x1c}}, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 3m42.482312946s ago: executing program 0 (id=222): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0xfffffffe) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) r4 = syz_io_uring_setup(0x1748, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000100), &(0x7f0000001000)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000fd75c414058c1c96996d0d3c3c36a050bc8befba27641833742972e4ffce1eb7feebc3514c8e2446683a4b843465fd52dd0ab0e37420567ea955bb2c6873a76027568e8f71a51948dc0e0b93de165049930d1238c0810e0852a25d1d480d0a89b002840917b5e1bf33299c3abc08139f52ab2493244e5b61784051a2dbdb1785699fe7e5d3cbc8d8f7bf229d925c2bc88e88b933c5d942e30c00d98299f5a63cb7f29c81f3a0f3f254f225e6ed4f0c92e7fb87e1c03d8ffbfac90811462daf7dcf8979e8b5414033d175eb89e1bda4ce7ab2633fb6b1d2b7c7ae971c17138f54611aa9de", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf252800000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, r11, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r12, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m33.132685891s ago: executing program 1 (id=309): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r3, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000), 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd600000eeffff09"], 0x214}], 0x1, 0x0, 0x0, 0x40}, 0x0) 3m32.981839071s ago: executing program 1 (id=310): r0 = socket$kcm(0xa, 0x6, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffbff, 0x20, &(0x7f0000000140)="f136", 0x2, 0x8, 0x1, 0x0, 0x5, 0x400003, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x4) 3m32.981003551s ago: executing program 1 (id=311): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0xc700, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m32.407506697s ago: executing program 1 (id=319): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='efs\x00', 0x483, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000021c0)={{r1}, 0x0, 0x8, @inherit={0x78, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000006000000000000060000000000000000020000000000000008000000000000000800000000000000ffffffff0000000005000000000000000500000000000000ff0000000000000004000000000000000f0000000000000006000000000000008000000000000400"]}, @devid}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="000000004a11010018001680140001"], 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="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", 0xa94}], 0x1}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="040e04093520"], 0x7) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file1'}, 0xb) ioctl$mixer_OSS_ALSAEMULVER(r7, 0x80044df9, &(0x7f0000000080)) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000280)={&(0x7f0000015000/0x3000)=nil, 0x3000}) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0xde}) setns(r0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r8) tkill(r8, 0x2) 3m32.342433441s ago: executing program 1 (id=320): landlock_create_ruleset(&(0x7f0000000240)={0x1e16, 0x2, 0x1}, 0x18, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x4000, 0x0) 3m32.092295055s ago: executing program 1 (id=322): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x3c}}, 0x4000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r3) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0xfffffffd) 3m32.056330757s ago: executing program 32 (id=322): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x3c}}, 0x4000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r3) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0xfffffffd) 3m27.392757393s ago: executing program 33 (id=222): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0xfffffffe) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) r4 = syz_io_uring_setup(0x1748, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000100), &(0x7f0000001000)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000fd75c414058c1c96996d0d3c3c36a050bc8befba27641833742972e4ffce1eb7feebc3514c8e2446683a4b843465fd52dd0ab0e37420567ea955bb2c6873a76027568e8f71a51948dc0e0b93de165049930d1238c0810e0852a25d1d480d0a89b002840917b5e1bf33299c3abc08139f52ab2493244e5b61784051a2dbdb1785699fe7e5d3cbc8d8f7bf229d925c2bc88e88b933c5d942e30c00d98299f5a63cb7f29c81f3a0f3f254f225e6ed4f0c92e7fb87e1c03d8ffbfac90811462daf7dcf8979e8b5414033d175eb89e1bda4ce7ab2633fb6b1d2b7c7ae971c17138f54611aa9de", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf252800000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, r11, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r12, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m20.192504262s ago: executing program 5 (id=452): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002180)=0x0) fcntl$lock(r0, 0x25, &(0x7f00000021c0)={0x1, 0x1, 0x7fffffff, 0x200, r1}) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r6, 0x1ad72f7) accept4$netrom(r6, 0x0, 0x0, 0x80000) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r7, &(0x7f00000020c0)=[{0x6, 0x2, 0x0, 0x0, @time={0x1, 0xb}, {0x7}, {0x0, 0x4}, @addr={0x5b}}, {0x0, 0x0, 0x0, 0x0, @time, {0x2}, {}, @result}, {0x0, 0x4, 0xfc, 0x0, @time, {}, {}, @note={0xba, 0x8, 0x0, 0xe5, 0x9}}, {0xfc, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0xfffffffc}, {0xff, 0x7f, 0x0, 0x7f, @time={0x7d5, 0x1}, {0xa}, {0xb8, 0x1}, @ext={0xb, &(0x7f0000002080)="1fe6ec483591b87d6b8eb6"}}, {0x2, 0x5, 0x18, 0xa, @time={0xffff, 0x2}, {0x9, 0x6}, {0x9, 0x7}, @result={0x2, 0x401}}], 0xa8) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0xed}]}]}, 0x2c}}, 0x800) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xf, 0x9, 0x0, 0x0, @str='/proc/keys\x00'}]}, 0x30}], 0x1}, 0x0) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r12 = fcntl$dupfd(r11, 0x2, 0xffffffffffffffff) splice(r8, 0x0, r12, 0x0, 0x2000, 0x0) 3m19.332024386s ago: executing program 5 (id=460): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000500", @ANYBLOB="d92b33d6bcc239f41d47a3c9145f650af8bbbf79631f648641252d559dd051fc98812e8153162cc254ded2c29afbe2a34e9b71d50e4389172d426242e2e6c676a76c6883ae39df065ad9f103253e32087b0082e1fa11600a695b30702ce52703d514df344b3e857bbfb3c1c6792b9fb6c09a43614ec14c19656e6a83bbb00f2886f462500ebaf60c1158e78ae39f4e4ecb6df19454a65aadda2e86f771ea9de0bc05921be2df4fbf36ba5ff2545b5d4df9d840b59e5923a4651a22d7c4", @ANYBLOB="010000000000000000001b0017400700210030"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m19.331729383s ago: executing program 5 (id=461): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000100000000000000000000000096468c75b01358f1352a0615925199d7d2c56bc86a07c8ee0e282a9c7f5597b3f518c70f423020f50971396bb55a71cf916913a47c317b716a91ef945c50cc039290c86301e936b8c214879e70fb0bade52e331506c2cc5705134725ae7f9d696794616cf956a7fff2c735ba9e7763189c0c015f3f5008784f7a92cb4581813d3e33ff2b6b2b62f02533b4a5efbb50337e0a5f518497db3d8cfad3283363cfa6780f35de4948e12dfebc87502b8b4f26b550dc6ab3b917cede087e9068abd0d57c919c036a4025a4"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000066"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x40802) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x29]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3m19.212893399s ago: executing program 5 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x8, 0x7fffffff}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_pidfd_open(r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7, 0x75, 0x80, 0x8}, {0xed73, 0x1, 0x6, 0xb5}]}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff03) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x3a, 0x38]}}}}, {@grpquota}]}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00') lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) 3m19.122300092s ago: executing program 5 (id=464): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @map_val, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x4, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x4080) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xb0) r6 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}}) 3m18.182460813s ago: executing program 5 (id=470): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000002d40)={0x0, 0xa588, 0x30, 0x6, 0xe97}, &(0x7f0000002d80)=0x18) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000240)="00214717a70700000001030600710a06069d856829c2f5d7a3", 0x19}], 0x1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000080)) 3m18.165035733s ago: executing program 34 (id=470): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000002d40)={0x0, 0xa588, 0x30, 0x6, 0xe97}, &(0x7f0000002d80)=0x18) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000240)="00214717a70700000001030600710a06069d856829c2f5d7a3", 0x19}], 0x1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000080)) 2m17.360510832s ago: executing program 4 (id=1470): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "36557fb79d8951c5588783b3f8c85ea1428a5bc3faf038a9fc939b941480eb73", "269c7c1dd97cf9a2e5e1e77d235a6e1427c23f24479a8f375e903772a5cba9cd", "69a242b24596dae8c735e5e66b795720482f4f1e7700000000888720c61f4971", "3c7ff85395ca594f57296bfa99913aaab0470a97591a843c66b8a3a800", "871bf5766c5e6bfc3baadd357a90abc1b11c4faf312d130721a99f1b6afac90b", "00fdffff1a00a90400", 0x5, 0x7ffe, 0x800, 0x9, 0x9}}) 2m17.281491502s ago: executing program 4 (id=1472): syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x104) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="fa", 0x1}, {&(0x7f0000000080)="ea", 0x1}], 0x2) 2m14.201386764s ago: executing program 4 (id=1500): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x4037000000000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m14.020930324s ago: executing program 4 (id=1503): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000280)="80fd01869b40", 0x6}], 0x1, 0x0, 0x3) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "f2a936"}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setgroups(0x352, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r8, &(0x7f0000001300)={0x2020}, 0x2020) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r10, 0xfffffffffffffffe, 0x1) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xe}, {0x0, 0x0, 0x1}, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r7) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000012000501000001000000000005001900"], 0x40}}, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 2m13.850977509s ago: executing program 4 (id=1504): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x8, 0xf8}}]}}]}}]}}, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa, 0xb, 0x1, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@huge_never}]}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r5, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x8080) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032cbd7000fcdbdf254d0000000e0001006e657464657673696d0000000f0002006e65746465767b696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) 2m13.57115936s ago: executing program 4 (id=1508): syz_open_dev$media(&(0x7f0000000000), 0x0, 0x1500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200087f9, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)="f7", 0x1}], 0x1}}], 0x2, 0x1) (async) read$eventfd(r0, &(0x7f0000000080), 0x51) (async) r2 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) migrate_pages(0x0, 0x8001, &(0x7f0000000800)=0x3, &(0x7f0000000840)=0xffffffffffffffff) 2m13.570571243s ago: executing program 35 (id=1508): syz_open_dev$media(&(0x7f0000000000), 0x0, 0x1500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200087f9, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)="f7", 0x1}], 0x1}}], 0x2, 0x1) (async) read$eventfd(r0, &(0x7f0000000080), 0x51) (async) r2 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) migrate_pages(0x0, 0x8001, &(0x7f0000000800)=0x3, &(0x7f0000000840)=0xffffffffffffffff) 1m6.780793286s ago: executing program 7 (id=2246): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) listen(r0, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x5c) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@getqdisc={0x3c, 0x26, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x3}, {0xf, 0xd}, {0x4, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1m6.710849991s ago: executing program 7 (id=2247): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r0 = fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) (async) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000005800)='./bus\x00', 0x6b76f27452643c0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x4080, 0x137) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="9783478cedff8d31dc531d18877e3a1ca2e9921400a9c58a5a160697af8e49a50c75ab5d7a8bea20fcc2db1c2822fbba076d3e908d83c231ceb63a781e3d431823bc5006c65234485c1a97fa4e865ccda129ee825e5d9a8dccc36b330edf763586e238f42e813df3cadb5d867bfa0d6119b2a87267805aeb12a0764d59df220b21876bdf0ba7c646535ac20dc2697dbd947ebc12279d42146de0ad2bc90a2a4133a9af68dd3708e02a288b115e896c4d54d5c03ca1e5ccba96d91f23b3586b5f4768b007f6fdce4b0583f8", 0xcb}], 0x1) (async) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000280)={0x8, 'macvlan1\x00', {'syzkaller1\x00'}, 0x50b8}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m6.640284774s ago: executing program 7 (id=2248): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m6.55673596s ago: executing program 7 (id=2250): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="50000000100021"], 0x50}}, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)='c*', 0x2}], 0x1, 0x0, 0x0, 0x4090}, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b703000007", @ANYRESOCT=r0], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000900"/20, @ANYRES32=r7, @ANYBLOB="0400010001280200080028007a4b0000"], 0x28}}, 0x4) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=virtio,', {[{@cache_readahead}]}}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) syz_clone(0x0, &(0x7f00000003c0)="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", 0xfc, &(0x7f00000001c0), &(0x7f0000000540), &(0x7f0000000580)="d28f40a0c242cab2c08434347a267b84607e4eccd5193237e00cb28d289b547038efba89ba9038abb534ca8aeeaebc73c9ba629c24157fb96a4bf65556a4d5b67720d3be8bd84f66cb61777a2cf3270020dbaf0b966680eda400") syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40400) 1m6.380597718s ago: executing program 7 (id=2252): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xf67d10fbb02e609b, 0x1, 0x0, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0xecab}}]}, 0x3c}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r5, 0x0, 0x0, 0x1c, 0x68a2}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}}, 0x1c}}, 0x40854) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}}, 0x1c}}, 0x40854) getsockopt$inet6_int(r8, 0x29, 0x11, 0x0, &(0x7f0000000100)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24b8, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x24a4, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}]}, {0x2464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x107c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x16, 0x1, "098d048da64e3d092535e462b18c71bfa67c"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "ee3511d2aa81991a9be819a72003b362a6156e0c6ecdb4d2f00811cc27150e235f62127d75ca71f421d06d15b48b4d9f1afa865254281823a2b7972148f1d275b6f1d0620297ff21481d6b4c6c9ad5c6172b4b82e21d7fdf1ad91199f595cf6233529158b0339ff75c3afc0ab2b9a4fd9a4587124825a9a7f8e8973c0b7d980a1f9e82ee6544cdd703c84791117e786875c10362b7d8d585ec1e65c1dfdcc42341f8bf026d99928f1456920e04d54da50293a41023b96a648131ea3114c7f1e414e5162ba9126b78a44cc4c06454c9b75cfbdb32952903317667208849b5c8a48375501fce445745a11486831b4f2f2a74"}, @NFTA_SET_ELEM_DATA={0x12d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "08df4256a3abf98c1ef8df654ad8e66531bb143031fd2e7d4312d70f4c9095a293fe5635a256d473b737cd60c66a2b9e1b65106048b38e9b6f304e9449bc65c264ec1cc4f5407c5f718d8f8f049aaf9a290d76a941bc1bfd62d7e26f9d2347bc0b521f1dd13ddb6e71644886d07cc304b5166e6d136a4bd713e12890415a58610211ecb5c3f5f6930168d7d25343ffe48b4b793dc9bd291b93cd71ed753026f57004c0e97db4148a65b82e667f4a0452759b531d57b8e300"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xd, 0x1, "269dec7b7ab0bed532"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "511694fd4f3559d78a90a94fe4bc80f68a8c0eb9df8d9b0e832b474726e0e6448b61d7b6f992f00b10539e78d9a79a9e4182c49884b2d199c49d3248da5ec76002475c68ee75b1922db5043a80ae7418113d3e29ea2a461ac3770fc96cf3c327c4448247f37d10a7468457615efb16b61b620ca9036b6b4caf90156cfbee0da7e8fabae0e0a5087ad820b3c6a56f0fd0c4a077ca6891e5c02d4340ef6765096d6758e617a42db858eef8fdacd1a278c5b213a13dc0b0f0e920c1f101d2fd1447afc8eaec6deb1e6f8008b7b07049096d08862d23c1236036da2ae79a35e795"}, @NFTA_DATA_VALUE={0x30, 0x1, "e033ed71eb1175a16b2abf24c8288886b7c3adf2af54bbbdf016e36bc654ef75e89e3ca5bd46f37bfa242817"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "2a6b95194a7c12c7837fe3470d9b3c3247b8f72e736a73a3c42fe32ecb582d9d7d5b41e121a940ae9a75030fa0683730563c952520a8d66bf0ff7e51b466ddfeb46c569d8ee79936cf60274ae9467874ffcedb9a1d1024f5c6fc2602581cb3031765643d6c6941810d07a8bda60efdc9f9592bb661624f1df37934d43a516285f708a978962a5af1c4793d0711660794ddf0a33cca60dfacf04a39dfe886"}, @NFTA_DATA_VALUE={0x6, 0x1, "f79e"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x256c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24b8, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x24a4, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}]}, {0x2464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x107c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x16, 