last executing test programs: 13.258958263s ago: executing program 1 (id=1068): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000008b00000000000018110000f62d49da3a81ea153c6bcd5b58d9c219debdda9e7341426c480b03000000e37ecc99fbe4fe7e79dac0684f5a7b2db8ed329951b76000431791a98da8dcba285eece9a24f0f9187e043c7c3128fb3c3cd750d67508682c14122ace92334f88760a4c9f7008d32c303417a22c64ef142d4cefbfc678ba524dea997cade66ead4", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020020f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r5}, 0x69) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x51) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000700)={0x0, 0x8, 0x5, 0x5, '\x00', '\x00', '\x00', 0x8, 0xc90, 0x7, 0x0, "c1689f3435b2ef72c2fbef03d73b722c"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x10) 13.040800974s ago: executing program 1 (id=1071): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000200)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_submit(r0, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000023c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) io_setup(0x9, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_getevents(r1, 0x4000, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)={r2, r3+60000000}) 12.62314263s ago: executing program 1 (id=1072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001740)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce3599f455c7a3a48a01010000009f2f0517e4ca0e1803a2971a50f713d4e21b020000000796f23526ec0fd97f734c4c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b87539aac61e3f46b122b09789d99b3d0524f39dc09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f800d249c8130b018d4300000000000000db3947c8dc7b1b4c4554ffdca8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f39149091269ce9757d37a687b6b0776952be5cb0417d33d3ab25493418494d9d10d76e603129e9a72657513f2e858f41a46f9ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000cc34c49051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e96443283ddedd93907cedd49e0c5752f755849953957143a0380d1f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c359afe73947afebdf5536ee29a42ea6c97cbb8a3749d0019ffccd82b97d4f72cc3359798c594bd0ed9a4996e24127f6dcb81b0c8cdb51699fc08aee1376c81e549703cdbdc0a5cac1ac64997db35facfca15a1855f2702342952725ea32beb0ec748a0b39e42c57629b32da2f7bd1c37729dfb07d9766cd0c709e94cac4e32b6967a0000000000000000000000000000003d90fd02293989a74b74ae55bbe148092f95d69af22fa1c88083ace1ecd8936cfd280fe806c515d8958d41fad01e37c0f877a5cced9a980e40bbb2d6a6b230d398c3fecbdf116d5363e66bb63be3f876ae17e3ff5fb63373559bde1199eb6fad7ebeab2842510f4805dda4a580371f2957d1c8744036711474c398697a91cebbe3f5065b84b852c37a9b4940dfe460854a8638ee88bdd5c3fdaa55b453094c6738"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='xs_stream_read_request\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='xs_stream_read_request\x00', r1}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66bad004ecc402399014e5320000000fc738440f20c0350c000000440f22c0400f205f470f01c3670f32c4212d72f00566410f38811d00700000410f017f05", 0x3f}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.613418526s ago: executing program 1 (id=1078): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010003", 0x7) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) 11.478484451s ago: executing program 1 (id=1079): r0 = userfaultfd(0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x8004) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r0, &(0x7f00000002c0)=""/196, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close(r0) ppoll(&(0x7f0000000000)=[{r1, 0x9000}, {r1, 0x364}, {r0, 0x1200}, {r1, 0x80}, {r0, 0x8008}, {r1, 0x80}], 0x6, &(0x7f0000000080), &(0x7f00000000c0)={[0x7]}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000b4bffc), 0x4) 9.917387425s ago: executing program 0 (id=1090): r0 = socket(0x1e, 0x800, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmmsg$sock(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="14937dfd6c49ba32", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000080)) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000300)='bond_slave_0\x00') ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000040)=0x5) 9.421830197s ago: executing program 0 (id=1093): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000], 0x2, &(0x7f0000000080), 0x0, [{}, {}]}, 0x98) (async) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000], 0x2, &(0x7f0000000080), 0x0, [{}, {}]}, 0x98) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) close(r1) write$cgroup_devices(r1, &(0x7f0000000140)={'b', ' *:* ', 'rw\x00'}, 0x9) (async) write$cgroup_devices(r1, &(0x7f0000000140)={'b', ' *:* ', 'rw\x00'}, 0x9) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$packet_int(r8, 0x107, 0xc, &(0x7f0000000100)=0x20e9, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0xc, &(0x7f0000000100)=0x20e9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) (async) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) (async) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) (async) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 8.717627351s ago: executing program 0 (id=1095): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000540)=0x10001, 0x4) write(r1, &(0x7f0000000000)="b1f6a476d7b365a1b8cb08591ffc2467fadc0fb25744e8169396a8d5f13f930509151843276111f977ad208d365a141aeba6eea4011ded431e22311c117c98fbc4bfd4042cf6a304f504c5a6991c9a03ab706d5df515917073a116558387700d143d8d016780e0f210d0b982db5a0ffdc4b4ba301e057b47133ca27dee42163fc0047d02f9b762ec582f197f1dd8a2a5d27577de0ac835f09983bf58ef5547d2ae18e9c9c8633d6e1c6ecb2b521c86e5474612c2433bb5442ad08df08f1fb5", 0xbf) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000001440)={'bridge_slave_0\x00', @remote}) 8.573901746s ago: executing program 0 (id=1096): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x9) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0xe5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x218802, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x4) renameat2(r3, &(0x7f0000000340)='./file0\x00', r4, &(0x7f00000003c0)='./file1\x00', 0x2) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x81) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 8.382165963s ago: executing program 0 (id=1098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r6 = dup(r5) ioctl$FBIOGET_CON2FBMAP(r6, 0x460f, &(0x7f0000000140)={0x36, 0x1}) r7 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4003b9, 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'virt_wifi0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 8.030348759s ago: executing program 0 (id=1101): r0 = socket(0x1e, 0x800, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmmsg$sock(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="14937dfd6c49ba32", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000080)) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000300)='bond_slave_0\x00') ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000040)=0x5) 8.012530621s ago: executing program 32 (id=1101): r0 = socket(0x1e, 0x800, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmmsg$sock(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="14937dfd6c49ba32", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000080)) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000300)='bond_slave_0\x00') ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000040)=0x5) 5.696372277s ago: executing program 1 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000900ff"], 0x44}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e24, @private=0xa010101}, 0x135, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000100)='nicvf0\x00', 