0x1, "098d048da64e3d092535e462b18c71bfa67c"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "ee3511d2aa81991a9be819a72003b362a6156e0c6ecdb4d2f00811cc27150e235f62127d75ca71f421d06d15b48b4d9f1afa865254281823a2b7972148f1d275b6f1d0620297ff21481d6b4c6c9ad5c6172b4b82e21d7fdf1ad91199f595cf6233529158b0339ff75c3afc0ab2b9a4fd9a4587124825a9a7f8e8973c0b7d980a1f9e82ee6544cdd703c84791117e786875c10362b7d8d585ec1e65c1dfdcc42341f8bf026d99928f1456920e04d54da50293a41023b96a648131ea3114c7f1e414e5162ba9126b78a44cc4c06454c9b75cfbdb32952903317667208849b5c8a48375501fce445745a11486831b4f2f2a74"}, @NFTA_SET_ELEM_DATA={0x12d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "08df4256a3abf98c1ef8df654ad8e66531bb143031fd2e7d4312d70f4c9095a293fe5635a256d473b737cd60c66a2b9e1b65106048b38e9b6f304e9449bc65c264ec1cc4f5407c5f718d8f8f049aaf9a290d76a941bc1bfd62d7e26f9d2347bc0b521f1dd13ddb6e71644886d07cc304b5166e6d136a4bd713e12890415a58610211ecb5c3f5f6930168d7d25343ffe48b4b793dc9bd291b93cd71ed753026f57004c0e97db4148a65b82e667f4a0452759b531d57b8e300"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xd, 0x1, "269dec7b7ab0bed532"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "511694fd4f3559d78a90a94fe4bc80f68a8c0eb9df8d9b0e832b474726e0e6448b61d7b6f992f00b10539e78d9a79a9e4182c49884b2d199c49d3248da5ec76002475c68ee75b1922db5043a80ae7418113d3e29ea2a461ac3770fc96cf3c327c4448247f37d10a7468457615efb16b61b620ca9036b6b4caf90156cfbee0da7e8fabae0e0a5087ad820b3c6a56f0fd0c4a077ca6891e5c02d4340ef6765096d6758e617a42db858eef8fdacd1a278c5b213a13dc0b0f0e920c1f101d2fd1447afc8eaec6deb1e6f8008b7b07049096d08862d23c1236036da2ae79a35e795"}, @NFTA_DATA_VALUE={0x30, 0x1, "e033ed71eb1175a16b2abf24c8288886b7c3adf2af54bbbdf016e36bc654ef75e89e3ca5bd46f37bfa242817"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "2a6b95194a7c12c7837fe3470d9b3c3247b8f72e736a73a3c42fe32ecb582d9d7d5b41e121a940ae9a75030fa0683730563c952520a8d66bf0ff7e51b466ddfeb46c569d8ee79936cf60274ae9467874ffcedb9a1d1024f5c6fc2602581cb3031765643d6c6941810d07a8bda60efdc9f9592bb661624f1df37934d43a516285f708a978962a5af1c4793d0711660794ddf0a33cca60dfacf04a39dfe886"}, @NFTA_DATA_VALUE={0x6, 0x1, "f79e"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x256c}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x10000, {0x0, 0x0, 0x0, r12, {0xc}, {}, {0x4}}}, 0x24}}, 0x4045014) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 1m6.140547252s ago: executing program 7 (id=2254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r1, 0x0, 0x4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r5, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_io_uring_setup(0x3aad, &(0x7f0000000040)={0x0, 0x1114, 0x40, 0x2, 0x26b}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000000140)=0x401, 0x0, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r1, 0x0, 0x4}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r5, 0x0, 0x4}, 0x18) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) syz_io_uring_setup(0x3aad, &(0x7f0000000040)={0x0, 0x1114, 0x40, 0x2, 0x26b}, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000000140)=0x401, 0x0, 0x4) (async) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) (async) 1m6.122611455s ago: executing program 36 (id=2254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r1, 0x0, 0x4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r5, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_io_uring_setup(0x3aad, &(0x7f0000000040)={0x0, 0x1114, 0x40, 0x2, 0x26b}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000000140)=0x401, 0x0, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r1, 0x0, 0x4}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r5, 0x0, 0x4}, 0x18) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) syz_io_uring_setup(0x3aad, &(0x7f0000000040)={0x0, 0x1114, 0x40, 0x2, 0x26b}, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000000140)=0x401, 0x0, 0x4) (async) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) (async) 1.16988496s ago: executing program 6 (id=3136): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5c15, 0x2a600) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0x0, 0x3, "b91ba202adbe6c9c2cde3ad8c19f1a8ec845d156e477023f630965024ca7b47f", 0x1, 0x3, 0xffffffffffffffff, 0x2, 0xb2, 0x738, 0x3, 0x6, [0x4ef, 0x9, 0x7, 0x795]}) 1.169723162s ago: executing program 3 (id=3137): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x12a540, 0x104) 1.099938298s ago: executing program 6 (id=3138): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x46}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_ATM={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.099839737s ago: executing program 3 (id=3139): r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0xe, 0x1ff, 0x8}, 0x10) 1.0292899s ago: executing program 3 (id=3141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xea242, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000404730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.02910833s ago: executing program 6 (id=3142): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xdb}]}}]}, 0x38}}, 0x20000000) 938.37464ms ago: executing program 3 (id=3145): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='%(,.\xbe\xfbM:', 0x0) 868.962617ms ago: executing program 6 (id=3147): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close_range(r0, r0, 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="f1ce80", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="fc8061388b1f", 0x6}], 0x1}}], 0x2, 0x40804) close_range(r1, 0xffffffffffffffff, 0x0) 867.880235ms ago: executing program 3 (id=3148): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)=""/45, 0x2d}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 759.380806ms ago: executing program 6 (id=3150): sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000800) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x2bb3, 0x0, &(0x7f0000000200), 0x4}) 710.125878ms ago: executing program 6 (id=3152): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r1, 0xe, 0x1ff, 0x8}, 0x10) 710.000164ms ago: executing program 3 (id=3153): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x0, 0xc1, 0x7f, 0xc}}]}}]}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 650.379793ms ago: executing program 8 (id=3155): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc55, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r0, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xae}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 549.851662ms ago: executing program 8 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 477.188834ms ago: executing program 8 (id=3159): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) 300.309919ms ago: executing program 2 (id=3161): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 250.315746ms ago: executing program 2 (id=3162): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000001500)={0xa, 0x4e23, 0xf, @private1, 0x5}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001540)=',', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000001}}], 0x40}}], 0x2, 0x844) 215.380001ms ago: executing program 2 (id=3163): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x37, 0x0, 0x1, @batadv={{0xb, 0x20}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x20}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, 0x58}}, 0x4008004) 215.25798ms ago: executing program 8 (id=3164): membarrier(0x10, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) membarrier(0x8, 0x0) 120.407571ms ago: executing program 2 (id=3165): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xb030, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001080), 0x0, 0x4) 59.916868ms ago: executing program 8 (id=3166): unshare(0x24060400) r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, 0x0, 0x0) 59.787032ms ago: executing program 2 (id=3167): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, r4, 0x4, {0x0, 0x1, 0x4}, 0xfe}, 0x18, &(0x7f0000000180)={0x0}}, 0x40000) 184.705µs ago: executing program 8 (id=3168): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@private=0xa010101}, {@multicast1, 0x5}, {@remote}, {@multicast1, 0xffd200}, {@private=0xa010102, 0x7}]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x40, 0x0) fcntl$lock(r3, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r4 = dup(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=3169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) kernel console output (not intermixed with test programs): icting options: metacopy=on,redirect_dir=follow [ 205.034917][T12632] syz.6.2132 (12632) used obsolete PPPIOCDETACH ioctl [ 205.045004][T12632] vlan2: entered promiscuous mode [ 205.236651][T12640] netlink: 'syz.6.2137': attribute type 1 has an invalid length. [ 205.296857][T12643] netlink: 'syz.7.2138': attribute type 2 has an invalid length. [ 205.299082][T12643] netlink: 'syz.7.2138': attribute type 1 has an invalid length. [ 205.304356][ T39] kauditd_printk_skb: 713 callbacks suppressed [ 205.304367][ T39] audit: type=1400 audit(2000002654.509:10946): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.304787][T12643] netlink: 'syz.7.2138': attribute type 2 has an invalid length. [ 205.314529][T12643] netlink: 'syz.7.2138': attribute type 1 has an invalid length. [ 205.318862][ T39] audit: type=1400 audit(2000002654.519:10947): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.319142][T12643] netlink: 'syz.7.2138': attribute type 2 has an invalid length. [ 205.329509][T12643] netlink: 'syz.7.2138': attribute type 1 has an invalid length. [ 205.334438][ T39] audit: type=1400 audit(2000002654.539:10948): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.342054][ T39] audit: type=1400 audit(2000002654.539:10949): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.351636][ T39] audit: type=1400 audit(2000002654.539:10950): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.359288][ T39] audit: type=1400 audit(2000002654.539:10951): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.366830][ T39] audit: type=1400 audit(2000002654.539:10952): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.374306][ T39] audit: type=1400 audit(2000002654.539:10953): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.381789][ T39] audit: type=1400 audit(2000002654.539:10954): avc: denied { map_create } for pid=12644 comm="syz.6.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.388716][ T39] audit: type=1400 audit(2000002654.539:10955): avc: denied { write } for pid=12641 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.462856][T12654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12654 comm=syz.2.2142 [ 205.558335][T12661] program syz.2.2145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.596068][T12659] netfs: Couldn't get user pages (rc=-14) [ 205.956824][T12681] hsr_slave_1 (unregistering): left promiscuous mode [ 206.416021][T12712] __nla_validate_parse: 4 callbacks suppressed [ 206.416032][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2162'. [ 206.845917][T12730] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2167'. [ 206.848864][ T64] Bluetooth: Frame is too long (len 16, expected len 15) [ 206.855477][T12730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12730 comm=syz.7.2167 [ 207.337651][T12750] cgroup: name respecified [ 207.625689][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 207.661108][T12775] xt_hashlimit: size too large, truncated to 1048576 [ 207.674936][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2183'. [ 208.091662][T12786] lo: entered allmulticast mode [ 208.100632][T12786] validate_nla: 28 callbacks suppressed [ 208.100642][T12786] netlink: 'syz.6.2187': attribute type 10 has an invalid length. [ 208.108079][T12786] netlink: 'syz.6.2187': attribute type 19 has an invalid length. [ 208.110396][T12786] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2187'. [ 208.115450][T12786] lo: left allmulticast mode [ 208.383234][T12790] autofs: Unknown parameter './file1' [ 208.426546][T12792] FAULT_INJECTION: forcing a failure. [ 208.426546][T12792] name failslab, interval 1, probability 0, space 0, times 0 [ 208.431595][T12792] CPU: 1 UID: 0 PID: 12792 Comm: syz.6.2190 Not tainted 6.13.0-syzkaller #0 [ 208.435015][T12792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.439276][T12792] Call Trace: [ 208.440640][T12792] [ 208.441826][T12792] dump_stack_lvl+0x16c/0x1f0 [ 208.443759][T12792] should_fail_ex+0x497/0x5b0 [ 208.445673][T12792] ? fs_reclaim_acquire+0xae/0x150 [ 208.447736][T12792] should_failslab+0xc2/0x120 [ 208.449634][T12792] __kmalloc_noprof+0xcb/0x510 [ 208.451590][T12792] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 208.453827][T12792] ? rcu_is_watching+0x12/0xc0 [ 208.455776][T12792] tomoyo_realpath_from_path+0xb9/0x720 [ 208.458007][T12792] tomoyo_check_open_permission+0x2ad/0x3c0 [ 208.460411][T12792] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 208.462965][T12792] ? __pfx_avc_perm_nonode+0x10/0x10 [ 208.465278][T12792] ? avc_has_perm_noaudit+0x2b1/0x3a0 [ 208.467435][T12792] ? __pfx_hook_file_open+0x10/0x10 [ 208.469499][T12792] ? lock_acquire+0x2f/0xb0 [ 208.471296][T12792] tomoyo_file_open+0x6b/0x90 [ 208.473176][T12792] security_file_open+0x84/0x1e0 [ 208.475186][T12792] do_dentry_open+0x57e/0x1ea0 [ 208.477132][T12792] ? inode_permission+0xdd/0x5f0 [ 208.479115][T12792] vfs_open+0x82/0x3f0 [ 208.480713][T12792] ? may_open+0x1f2/0x400 [ 208.482442][T12792] path_openat+0x1e6a/0x2d60 [ 208.484323][T12792] ? __pfx_path_openat+0x10/0x10 [ 208.486300][T12792] ? __pfx___lock_acquire+0x10/0x10 [ 208.488403][T12792] ? lock_acquire.part.0+0x11b/0x380 [ 208.490480][T12792] ? find_held_lock+0x2d/0x110 [ 208.492421][T12792] do_filp_open+0x20c/0x470 [ 208.494232][T12792] ? __pfx_do_filp_open+0x10/0x10 [ 208.496271][T12792] ? find_held_lock+0x2d/0x110 [ 208.498184][T12792] ? alloc_fd+0x41f/0x760 [ 208.499951][T12792] do_sys_openat2+0x17a/0x1e0 [ 208.501830][T12792] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.503923][T12792] ? __fget_files+0x206/0x3a0 [ 208.505795][T12792] __x64_sys_openat+0x175/0x210 [ 208.507761][T12792] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.509909][T12792] ? ksys_write+0x1ba/0x250 [ 208.511652][T12792] do_syscall_64+0xcd/0x250 [ 208.513482][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.515852][T12792] RIP: 0033:0x7f332ad85d29 [ 208.517617][T12792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.525278][T12792] RSP: 002b:00007f332bb0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.528608][T12792] RAX: ffffffffffffffda RBX: 00007f332af75fa0 RCX: 00007f332ad85d29 [ 208.531732][T12792] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 208.534883][T12792] RBP: 00007f332bb0f090 R08: 0000000000000000 R09: 0000000000000000 [ 208.538039][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.540765][T12792] R13: 0000000000000001 R14: 00007f332af75fa0 R15: 00007ffd0e7f5198 [ 208.543037][T12792] [ 208.544068][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.550227][T12792] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.712999][T12801] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 208.715763][T12801] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 208.936481][ T5944] Bluetooth: hci1: Unable to find connection with handle 0x3131 [ 209.017776][T12813] QAT: Device 7 not found [ 209.142977][ T7153] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 209.307922][ T7153] usb 12-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 209.312191][ T7153] usb 12-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 209.318125][ T7153] usb 12-1: config 1 interface 0 has no altsetting 0 [ 209.337848][ T7153] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.340817][ T7153] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.344062][ T7153] usb 12-1: Product: syz [ 209.345239][ T7153] usb 12-1: Manufacturer: syz [ 209.346581][ T7153] usb 12-1: SerialNumber: syz [ 209.582971][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.585631][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.676084][T12827] fuse: Bad value for 'group_id' [ 209.677952][T12827] fuse: Bad value for 'group_id' [ 210.355309][ T39] kauditd_printk_skb: 1241 callbacks suppressed [ 210.355351][ T39] audit: type=1400 audit(2000002659.559:12197): avc: denied { read } for pid=12843 comm="syz.2.2210" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.366242][ T39] audit: type=1400 audit(2000002659.559:12198): avc: denied { read open } for pid=12843 comm="syz.2.2210" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.374842][ T39] audit: type=1400 audit(2000002659.559:12199): avc: denied { ioctl } for pid=12843 comm="syz.2.2210" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.384388][ T39] audit: type=1400 audit(2000002659.569:12200): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 210.393995][ T39] audit: type=1400 audit(2000002659.569:12201): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.399869][ T39] audit: type=1400 audit(2000002659.579:12202): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.406330][ T39] audit: type=1400 audit(2000002659.579:12203): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.412900][ T39] audit: type=1400 audit(2000002659.579:12204): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.419346][ T39] audit: type=1400 audit(2000002659.589:12205): avc: denied { read write } for pid=7609 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.428936][ T39] audit: type=1400 audit(2000002659.589:12206): avc: denied { read write open } for pid=7609 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.888492][ T7153] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 211.893416][ T7153] usb 12-1: USB disconnect, device number 3 [ 211.901880][ T7153] usblp0: removed [ 212.071975][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055e03400: rx timeout, send abort [ 212.080581][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e03400: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 212.136612][T12866] infiniband syz1: set down [ 212.140846][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 212.144206][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 212.148295][T12866] infiniband syz1: set active [ 212.150303][T12866] infiniband syz1: set active [ 212.153204][ T12] infiniband syz1: set active [ 212.155072][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 212.156902][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 212.158729][ T70] vxcan1 speed is unknown, defaulting to 1000 [ 212.160665][ T2296] vxcan1 speed is unknown, defaulting to 1000 [ 212.370812][T12874] FAULT_INJECTION: forcing a failure. [ 212.370812][T12874] name failslab, interval 1, probability 0, space 0, times 0 [ 212.375654][T12874] CPU: 3 UID: 0 PID: 12874 Comm: syz.6.2220 Not tainted 6.13.0-syzkaller #0 [ 212.378173][T12874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.381283][T12874] Call Trace: [ 212.382272][T12874] [ 212.383135][T12874] dump_stack_lvl+0x16c/0x1f0 [ 212.384544][T12874] should_fail_ex+0x497/0x5b0 [ 212.385896][T12874] ? fs_reclaim_acquire+0xae/0x150 [ 212.387375][T12874] should_failslab+0xc2/0x120 [ 212.388782][T12874] __kmalloc_cache_noprof+0x68/0x410 [ 212.390329][T12874] rfkill_fop_open+0x1ad/0x750 [ 212.391722][T12874] ? __pfx_rfkill_fop_open+0x10/0x10 [ 212.393217][T12874] misc_open+0x35a/0x420 [ 212.394516][T12874] ? __pfx_misc_open+0x10/0x10 [ 212.395886][T12874] chrdev_open+0x237/0x6a0 [ 212.397186][T12874] ? __pfx_chrdev_open+0x10/0x10 [ 212.398624][T12874] do_dentry_open+0xf59/0x1ea0 [ 212.400022][T12874] ? __pfx_chrdev_open+0x10/0x10 [ 212.401432][T12874] ? inode_permission+0xdd/0x5f0 [ 212.402877][T12874] vfs_open+0x82/0x3f0 [ 212.404011][T12874] ? may_open+0x1f2/0x400 [ 212.405212][T12874] path_openat+0x1e6a/0x2d60 [ 212.406505][T12874] ? __pfx_path_openat+0x10/0x10 [ 212.407979][T12874] ? __pfx___lock_acquire+0x10/0x10 [ 212.409492][T12874] ? lock_acquire.part.0+0x11b/0x380 [ 212.411036][T12874] ? find_held_lock+0x2d/0x110 [ 212.412466][T12874] do_filp_open+0x20c/0x470 [ 212.413797][T12874] ? __pfx_do_filp_open+0x10/0x10 [ 212.415270][T12874] ? find_held_lock+0x2d/0x110 [ 212.416630][T12874] ? alloc_fd+0x41f/0x760 [ 212.417896][T12874] do_sys_openat2+0x17a/0x1e0 [ 212.419305][T12874] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.420832][T12874] ? __fget_files+0x206/0x3a0 [ 212.422228][T12874] __x64_sys_openat+0x175/0x210 [ 212.423666][T12874] ? __pfx___x64_sys_openat+0x10/0x10 [ 212.425235][T12874] ? ksys_write+0x1ba/0x250 [ 212.426570][T12874] do_syscall_64+0xcd/0x250 [ 212.427920][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.429659][T12874] RIP: 0033:0x7f332ad85d29 [ 212.430960][T12874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.436676][T12874] RSP: 002b:00007f332bb0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.439094][T12874] RAX: ffffffffffffffda RBX: 00007f332af75fa0 RCX: 00007f332ad85d29 [ 212.441342][T12874] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 212.443560][T12874] RBP: 00007f332bb0f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.445749][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.448014][T12874] R13: 0000000000000001 R14: 00007f332af75fa0 R15: 00007ffd0e7f5198 [ 212.450307][T12874] [ 212.812480][ T7913] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 212.952404][ T7913] usb 11-1: device descriptor read/64, error -71 [ 213.202503][ T7913] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 213.332453][ T7913] usb 11-1: device descriptor read/64, error -71 [ 213.442552][ T7913] usb usb11-port1: attempt power cycle [ 213.781428][T12897] FAULT_INJECTION: forcing a failure. [ 213.781428][T12897] name failslab, interval 1, probability 0, space 0, times 0 [ 213.785292][ T7913] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 213.786033][T12897] CPU: 0 UID: 0 PID: 12897 Comm: syz.7.2230 Not tainted 6.13.0-syzkaller #0 [ 213.790052][T12897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.793238][T12897] Call Trace: [ 213.794198][T12897] [ 213.795048][T12897] dump_stack_lvl+0x16c/0x1f0 [ 213.796444][T12897] should_fail_ex+0x497/0x5b0 [ 213.797818][T12897] ? fs_reclaim_acquire+0xae/0x150 [ 213.799339][T12897] should_failslab+0xc2/0x120 [ 213.800725][T12897] __kmalloc_cache_noprof+0x68/0x410 [ 213.802260][T12897] rfkill_fop_open+0x1ad/0x750 [ 213.803674][T12897] ? __pfx_rfkill_fop_open+0x10/0x10 [ 213.805220][T12897] misc_open+0x35a/0x420 [ 213.806465][T12897] ? __pfx_misc_open+0x10/0x10 [ 213.807866][T12897] chrdev_open+0x237/0x6a0 [ 213.809168][T12897] ? __pfx_chrdev_open+0x10/0x10 [ 213.810619][T12897] do_dentry_open+0xf59/0x1ea0 [ 213.812019][T12897] ? __pfx_chrdev_open+0x10/0x10 [ 213.813494][T12897] ? inode_permission+0xdd/0x5f0 [ 213.814936][T12897] vfs_open+0x82/0x3f0 [ 213.816145][T12897] ? may_open+0x1f2/0x400 [ 213.817411][T12897] path_openat+0x1e6a/0x2d60 [ 213.818773][T12897] ? __pfx_path_openat+0x10/0x10 [ 213.820216][T12897] ? __pfx___lock_acquire+0x10/0x10 [ 213.821735][T12897] ? lock_acquire.part.0+0x11b/0x380 [ 213.823275][T12897] ? find_held_lock+0x2d/0x110 [ 213.824688][T12897] do_filp_open+0x20c/0x470 [ 213.826009][T12897] ? __pfx_do_filp_open+0x10/0x10 [ 213.827467][T12897] ? find_held_lock+0x2d/0x110 [ 213.828872][T12897] ? alloc_fd+0x41f/0x760 [ 213.830126][T12897] do_sys_openat2+0x17a/0x1e0 [ 213.831472][T12897] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.833031][T12897] ? __fget_files+0x206/0x3a0 [ 213.834402][T12897] __x64_sys_openat+0x175/0x210 [ 213.835823][T12897] ? __pfx___x64_sys_openat+0x10/0x10 [ 213.837371][T12897] ? ksys_write+0x1ba/0x250 [ 213.838697][T12897] do_syscall_64+0xcd/0x250 [ 213.840030][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.841737][T12897] RIP: 0033:0x7fde53585d29 [ 213.843043][T12897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.848520][T12897] RSP: 002b:00007fde543c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.850904][T12897] RAX: ffffffffffffffda RBX: 00007fde53775fa0 RCX: 00007fde53585d29 [ 213.853203][T12897] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 213.855468][T12897] RBP: 00007fde543c2090 R08: 0000000000000000 R09: 0000000000000000 [ 213.857748][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.860038][T12897] R13: 0000000000000001 R14: 00007fde53775fa0 R15: 00007ffefbfa9698 [ 213.862313][T12897] [ 213.865841][ T7913] usb 11-1: device descriptor read/8, error -71 [ 214.102419][ T7913] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 214.135799][ T7913] usb 11-1: device descriptor read/8, error -71 [ 214.254213][ T7913] usb usb11-port1: unable to enumerate USB device [ 214.433664][T12907] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2233'. [ 214.832402][ T5944] Bluetooth: hci2: unexpected event for opcode 0x080c [ 215.113402][T12930] virtio-fs: tag <: 16 [ 215.113402][T12930] ivsize : 0 [ 215.113402][T12930] chunksize : 8 [ 215.113402][T12930] walksize : 8 [ 215.113402][T12930] statesize : 0 [ 215.113402][T12930] [ 215.113402][T12930] name : ccm(aes) [ 215.113402][T12930] driver : ccm_base(ctr-aes-aesni,cbcmac(aes-aesni)) [ 215.113402][T12930] module : kernel [ 215.113402][T12930] priority : 350 [ 215.113402][T12930] refcnt : 1 [ 215.113402][T12930] selftest : passed [ 215.113402][T12930] internal : no [ 215.113402][T12930] type : aead [ 215.113402][T12930] async : yes [ 215.113402][T12930] blocksize : 1 [ 215.113402][T12930] ivsize : 16 [ 215.113402][T12930] maxauthsize : 16 [ 215.113402][T12930] geniv : [ 215.113402][T12930] [ 215.113402][T12930] name : cbcmac(aes) [ 215.113402][T12930] driver : cbcmac(aes-aesni) [ 215.113402][T12930] module : kernel [ 215.113402][T12930] priority : 300 [ 215.113402][T12930] refcnt : 1 [ 215.113402][T12930] selftest : passed [ 215.113402][T12930] internal : no [ 215.113402][T12930] type : shash [ 215.113402][T12930] blocksize : 1 [ 215.113402][T12930] digestsize : 16 [ 215.113402][T12930] [ 215.113402][T12930] name : crct10dif [ 215.113402][T12930] driver : cryptd(crct10dif-generic) [ 215.113402][T12930] module : kernel [ 215.113402][T12930] priority : 150 [ 215.113402][T12930] refcnt : 1 [ 215.113402][T12930] selftest : passed [ 215.113402][T12930] internal : no [ 215.113402][T12930] type : ahash [ 215.113402][T12930] async : yes [ 215.113402][T12930] blocksize : 1 [ 215.113402][T12930] digestsize : 2 [ 215.113402][T12930] [ 215.113402][T12930] name : authencesn(michael_mic,xchacha20) [ 215.113402][T12930] driver : authencesn(michael_mic-generic,xchacha20-generic) [ 215.113402][T12930] module : kernel [ 215.115082][T12930] fuse: Unknown parameter '0xffffffffffffffff' [ 215.392789][ T39] kauditd_printk_skb: 962 callbacks suppressed [ 215.392801][ T39] audit: type=1400 audit(2000002664.599:13169): avc: denied { bind } for pid=12936 comm="syz.3.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.402391][ T39] audit: type=1400 audit(2000002664.599:13170): avc: denied { create } for pid=12936 comm="syz.3.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.409604][ T39] audit: type=1400 audit(2000002664.609:13171): avc: denied { ioctl } for pid=12936 comm="syz.3.2241" path="socket:[42451]" dev="sockfs" ino=42451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.422524][ T39] audit: type=1400 audit(2000002664.609:13172): avc: denied { module_request } for pid=12936 comm="syz.3.2241" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 215.464496][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 215.470935][ T39] audit: type=1400 audit(2000002664.669:13173): avc: denied { create } for pid=12936 comm="syz.3.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.491156][ T39] audit: type=1400 audit(2000002664.679:13174): avc: denied { sys_module } for pid=12936 comm="syz.3.2241" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 215.502426][ T39] audit: type=1400 audit(2000002664.679:13175): avc: denied { module_request } for pid=12936 comm="syz.3.2241" kmod="bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 215.517955][ T39] audit: type=1400 audit(2000002664.679:13176): avc: denied { sys_module } for pid=12936 comm="syz.3.2241" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 215.526534][ T39] audit: type=1400 audit(2000002664.679:13177): avc: denied { module_request } for pid=12936 comm="syz.3.2241" kmod="bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 215.580116][ T39] audit: type=1400 audit(2000002664.779:13178): avc: denied { read write } for pid=5930 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.819355][T12953] xt_hashlimit: size too large, truncated to 1048576 [ 216.420182][T12971] tmpfs: Unknown parameter 'm' [ 216.511692][T12974] 9pnet_virtio: no channels available for device syz [ 216.806797][T12978] [U] à€E`ÞØÊ_òïÈTvß=æ¼B¥ ²›UÒôQ;Ö®Y±\9ž©Pþâ [ 216.817412][ T68] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.921593][ T68] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.015633][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.021110][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.025166][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.028186][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.032016][ T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.036052][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.076232][ T68] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.100960][T12987] netlink: 'syz.2.2257': attribute type 64 has an invalid length. [ 217.101441][T12983] vxcan1 speed is unknown, defaulting to 1000 [ 217.104702][T12987] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2257'. [ 217.135370][ T68] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.204127][T12993] qnx4: no qnx4 filesystem (no root dir). [ 217.296878][ T68] bridge_slave_1: left allmulticast mode [ 217.299076][ T68] bridge_slave_1: left promiscuous mode [ 217.302544][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.313752][ T68] bridge_slave_0: left allmulticast mode [ 217.315450][ T68] bridge_slave_0: left promiscuous mode [ 217.317140][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.655526][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.660855][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.661431][T13005] vivid-000: ================= START STATUS ================= [ 217.665865][T13005] vivid-000: Test Pattern: 75% Colorbar [ 217.667423][T13005] vivid-000: Fill Percentage of Frame: 100 [ 217.670578][T13005] vivid-000: Horizontal Movement: No Movement [ 217.672521][T13005] vivid-000: Vertical Movement: No Movement [ 217.674231][T13005] vivid-000: OSD Text Mode: All [ 217.675651][T13005] vivid-000: Show Border: false [ 217.677111][T13005] vivid-000: Show Square: false [ 217.678687][T13005] vivid-000: Sensor Flipped Horizontally: false [ 217.680473][T13005] vivid-000: Sensor Flipped Vertically: true [ 217.682707][T13005] vivid-000: Insert SAV Code in Image: false [ 217.685209][T13005] vivid-000: Insert EAV Code in Image: false [ 217.687919][T13005] vivid-000: Insert Video Guard Band: false [ 217.690214][T13005] vivid-000: Reduced Framerate: false [ 217.690875][ T68] bond0 (unregistering): Released all slaves [ 217.692981][T13005] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 217.698361][T13005] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 217.701529][T13005] vivid-000: Enable Capture Cropping: true [ 217.704778][T13005] vivid-000: Enable Capture Composing: true [ 217.707882][T13005] vivid-000: Enable Capture Scaler: true [ 217.710282][T13005] vivid-000: Timestamp Source: End of Frame [ 217.712891][T13005] vivid-000: Colorspace: sRGB [ 217.714801][T13005] vivid-000: Transfer Function: Default [ 217.717054][T13005] vivid-000: Y'CbCr Encoding: Default [ 217.719242][T13005] vivid-000: HSV Encoding: Hue 0-179 [ 217.721466][T13005] vivid-000: Quantization: Default [ 217.723693][T12983] chnl_net:caif_netlink_parms(): no params data found [ 217.723699][T13005] vivid-000: Apply Alpha To Red Only: false [ 217.728758][T13005] vivid-000: Standard Aspect Ratio: 4x3 [ 217.730977][T13005] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 217.734664][T13005] vivid-000: DV Timings: 640x480p59 inactive [ 217.736576][T13005] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 217.738725][T13005] vivid-000: Maximum EDID Blocks: 2 [ 217.740238][T13005] vivid-000: Limited RGB Range (16-235): false [ 217.742007][T13005] vivid-000: Rx RGB Quantization Range: Automatic [ 217.744055][T13005] vivid-000: Power Present: 0x00000001 [ 217.745718][T13005] tpg source WxH: 320x180 (Y'CbCr) [ 217.747178][T13005] tpg field: 1 [ 217.748173][T13005] tpg crop: 320x180@0x0 [ 217.749374][T13005] tpg compose: 320x180@0x0 [ 217.750652][T13005] tpg colorspace: 8 [ 217.751760][T13005] tpg transfer function: 0/0 [ 217.753158][T13005] tpg Y'CbCr encoding: 0/0 [ 217.754447][T13005] tpg quantization: 0/0 [ 217.755676][T13005] tpg RGB range: 0/2 [ 217.756880][T13005] vivid-000: ================== END STATUS ================== [ 217.788565][ T68] tipc: Left network mode [ 217.798728][ T68] IPVS: stopping master sync thread 12002 ... [ 217.846735][T12983] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.849588][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.854175][T12983] bridge_slave_0: entered allmulticast mode [ 217.862908][T12983] bridge_slave_0: entered promiscuous mode [ 217.872157][T12983] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.882211][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.886425][T12983] bridge_slave_1: entered allmulticast mode [ 217.889151][T12983] bridge_slave_1: entered promiscuous mode [ 217.918619][T12983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.922647][T13015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2262'. [ 217.934905][T12983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.984003][T12983] team0: Port device team_slave_0 added [ 217.989550][T12983] team0: Port device team_slave_1 added [ 218.015447][T12983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.017468][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.025469][T12983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.031946][T12983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.034558][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.041757][T12983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.099984][ T68] hsr_slave_0: left promiscuous mode [ 218.101004][ T68] hsr_slave_1: left promiscuous mode [ 218.101868][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.101893][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.112810][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.113407][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.143085][ T68] veth1_macvtap: left promiscuous mode [ 218.144675][ T68] veth0_macvtap: left promiscuous mode [ 218.146169][ T68] veth1_vlan: left promiscuous mode [ 218.147602][ T68] veth0_vlan: left promiscuous mode [ 218.147817][T13022] FAULT_INJECTION: forcing a failure. [ 218.147817][T13022] name failslab, interval 1, probability 0, space 0, times 0 [ 218.154727][T13022] CPU: 2 UID: 0 PID: 13022 Comm: syz.2.2265 Not tainted 6.13.0-syzkaller #0 [ 218.157349][T13022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.160418][T13022] Call Trace: [ 218.161379][T13022] [ 218.162222][T13022] dump_stack_lvl+0x16c/0x1f0 [ 218.163605][T13022] should_fail_ex+0x497/0x5b0 [ 218.164957][T13022] ? fs_reclaim_acquire+0xae/0x150 [ 218.166460][T13022] should_failslab+0xc2/0x120 [ 218.167810][T13022] __kmalloc_cache_noprof+0x68/0x410 [ 218.169295][T13022] rfkill_fop_open+0x1ad/0x750 [ 218.170691][T13022] ? __pfx_rfkill_fop_open+0x10/0x10 [ 218.172244][T13022] misc_open+0x35a/0x420 [ 218.173479][T13022] ? __pfx_misc_open+0x10/0x10 [ 218.174820][T13022] chrdev_open+0x237/0x6a0 [ 218.176083][T13022] ? __pfx_chrdev_open+0x10/0x10 [ 218.177475][T13022] do_dentry_open+0xf59/0x1ea0 [ 218.178837][T13022] ? __pfx_chrdev_open+0x10/0x10 [ 218.180232][T13022] ? inode_permission+0xdd/0x5f0 [ 218.181639][T13022] vfs_open+0x82/0x3f0 [ 218.183012][T13022] ? may_open+0x1f2/0x400 [ 218.184446][T13022] path_openat+0x1e6a/0x2d60 [ 218.185855][T13022] ? __pfx_path_openat+0x10/0x10 [ 218.187286][T13022] ? __pfx___lock_acquire+0x10/0x10 [ 218.188760][T13022] ? lock_acquire.part.0+0x11b/0x380 [ 218.190257][T13022] ? find_held_lock+0x2d/0x110 [ 