0xc0, 0x5c8, 0x800}) socket(0x200000000000011, 0x2, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x4, 0x4, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.664072633s ago: executing program 33 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000900ff"], 0x44}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e24, @private=0xa010101}, 0x135, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000100)='nicvf0\x00', 0xc0, 0x5c8, 0x800}) socket(0x200000000000011, 0x2, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x4, 0x4, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.639938643s ago: executing program 2 (id=1135): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) sendfile(r0, r0, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}}) 2.220984333s ago: executing program 2 (id=1137): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x538c4cbc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) 2.220516169s ago: executing program 5 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000210a0182"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x40, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9", 0x32314d59}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 2.029822856s ago: executing program 3 (id=1138): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="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", 0x101}, {&(0x7f00000000c0)="e81def5f99e65b3ef6c273e75e6e4e2783bd7bbcf5ff3abc70de504e8d81c6b907f189437af0ce296eb9ae5392da4a3eac9a132756eb43594bbedb7ebfdbd61be41d13cb1c5ac75b7e0c82b1cf806141059b4ddb14eacc1de046b7594abbbb5ff7f100c7757727f5983c61b2ce9ae2dcb61d855ea1c3b98646", 0x79}, {}, {&(0x7f00000002c0)="817cf97b059f6966b4caa8287b9d52f9", 0x10}], 0x4}, 0x4008080) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000140)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="85", 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 2.02845014s ago: executing program 4 (id=1102): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x3, @val=@tracing={0xffffffffffffffff, 0xffffffff000000}}, 0x20) open_by_handle_at(r2, &(0x7f0000000380)=@nfs={0x90, 0x24, {0x9, 0x3, 0x0, 0x80, "67789b8dacf11889be0ddd8663d779322a52f1d078b44130c933a57dbbfb1e1fa3682ac238f54b7683a9dfd94e13de4abfb928b34af8817194e935b9a510e48cdaa628da80a7d7917be4a564563b634cd4b5f5778f20080470556771095d51d1fe0a6028ee7c2f22053f7097ea6b4d778b71d2180fd657208aab97fb736ebf40"}}, 0x58000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x30, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x8000000000100, 0x40000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x5) dup(r5) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x5, 0x7}, {0xa, 0x5}, {0xb, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @datasec={0x0, 0x7, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x1}, {0x5, 0x27a, 0x10001}, {0x1, 0x2, 0x5}, {0x3}, {0x3, 0x80000000, 0xd}, {0x2, 0x100, 0x1}, {0x1, 0x0, 0x5}], "e124"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xc}}]}}, &(0x7f0000000000)=""/148, 0xde, 0x94, 0x0, 0x2, 0x10000, @value=r3}, 0x28) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 1.830162214s ago: executing program 2 (id=1139): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047455, &(0x7f00000019c0)) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x10, 0x9, 0x0, 0x2c, 0x1, 0x1}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendmmsg$inet6(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r3) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000202b00fc01000000000000ff7f000000000000fe8000000000000000000000000000aa87000000000000003b00030000000000000000000010907802c9000000000000"], 0x0) 1.82974556s ago: executing program 5 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000210a0182"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x40, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9", 0x32314d59}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 1.610847641s ago: executing program 3 (id=1140): syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000000)="4530e2c31227559a667f5122243d8abb1564d68e0ae70238425f3a872e0921c48d5ad3ee78859b0dfffa2e0b4b6f10149ef97f8ae144db3d59876be30fa1085525384f5a3c4f01fefd", 0x49, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r2, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, r2, &(0x7f0000000100)) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1.610571076s ago: executing program 4 (id=1102): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x3, @val=@tracing={0xffffffffffffffff, 0xffffffff000000}}, 0x20) open_by_handle_at(r2, &(0x7f0000000380)=@nfs={0x90, 0x24, {0x9, 0x3, 0x0, 0x80, "67789b8dacf11889be0ddd8663d779322a52f1d078b44130c933a57dbbfb1e1fa3682ac238f54b7683a9dfd94e13de4abfb928b34af8817194e935b9a510e48cdaa628da80a7d7917be4a564563b634cd4b5f5778f20080470556771095d51d1fe0a6028ee7c2f22053f7097ea6b4d778b71d2180fd657208aab97fb736ebf40"}}, 0x58000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x30, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x8000000000100, 0x40000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x5) dup(r5) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x5, 0x7}, {0xa, 0x5}, {0xb, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @datasec={0x0, 0x7, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x1}, {0x5, 0x27a, 0x10001}, {0x1, 0x2, 0x5}, {0x3}, {0x3, 0x80000000, 0xd}, {0x2, 0x100, 0x1}, {0x1, 0x0, 0x5}], "e124"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xc}}]}}, &(0x7f0000000000)=""/148, 0xde, 0x94, 0x0, 0x2, 0x10000, @value=r3}, 0x28) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 1.379688593s ago: executing program 2 (id=1141): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000eb40000000000000", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000000000000800000000000000000000000000000117c3bda3804a04c139d6fcf9513d06b28ab3cfd657e672bba8b6fdfd6b1a8aa20bc912769af220e749596d3b7dcd9e2f2944da39d7034946c414599be86d441144167df26f23ef0484b140a3a071b6716f72f1a1483968b8c3cbb9a6da7979a6dfd2fdbedc3a602257285edaab850f51a1e9cc2254183fc9c99dab9acb8d3"], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet_icmp(0x2, 0x2, 0x1) close(r3) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) 1.378709925s ago: executing program 5 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000210a0182"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x40, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9", 0x32314d59}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 1.18241788s ago: executing program 3 (id=1142): r0 = mq_open(&(0x7f0000000000)='%\x00', 0x800, 0x105, &(0x7f0000000040)={0x9, 0x0, 0x2, 0xfffffffffffffff8}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x3, 0xfffffffc}, 0x100, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0x2c0, 0xf0, 0xffffffff, 0x0, 0x0, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@socket1={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0xcde}}}}, {{@ip={@multicast1, @local, 0xff, 0xff000000, 'geneve0\x00', 'batadv_slave_0\x00', {}, {}, 0x88, 0x2}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x3, 0x7, [0x0, 0xd, 0x33, 0x38, 0x4, 0x1d, 0x21, 0x0, 0x5, 0x39, 0x3d, 0x37, 0x28, 0x32, 0x2a, 0xf], 0x5, 0x3bc708ee}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0xffff, 0x6], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x14, @private=0xa010101, @empty, @icmp_id=0x64, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:fsadm_log_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0xfffffffffffffffb, 