218.191642][T13022] do_filp_open+0x20c/0x470 [ 218.192930][T13022] ? __pfx_do_filp_open+0x10/0x10 [ 218.194353][T13022] ? find_held_lock+0x2d/0x110 [ 218.195862][T13022] ? alloc_fd+0x41f/0x760 [ 218.197106][T13022] do_sys_openat2+0x17a/0x1e0 [ 218.198471][T13022] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.199965][T13022] ? __fget_files+0x206/0x3a0 [ 218.201333][T13022] __x64_sys_openat+0x175/0x210 [ 218.202735][T13022] ? __pfx___x64_sys_openat+0x10/0x10 [ 218.204247][T13022] ? ksys_write+0x1ba/0x250 [ 218.205602][T13022] do_syscall_64+0xcd/0x250 [ 218.206908][T13022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.208924][T13022] RIP: 0033:0x7f1c1d785d29 [ 218.210183][T13022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.215546][T13022] RSP: 002b:00007f1c1e5f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.217813][T13022] RAX: ffffffffffffffda RBX: 00007f1c1d975fa0 RCX: 00007f1c1d785d29 [ 218.220014][T13022] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 218.222240][T13022] RBP: 00007f1c1e5f5090 R08: 0000000000000000 R09: 0000000000000000 [ 218.224381][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.226555][T13022] R13: 0000000000000001 R14: 00007f1c1d975fa0 R15: 00007ffe2f00d5a8 [ 218.229130][T13022] [ 218.277687][ T68] infiniband syz1: set down [ 218.302632][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 219.063561][ T64] Bluetooth: hci2: command tx timeout [ 219.127104][ T68] team0 (unregistering): Port device team_slave_1 removed [ 219.232170][ T68] team0 (unregistering): Port device team_slave_0 removed [ 219.255633][ T64] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 219.747483][ T11] smc: removing ib device syz1 [ 219.939328][T12983] hsr_slave_0: entered promiscuous mode [ 219.959668][T12983] hsr_slave_1: entered promiscuous mode [ 219.962424][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 220.149300][T13051] FAULT_INJECTION: forcing a failure. [ 220.149300][T13051] name failslab, interval 1, probability 0, space 0, times 0 [ 220.157126][T13051] CPU: 0 UID: 0 PID: 13051 Comm: syz.3.2275 Not tainted 6.13.0-syzkaller #0 [ 220.160588][T13051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.164736][T13051] Call Trace: [ 220.166009][T13051] [ 220.167158][T13051] dump_stack_lvl+0x16c/0x1f0 [ 220.169002][T13051] should_fail_ex+0x497/0x5b0 [ 220.170892][T13051] ? fs_reclaim_acquire+0xae/0x150 [ 220.172956][T13051] should_failslab+0xc2/0x120 [ 220.174838][T13051] __kmalloc_cache_noprof+0x68/0x410 [ 220.176968][T13051] rfkill_fop_open+0x1ad/0x750 [ 220.178908][T13051] ? __pfx_rfkill_fop_open+0x10/0x10 [ 220.181015][T13051] misc_open+0x35a/0x420 [ 220.182723][T13051] ? __pfx_misc_open+0x10/0x10 [ 220.184650][T13051] chrdev_open+0x237/0x6a0 [ 220.186438][T13051] ? __pfx_chrdev_open+0x10/0x10 [ 220.188437][T13051] do_dentry_open+0xf59/0x1ea0 [ 220.190328][T13051] ? __pfx_chrdev_open+0x10/0x10 [ 220.192313][T13051] ? inode_permission+0xdd/0x5f0 [ 220.194304][T13051] vfs_open+0x82/0x3f0 [ 220.195958][T13051] ? may_open+0x1f2/0x400 [ 220.197662][T13051] path_openat+0x1e6a/0x2d60 [ 220.199529][T13051] ? __pfx_path_openat+0x10/0x10 [ 220.201518][T13051] ? __pfx___lock_acquire+0x10/0x10 [ 220.203574][T13051] ? lock_acquire.part.0+0x11b/0x380 [ 220.205083][T13051] ? find_held_lock+0x2d/0x110 [ 220.206471][T13051] do_filp_open+0x20c/0x470 [ 220.207780][T13051] ? __pfx_do_filp_open+0x10/0x10 [ 220.209216][T13051] ? find_held_lock+0x2d/0x110 [ 220.210603][T13051] ? alloc_fd+0x41f/0x760 [ 220.211852][T13051] do_sys_openat2+0x17a/0x1e0 [ 220.213219][T13051] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.214724][T13051] ? __fget_files+0x206/0x3a0 [ 220.216096][T13051] __x64_sys_openat+0x175/0x210 [ 220.217511][T13051] ? __pfx___x64_sys_openat+0x10/0x10 [ 220.219051][T13051] ? ksys_write+0x1ba/0x250 [ 220.220346][T13051] do_syscall_64+0xcd/0x250 [ 220.221658][T13051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.223354][T13051] RIP: 0033:0x7fa8ded85d29 [ 220.224644][T13051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.230096][T13051] RSP: 002b:00007fa8dfc2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.232414][T13051] RAX: ffffffffffffffda RBX: 00007fa8def75fa0 RCX: 00007fa8ded85d29 [ 220.234662][T13051] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 220.236927][T13051] RBP: 00007fa8dfc2d090 R08: 0000000000000000 R09: 0000000000000000 [ 220.239191][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.241446][T13051] R13: 0000000000000001 R14: 00007fa8def75fa0 R15: 00007ffe857cf518 [ 220.243724][T13051] [ 220.347702][T13049] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 220.378240][T12983] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 220.389346][T12983] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 220.398652][T12983] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 220.402885][ T39] kauditd_printk_skb: 506 callbacks suppressed [ 220.402894][ T39] audit: type=1400 audit(2000002669.609:13685): avc: denied { execmem } for pid=13059 comm="syz.3.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 220.411643][ T39] audit: type=1400 audit(2000002669.609:13686): avc: denied { read execute } for pid=13059 comm="syz.3.2278" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.418780][T12983] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 220.420629][T13060] Trying to write to read-only block-device nullb0 [ 220.424361][ T39] audit: type=1400 audit(2000002669.629:13687): avc: denied { ioctl } for pid=13059 comm="syz.3.2278" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.438319][ T39] audit: type=1400 audit(2000002669.629:13688): avc: denied { ioctl } for pid=13059 comm="syz.3.2278" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.444793][ T39] audit: type=1400 audit(2000002669.629:13689): avc: denied { create } for pid=12983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.451605][ T39] audit: type=1400 audit(2000002669.629:13690): avc: denied { write } for pid=12983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.458419][ T39] audit: type=1400 audit(2000002669.629:13691): avc: denied { read } for pid=12983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.464207][ T39] audit: type=1400 audit(2000002669.639:13692): avc: denied { read } for pid=12983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.469694][ T39] audit: type=1400 audit(2000002669.639:13693): avc: denied { map_create } for pid=13059 comm="syz.3.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 220.474792][ T39] audit: type=1400 audit(2000002669.639:13694): avc: denied { create } for pid=13059 comm="syz.3.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.581920][T12983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.607864][T12983] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.621814][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.624665][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.634199][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.636980][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.712576][ T7164] usb 11-1: new low-speed USB device number 16 using dummy_hcd [ 220.889679][ T7164] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 220.892888][ T7164] usb 11-1: config 0 has no interface number 0 [ 220.894789][ T7164] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.897873][ T7164] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 220.900920][ T7164] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 220.908580][ T7164] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 220.911736][ T7164] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 220.924599][ T7164] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.928306][ T7164] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 220.930823][ T7164] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.955639][ T7164] usb 11-1: config 0 descriptor?? [ 220.974146][T13063] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 220.981410][ T7164] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 221.132954][ T64] Bluetooth: hci2: command tx timeout [ 221.457704][T12983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.713653][T13088] FAULT_INJECTION: forcing a failure. [ 221.713653][T13088] name failslab, interval 1, probability 0, space 0, times 0 [ 221.717261][T13088] CPU: 2 UID: 0 PID: 13088 Comm: syz.3.2285 Not tainted 6.13.0-syzkaller #0 [ 221.719781][T13088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.722900][T13088] Call Trace: [ 221.723887][T13088] [ 221.724755][T13088] dump_stack_lvl+0x16c/0x1f0 [ 221.726162][T13088] should_fail_ex+0x497/0x5b0 [ 221.727552][T13088] ? fs_reclaim_acquire+0xae/0x150 [ 221.729041][T13088] should_failslab+0xc2/0x120 [ 221.730423][T13088] __kmalloc_cache_noprof+0x68/0x410 [ 221.731966][T13088] rfkill_fop_open+0x1ad/0x750 [ 221.733379][T13088] ? __pfx_rfkill_fop_open+0x10/0x10 [ 221.734916][T13088] misc_open+0x35a/0x420 [ 221.736201][T13088] ? __pfx_misc_open+0x10/0x10 [ 221.737605][T13088] chrdev_open+0x237/0x6a0 [ 221.738935][T13088] ? __pfx_chrdev_open+0x10/0x10 [ 221.740387][T13088] do_dentry_open+0xf59/0x1ea0 [ 221.741777][T13088] ? __pfx_chrdev_open+0x10/0x10 [ 221.743110][T13088] ? inode_permission+0xdd/0x5f0 [ 221.744590][T13088] vfs_open+0x82/0x3f0 [ 221.745789][T13088] ? may_open+0x1f2/0x400 [ 221.747055][T13088] path_openat+0x1e6a/0x2d60 [ 221.748422][T13088] ? __pfx_path_openat+0x10/0x10 [ 221.749786][T13088] ? __pfx___lock_acquire+0x10/0x10 [ 221.751322][T13088] ? lock_acquire.part.0+0x11b/0x380 [ 221.752895][T13088] ? find_held_lock+0x2d/0x110 [ 221.754302][T13088] do_filp_open+0x20c/0x470 [ 221.755641][T13088] ? __pfx_do_filp_open+0x10/0x10 [ 221.757111][T13088] ? find_held_lock+0x2d/0x110 [ 221.758539][T13088] ? alloc_fd+0x41f/0x760 [ 221.759821][T13088] do_sys_openat2+0x17a/0x1e0 [ 221.761199][T13088] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.762731][T13088] ? __fget_files+0x206/0x3a0 [ 221.764122][T13088] __x64_sys_openat+0x175/0x210 [ 221.765555][T13088] ? __pfx___x64_sys_openat+0x10/0x10 [ 221.767119][T13088] ? ksys_write+0x1ba/0x250 [ 221.768461][T13088] do_syscall_64+0xcd/0x250 [ 221.769772][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.771475][T13088] RIP: 0033:0x7fa8ded85d29 [ 221.772824][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.778367][T13088] RSP: 002b:00007fa8dfc2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 221.780778][T13088] RAX: ffffffffffffffda RBX: 00007fa8def75fa0 RCX: 00007fa8ded85d29 [ 221.783055][T13088] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 221.785347][T13088] RBP: 00007fa8dfc2d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.787654][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.789940][T13088] R13: 0000000000000001 R14: 00007fa8def75fa0 R15: 00007ffe857cf518 [ 221.792254][T13088] [ 222.593457][T12983] veth0_vlan: entered promiscuous mode [ 222.607491][T12983] veth1_vlan: entered promiscuous mode [ 222.646715][T12983] veth0_macvtap: entered promiscuous mode [ 222.654862][T12983] veth1_macvtap: entered promiscuous mode [ 222.675539][T12983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.678476][T12983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.681735][T12983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.691156][T12983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.694849][T12983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.698396][T12983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.706887][T12983] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.709403][T12983] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.711863][T12983] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.714699][T12983] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.769951][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.772274][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.789459][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.791855][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.043655][T13107] netlink: 'syz.8.2289': attribute type 1 has an invalid length. [ 223.058910][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2289'. [ 223.069331][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2289'. [ 223.159449][T13110] openvswitch: netlink: EtherType 0 is less than min 600 [ 223.212539][ T64] Bluetooth: hci2: command tx timeout [ 223.260079][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 223.388391][T13119] program syz.3.2295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.427636][ T2296] usb 11-1: USB disconnect, device number 16 [ 223.431573][ T2296] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 223.494038][ T1118] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 223.498026][ T1118] sr 2:0:0:0: [sr0] tag#10 Sense Key : Illegal Request [current] [ 223.501288][ T1118] sr 2:0:0:0: [sr0] tag#10 Add. Sense: Invalid command operation code [ 223.506950][ T1118] sr 2:0:0:0: [sr0] tag#10 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 223.510244][ T1118] blk_print_req_error: 12 callbacks suppressed [ 223.510256][ T1118] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 223.516869][ T1118] buffer_io_error: 11 callbacks suppressed [ 223.516879][ T1118] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 223.609525][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 223.682067][T13125] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 223.686521][T13125] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 223.952978][T13148] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 224.010810][T13151] netlink: 'syz.6.2305': attribute type 29 has an invalid length. [ 224.017380][T13151] netlink: 'syz.6.2305': attribute type 29 has an invalid length. [ 224.029704][T13151] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2305'. [ 224.165425][T13157] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 224.376007][T13161] /dev/sr0: Can't open blockdev [ 224.555156][T13175] netlink: 'syz.3.2312': attribute type 5 has an invalid length. [ 225.292447][ T5944] Bluetooth: hci2: command tx timeout [ 225.454216][T13211] program syz.2.2327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.484155][ T39] kauditd_printk_skb: 904 callbacks suppressed [ 225.484172][ T39] audit: type=1400 audit(2000002674.689:14599): avc: denied { read write } for pid=11987 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.500281][ T39] audit: type=1400 audit(2000002674.689:14600): avc: denied { read write open } for pid=11987 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.512103][ T39] audit: type=1400 audit(2000002674.689:14601): avc: denied { ioctl } for pid=11987 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.542433][ T39] audit: type=1400 audit(2000002674.739:14602): avc: denied { mounton } for pid=13212 comm="syz.2.2328" path="/95/file0" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 225.552426][ T39] audit: type=1400 audit(2000002674.739:14603): avc: denied { mount } for pid=13212 comm="syz.2.2328" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 225.558981][ T39] audit: type=1400 audit(2000002674.739:14604): avc: denied { mounton } for pid=13212 comm="syz.2.2328" path="/95/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 225.576440][ T39] audit: type=1400 audit(2000002674.749:14605): avc: denied { mount } for pid=13212 comm="syz.2.2328" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 225.585945][ T39] audit: type=1400 audit(2000002674.749:14606): avc: denied { mounton } for pid=13212 comm="syz.2.2328" path="/95/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 225.594087][ T39] audit: type=1400 audit(2000002674.749:14607): avc: denied { read write } for pid=12983 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.602551][ T39] audit: type=1400 audit(2000002674.749:14608): avc: denied { read write open } for pid=12983 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.675382][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 225.687656][T13220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.766938][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 226.291087][T13256] overlayfs: disabling nfs_export due to verity=on [ 226.696899][T13271] fuse: Bad value for 'fd' [ 226.812475][ T5944] Bluetooth: hci1: command 0x0401 tx timeout [ 226.942309][T13293] xt_cgroup: xt_cgroup: no path or classid specified [ 227.090142][T13305] xt_hashlimit: size too large, truncated to 1048576 [ 227.108364][T13307] program syz.6.2350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.153426][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2357'. [ 228.156459][T13342] nbd: must specify a size in bytes for the device [ 228.275126][T13346] program syz.3.2359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.531401][T13355] FAULT_INJECTION: forcing a failure. [ 228.531401][T13355] name failslab, interval 1, probability 0, space 0, times 0 [ 228.535128][T13355] CPU: 1 UID: 0 PID: 13355 Comm: syz.8.2363 Not tainted 6.13.0-syzkaller #0 [ 228.537626][T13355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.540685][T13355] Call Trace: [ 228.541663][T13355] [ 228.542566][T13355] dump_stack_lvl+0x16c/0x1f0 [ 228.544003][T13355] should_fail_ex+0x497/0x5b0 [ 228.545395][T13355] ? fs_reclaim_acquire+0xae/0x150 [ 228.546887][T13355] should_failslab+0xc2/0x120 [ 228.548291][T13355] __kmalloc_cache_noprof+0x68/0x410 [ 228.549835][T13355] rfkill_fop_open+0x1ad/0x750 [ 228.551266][T13355] ? __pfx_rfkill_fop_open+0x10/0x10 [ 228.552823][T13355] misc_open+0x35a/0x420 [ 228.554098][T13355] ? __pfx_misc_open+0x10/0x10 [ 228.555513][T13355] chrdev_open+0x237/0x6a0 [ 228.556826][T13355] ? __pfx_chrdev_open+0x10/0x10 [ 228.558299][T13355] do_dentry_open+0xf59/0x1ea0 [ 228.559717][T13355] ? __pfx_chrdev_open+0x10/0x10 [ 228.561184][T13355] ? inode_permission+0xdd/0x5f0 [ 228.562639][T13355] vfs_open+0x82/0x3f0 [ 228.563995][T13355] ? may_open+0x1f2/0x400 [ 228.565347][T13355] path_openat+0x1e6a/0x2d60 [ 