0x40) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000800)=""/105) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x202040, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000008c0)={0x1, 0x3, [@random="59b49cebb8b6", @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}]}) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000900)=0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000940)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000980)) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000009c0)=""/4096) syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r2) read$FUSE(r2, &(0x7f0000001a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000003a40)={0x10, 0x0, r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000003a80)={0x1f0, 0x0, r4, [{{0x0, 0x3, 0xfda1, 0x6, 0x7a2, 0x2, {0x0, 0x5, 0x666, 0x1, 0x0, 0xfffffffffffffffd, 0x6, 0xfffffff4, 0x8000, 0x4000, 0x1, r5, r6, 0xffffffff, 0x9}}, {0x2, 0x2, 0x1, 0xffffffff, ':'}}, {{0x4, 0x2, 0x7, 0xffff, 0x2e, 0x3, {0x3, 0x3, 0x3, 0xdd, 0x72, 0x7d42c8c2, 0x5, 0x7, 0x4, 0x5000, 0x2, r5, r6, 0xcbc8, 0x60}}, {0x2, 0x6, 0x1, 0x200, ')'}}, {{0x2, 0x2, 0x1cb6, 0x6, 0x5, 0x0, {0x2, 0x7, 0xa, 0x2, 0x7, 0x2, 0x7, 0xb404, 0x3, 0x4000, 0xfffffff7, r5, r6, 0xf, 0x1}}, {0x4, 0x1, 0x2, 0x9, '\\.'}}]}, 0x1f0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000003c80), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000003cc0)={0x0, @vbi={0xffff871e, 0x6, 0x5, 0x55595659, [0x3, 0x401], [0x9, 0x2], 0x1}}) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000003dc0), 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x406, r0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r0, &(0x7f0000003e00)={0xe0000000}) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000003e40)=0x8, 0x4) syz_io_uring_setup(0x1e79, &(0x7f0000003e80)={0x0, 0x5d18, 0x40, 0x0, 0xb3, 0x0, r0}, &(0x7f0000003f00), &(0x7f0000003f40)) flock(r7, 0x2) r10 = syz_open_dev$vcsa(&(0x7f0000003f80), 0x4, 0x2081) writev(r1, &(0x7f0000005440)=[{&(0x7f0000003fc0)="ae67db2a706cf9a22160218962eb6e0d52521ad10e03f0ae38eb577ed47f70abaedaf52b01767d23fcd53ac58d432aaf460f82cd03c39701a6083cab6eee02", 0x3f}, {&(0x7f0000004000)="57eeb8e1d22a875f6a41cd4df2a2d27ae1566946de77435a9fb67f07b03b89d02d68703d56f06cd6141741b9bd210aa63012cb50a95f2a984450a8a0316b4702930c40732a4e5a2428a701a20521ce996ad084b1461e4dbbacf1d8582d0b90f81f5a6c8e05e34025e72f4be8c631db00b7d61931b49e84b053626f4001796999ae89326e08358740bc0fb635430d75ce11bff9b00118f4e911a41b54d559470c800f", 0xa2}, {&(0x7f00000040c0)="bc8315a602b312d3a07505843f98164285ffc8333d0631a1d2ef78ab6d62bb76b07f30ea113b1acdb6c8c881ecf2b31011758f3483bb27234adb0f6a", 0x3c}, {&(0x7f0000004100)="19ea0a6f3936f3956467226806cadbc99a4afb146e00ff6cf9a988d890a06515b783efecc4b693fd5d7508e26db6957c57327467e809590cdcb3a6faee9da671e366a9029e77db1f", 0x48}, {&(0x7f0000004180)="d1750fd03e10e54f5bcc4aea40bd01388679", 0x12}, {&(0x7f00000041c0)="aa0b003bd62457ebda0c7f9cd83b6256a8c11ff8bc546524c9fafa2ffd65f9152ba191adbb6a7742e886", 0x2a}, {&(0x7f0000004200)="f5a903c8563646ad7ece0b8087e61c2fe0758fd094c766f893bbdd89ac462947432dade5dd43921619dfb885b730bef66ef29dd9d9c3245c0e84835b242b1f86cd8f6574b4ca2d57331c6c4ba58193d8d8f162b825d8746d310ecec719c65aaf291c2293e3bb43d13c08e9e4293dad7ad3dc1bd42d1d42a50805b91a17f597a5da138a09743d829374a1c1", 0x8b}, {&(0x7f00000042c0)="9b4e78906fface7609d0415f67398589b56d2c1f234011aa754aba1cc23c0bdde30cde228f1f789295f04af4c81a2e05c1ccfca1971f1b51018172f64bca9cec08fd76864d620dbb8a21598d14f00410bb547cc29c2c51143ce6451259b75bafd78b911d348030208a3989a158c69c75dc8567acd88d6efc30643a72277d71564b51fc33fff3352c4b5dee378b2c8b2d172ffa301eeffa2d0bb7a033ed49d0afda3588b757fb40016c3a17bbe4da53509b8e7b1f39bb279570153467b28eec1d4b7af35b9549b5d9b25ca21ce29d27a53869", 0xd2}, {&(0x7f00000043c0)="003cd52cd7dc720f4831b375e3e19825571b24785387724bf659f84e6d7484de34c9162ee7c05ddb13612476a6d6ed50478c8ae48447877562138256dbe68ed3f5fa96aa47d772003a28fd3422d0e895d3bf41958686d4e97904d45fcfff9133a09407c718ac721813f63e7082f545bb81298b8b3775075bb3ed05f3d3d83f20975d21298b20c586bd78dca05bb992791f1b3ed8f3794270cfbf3d1c8e200d7466f497099493967d0b6d96637a2cd8903e36719aa83f5a60399043cb5a213b43e54290f896472ff58c6412a6163325db2aef3503300e8c0ef9c96c871598de5f191b38bdc0a03c85dfd4824e0188904ada4cd450db8d774f38add5a84123f623eb80fb87302bad9d698443d519de81db3ac8a2cebf92bafcbc8e5afab9118f7d029bae3a913240f7022718eebc5f115db7f8ee733d6b44b8003f81ab43363c620411bae117a0b4d31ae3a65b2fcc4847f9cd6e04db55a63a190182ad5e3ff27c798f0312d18e6fb813b6b24f33ac1a6560bed7acd01e658c2f098ee34a967f4e30bfac1f00d937a5d98589536c634739ee0e66f26aea88ff0c472e49cd7bddd28ac99188930f3c7e7baca34afab0af2decf98a8853895bb1ac112f63601bc3f8ab9037f20c9f8b25fd26994042e16f9d50a0cdb252235c1ffa9c206723d8cf512c3e2c1c4842684369a8a0f71933cc5f8f3aa6724761f8032154b007b5ad601eb9d67d398a4db4f4c18ef826a57422ea5818cc597568b6d928979c72cf49fd71d567d45a6ef38004cc6b68908370698bbd0407e8524d171a4a53c2a769dc98cc844c6904a8a41dd3a51d8bfb9e9fcc8517dec31783348352fac01c0f4e3a724983cff946e14e65ee6bcd76668ff6644a979d07569a43da66120c051fc3b78a4f2f77edbe6d2df979ee547f35ba38e6c6dbbaa33167874e99b85cdb6439fb373d3485b8aec9ddeac3280a7c501ab511b191cc5f170e68f9b583500c73498be350c1f4c1a234c6a16ea8ea81b258a5d74521371c6f6714fa3e1202196c18810107fa72ca58d218aa1a98d63d7c21b551ef6d6a171f968ab33703a7c52f1726a7335427433a05dedf0470b8b82b348d3d9f542a712578e5aeee85045a5348e0b8082de91162a1a45e433e3b3eb2a6f52528600b6a0468fb0179cd39f37e2861d082a6f6c2c8888ed3f7eecda1c430fa267219599c45911ff456807ac6cc1e95c3b8061365f44231d1edd73e9535eed015ac11269db9d89c4a227cc6c82f771e7367e645d89888da3adc8d2bfbc27ed41542481eea2a2ab1e6f9b86fffc36bf69aebd7969cbbd21b5b697d5eb70b318242300aa2899404701804c4abb7da900d318b4095de31a67e210c6c359f3f1f64f1440e98a191c09a53d07836cdcc48d7f30704ce571c489eb9d3c39c5685d060bbf015616435425b17b762c6200af7ff87dcb9fef3aa2fd2092ee4a6f2c0dfc754942cdeaf97c361908b16a01c1846f785e9308c1c7ec4040aab141e459c34b77d08a9fa9b6386fdc458e05ea3618a764652668c28b246d13f6b226e300cb1f5c060bc4d68092a8192f54b9fd557719118df49969227924614b5e479a06b41417f1bd0d26cdb5df90afa8573b1657fec41eb14e5800bac59a0178ee5574ba0e0a9316bee2e2ae6a0f5852f50d2649e16a1998fb12292cf47848b17436b9d62387bb2c99bae20ef566e552a996e0645a3cbc5ff04e96ae26a5e84d13a1147d1f457c92847eb797480e43319715462f6aab421bbfb560fbfba134124f76b88042f9dcfc1a800bea49738722f9f018f80079def75ce102e132d1e40c1de173bc009b019a81815021329888d7ef01a3b4bc3171589ed80e45d65d03875975274be1e3ca7214cfb8492bf421dae2e8b5d1e36bf787b73526e7b30175c2f1ddac417dc65b3bc7dacbe3df9084212e89d48335928148700886ee8098503ae04cb09e4ae306d0abbbc0b0c41349aba3fcce84cf949ac05e1340e80bb3c4935c425575aa414a1f67ee9e807aed26d50816380ac706350272db6b6b9b997e452d114025fc589baf32cf6b4b2c39e0505dd108a3225f082c62e8ff051c1444593bfcf5dd65a50ddeb9cbec1072d8cdb4b996a8965455b3e0f01e07454af5c725e1433d3370bedfc3fa52680c0a5b4ccb124bad77e9f1a75655e63d2daff00b5d1e7aa3211c337a892ff62149e2b31e2eb79b9a748f294f1ae8749bb803436f4c21d2f39a03d0826ad2a7f417eb036486e43649b4cb2254176786844234c9306ba04b35bbed926d5dadfa895c993e77a235027d2c39eb81eb2b028dc914728ede904a87d1087ed54f237974ccf78949ca3ca1d12016a9860f92639800f17ed49b9ffdc01a0ca02f2a7a145ba0b44131ca7d926b0cda1f67b2e1f3130b9461af5db818e15756dd01f9e8f37e0384cafe3842728869378a5d351855389fbc779837ea64951ccb241c054330aecea5cbbc9b844254e4a184664c26ba86b1ba7441ac0a3e40b6a0f76c72c3d2cc6144a358cc23178d1e9d8a57cae6238f5c84531cb0f1dc21c0ffa52e410137e532948542a4e40eef0d6dd8836ad7b6a457efcb0031dfdc08b9c9fbbbd389901be3b64684f65178026e4545fc32104393efc92f25b3fdacb68cbe981e7e976370cdb5bbec2a6bb9434625cc99ca3ea0ebcc2e8d3a9583a8be7dc74b86136c7b23b051ad4a7dd0340f441279d7642731bf4b19fb10a33f63fdb303e12b9acf5abcb4052349b77445dfa3860427e66f90fc1eb23a1433a829d3d8d3255b3f9dbde6f2ac2892cdd79c9c26e9d81582026fe1feabe4f5de74f310d35c4e5af8e0d9060ca306134c24b8e954b165f46a289418aa827a5f18dde9c80f35eba3de3ac54af19ee14949c2423917ccd609ef4e3f4e680ab2e885dd733d897739398a9a517ebb9664b36a91fa7f542ff7c1813a004cf146d8ee8ea1e9dc54a27ba74d36b3d71720bd8fb9c888626d0f7decabe190e566e98d6c76399eab732d1519e694785fae4b05ea37ffab14a08e65fe7454d49110bdc108faa51eea6f79a045c9c06fface8f3cabf2212e1d3d9706566e87f8333703b0e97c50d3de131494d4aa1c2b59aa5e7e71f4e98918b8e557f89311539ce18d358eea02b9f1bd45e361c5e0f8fd954d39dc493625561dc4651076421b770b653af723186f6da4a5bf2748fb772cd987e5af22704613278cd25dfd6c78ea077b8791a339f4d2f5f4e0906e8e7444dcebc444ccab48f6a22eadae85c14dd0ef534e3f0152b3999fe4dedfe2e2bc42c322f8eb2af865ec7513c46e51efc2e12b333e9c9dcf27173a783c0d04c1d8def2cd036472d106de7dd918b7ce07bd65818b626989f8193f13547be0a07eadf22a0a32599f8dc6bd490d84eff01a23d4d40157b6ec14116c0445aca70fac3a0725a60065fcf9841c58380d0b2d7064b7ea998f7e8bce39d7d73952e9e00e93ebf98d88a74af45332235900d6f4fda01b12d974227fa1a005d750f3c68ff6821152ad695ffaa355f02779efbd9076ccb51c1287cf6fe1f4a31d695a787cf165dbc8a8bfa8d76727a3701e7d235e8abac236d49898ee867e091708a86d2d58193cef2ac53f15f919a858fa2cd6ffff7a82f716fff7ecf68f11d9d779ed3c33a8407d17f60c169dfeda7377fa50d242c4baeea818c7601e193938c37ecd5f2af5df9421567ac146b88bd8a06ca625a8da73516d1c1c425c991614697ce6f29352af0462d4ac2bdc2120fbe95e5b3eefcd160cece2b83712cb402482471f7a4188df6b48b4c248e683758c0c073dd10ff93b5dfe848f17e6d5d8cec3df4a41e1578bd898194937042096d755160edb70f40ac586f9fed0e9afc66f3872f76b7d4d5e5628b3bc221ab640943d4f682b6497a2df13a66405098db579c7cfa97e00619b3458ce79f08e0f224a23bfb9007524acdf89922c09ab453ac814f3273f79e45510b5569d7267af26ee7ef14b7e70f50aba14a9bf41cfead6ee4c6bf2b7f8ed1fd030f3493e025cace63ee7e02f57bab3a5b81f2924860b937032af435c496fae42c4573b47b63130c60b116c29d814fd5b1bc2f9b4b619be80c930cb2499edb76f15a1e8c78b533b34b20802a84064320242a1e60edf65c115cac9314deb228038f5d81db09cff4053f8f098ff4d32b402a9e542917ffdcdedc8091bffa9eeec086162f7602eb553b1d78bad51ff56d9174af1a331504343eb5345c68d89631e04f7d0998ca796e8d3e42863118f42215fbddf9fc04386ca8640d45f14557bcd48df79a36d9915d5ed76d2fd29e2b84c24b3c74a483a55e66b9d1d9fc7a4612e2a5820ed105ced6893d8ebe814ef85072e94e7c63f127d7687e2458132009247a82374946297c01250ddf9fc6974ae09225800532b22a57a0630b764e19523735c5560e6804c298bb1ed65fdde071ba672db6d35c1c5cf58397e684ec44304f418205ad8f2ce5e72b8ad9030caaf1ce4ce6f1d9eef56ad3d12aeaf44465080e159f85ec883fdb9e949102b9b7402a6013841cd382bc9d62803c2b64fc3f51cd6d56914b69959fbd66e5a6e2eb4da1d4059148db553f934c9bd2ebe7e40a49e5b4bebf72d7f62814f2d49be74a64a9f7ffae7b007ac47e7cb7b1af3a2b4aa6ebd7a0480287653b912d69d7eb55f1d90c9bbcd6e918a3361d4a9ccc114de716e90e44e0d0e5e78c13d3b719be900bbaf26a5145701c6b0235ca106c04765523deb2fe25119e0f56301b3d75a60e5d9a3715b5e9779ade04d39da2077780cdb1fe251e0d200e12a44efadb5f9c7ea163202fcfe816a91d576e190a5049577b26c3c6bc978ef9d70ecadc73ab9e6bfb94dcf08c1df9c98dd954cbf14905829b7beed15b1a84b913bf3937bfa9ece9bf10436996911834e8f912a1be85377e4e3a0e8d58f8d14fe6d0a9c23253ed017d8e277f29862c96cb3087cafaf1592b892817c65fb0d4540a734698bc53156bea4e6a0adedd1f60ce5239709e67afc6fd8cac875d2f570a4ab884bc46bb3f2eff75e71575f5721a87421a6dadfa97e5f4df9992b2eb4ceb03f8713ac357a1304254a85dbd5f13e5e91bcbc908148196273d9b42e75add3a96da8f730c969e1d6a7839da8ff82215d67cff94288266eb66196ec50d4f1f502b3c63ab0bd1da15ab51734a6293b1a3b4700a08cbb55c17c4b346c6b2ddba1b78f3e0aba7c9d2984fcb99ac1439fb8021af774900ccbfbf75200e5f27d66423458efe62ab91109dcc7b0e1452614c37e46a609c4336f7063cf74608c0a5fa1cf680b431771e6218ef09a23c442c54edabdb5440a9b6403232ccd0a985d715597cb25b12a4fdfe031d5875fdb7389ecabfdd447082b1987a74f9630a90cb655f3b6ce7ca73581feff15ea030a330b214a8ad39c1e7aab87e80cde33da6c15f07ba45a9ff1490e6e587c8e42bda8e408c7e50944425ab3bac7a2809671c3036090efd0d9f64f05fe6401e3d49bde8d5a2b91391412346c2e8c4564fd9229280875167a9686c13d857c572b52b9bf668c387488700771c1fc12c9560b82a3278982fc844c2228a4668d2b61d970b22fa251eadbdf018ac3f28bc2e7d97d226d70bd651cab4bea6db1c59ac35c4489f704227192ca06a2211de4ecaa12c22726f5fdb33643cfbdfb498695c2715f1d64e17746599be81c176de3eb2cf5ed3d2262cfc76b8c7eb48223cc60fbd5cc77fa1a232d17e4c5ca97f997f0c29d0183cf2b189f81404196f9b588bb763fa9ba8ff4d584d0da650aad76e2affebf828758099e451706c15d5ac35", 0x1000}, {&(0x7f00000053c0)="0dc3d3582a37420fa3f16dbc700d9f8f44dbafe34b00c4e851983b1726fae533e8443c90045c476eac0713b75c73eca59a7915f3205b3ecfd7fd6375c25dab6bc5cf95ac07ca6bd5576304f9cc", 0x4d}], 0xa) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000005500)={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x1, 0x2, [@dev={0xac, 0x14, 0x14, 0x31}, @loopback]}, 0x18) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000005540)=0xeea, 0x4) 1.182211481s ago: executing program 4 (id=1102): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x3, @val=@tracing={0xffffffffffffffff, 0xffffffff000000}}, 0x20) open_by_handle_at(r2, &(0x7f0000000380)=@nfs={0x90, 0x24, {0x9, 0x3, 0x0, 0x80, "67789b8dacf11889be0ddd8663d779322a52f1d078b44130c933a57dbbfb1e1fa3682ac238f54b7683a9dfd94e13de4abfb928b34af8817194e935b9a510e48cdaa628da80a7d7917be4a564563b634cd4b5f5778f20080470556771095d51d1fe0a6028ee7c2f22053f7097ea6b4d778b71d2180fd657208aab97fb736ebf40"}}, 0x58000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x30, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x8000000000100, 0x40000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x5) dup(r5) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x5, 0x7}, {0xa, 0x5}, {0xb, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @datasec={0x0, 0x7, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x1}, {0x5, 0x27a, 0x10001}, {0x1, 0x2, 0x5}, {0x3}, {0x3, 0x80000000, 0xd}, {0x2, 0x100, 0x1}, {0x1, 0x0, 0x5}], "e124"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xc}}]}}, &(0x7f0000000000)=""/148, 0xde, 0x94, 0x0, 0x2, 0x10000, @value=r3}, 0x28) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 963.240434ms ago: executing program 2 (id=1143): r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES8], 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x2}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x3, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x2}, 0xfe, 0xff}], 0x20) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x2) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000780)="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", 0xff0}, {&(0x7f0000001780)="40f68b310a15dc6d31a73735425255a352", 0x11}], 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x45e, 0xe3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf5, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x5796, 0x6, 0x1, {0x22, 0x4fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x34}}}}}]}}]}}, 0x0) 963.018711ms ago: executing program 5 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000210a0182"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x40, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9", 0x32314d59}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 782.447999ms ago: executing program 3 (id=1144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x109, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x42c}]}, 0x28}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="c80100003e2067d5bb2e704c7659a6b87a18b4e94d146535e7f29782c97a94ba191615cde1ead7112ebf0fe370f0c1ef9c566269538fd8d9638b74048c2da15e266780f90aa3ef4ead29e714a8e9dba635801fe58adae639a1aa", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 782.049515ms ago: executing program 4 (id=1102): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x3, @val=@tracing={0xffffffffffffffff, 0xffffffff000000}}, 