228.566705][T13355] ? __pfx_path_openat+0x10/0x10 [ 228.568167][T13355] ? __pfx___lock_acquire+0x10/0x10 [ 228.569668][T13355] ? lock_acquire.part.0+0x11b/0x380 [ 228.571207][T13355] ? find_held_lock+0x2d/0x110 [ 228.572617][T13355] do_filp_open+0x20c/0x470 [ 228.573946][T13355] ? __pfx_do_filp_open+0x10/0x10 [ 228.575411][T13355] ? find_held_lock+0x2d/0x110 [ 228.576798][T13355] ? alloc_fd+0x41f/0x760 [ 228.578059][T13355] do_sys_openat2+0x17a/0x1e0 [ 228.579417][T13355] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.580890][T13355] ? __fget_files+0x206/0x3a0 [ 228.582316][T13355] __x64_sys_openat+0x175/0x210 [ 228.583753][T13355] ? __pfx___x64_sys_openat+0x10/0x10 [ 228.585318][T13355] ? ksys_write+0x1ba/0x250 [ 228.586684][T13355] do_syscall_64+0xcd/0x250 [ 228.588055][T13355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.590339][T13355] RIP: 0033:0x7f4d5fb85d29 [ 228.592175][T13355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.598046][T13355] RSP: 002b:00007f4d608e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 228.600387][T13355] RAX: ffffffffffffffda RBX: 00007f4d5fd75fa0 RCX: 00007f4d5fb85d29 [ 228.602681][T13355] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 228.604999][T13355] RBP: 00007f4d608e4090 R08: 0000000000000000 R09: 0000000000000000 [ 228.607255][T13355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.609514][T13355] R13: 0000000000000001 R14: 00007f4d5fd75fa0 R15: 00007ffc0d717428 [ 228.611759][T13355] [ 229.164050][T13376] netlink: 'syz.2.2368': attribute type 19 has an invalid length. [ 229.182466][ T6301] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 229.344406][ T6301] usb 13-1: config 9 has an invalid interface number: 179 but max is 0 [ 229.346844][ T6301] usb 13-1: config 9 has no interface number 0 [ 229.348653][ T6301] usb 13-1: config 9 interface 179 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 229.351818][ T6301] usb 13-1: config 9 interface 179 altsetting 1 endpoint 0xF has an invalid bInterval 18, changing to 8 [ 229.360144][ T6301] usb 13-1: config 9 interface 179 altsetting 1 endpoint 0xD has invalid maxpacket 44255, setting to 64 [ 229.364670][ T6301] usb 13-1: config 9 interface 179 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 229.367829][ T6301] usb 13-1: config 9 interface 179 has no altsetting 0 [ 229.381804][ T6301] usb 13-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=fb.34 [ 229.385442][ T6301] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.387873][ T6301] usb 13-1: Product: syz [ 229.389130][ T6301] usb 13-1: Manufacturer: syz [ 229.390517][ T6301] usb 13-1: SerialNumber: syz [ 229.533447][T13390] netlink: 852 bytes leftover after parsing attributes in process `syz.6.2373'. [ 229.602777][T13397] Unknown options in mask 5 [ 229.631990][ T6301] usb 13-1: USB disconnect, device number 2 [ 229.739685][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'. [ 230.019086][T13415] syz.8.2379 (13415): drop_caches: 2 [ 230.528894][ T39] kauditd_printk_skb: 1042 callbacks suppressed [ 230.528905][ T39] audit: type=1400 audit(2000002679.729:15651): avc: denied { read } for pid=13451 comm="syz.8.2390" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.542432][ T39] audit: type=1400 audit(2000002679.739:15652): avc: denied { read open } for pid=13451 comm="syz.8.2390" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.549378][ T39] audit: type=1400 audit(2000002679.749:15653): avc: denied { ioctl } for pid=13451 comm="syz.8.2390" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.566592][ T39] audit: type=1400 audit(2000002679.769:15654): avc: denied { read write } for pid=13451 comm="syz.8.2390" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.576108][ T39] audit: type=1400 audit(2000002679.769:15655): avc: denied { read write open } for pid=13451 comm="syz.8.2390" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.586035][ T39] audit: type=1400 audit(2000002679.769:15656): avc: denied { ioctl } for pid=13451 comm="syz.8.2390" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.592931][ T39] audit: type=1400 audit(2000002679.779:15657): avc: denied { read write } for pid=13451 comm="syz.8.2390" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.602507][ T39] audit: type=1400 audit(2000002679.779:15658): avc: denied { read write open } for pid=13451 comm="syz.8.2390" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.609417][ T39] audit: type=1400 audit(2000002679.779:15659): avc: denied { ioctl } for pid=13451 comm="syz.8.2390" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.675144][ T39] audit: type=1400 audit(2000002679.879:15660): avc: denied { read write } for pid=11987 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.786901][T13458] ip6t_rpfilter: unknown options [ 231.039470][T13466] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2393'. [ 231.042172][T13466] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2393'. [ 231.048956][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2393'. [ 232.204444][T13483] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2395'. [ 232.464040][ T64] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 232.539614][T13507] program syz.3.2403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.599035][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2404'. [ 232.884407][T13527] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.959057][T13532] --map-set only usable from mangle table [ 234.090510][T13584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13584 comm=syz.6.2416 [ 234.149993][T13587] netlink: 'syz.8.2421': attribute type 14 has an invalid length. [ 234.432459][ T7913] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 234.582690][ T7913] usb 11-1: Using ep0 maxpacket: 8 [ 234.605873][ T7913] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 234.608246][ T7913] usb 11-1: config 0 has no interface number 0 [ 234.610087][ T7913] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.614113][ T7913] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 234.617468][ T7913] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.620698][ T7913] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.624496][ T7913] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 234.627097][ T7913] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.632915][ T7913] usb 11-1: config 0 descriptor?? [ 234.646223][ T7913] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 234.853900][ T9] usb 11-1: USB disconnect, device number 17 [ 234.861007][ T9] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 235.171199][T13619] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 235.444223][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2431'. [ 235.609492][ T39] kauditd_printk_skb: 687 callbacks suppressed [ 235.609503][ T39] audit: type=1400 audit(2000002684.809:16348): avc: denied { create } for pid=13635 comm="syz.8.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.619496][T13636] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2433'. [ 235.634339][ T39] audit: type=1400 audit(2000002684.809:16349): avc: denied { write } for pid=13635 comm="syz.8.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.651366][ T39] audit: type=1400 audit(2000002684.819:16350): avc: denied { write } for pid=13635 comm="syz.8.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.672524][ T39] audit: type=1400 audit(2000002684.829:16351): avc: denied { read } for pid=13634 comm="syz.2.2434" dev="nsfs" ino=4026533486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.684353][ T39] audit: type=1400 audit(2000002684.829:16352): avc: denied { read open } for pid=13634 comm="syz.2.2434" path="net:[4026533486]" dev="nsfs" ino=4026533486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.700948][ T39] audit: type=1400 audit(2000002684.839:16353): avc: denied { create } for pid=13634 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.716490][ T39] audit: type=1400 audit(2000002684.849:16354): avc: denied { create } for pid=13634 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.734339][ T39] audit: type=1400 audit(2000002684.849:16355): avc: denied { write } for pid=13634 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.741830][ T39] audit: type=1400 audit(2000002684.849:16356): avc: denied { read } for pid=13634 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.772389][ T39] audit: type=1400 audit(2000002684.859:16357): avc: denied { read } for pid=13634 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.780673][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2434'. [ 235.966241][T13642] TCP: TCP_TX_DELAY enabled [ 236.572534][T13664] tmpfs: User quota block hardlimit too large. [ 236.858591][T13672] x_tables: duplicate underflow at hook 3 [ 236.993322][T13683] ebt_among: dst integrity fail: 10d [ 237.142812][ T9] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 237.282440][ T9] usb 13-1: device descriptor read/64, error -71 [ 237.389407][T13703] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 237.391912][T13703] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 237.399624][T13704] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2454'. [ 237.463268][T13706] xt_hashlimit: invalid interval [ 237.522398][ T9] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 237.652437][ T9] usb 13-1: device descriptor read/64, error -71 [ 237.762684][ T9] usb usb13-port1: attempt power cycle [ 237.992805][T13714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.102423][ T9] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 238.125186][ T9] usb 13-1: device descriptor read/8, error -71 [ 238.273761][T13716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.362428][ T9] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 238.383878][ T9] usb 13-1: device descriptor read/8, error -71 [ 238.495609][ T9] usb usb13-port1: unable to enumerate USB device [ 239.099152][T13753] tmpfs: Unknown parameter 'grpsuota' [ 239.144228][T13757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13757 comm=syz.2.2470 [ 239.217742][T13759] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 239.219887][T13759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.227930][T13762] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2471'. [ 239.308301][T13766] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 239.310840][T13766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.313475][T13766] IPv6: NLM_F_CREATE should be set when creating new route [ 239.566172][T13767] ALSA: mixer_oss: invalid OSS volume '¢' [ 239.918980][ T64] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 240.010138][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.047384][T13789] vxcan1: tx address claim with dlc 1 [ 240.294042][T13809] netlink: 700 bytes leftover after parsing attributes in process `syz.2.2483'. [ 240.314227][T13802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3639 sclass=netlink_route_socket pid=13802 comm=syz.2.2483 [ 240.349472][T13811] ufs: Invalid option: "grpquota" or missing value [ 240.352559][T13811] ufs: wrong mount options [ 240.385431][T13810] XFS (nullb0): Invalid superblock magic number [ 240.685124][ T39] kauditd_printk_skb: 795 callbacks suppressed [ 240.685137][ T39] audit: type=1400 audit(2000265089.893:17153): avc: denied { read write } for pid=11987 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.693927][ T39] audit: type=1400 audit(2000265089.893:17154): avc: denied { read write open } for pid=11987 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.700772][ T39] audit: type=1400 audit(2000265089.893:17155): avc: denied { ioctl } for pid=11987 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.713269][ T39] audit: type=1400 audit(2000265089.923:17156): avc: denied { create } for pid=13818 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.718847][ T39] audit: type=1400 audit(2000265089.923:17157): avc: denied { create } for pid=13818 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.724955][ T39] audit: type=1400 audit(2000265089.923:17158): avc: denied { map_create } for pid=13818 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 240.730702][ T39] audit: type=1400 audit(2000265089.923:17159): avc: denied { perfmon } for pid=13818 comm="syz.2.2488" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.737496][ T39] audit: type=1400 audit(2000265089.923:17160): avc: denied { map_read map_write } for pid=13818 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 240.744452][ T39] audit: type=1400 audit(2000265089.923:17161): avc: denied { create } for pid=13818 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 240.752747][ T39] audit: type=1400 audit(2000265089.923:17162): avc: denied { ioctl } for pid=13818 comm="syz.2.2488" path="socket:[46815]" dev="sockfs" ino=46815 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 241.429564][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2493'. [ 241.640378][T13830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.246325][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 242.248955][T13856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2498'. [ 242.578349][T13864] program syz.3.2499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.626373][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2501'. [ 242.626445][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2501'. [ 242.654465][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2499'. [ 242.878725][T13888] SELinux: truncated policydb string identifier [ 242.881099][T13888] SELinux: failed to load policy [ 243.074922][ T5990] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 243.143939][T13906] xt_hashlimit: size too large, truncated to 1048576 [ 243.169535][T13908] program syz.8.2516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.232660][ T5990] usb 11-1: Using ep0 maxpacket: 8 [ 243.253315][ T5990] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.256155][ T5990] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.258949][ T5990] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.261801][ T5990] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.263509][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2518'. [ 243.270664][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2518'. [ 243.277484][ T5990] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.280880][ T5990] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.506223][ T5990] usb 11-1: usb_control_msg returned -32 [ 243.507960][ T5990] usbtmc 11-1:16.0: can't read capabilities [ 244.458414][T13947] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2532'. [ 245.001208][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.485240][T13972] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 245.498309][T13972] kvm: pic: level sensitive irq not supported [ 245.498764][T13972] kvm: pic: non byte read [ 245.503892][T13972] kvm: pic: level sensitive irq not supported [ 245.504272][T13972] kvm: pic: non byte read [ 245.510099][T13972] kvm: pic: level sensitive irq not supported [ 245.510531][T13972] kvm: pic: non byte read [ 245.712497][ T39] kauditd_printk_skb: 618 callbacks suppressed [ 245.712512][ T39] audit: type=1400 audit(2000265094.913:17781): avc: denied { read write } for pid=12983 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.724579][ T39] audit: type=1400 audit(2000265094.923:17782): avc: denied { read write open } for pid=12983 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.734343][ T39] audit: type=1400 audit(2000265094.923:17783): avc: denied { ioctl } for pid=12983 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.770591][ T39] audit: type=1400 audit(2000265094.973:17784): avc: denied { read } for pid=13977 comm="syz.8.2546" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.777739][ T39] audit: type=1400 audit(2000265094.983:17785): avc: denied { read open } for pid=13977 comm="syz.8.2546" path="pid:[4026532876]" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.783962][ T39] audit: type=1400 audit(2000265094.983:17786): avc: denied { ioctl } for pid=13977 comm="syz.8.2546" path="pid:[4026532876]" dev="nsfs" ino=4026532876 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.804023][ T39] audit: type=1400 audit(2000265095.013:17787): avc: denied { read write } for pid=12983 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.810230][ T39] audit: type=1400 audit(2000265095.013:17788): avc: denied { read write open } for pid=12983 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.816720][ T39] audit: type=1400 audit(2000265095.013:17789): avc: denied { ioctl } for pid=12983 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.824957][ T39] audit: type=1400 audit(2000265095.023:17790): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 245.832413][ T5971] usb 11-1: USB disconnect, device number 18 [ 248.267047][T14053] [U]  [ 248.268000][T14053] [U] K{‘ [ 248.269063][T14053] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 248.272103][T14053] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 248.277069][T14053] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 248.280879][T14053] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 248.291975][T14053] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 248.298998][T14053] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 248.302575][T14053] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 248.306298][T14053] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 248.335681][T14053] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 248.338410][T14053] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 248.342442][T14053] [U] 22½“Æ©ÐÛ©X?0;3U± [ 248.344205][T14053] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 248.351538][T14053] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 248.354492][T14053] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 