0x20) open_by_handle_at(r2, &(0x7f0000000380)=@nfs={0x90, 0x24, {0x9, 0x3, 0x0, 0x80, "67789b8dacf11889be0ddd8663d779322a52f1d078b44130c933a57dbbfb1e1fa3682ac238f54b7683a9dfd94e13de4abfb928b34af8817194e935b9a510e48cdaa628da80a7d7917be4a564563b634cd4b5f5778f20080470556771095d51d1fe0a6028ee7c2f22053f7097ea6b4d778b71d2180fd657208aab97fb736ebf40"}}, 0x58000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x30, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x8000000000100, 0x40000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x5) dup(r5) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x5, 0x7}, {0xa, 0x5}, {0xb, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @datasec={0x0, 0x7, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x1}, {0x5, 0x27a, 0x10001}, {0x1, 0x2, 0x5}, {0x3}, {0x3, 0x80000000, 0xd}, {0x2, 0x100, 0x1}, {0x1, 0x0, 0x5}], "e124"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xc}}]}}, &(0x7f0000000000)=""/148, 0xde, 0x94, 0x0, 0x2, 0x10000, @value=r3}, 0x28) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 607.735276ms ago: executing program 5 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000210a0182"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x40, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9", 0x32314d59}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 389.762267ms ago: executing program 3 (id=1145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0xfeff, 0x2, 0x7, 0x7, 0x9, 0x6, 0x0, 0x81, 0x7, 0x20, 0x7, 0x40}, {0x7, 0x3, 0x2, 0x80, 0x0, 0x2f, 0x64, 0x0, 0x5, 0xd2, 0x4, 0xd7, 0x8000000000000002}, {0x2, 0x850e, 0x0, 0xfe, 0x6, 0x40, 0xd9, 0x5, 0x6, 0x5, 0x9, 0x3, 0x10000000}], 0xfffffff8}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, &(0x7f0000001000)=[@textreal={0x8, &(0x7f0000001080)="66b94902000066b80000000066ba010000000f30260fa54f05f08227b40f21a53131017b0cf00fc11e42090f30ba4200b00feeb906208ec81a7700", 0x3b}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) 378.424641ms ago: executing program 4 (id=1102): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x3, @val=@tracing={0xffffffffffffffff, 0xffffffff000000}}, 0x20) open_by_handle_at(r2, &(0x7f0000000380)=@nfs={0x90, 0x24, {0x9, 0x3, 0x0, 0x80, "67789b8dacf11889be0ddd8663d779322a52f1d078b44130c933a57dbbfb1e1fa3682ac238f54b7683a9dfd94e13de4abfb928b34af8817194e935b9a510e48cdaa628da80a7d7917be4a564563b634cd4b5f5778f20080470556771095d51d1fe0a6028ee7c2f22053f7097ea6b4d778b71d2180fd657208aab97fb736ebf40"}}, 0x58000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x30, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x8000000000100, 0x40000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x5) dup(r5) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x5, 0x7}, {0xa, 0x5}, {0xb, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @datasec={0x0, 0x7, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x1}, {0x5, 0x27a, 0x10001}, {0x1, 0x2, 0x5}, {0x3}, {0x3, 0x80000000, 0xd}, {0x2, 0x100, 0x1}, {0x1, 0x0, 0x5}], "e124"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xc}}]}}, &(0x7f0000000000)=""/148, 0xde, 0x94, 0x0, 0x2, 0x10000, @value=r3}, 0x28) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 192.2941ms ago: executing program 5 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000210a0182"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x40, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9", 0x32314d59}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 5.343359ms ago: executing program 2 (id=1146): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/cpu_byteorder', 0x200, 0x180) read$alg(r0, &(0x7f0000000400)=""/108, 0x6c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast1, @local, @empty}}}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x4) syz_clone3(&(0x7f0000000380)={0x104008580, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x4}, &(0x7f0000000200)=""/173, 0xad, &(0x7f0000000ac0)=""/209, &(0x7f0000000340)=[r2, 0xffffffffffffffff, r3], 0x3, {r0}}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x53, 0x0, 0x0, "3258c546dacccfae1e008faa00000000f4ff40000000005a50442600", 0x31363553}) 1.264636ms ago: executing program 3 (id=1147): r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000000000), &(0x7f00000001c0)) (async) r2 = syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) inotify_init1(0x80000) (async) r5 = inotify_init1(0x80000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) (async) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x440000a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000040)={0x10}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) io_setup(0x9d4, &(0x7f00000001c0)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000140)='i', 0x1}]) r9 = eventfd(0x7fffffff) io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f00000003c0)="58187448929381de060fb1b8ff5b4f38aa32bac29fd84897f438071329d98ba516082782246d011e31873733b2aefed6c4e775f533f78b7b96f4ec38cba664264a5718d05fdc7ec50080fc0438ce1a4d6ef4533744c273acba79bf6d9843d9e1f24c9673b23308f02009c857f3da3d07518ff8da1aa83a9e4557fa35ca9a1bfd", 0x80, 0xb, 0x0, 0x0, r9}]) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1102): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x3, @val=@tracing={0xffffffffffffffff, 0xffffffff000000}}, 0x20) open_by_handle_at(r2, &(0x7f0000000380)=@nfs={0x90, 0x24, {0x9, 0x3, 0x0, 0x80, "67789b8dacf11889be0ddd8663d779322a52f1d078b44130c933a57dbbfb1e1fa3682ac238f54b7683a9dfd94e13de4abfb928b34af8817194e935b9a510e48cdaa628da80a7d7917be4a564563b634cd4b5f5778f20080470556771095d51d1fe0a6028ee7c2f22053f7097ea6b4d778b71d2180fd657208aab97fb736ebf40"}}, 0x58000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x30, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x8000000000100, 0x40000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x5) dup(r5) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x5, 0x7}, {0xa, 0x5}, {0xb, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @datasec={0x0, 0x7, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x1}, {0x5, 0x27a, 0x10001}, {0x1, 0x2, 0x5}, {0x3}, {0x3, 0x80000000, 0xd}, {0x2, 0x100, 0x1}, {0x1, 0x0, 0x5}], "e124"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xc}}]}}, &(0x7f0000000000)=""/148, 0xde, 0x94, 0x0, 0x2, 0x10000, @value=r3}, 0x28) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) kernel console output (not intermixed with test programs): e failed with error -5. [ 73.294051][ T6915] lo speed is unknown, defaulting to 1000 [ 73.373323][ T6936] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 73.411346][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 73.486185][ T6941] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 73.489281][ T6941] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 73.516134][ T6938] hsr_slave_1 (unregistering): left promiscuous mode [ 73.579146][ T6945] overlayfs: missing 'lowerdir' [ 73.660961][ T6955] team0: Port device batadv0 removed [ 73.663428][ T6955] bridge_slave_0: left allmulticast mode [ 73.665058][ T6955] bridge_slave_0: left promiscuous mode [ 73.666645][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.672125][ T6955] bridge_slave_1: left allmulticast mode [ 73.673650][ T6955] bridge_slave_1: left promiscuous mode [ 73.677224][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.681002][ T6955] bond0: (slave bond_slave_0): Releasing backup interface [ 73.686217][ T6955] bond0: (slave bond_slave_1): Releasing backup interface [ 73.692299][ T6955] team0: Port device team_slave_0 removed [ 73.697795][ T6955] team0: Port device team_slave_1 removed [ 