248.357165][T14053] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 248.359154][T14053] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 248.362778][T14053] [U] ¹ EC [ 248.364019][T14053] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 249.004538][T14049] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 250.746044][ T39] kauditd_printk_skb: 487 callbacks suppressed [ 250.746057][ T39] audit: type=1400 audit(2000265099.953:18278): avc: denied { read write } for pid=14150 comm="syz.6.2620" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 250.761523][ T39] audit: type=1400 audit(2000265099.953:18279): avc: denied { read write open } for pid=14150 comm="syz.6.2620" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 250.770180][ T39] audit: type=1400 audit(2000265099.953:18280): avc: denied { ioctl } for pid=14150 comm="syz.6.2620" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 250.777402][ T39] audit: type=1400 audit(2000265099.973:18281): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 250.783752][ T39] audit: type=1400 audit(2000265099.973:18282): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 250.790023][ T39] audit: type=1400 audit(2000265099.973:18283): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.796263][ T39] audit: type=1400 audit(2000265099.973:18284): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.802724][ T39] audit: type=1400 audit(2000265099.973:18285): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.809248][ T39] audit: type=1400 audit(2000265099.973:18286): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.815994][ T39] audit: type=1400 audit(2000265100.003:18287): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 252.175906][T14185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2634'. [ 252.755935][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.759990][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.765165][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.771500][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.774630][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.777301][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.972516][ T2296] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 253.043478][T14199] chnl_net:caif_netlink_parms(): no params data found [ 253.122566][ T2296] usb 13-1: Using ep0 maxpacket: 8 [ 253.136342][ T2296] usb 13-1: config index 0 descriptor too short (expected 5924, got 36) [ 253.139609][T14199] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.140739][ T2296] usb 13-1: config 250 has an invalid interface number: 228 but max is -1 [ 253.141614][T14199] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.145397][ T2296] usb 13-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 253.149401][T14199] bridge_slave_0: entered allmulticast mode [ 253.150145][ T2296] usb 13-1: config 250 has no interface number 0 [ 253.153197][T14199] bridge_slave_0: entered promiscuous mode [ 253.154882][ T2296] usb 13-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 253.161123][T14199] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.161290][ T2296] usb 13-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 253.164129][T14199] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.168327][ T2296] usb 13-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.170640][T14199] bridge_slave_1: entered allmulticast mode [ 253.174610][ T2296] usb 13-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 253.174659][ T2296] usb 13-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 253.177527][T14199] bridge_slave_1: entered promiscuous mode [ 253.180452][ T2296] usb 13-1: config 250 interface 228 has no altsetting 0 [ 253.197640][ T2296] usb 13-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 253.200239][ T2296] usb 13-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 253.203630][ T2296] usb 13-1: Product: syz [ 253.205002][ T2296] usb 13-1: SerialNumber: syz [ 253.214404][ T2296] hub 13-1:250.228: bad descriptor, ignoring hub [ 253.216262][ T2296] hub 13-1:250.228: probe with driver hub failed with error -5 [ 253.225400][T14199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.231588][T14199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.269083][T14199] team0: Port device team_slave_0 added [ 253.280126][T14199] team0: Port device team_slave_1 added [ 253.316405][T14199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.318905][T14199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.326661][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2646'. [ 253.328060][T14199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.336124][T14199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.338097][T14199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.347211][T14199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.379879][T14199] hsr_slave_0: entered promiscuous mode [ 253.381860][T14199] hsr_slave_1: entered promiscuous mode [ 253.385759][T14199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.387853][T14199] Cannot create hsr debugfs directory [ 253.434666][ T2296] usblp 13-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 253.499294][T14199] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 253.507950][T14199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.511768][T14199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.593439][T14199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.597083][T14199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.691513][T14199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.694986][T14199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.745869][ T69] usb 13-1: USB disconnect, device number 7 [ 253.750664][ T69] usblp0: removed [ 253.759371][T14199] bond0: (slave netdevsim0): Releasing backup interface [ 253.763782][T14199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.767199][T14199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.903545][T14199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.908530][T14199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.913693][T14199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.919234][T14199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.004031][T14226] bond2: entered promiscuous mode [ 254.005487][T14226] bond2: entered allmulticast mode [ 254.007019][T14226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.095998][ T69] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 254.100951][T14226] bond2 (unregistering): Released all slaves [ 254.189503][T14199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.214812][T14199] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.225183][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.227119][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.235483][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.237428][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.242773][ T69] usb 13-1: Using ep0 maxpacket: 8 [ 254.252679][ T69] usb 13-1: config index 0 descriptor too short (expected 5924, got 36) [ 254.257662][ T69] usb 13-1: config 250 has an invalid interface number: 228 but max is -1 [ 254.259994][ T69] usb 13-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 254.272378][ T69] usb 13-1: config 250 has no interface number 0 [ 254.274147][ T69] usb 13-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 254.277342][ T69] usb 13-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 254.280176][ T69] usb 13-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.286994][ T69] usb 13-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 254.289907][ T69] usb 13-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 254.297129][ T69] usb 13-1: config 250 interface 228 has no altsetting 0 [ 254.306554][ T69] usb 13-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 254.309356][ T69] usb 13-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 254.311614][ T69] usb 13-1: Product: syz [ 254.313053][ T69] usb 13-1: SerialNumber: syz [ 254.324077][ T69] hub 13-1:250.228: bad descriptor, ignoring hub [ 254.326110][ T69] hub 13-1:250.228: probe with driver hub failed with error -5 [ 254.535643][ T69] usblp 13-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 254.552601][ T69] usb 13-1: USB disconnect, device number 8 [ 254.557851][ T69] usblp0: removed [ 254.700037][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2653'. [ 254.804327][T14242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2655'. [ 254.810787][T14242] syz_tun: entered promiscuous mode [ 254.812803][ T64] Bluetooth: hci0: command tx timeout [ 254.832674][T14242] syz_tun: left promiscuous mode [ 255.030095][T14199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.087183][T14199] veth0_vlan: entered promiscuous mode [ 255.100973][T14199] veth1_vlan: entered promiscuous mode [ 255.141286][T14199] veth0_macvtap: entered promiscuous mode [ 255.149373][T14199] veth1_macvtap: entered promiscuous mode [ 255.169695][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.173295][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.175959][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.178824][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.182096][T14199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.192101][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.195043][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.197724][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.200666][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.204542][T14199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.213228][T14199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.215618][T14199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.218036][T14199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.220455][T14199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.288888][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.291074][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.311978][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.314243][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.454391][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.456202][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.504548][T14257] misc userio: Invalid payload size [ 255.767865][ T39] kauditd_printk_skb: 489 callbacks suppressed [ 255.767876][ T39] audit: type=1400 audit(2000265104.973:18777): avc: denied { read write } for pid=14266 comm="syz.3.2663" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.776971][ T39] audit: type=1400 audit(2000265104.973:18778): avc: denied { read write open } for pid=14266 comm="syz.3.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.784732][ T39] audit: type=1400 audit(2000265104.973:18779): avc: denied { ioctl } for pid=14266 comm="syz.3.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.791421][ T39] audit: type=1400 audit(2000265104.973:18780): avc: denied { ioctl } for pid=14266 comm="syz.3.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.798212][ T39] audit: type=1400 audit(2000265104.983:18781): avc: denied { ioctl } for pid=14266 comm="syz.3.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.804973][ T39] audit: type=1400 audit(2000265104.983:18782): avc: denied { ioctl } for pid=14266 comm="syz.3.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.811980][ T39] audit: type=1400 audit(2000265105.003:18783): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 255.818131][ T39] audit: type=1400 audit(2000265105.003:18784): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.825980][ T39] audit: type=1400 audit(2000265105.003:18785): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 255.831943][ T39] audit: type=1400 audit(2000265105.013:18786): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.892890][ T64] Bluetooth: hci0: command tx timeout [ 258.972642][ T64] Bluetooth: hci0: command tx timeout [ 259.034621][T14370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.555326][T14385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2712'. [ 259.579362][T14385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.042062][T14414] binder_alloc: 14412: binder_alloc_buf, no vma [ 260.773234][ T39] kauditd_printk_skb: 649 callbacks suppressed [ 260.773246][ T39] audit: type=1400 audit(2000265109.983:19436): avc: denied { read } for pid=14432 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.789372][ T39] audit: type=1400 audit(2000265109.993:19437): avc: denied { read } for pid=14432 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.798522][ T39] audit: type=1400 audit(2000265109.993:19438): avc: denied { read } for pid=14432 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.813094][ T39] audit: type=1400 audit(2000265109.993:19439): avc: denied { read } for pid=14432 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.821048][ T39] audit: type=1400 audit(2000265110.013:19440): avc: denied { read } for pid=14432 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.832978][ T39] audit: type=1400 audit(2000265110.013:19441): avc: denied { read } for pid=14432 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.840628][ T39] audit: type=1400 audit(2000265110.013:19442): avc: denied { read } for pid=14432 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.852409][ T39] audit: type=1400 audit(2000265110.023:19443): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 260.858897][ T39] audit: type=1400 audit(2000265110.023:19444): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.867816][ T39] audit: type=1400 audit(2000265110.023:19445): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.052476][ T64] Bluetooth: hci0: command tx timeout [ 261.071051][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2737'. [ 261.074214][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2737'. [ 261.292975][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2740'. [ 262.099917][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 263.389023][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 263.465764][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'. [ 264.051319][T14617] dvmrp1: entered allmulticast mode [ 264.366289][T14633] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.572786][ T7913] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 264.728657][ T7913] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 264.731769][ T7913] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.736828][ T7913] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.743810][ T7913] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.747454][ T7913] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.751198][ T7913] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.756628][ T7913] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.764948][ T7913] usb 11-1: config 0 descriptor?? [ 264.769849][T14632] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 265.188474][ T7913] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 265.190917][ T7913] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 265.194271][ T7913] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 265.196392][ T7913] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 265.198559][ T7913] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 265.200689][ T7913] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 265.203544][ T7913] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 265.223182][ T7913] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 265.287217][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 265.455325][ T9] usb 11-1: USB disconnect, device number 19 [ 265.782841][ T39] kauditd_printk_skb: 808 callbacks suppressed [ 265.782852][ T39] audit: type=1400 audit(2000265114.993:20254): avc: denied { read write } for pid=14199 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.791603][ T39] audit: type=1400 audit(2000265114.993:20255): avc: denied { read write open } for pid=14199 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.811205][ T39] audit: type=1400 audit(2000265114.993:20256): avc: denied { ioctl } for pid=14199 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.821377][ T39] audit: type=1400 audit(2000265115.013:20257): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 265.831346][ T39] audit: type=1400 audit(2000265115.013:20258): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.838776][ T39] audit: type=1400 audit(2000265115.013:20259): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.847225][ T39] audit: type=1400 audit(2000265115.013:20260): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.854463][ T39] audit: type=1400 audit(2000265115.013:20261): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.860959][ T39] audit: type=1400 audit(2000265115.043:20262): avc: denied { module_request } for pid=14651 comm="syz.2.2830" kmod="cryptomgr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 265.868516][T14664] vlan2: entered promiscuous mode [ 265.870149][T14664] vlan2: entered allmulticast mode [ 265.902823][ T39] audit: type=1400 audit(2000265115.113:20263): avc: denied { read write } for pid=14199 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.966885][T14666] team0: entered promiscuous mode [ 265.968965][T14666] team_slave_0: entered promiscuous mode [ 265.971051][T14666] team_slave_1: entered promiscuous mode [ 265.984401][T14665] team0: left promiscuous mode [ 265.985815][T14665] team_slave_0: left promiscuous mode [ 265.987892][T14665] team_slave_1: left promiscuous mode [ 266.757563][ T8] IPVS: starting estimator thread 0... [ 266.852516][T14701] IPVS: using max 38 ests per chain, 91200 per kthread [ 268.089936][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2878'. [ 268.930715][T14806] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.234165][T14817] loop2: detected capacity change from 0 to 7 [ 269.237442][T14817] Dev loop2: unable to read