73.699658][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.701772][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.704869][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.706778][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.772139][ T6962] netlink: 'syz.0.282': attribute type 2 has an invalid length. [ 73.830510][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 73.835006][ T6964] vlan0: entered allmulticast mode [ 74.057516][ T6974] mmap: syz.1.286 (6974) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.085004][ T6985] /dev/sg0: Can't lookup blockdev [ 74.176902][ T6988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=6988 comm=syz.1.290 [ 74.343218][ T6993] overlayfs: missing 'workdir' [ 74.372415][ T6996] ebt_among: src integrity fail: 100 [ 75.229981][ T7010] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 75.232451][ T7010] netlink: 'syz.1.296': attribute type 4 has an invalid length. [ 75.234638][ T7010] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.296'. [ 75.236033][ T6999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.239705][ T6999] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.247732][ T6999] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.251732][ T6999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.253437][ T6999] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.259465][ T6999] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.262582][ T6999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.264997][ T6999] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.268286][ T6999] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.270394][ T6999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.272122][ T6999] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.275510][ T6999] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.327625][ T7018] xt_policy: output policy not valid in PREROUTING and INPUT [ 75.332560][ T66] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 75.341595][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'. [ 75.343897][ T7020] MTD: Attempt to mount non-MTD device "/dev/md0" [ 75.348566][ T7020] cramfs: wrong magic [ 75.372430][ T39] kauditd_printk_skb: 52 callbacks suppressed [ 75.372498][ T39] audit: type=1400 audit(1733980382.823:478): avc: denied { sqpoll } for pid=7022 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.489340][ T39] audit: type=1400 audit(1733980382.933:479): avc: denied { read append } for pid=7029 comm="syz.0.302" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.542698][ T39] audit: type=1400 audit(1733980383.003:480): avc: denied { append } for pid=7038 comm="syz.0.305" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.641734][ T39] audit: type=1400 audit(1733980383.093:481): avc: denied { bind } for pid=7044 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.815428][ T39] audit: type=1400 audit(1733980383.263:482): avc: denied { mounton } for pid=7065 comm="syz.3.315" path="/76/file0" dev="9p" ino=38535275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.823957][ T7069] syz_tun: entered promiscuous mode [ 75.831957][ T7069] batadv_slave_0: entered promiscuous mode [ 75.837092][ T7069] hsr1: entered allmulticast mode [ 75.838451][ T7069] syz_tun: entered allmulticast mode [ 75.840106][ T7069] batadv_slave_0: entered allmulticast mode [ 75.920175][ T7078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.928094][ T7078] futex_wake_op: syz.0.320 tries to shift op by 32; fix this program [ 75.928422][ T39] audit: type=1400 audit(1733980383.383:483): avc: denied { watch watch_reads } for pid=7077 comm="syz.0.320" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.064634][ T63] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.069454][ T39] audit: type=1400 audit(1733980383.523:484): avc: denied { append } for pid=7084 comm="syz.3.324" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 76.076573][ T39] audit: type=1400 audit(1733980383.533:485): avc: denied { map } for pid=7084 comm="syz.3.324" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 76.084230][ T39] audit: type=1400 audit(1733980383.533:486): avc: denied { write execute } for pid=7084 comm="syz.3.324" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 76.127324][ T64] cfg80211: failed to load regulatory.db [ 76.134842][ T7086] netlink: 'syz.3.324': attribute type 3 has an invalid length. [ 76.234599][ T63] usb 6-1: Using ep0 maxpacket: 16 [ 76.237470][ T63] usb 6-1: config 1 interface 0 altsetting 141 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 76.240293][ T63] usb 6-1: config 1 interface 0 has no altsetting 0 [ 76.243397][ T63] usb 6-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.40 [ 76.246205][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.248396][ T63] usb 6-1: Product: syz [ 76.249494][ T63] usb 6-1: Manufacturer: syz [ 76.250707][ T63] usb 6-1: SerialNumber: syz [ 76.658985][ T63] usbhid 6-1:1.0: can't add hid device: -71 [ 76.660676][ T63] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 76.666447][ T63] usb 6-1: USB disconnect, device number 5 [ 77.021002][ T63] IPVS: starting estimator thread 0... [ 77.104853][ T7118] IPVS: using max 38 ests per chain, 91200 per kthread [ 77.184781][ T7126] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 77.186785][ T7126] __nla_validate_parse: 4 callbacks suppressed [ 77.186794][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 77.278353][ T39] audit: type=1400 audit(1733980384.733:487): avc: denied { ioctl } for pid=7137 comm="syz.1.341" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.286283][ T7140] program syz.2.340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.289639][ T7140] program syz.2.340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.292159][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.339'. [ 77.313229][ T7136] Bluetooth: MGMT ver 1.23 [ 77.314425][ T7136] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 77.325082][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.326789][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.329164][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.447778][ T7159] FAULT_INJECTION: forcing a failure. [ 77.447778][ T7159] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.451250][ T7159] CPU: 3 UID: 0 PID: 7159 Comm: syz.2.348 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 77.454086][ T7159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.456942][ T7159] Call Trace: [ 77.457810][ T7159] [ 77.458593][ T7159] dump_stack_lvl+0x16c/0x1f0 [ 77.460134][ T7159] should_fail_ex+0x497/0x5b0 [ 77.461154][ T7161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7161 comm=syz.3.349 [ 77.462130][ T7159] _copy_from_user+0x2e/0xd0 [ 77.467048][ T7159] copy_msghdr_from_user+0x99/0x160 [ 77.468748][ T7159] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 77.470687][ T7159] ___sys_sendmsg+0xff/0x1e0 [ 77.472160][ T7159] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.473645][ T7159] ? __pfx_lock_release+0x10/0x10 [ 77.474960][ T7159] ? trace_lock_acquire+0x14e/0x1f0 [ 77.476456][ T7159] ? __fget_files+0x206/0x3a0 [ 77.477865][ T7159] __sys_sendmsg+0x16e/0x220 [ 77.479264][ T7159] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.480805][ T7159] do_syscall_64+0xcd/0x250 [ 77.482166][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.483932][ T7159] RIP: 0033:0x7fe5c3985d19 [ 77.485098][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.490022][ T7159] RSP: 002b:00007fe5c47ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.492203][ T7159] RAX: ffffffffffffffda RBX: 00007fe5c3b75fa0 RCX: 00007fe5c3985d19 [ 77.494524][ T7159] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 