RDB block 7 [ 269.239167][T14817] loop2: unable to read partition table [ 269.241230][T14817] loop2: partition table beyond EOD, truncated [ 269.243101][T14817] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 269.779274][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.784572][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.787341][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.790601][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.795997][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.798260][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.069551][T14834] chnl_net:caif_netlink_parms(): no params data found [ 270.152065][T14834] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.154291][T14834] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.156373][T14834] bridge_slave_0: entered allmulticast mode [ 270.158521][T14834] bridge_slave_0: entered promiscuous mode [ 270.163576][T14834] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.165927][T14834] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.168278][T14834] bridge_slave_1: entered allmulticast mode [ 270.170440][T14834] bridge_slave_1: entered promiscuous mode [ 270.197507][T14834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.205623][T14834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.237877][T14834] team0: Port device team_slave_0 added [ 270.244270][T14834] team0: Port device team_slave_1 added [ 270.270223][T14834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.272968][T14834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.282309][T14834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.289061][T14834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.291653][T14834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.301714][T14834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.344155][T14834] hsr_slave_0: entered promiscuous mode [ 270.347063][T14834] hsr_slave_1: entered promiscuous mode [ 270.350019][T14834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.353374][T14834] Cannot create hsr debugfs directory [ 270.537839][T14834] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.627916][T14834] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.734888][T14834] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.738216][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2923'. [ 270.746776][T14884] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 270.754378][T14885] vlan2: entered allmulticast mode [ 270.756102][T14885] syz_tun: entered allmulticast mode [ 270.759530][T14885] syz_tun: left allmulticast mode [ 270.796348][ T39] kauditd_printk_skb: 681 callbacks suppressed [ 270.796359][ T39] audit: type=1400 audit(2000265120.003:20945): avc: denied { create } for pid=14886 comm="syz.3.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.804691][ T39] audit: type=1400 audit(2000265120.003:20946): avc: denied { getopt } for pid=14886 comm="syz.3.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.816162][ T39] audit: type=1400 audit(2000265120.023:20947): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 270.822627][T14834] bond0: (slave netdevsim0): Releasing backup interface [ 270.824779][ T39] audit: type=1400 audit(2000265120.023:20948): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.829371][T14834] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.830814][ T39] audit: type=1400 audit(2000265120.033:20949): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.840560][ T39] audit: type=1400 audit(2000265120.033:20950): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.847242][ T39] audit: type=1400 audit(2000265120.033:20951): avc: denied { read write } for pid=14199 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.854190][ T39] audit: type=1400 audit(2000265120.033:20952): avc: denied { create } for pid=14888 comm="syz.2.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.859733][ T39] audit: type=1400 audit(2000265120.033:20953): avc: denied { read write open } for pid=14199 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.868105][ T39] audit: type=1400 audit(2000265120.033:20954): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.944154][T14895] program syz.8.2930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.981372][T14834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.987169][T14834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.994208][T14834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.000653][T14834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.123244][T14834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.154834][T14834] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.174072][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.176152][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.185422][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.187533][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.862645][ T64] Bluetooth: hci1: command tx timeout [ 272.346645][T14834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.421871][ T9] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 273.424994][ T9] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 273.494007][ T9] hid-generic 0000:0003:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz1 [ 273.886536][T14834] veth0_vlan: entered promiscuous mode [ 273.905497][T14834] veth1_vlan: entered promiscuous mode [ 273.932487][ T64] Bluetooth: hci1: command tx timeout [ 273.952625][T14834] veth0_macvtap: entered promiscuous mode [ 273.961501][T14834] veth1_macvtap: entered promiscuous mode [ 273.984078][T14834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.987090][T14834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.989857][T14834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.993156][T14834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.995988][T14834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.999101][T14834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.002935][T14834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.014419][T14834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.017420][T14834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.020328][T14834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.023416][T14834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.026188][T14834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.029124][T14834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.032551][T14834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.044325][T14834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.046825][T14834] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.049346][T14834] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.051833][T14834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.072303][T15020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2977'. [ 274.136213][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.138501][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.164139][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.166394][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.313465][T15030] netlink: 'syz.8.2982': attribute type 5 has an invalid length. [ 275.816941][ T39] kauditd_printk_skb: 523 callbacks suppressed [ 275.816952][ T39] audit: type=1400 audit(2000265125.023:21478): avc: denied { create } for pid=15090 comm="syz.6.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 275.824781][ T39] audit: type=1400 audit(2000265125.023:21479): avc: denied { ioctl } for pid=15090 comm="syz.6.3006" path="socket:[54064]" dev="sockfs" ino=54064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 275.831746][ T39] audit: type=1400 audit(2000265125.023:21480): avc: denied { read } for pid=15091 comm="syz.3.3007" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.838470][ T39] audit: type=1400 audit(2000265125.033:21481): avc: denied { read open } for pid=15091 comm="syz.3.3007" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.840582][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.845277][ T39] audit: type=1400 audit(2000265125.033:21482): avc: denied { ioctl } for pid=15091 comm="syz.3.3007" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.854322][ T39] audit: type=1400 audit(2000265125.043:21483): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 275.861027][ T39] audit: type=1400 audit(2000265125.043:21484): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.870568][ T39] audit: type=1400 audit(2000265125.043:21485): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 275.878461][T15092] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 275.879984][ T39] audit: type=1400 audit(2000265125.043:21486): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 275.892589][ T39] audit: type=1400 audit(2000265125.043:21487): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.008417][T15099] kernel read not supported for file / œ7³ÏüâW)ës“§Ç-ë (pid: 15099 comm: syz.6.3009) [ 276.012374][ T64] Bluetooth: hci1: command tx timeout [ 276.330838][T15126] kernel read not supported for file / œ7³ÏüâW)ës“§Ç-ë (pid: 15126 comm: syz.2.3020) [ 276.742416][ T6301] usb 11-1: new low-speed USB device number 20 using dummy_hcd [ 276.914179][T15150] kernel read not supported for file / œ7³ÏüâW)ës“§Ç-ë (pid: 15150 comm: syz.8.3029) [ 276.917961][ T6301] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 276.920286][ T6301] usb 11-1: config 0 has no interface number 0 [ 276.922019][ T6301] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 276.925072][ T6301] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 276.928085][ T6301] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 276.931567][ T6301] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 276.934820][ T6301] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 276.937903][ T6301] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 276.941578][ T6301] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 276.944254][ T6301] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.952415][ T6301] usb 11-1: config 0 descriptor?? [ 276.958802][T15133] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 276.962815][T15133] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 276.970085][ T6301] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 277.176290][ T6301] usb 11-1: USB disconnect, device number 20 [ 277.182988][ T6301] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 277.271591][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3033'. [ 277.274446][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3033'. [ 277.904892][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3042'. [ 277.908171][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3042'. [ 277.942667][T15180] kernel read not supported for file / œ7³ÏüâW)ës“§Ç-ë (pid: 15180 comm: syz.3.3043) [ 278.102461][ T64] Bluetooth: hci1: command tx timeout [ 278.251954][T15207] kernel read not supported for file / œ7³ÏüâW)ës“§Ç-ë (pid: 15207 comm: syz.3.3056) [ 278.672282][T15231] kernel read not supported for file / œ7³ÏüâW)ës“§Ç-ë (pid: 15231 comm: syz.8.3067) [ 278.752467][ T70] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 278.914317][ T70] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.916924][ T70] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 278.919902][ T70] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.927312][ T70] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 278.930779][ T70] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 278.943336][ T70] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.946046][ T70] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.948402][ T70] usb 11-1: Product: syz [ 278.949672][ T70] usb 11-1: Manufacturer: syz [ 278.960328][ T70] cdc_wdm 11-1:1.0: skipping garbage [ 278.962423][ T70] cdc_wdm 11-1:1.0: skipping garbage [ 278.968518][ T70] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 278.970307][ T70] cdc_wdm 11-1:1.0: Unknown control protocol [ 279.263180][ T6301] usb 11-1: USB disconnect, device number 21 [ 280.059170][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'. [ 280.061845][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3090'. [ 280.280437][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3096'. [ 280.713208][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3106'. [ 280.715801][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3106'. [ 280.850703][ T39] kauditd_printk_skb: 623 callbacks suppressed [ 280.850713][ T39] audit: type=1400 audit(2000265130.053:22111): avc: denied { read write } for pid=14834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.859525][ T39] audit: type=1400 audit(2000265130.063:22112): avc: denied { read write open } for pid=14834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.869681][ T39] audit: type=1400 audit(2000265130.063:22113): avc: denied { ioctl } for pid=14834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.877096][ T39] audit: type=1400 audit(2000265130.063:22114): avc: denied { read write } for pid=12983 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.885951][ T39] audit: type=1400 audit(2000265130.063:22115): avc: denied { read write open } for pid=12983 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.902566][ T39] audit: type=1400 audit(2000265130.063:22116): avc: denied { ioctl } for pid=12983 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.910598][ T39] audit: type=1400 audit(2000265130.073:22117): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 280.917069][ T39] audit: type=1400 audit(2000265130.073:22118): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.923680][ T39] audit: type=1400 audit(2000265130.073:22119): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 280.929972][ T39] audit: type=1400 audit(2000265130.073:22120): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 281.047107][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 282.094153][T15406] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.491442][T15438] __nla_validate_parse: 1 callbacks suppressed [ 282.491457][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3159'. [ 282.496252][T15438] bridge_slave_1: left promiscuous mode [ 282.497944][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.501002][T15438] bridge_slave_0: left allmulticast mode [ 282.502740][T15438] bridge_slave_0: left promiscuous mode [ 282.504480][T15438] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.576001][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'. [ 282.578586][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 282.770076][T15448] netlink: 'syz.2.3163': attribute type 2 has an invalid length. [ 282.973183][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3169'. [ 282.975794][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3169'. [ 282.985295][T15459] [ 282.986033][T15459] ====================================================== [ 282.988073][T15459] WARNING: possible circular locking dependency detected [ 282.990074][T15459] 6.13.0-syzkaller #0 Not tainted [ 282.992006][T15459] ------------------------------------------------------ [ 282.994694][T15459] syz.8.3168/15459 is trying to acquire lock: [ 282.996599][T15459] ffff88802d7e59a0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 282.999171][T15459] [ 282.999171][T15459] but task is already holding lock: [ 283.001287][T15459] ffff888106e4f4b0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 283.003965][T15459] [ 283.003965][T15459] which lock already depends on the new lock. [ 283.003965][T15459] [ 283.006932][T15459] [ 283.006932][T15459] the existing dependency chain (in reverse order) is: [ 283.009505][T15459] [ 283.009505][T15459] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 283.011773][T15459] __mutex_lock+0x19b/0xa60 [ 283.013252][T15459] blk_mq_init_sched+0x42b/0x640 [ 283.014830][T15459] elevator_init_mq+0x2cd/0x420 [ 283.016386][T15459] add_disk_fwnode+0x113/0x1300 [ 283.017945][T15459] sd_probe+0xa86/0x1000 [ 283.019344][T15459] really_probe+0x23e/0xa90 [ 283.020825][T15459] __driver_probe_device+0x1de/0x440 [ 283.022540][T15459] driver_probe_device+0x4c/0x1b0 [ 283.024152][T15459] __device_attach_driver+0x1df/0x310 [ 283.025923][T15459] bus_for_each_drv+0x157/0x1e0 [ 283.027486][T15459] __device_attach_async_helper+0x1d3/0x290 [ 283.029317][T15459] async_run_entry_fn+0x9c/0x530 [ 283.030912][T15459] process_one_work+0x9c5/0x1ba0 [ 283.032507][T15459] worker_thread+0x6c8/0xf00 [ 283.033951][T15459] kthread+0x2c1/0x3a0 [ 283.035312][T15459] ret_from_fork+0x45/0x80 [ 283.036752][T15459] ret_from_fork_asm+0x1a/0x30 [ 283.038292][T15459] [ 283.038292][T15459] -> #4 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 283.040818][T15459] blk_queue_enter+0x50f/0x640 [ 283.042361][T15459] blk_mq_alloc_request+0x59b/0x950 [ 283.044005][T15459] scsi_execute_cmd+0x1da/0xf40 [ 283.045543][T15459] read_capacity_16+0x213/0xe10 [ 283.047099][T15459] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 283.048914][T15459] sd_probe+0x904/0x1000 [ 283.050302][T15459] really_probe+0x23e/0xa90 [ 283.051782][T15459] __driver_probe_device+0x1de/0x440 [ 283.053447][T15459] driver_probe_device+0x4c/0x1b0 [ 283.055051][T15459] __device_attach_driver+0x1df/0x310 [ 283.056748][T15459] bus_for_each_drv+0x157/0x1e0 [ 283.058302][T15459] __device_attach_async_helper+0x1d3/0x290 [ 283.060144][T15459] async_run_entry_fn+0x9c/0x530 [ 283.061745][T15459] process_one_work+0x9c5/0x1ba0 [ 283.063318][T15459] worker_thread+0x6c8/0xf00 [ 283.064791][T15459] kthread+0x2c1/0x3a0 [ 283.066129][T15459] ret_from_fork+0x45/0x80 [ 283.067566][T15459] ret_from_fork_asm+0x1a/0x30 [ 283.069118][T15459] [ 283.069118][T15459] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 283.071310][T15459] __mutex_lock+0x19b/0xa60 [ 283.072789][T15459] __nbd_set_size+0x2c0/0x730 [ 283.074306][T15459] nbd_start_device+0x8fd/0xd70 [ 283.075868][T15459] nbd_ioctl+0x21a/0xfd0 [ 283.077267][T15459] blkdev_ioctl+0x276/0x6d0 [ 283.078739][T15459] __x64_sys_ioctl+0x190/0x200 [ 283.080269][T15459] do_syscall_64+0xcd/0x250 [ 283.081738][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.083586][T15459] [ 283.083586][T15459] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 283.086059][T15459] blk_mq_submit_bio+0x1fb6/0x24c0 [ 283.087688][T15459] __submit_bio+0x384/0x540 [ 283.089152][T15459] submit_bio_noacct_nocheck+0x698/0xd70 [ 283.090937][T15459] submit_bio_noacct+0x93a/0x1e20 [ 283.092553][T15459] block_read_full_folio+0x812/0xa50 [ 283.094238][T15459] filemap_read_folio+0xc6/0x2a0 [ 283.095820][T15459] filemap_get_pages+0x155f/0x1be0 [ 283.097445][T15459] filemap_read+0x3ca/0xd70 [ 283.098911][T15459] blkdev_read_iter+0x187/0x480 [ 283.100458][T15459] vfs_read+0x87f/0xbe0 [ 283.101840][T15459] ksys_read+0x12b/0x250 [ 283.103232][T15459] do_syscall_64+0xcd/0x250 [ 283.104700][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.106539][T15459] [ 283.106539][T15459] -> #1 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 283.108961][T15459] down_read+0x9a/0x330 [ 283.110327][T15459] filemap_fault+0x2e0/0x2820 [ 283.111794][T15459] __do_fault+0x10a/0x490 [ 283.113207][T15459] do_pte_missing+0xebd/0x3e00 [ 283.114735][T15459] __handle_mm_fault+0x103c/0x2a40 [ 283.116362][T15459] handle_mm_fault+0x3fa/0xaa0 [ 283.117903][T15459] __get_user_pages+0x8d9/0x3b50 [ 283.119469][T15459] __gup_longterm_locked+0x3b7/0x1870 [ 283.121167][T15459] gup_fast_fallback+0x1802/0x2690 [ 283.122790][T15459] get_user_pages_fast+0xa8/0x100 [ 283.124386][T15459] __iov_iter_get_pages_alloc+0x8ed/0x2280 [ 283.126196][T15459] iov_iter_get_pages2+0xa4/0x100 [ 283.127797][T15459] fuse_copy_fill+0x670/0x880 [ 283.129302][T15459] fuse_dev_do_write+0x220/0x3720 [ 283.130906][T15459] fuse_dev_write+0x14f/0x1e0 [ 283.132425][T15459] vfs_write+0x5ae/0x1150 [ 283.133837][T15459] ksys_write+0x12b/0x250 [ 283.135300][T15459] do_syscall_64+0xcd/0x250 [ 283.136762][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.138625][T15459] [ 283.138625][T15459] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 283.140809][T15459] __lock_acquire+0x249e/0x3c40 [ 283.142368][T15459] lock_acquire.part.0+0x11b/0x380 [ 283.143992][T15459] __might_fault+0x11b/0x190 [ 283.145473][T15459] _copy_from_user+0x29/0xd0 [ 283.146958][T15459] __blk_trace_setup+0xa8/0x180 [ 283.148510][T15459] blk_trace_ioctl+0x163/0x290 [ 283.150034][T15459] blkdev_ioctl+0x109/0x6d0 [ 283.151505][T15459] __x64_sys_ioctl+0x190/0x200 [ 283.153039][T15459] do_syscall_64+0xcd/0x250 [ 283.154498][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.156343][T15459] [ 283.156343][T15459] other info that might help us debug this: [ 283.156343][T15459] [ 283.156945][T15470] netlink: zone id is out of range [ 283.159244][T15459] Chain exists of: [ 283.159244][T15459] &mm->mmap_lock --> &q->q_usage_counter(queue)#51 --> &q->debugfs_mutex [ 283.159244][T15459] [ 283.159269][T15459] Possible unsafe locking scenario: [ 283.159269][T15459] [ 283.159272][T15459] CPU0 CPU1 [ 283.159274][T15459] ---- ---- [ 283.159277][T15459] lock(&q->debugfs_mutex [ 283.160725][T15470] netlink: zone id is out of range [ 283.164693][T15459] ); [ 283.164699][T15459] lock(&q->q_usage_counter(queue)#51); [ 283.164711][T15459] lock(&q->debugfs_mutex); [ 283.164718][T15459] rlock(&mm->mmap_lock); [ 283.164726][T15459] [ 283.164726][T15459] *** DEADLOCK *** [ 283.164726][T15459] [ 283.164729][T15459] 1 lock held by syz.8.3168/15459: [ 283.164735][T15459] #0: ffff888106e4f4b0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 283.164763][T15459] [ 283.164763][T15459] stack backtrace: [ 283.164768][T15459] CPU: 1 UID: 0 PID: 15459 Comm: syz.8.3168 Not tainted 6.13.0-syzkaller #0 [ 283.167310][T15470] netlink: zone id is out of range [ 283.168431][T15459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.169971][T15470] netlink: zone id is out of range [ 283.171244][T15459] Call Trace: [ 283.171250][T15459] [ 283.173470][T15470] netlink: zone id is out of range [ 283.175731][T15459] dump_stack_lvl+0x116/0x1f0 [ 283.177823][T15470] netlink: zone id is out of range [ 283.179038][T15459] print_circular_bug+0x419/0x5d0 [ 283.181316][T15470] netlink: zone id is out of range [ 283.182785][T15459] check_noncircular+0x31a/0x400 [ 283.182798][T15459] ? __pfx_check_noncircular+0x10/0x10 [ 283.182808][T15459] ? widen_string+0xd8/0x2a0 [ 283.182820][T15459] ? lockdep_lock+0xc6/0x200 [ 283.185548][T15470] netlink: zone id is out of range [ 283.185553][T15470] netlink: zone id is out of range [ 283.187232][T15459] ? __pfx_lockdep_lock+0x10/0x10 [ 283.189720][T15470] netlink: zone id is out of range [ 283.191140][T15459] ? string+0x202/0x3d0 [ 283.217495][T15459] __lock_acquire+0x249e/0x3c40 [ 283.218904][T15459] ? __pfx___lock_acquire+0x10/0x10 [ 283.220371][T15459] ? __pfx_bdev_name.constprop.0+0x10/0x10 [ 283.222017][T15459] ? avc_has_extended_perms+0xa3f/0x1580 [ 283.223640][T15459] ? avc_has_extended_perms+0x481/0x1580 [ 283.225278][T15459] lock_acquire.part.0+0x11b/0x380 [ 283.226760][T15459] ? __might_fault+0xe3/0x190 [ 283.228128][T15459] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 283.229759][T15459] ? rcu_is_watching+0x12/0xc0 [ 283.231159][T15459] ? trace_lock_acquire+0x14e/0x1f0 [ 283.232699][T15459] ? __might_fault+0xe3/0x190 [ 283.234069][T15459] ? lock_acquire+0x2f/0xb0 [ 283.235399][T15459] ? __might_fault+0xe3/0x190 [ 283.236767][T15459] ? __might_fault+0xe3/0x190 [ 283.238109][T15459] __might_fault+0x11b/0x190 [ 283.239457][T15459] ? __might_fault+0xe3/0x190 [ 283.240820][T15459] _copy_from_user+0x29/0xd0 [ 283.242167][T15459] __blk_trace_setup+0xa8/0x180 [ 283.243595][T15459] ? __pfx___blk_trace_setup+0x10/0x10 [ 283.245164][T15459] ? __pfx_snprintf+0x10/0x10 [ 283.246534][T15459] blk_trace_ioctl+0x163/0x290 [ 283.247931][T15459] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 283.249467][T15459] blkdev_ioctl+0x109/0x6d0 [ 283.250786][T15459] ? __pfx_blkdev_ioctl+0x10/0x10 [ 283.252259][T15459] ? selinux_file_ioctl+0x180/0x270 [ 283.253762][T15459] ? selinux_file_ioctl+0xb4/0x270 [ 283.255247][T15459] ? __pfx_blkdev_ioctl+0x10/0x10 [ 283.256706][T15459] __x64_sys_ioctl+0x190/0x200 [ 283.258102][T15459] do_syscall_64+0xcd/0x250 [ 283.259431][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.261129][T15459] RIP: 0033:0x7f4d5fb85d29 [ 283.262428][T15459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.267966][T15459] RSP: 002b:00007f4d608e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.270357][T15459] RAX: ffffffffffffffda RBX: 00007f4d5fd75fa0 RCX: 00007f4d5fb85d29 [ 283.273107][T15459] RDX: 0000000000000000 RSI: 00000000c0481273 RDI: 0000000000000005 [ 283.275961][T15459] RBP: 00007f4d5fc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 283.278878][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.281732][T15459] R13: 0000000000000000 R14: 00007f4d5fd75fa0 R15: 00007ffc0d717428 [ 283.284549][T15459] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 283.585152][ T98] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.736771][ T98] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.796612][ T98] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.854768][ T98] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.914441][ T98] bridge_slave_1: left allmulticast mode [ 283.916119][ T98] bridge_slave_1: left promiscuous mode [ 283.917801][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.920592][ T98] bridge_slave_0: left allmulticast mode [ 283.922258][ T98] bridge_slave_0: left promiscuous mode [ 283.924104][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.997396][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.000792][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.004495][ T98] bond0 (unregistering): Released all slaves [ 284.328007][ T98] hsr_slave_0: left promiscuous mode [ 284.330636][ T98] hsr_slave_1: left promiscuous mode [ 284.333389][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.335562][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.337897][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.340072][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.344579][ T98] veth1_macvtap: left promiscuous mode [ 284.346163][ T98] veth0_macvtap: left promiscuous mode [ 284.347763][ T98] veth1_vlan: left promiscuous mode [ 284.349300][ T98] veth0_vlan: left promiscuous mode [ 284.530467][ T98] team0 (unregistering): Port device team_slave_1 removed [ 284.575784][ T98] team0 (unregistering): Port device team_slave_0 removed [ 285.166719][ T98] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.215232][ T98] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.264770][ T98] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.355309][ T98] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.414573][ T98] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.484761][ T98] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.524619][ T98] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.605382][ T98] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.673280][ T98] bridge_slave_1: left allmulticast mode [ 285.674946][ T98] bridge_slave_1: left promiscuous mode [ 285.676589][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.679171][ T98] bridge_slave_0: left allmulticast mode [ 285.680812][ T98] bridge_slave_0: left promiscuous mode [ 285.682664][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.726359][ T98] dvmrp1 (unregistering): left allmulticast mode [ 285.807246][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.810611][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.816199][ T98] bond0 (unregistering): Released all slaves [ 285.899875][ T98] bond1 (unregistering): Released all slaves [ 285.905452][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.908721][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.911742][ T98] bond0 (unregistering): Released all slaves [ 286.366228][ T98] hsr_slave_0: left promiscuous mode [ 286.368112][ T98] hsr_slave_1: left promiscuous mode [ 286.369946][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.372091][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.375727][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.377914][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.381485][ T98] hsr_slave_0: left promiscuous mode [ 286.392562][ T98] hsr_slave_1: left promiscuous mode [ 286.394616][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.396999][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.399829][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.401999][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.406753][ T98] veth1_macvtap: left promiscuous mode [ 286.408408][ T98] veth0_macvtap: left promiscuous mode [ 286.410051][ T98] veth1_vlan: left promiscuous mode [ 286.411615][ T98] veth0_vlan: left promiscuous mode [ 286.415164][ T98] veth1_macvtap: left promiscuous mode [ 286.417223][ T98] veth0_macvtap: left promiscuous mode [ 286.419328][ T98] veth1_vlan: left promiscuous mode [ 286.421337][ T98] veth0_vlan: left promiscuous mode [ 286.623183][ T98] team0 (unregistering): Port device team_slave_1 removed [ 286.668307][ T98] team0 (unregistering): Port device team_slave_0 removed [ 287.017039][ T98] team0 (unregistering): Port device team_slave_1 removed [ 287.028403][ T39] kauditd_printk_skb: 339 callbacks suppressed [ 287.028413][ T39] audit: type=1400 audit(2000265136.233:22460): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 287.036564][ T39] audit: type=1400 audit(2000265136.243:22461): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.042763][ T39] audit: type=1400 audit(2000265136.243:22462): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.049141][ T39] audit: type=1400 audit(2000265136.243:22463): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.056847][ T39] audit: type=1400 audit(2000265136.243:22464): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.075030][ T98] team0 (unregistering): Port device team_slave_0 removed [ 287.863326][ T98] IPVS: stop unused estimator thread 0... [ 287.873328][ T39] audit: type=1400 audit(2000265137.083:22465): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 287.879466][ T39] audit: type=1400 audit(2000265137.083:22466): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.886475][ T39] audit: type=1400 audit(2000265137.083:22467): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.892815][ T39] audit: type=1400 audit(2000265137.083:22468): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.899291][ T39] audit: type=1400 audit(2000265137.083:22469): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.925853][ T98] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.995503][ T98] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.044917][ T98] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.105218][ T98] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.162765][ T98] bridge_slave_1: left allmulticast mode [ 288.164272][ T98] bridge_slave_1: left promiscuous mode [ 288.165772][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.168418][ T98] bridge_slave_0: left allmulticast mode [ 288.169912][ T98] bridge_slave_0: left promiscuous mode [ 288.171414][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.270397][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.273534][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.276088][ T98] bond0 (unregistering): Released all slaves [ 288.357972][ T98] bond1 (unregistering): Released all slaves [ 288.675319][ T98] hsr_slave_0: left promiscuous mode [ 288.677287][ T98] hsr_slave_1: left promiscuous mode [ 288.681869][ T98] veth1_macvtap: left promiscuous mode [ 288.684243][ T98] veth0_macvtap: left promiscuous mode [ 288.686522][ T98] veth1_vlan: left promiscuous mode [ 288.688506][ T98] veth0_vlan: left promiscuous mode [ 288.848514][ T98] team0 (unregistering): Port device team_slave_1 removed [ 288.893873][ T98] team0 (unregistering): Port device team_slave_0 removed [ 289.351101][ T98] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 10:52:48 Registers: info registers vcpu 0 CPU#0 RAX=00000000002c67f9 RBX=0000000000000000 RCX=ffffffff8b2a07d9 RDX=0000000000000000 RSI=ffffffff8b6cd9c0 RDI=ffffffff8bd217a0 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f7c90 R15=0000000000000000 RIP=ffffffff8b2a1bbf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe2f00cd68 CR3=00000000521ae000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0072657469627261 5f6167762f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fd4b488 00007f4d5fd4b480 00007f4d5fd4b478 00007f4d5fd4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d608ad100 00007f4d5fd4b440 00007f4d5fd40004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fd4b498 00007f4d5fd4b490 00007f4d5fd4b488 00007f4d5fd4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bf415 RDI=ffffffff9ab15b20 RBP=ffffffff9ab15ae0 RSP=ffffc9000621f3a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000039 R14=ffffffff851bf3b0 R15=0000000000000000 RIP=ffffffff851bf43f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4d608e46c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d28fd CR3=00000000521ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fc02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fd4b488 00007f4d5fd4b480 00007f4d5fd4b478 00007f4d5fd4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d608ad100 00007f4d5fd4b440 00007f4d5fd4b458 00007f4d5fd4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d5fd4b498 00007f4d5fd4b490 00007f4d5fd4b488 00007f4d5fd4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000005866008f RBX=ffff88802afd9130 RCX=1ffff110055fb226 RDX=000000002b124320 RSI=ffffffff8459c2f5 RDI=ffffc9000628f9ec RBP=ffffc9000628f9e8 RSP=ffffc9000628f8b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=00000000000a4001 R12=00000000000002e1 R13=00000000000007ff R14=0000000000000313 R15=0000000000000004 RIP=ffffffff8459c40c RFL=00000207 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556c3c3500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe2f00cfc0 CR3=00000000463f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2f00d940 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c1d802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c1d802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c1d802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c1d802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c1d802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c1d802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000248d14 RBX=0000000000000003 RCX=ffffffff8b2a07d9 RDX=ffffed100d526fee RSI=ffffffff8bd21720 RDI=ffffffff81709319 RBP=ffffed1003ad3488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d69a440 R14=ffffffff905f7c90 R15=0000000000000000 RIP=ffffffff8b2a1bbf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4d608e3f98 CR3=0000000023a36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000018001 Opmask01=0000000020000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe278bd9a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65747379733d7478 65746e6f63742000 002e27393631332e 322e7a7973602000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574737373377472 6574646563742000 0024273336313324 3224707373602000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3533322020203228 3839353031202e30 343120205b3e3520 00313d647561205d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3333202020203228 3233353031202030 3231202000003020 0031376460612030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f7a2a6f66636c37 79796b66697e2a7e 55796c7a677e3078 557e696f60686530 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33395e2a2a2a5157 32333f3a3b33243a 32382a2a51343f36 0a3b376f7c637979 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000