77.496606][ T7159] RBP: 00007fe5c47ad090 R08: 0000000000000000 R09: 0000000000000000 [ 77.498600][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.500601][ T7159] R13: 0000000000000000 R14: 00007fe5c3b75fa0 R15: 00007ffc361707a8 [ 77.502550][ T7159] [ 77.516964][ T7168] sp0: Synchronizing with TNC [ 77.533564][ T7173] xt_hashlimit: size too large, truncated to 1048576 [ 77.535702][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.587224][ T7166] Process accounting resumed [ 77.759580][ T7194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=7194 comm=syz.3.359 [ 78.068091][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'. [ 78.224071][ T7222] tipc: Started in network mode [ 78.226520][ T7222] tipc: Node identity , cluster identity 4711 [ 78.228780][ T7222] netlink: 104 bytes leftover after parsing attributes in process `syz.2.363'. [ 78.471617][ T7241] FAULT_INJECTION: forcing a failure. [ 78.471617][ T7241] name failslab, interval 1, probability 0, space 0, times 1 [ 78.474754][ T7241] CPU: 3 UID: 0 PID: 7241 Comm: syz.1.364 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 78.477281][ T7241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.480237][ T7241] Call Trace: [ 78.481080][ T7241] [ 78.481826][ T7241] dump_stack_lvl+0x16c/0x1f0 [ 78.483072][ T7241] should_fail_ex+0x497/0x5b0 [ 78.484374][ T7241] ? fs_reclaim_acquire+0xae/0x150 [ 78.485762][ T7241] should_failslab+0xc2/0x120 [ 78.487013][ T7241] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 78.488557][ T7241] ? __alloc_skb+0x2b1/0x380 [ 78.489793][ T7241] __alloc_skb+0x2b1/0x380 [ 78.490979][ T7241] ? __pfx___alloc_skb+0x10/0x10 [ 78.492301][ T7241] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 78.493924][ T7241] netlink_alloc_large_skb+0x69/0x130 [ 78.495295][ T7241] netlink_sendmsg+0x689/0xd70 [ 78.496546][ T7241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.497911][ T7241] ____sys_sendmsg+0xaaf/0xc90 [ 78.499169][ T7241] ? copy_msghdr_from_user+0x10b/0x160 [ 78.500608][ T7241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.501988][ T7241] ___sys_sendmsg+0x135/0x1e0 [ 78.503212][ T7241] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.504576][ T7241] ? __pfx_lock_release+0x10/0x10 [ 78.505864][ T7241] ? trace_lock_acquire+0x14e/0x1f0 [ 78.507211][ T7241] ? __fget_files+0x206/0x3a0 [ 78.508405][ T7241] __sys_sendmsg+0x16e/0x220 [ 78.509583][ T7241] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.510955][ T7241] do_syscall_64+0xcd/0x250 [ 78.512162][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.513703][ T7241] RIP: 0033:0x7f8b8a985d19 [ 78.514891][ T7241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.519904][ T7241] RSP: 002b:00007f8b887f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.522076][ T7241] RAX: ffffffffffffffda RBX: 00007f8b8ab75fa0 RCX: 00007f8b8a985d19 [ 78.524170][ T7241] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 78.526235][ T7241] RBP: 00007f8b887f6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.528309][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.530365][ T7241] R13: 0000000000000000 R14: 00007f8b8ab75fa0 R15: 00007fffde32dc18 [ 78.532461][ T7241] [ 78.624225][ T7255] netlink: 'syz.3.366': attribute type 2 has an invalid length. [ 78.626384][ T7255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.366'. [ 78.979718][ T7215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.981608][ T7215] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 78.986626][ T7215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.988222][ T7215] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 78.991246][ T7215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.992815][ T7215] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 78.996509][ T7215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.998566][ T7215] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 79.127925][ T7282] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 79.216011][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 79.218234][ T7286] netlink: 72 bytes leftover after parsing attributes in process `syz.0.376'. [ 79.282848][ T7293] gretap1: left allmulticast mode [ 79.286179][ T7293] vlan0: left allmulticast mode [ 79.287566][ T7293] hsr1: left allmulticast mode [ 79.288794][ T7293] syz_tun: left allmulticast mode [ 79.290087][ T7293] batadv_slave_0: left allmulticast mode [ 79.391493][ T7308] FAULT_INJECTION: forcing a failure. [ 79.391493][ T7308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.395399][ T7308] CPU: 3 UID: 0 PID: 7308 Comm: syz.2.383 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 79.399001][ T7308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.401810][ T7308] Call Trace: [ 79.402700][ T7308] [ 79.403529][ T7308] dump_stack_lvl+0x16c/0x1f0 [ 79.404779][ T7308] should_fail_ex+0x497/0x5b0 [ 79.406030][ T7308] _copy_from_iter+0x2a1/0x1560 [ 79.407328][ T7308] ? trace_lock_acquire+0x14e/0x1f0 [ 79.408701][ T7308] ? __alloc_skb+0x1fe/0x380 [ 79.409935][ T7308] ? __pfx__copy_from_iter+0x10/0x10 [ 79.411318][ T7308] ? __virt_addr_valid+0x1a4/0x590 [ 79.412671][ T7308] ? __virt_addr_valid+0x5e/0x590 [ 79.414028][ T7308] ? __phys_addr_symbol+0x30/0x80 [ 79.415368][ T7308] ? __check_object_size+0x488/0x710 [ 79.416759][ T7308] netlink_sendmsg+0x813/0xd70 [ 79.418029][ T7308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.419427][ T7308] ____sys_sendmsg+0xaaf/0xc90 [ 79.420682][ T7308] ? copy_msghdr_from_user+0x10b/0x160 [ 79.422090][ T7308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.423509][ T7308] ___sys_sendmsg+0x135/0x1e0 [ 79.424725][ T7308] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.426062][ T7308] ? __pfx_lock_release+0x10/0x10 [ 79.427393][ T7308] ? trace_lock_acquire+0x14e/0x1f0 [ 79.428753][ T7308] ? __fget_files+0x206/0x3a0 [ 79.429985][ T7308] __sys_sendmsg+0x16e/0x220 [ 79.431197][ T7308] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.432553][ T7308] do_syscall_64+0xcd/0x250 [ 79.433762][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.435313][ T7308] RIP: 0033:0x7fe5c3985d19 [ 79.436481][ T7308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.441361][ T7308] RSP: 002b:00007fe5c47ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.443581][ T7308] RAX: ffffffffffffffda RBX: 00007fe5c3b75fa0 RCX: 00007fe5c3985d19 [ 79.445888][ T7308] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 79.448132][ T7308] RBP: 00007fe5c47ad090 R08: 0000000000000000 R09: 0000000000000000 [ 79.450196][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.452273][ T7308] R13: 0000000000000000 R14: 00007fe5c3b75fa0 R15: 00007ffc361707a8 [ 79.454368][ T7308] [ 79.514065][ T7316] mkiss: ax0: crc mode is auto. [ 79.714670][ T63] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 79.817753][ T7335] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 79.823280][ T7335] netlink: 76 bytes leftover after parsing attributes in process `syz.2.393'. [ 79.825720][ T7335] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 79.852509][ T7337] FAULT_INJECTION: forcing a failure. [ 79.852509][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 79.855914][ T7337] CPU: 1 UID: 0 PID: 7337 Comm: syz.2.394 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 79.858572][ T7337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.861306][ T7337] Call Trace: [ 79.862188][ T7337] [ 79.862977][ T7337] dump_stack_lvl+0x16c/0x1f0 [ 79.864256][ T7337] should_fail_ex+0x497/0x5b0 [ 79.865512][ T7337] should_failslab+0xc2/0x120 [ 79.866504][ T63] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.866708][ T7337] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 79.869258][ T63] usb 5-1: config 0 has no interfaces? [ 79.870589][ T7337] ? skb_clone+0x190/0x3f0 [ 79.872099][ T63] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 79.873185][ T7337] skb_clone+0x190/0x3f0 [ 79.875678][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.876675][ T7337] netlink_deliver_tap+0xabd/0xd30 [ 79.879943][ T63] usb 5-1: config 0 descriptor?? [ 79.881242][ T7337] netlink_unicast+0x5e1/0x7f0 [ 79.881262][ T7337] ? __pfx_netlink_unicast+0x10/0x10 [ 79.883884][ T7337] netlink_sendmsg+0x8b8/0xd70 [ 79.885128][ T7337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.886494][ T7337] ____sys_sendmsg+0xaaf/0xc90 [ 79.887719][ T7337] ? copy_msghdr_from_user+0x10b/0x160 [ 79.889107][ T7337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.890501][ T7337] ___sys_sendmsg+0x135/0x1e0 [ 79.891757][ T7337] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.893129][ T7337] ? __pfx_lock_release+0x10/0x10 [ 79.894483][ T7337] ? trace_lock_acquire+0x14e/0x1f0 [ 79.895883][ T7337] ? __fget_files+0x206/0x3a0 [ 79.897095][ T7337] __sys_sendmsg+0x16e/0x220 [ 79.898257][ T7337] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.899569][ T7337] do_syscall_64+0xcd/0x250 [ 79.900771][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.902299][ T7337] RIP: 0033:0x7fe5c3985d19 [ 79.903475][ T7337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.908391][ T7337] RSP: 002b:00007fe5c47ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.910490][ T7337] RAX: ffffffffffffffda RBX: 00007fe5c3b75fa0 RCX: 00007fe5c3985d19 [ 79.912492][ T7337] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 79.914618][ T7337] RBP: 00007fe5c47ad090 R08: 0000000000000000 R09: 0000000000000000 [ 79.916591][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.918541][ T7337] R13: 0000000000000000 R14: 00007fe5c3b75fa0 R15: 00007ffc361707a8 [ 79.920580][ T7337] [ 79.947520][ T7339] netlink: 'syz.2.395': attribute type 27 has an invalid length. [ 79.972043][ T7339] syz_tun: left promiscuous mode [ 79.973384][ T7339] syz_tun: left allmulticast mode [ 79.979013][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.980925][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.021445][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.027055][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.062083][ T7339] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.064584][ T7339] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.066805][ T7339] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.069019][ T7339] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.092297][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.094871][ T63] usb 5-1: string descriptor 0 read error: -71 [ 80.095468][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.097915][ T63] usb 5-1: USB disconnect, device number 14 [ 80.100552][ T7340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.138673][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 80.197014][ T7348] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 80.454710][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.507439][ T7360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.607010][ T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.609810][ T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.612310][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.614951][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.618220][ T7368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4197382 ns). Using initial count to start timer. [ 80.619099][ T7351] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 80.628932][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.841132][ T5997] usb 7-1: USB disconnect, device number 7 [ 80.885342][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 80.885353][ T39] audit: type=1400 audit(1733980388.343:502): avc: denied { create } for pid=7386 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.888265][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 80.892349][ T39] audit: type=1400 audit(1733980388.343:503): avc: denied { write } for pid=7386 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.900143][ T39] audit: type=1400 audit(1733980388.343:504): avc: denied { setopt } for pid=7386 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 81.047533][ T39] audit: type=1326 audit(1733980388.503:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.399" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5c3985d19 code=0x0 [ 81.156070][ T5302] Bluetooth: hci0: command tx timeout [ 81.179147][ T7400] wg2: entered promiscuous mode [ 81.478955][ T39] audit: type=1400 audit(1733980388.933:506): avc: denied { setopt } for pid=7424 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.484017][ T39] audit: type=1400 audit(1733980388.933:507): avc: denied { write } for pid=7424 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.521647][ T7429] netlink: 'syz.1.423': attribute type 7 has an invalid length. [ 81.523729][ T7429] netlink: 'syz.1.423': attribute type 8 has an invalid length. [ 81.605741][ T39] audit: type=1400 audit(1733980389.063:508): avc: denied { setattr } for pid=7434 comm="syz.1.426" name="cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 81.754632][ T6081] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 81.771883][ T7454] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 81.925887][ T6081] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.928243][ T6081] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.930831][ T6081] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.933169][ T6081] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 81.936528][ T6081] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 81.940842][ T6081] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.943306][ T6081] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.945626][ T6081] usb 5-1: Product: syz [ 81.946712][ T6081] usb 5-1: Manufacturer: syz [ 81.950685][ T6081] cdc_wdm 5-1:1.0: skipping garbage [ 81.952067][ T6081] cdc_wdm 5-1:1.0: skipping garbage [ 81.957269][ T6081] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 81.958841][ T6081] cdc_wdm 5-1:1.0: Unknown control protocol [ 81.993153][ T981] libceph: connect (1)[c::]:6789 error -101 [ 81.995333][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 82.035629][ T5997] libceph: connect (1)[b::]:6789 error -101 [ 82.037278][ T5997] libceph: mon0 (1)[b::]:6789 connect error [ 82.158280][ T5997] usb 5-1: USB disconnect, device number 15 [ 82.256805][ T981] libceph: connect (1)[c::]:6789 error -101 [ 82.258470][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 82.304854][ T8] libceph: connect (1)[b::]:6789 error -101 [ 82.306541][ T8] libceph: mon0 (1)[b::]:6789 connect error [ 82.419924][ T7494] netlink: 'syz.3.442': attribute type 4 has an invalid length. [ 82.749562][ T39] audit: type=1400 audit(1733980390.203:509): avc: denied { module_request } for pid=7504 comm="syz.0.445" kmod="crypto-cryptd(__cbc-serpent-avx2)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.766106][ T981] libceph: connect (1)[c::]:6789 error -101 [ 82.767771][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 82.781720][ T7505] syz.0.445: attempt to access beyond end of device [ 82.781720][ T7505] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.797851][ T7473] ceph: No mds server is up or the cluster is laggy [ 82.798123][ T7479] ceph: No mds server is up or the cluster is laggy [ 82.883317][ T7510] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20002 [ 82.926502][ T7519] __nla_validate_parse: 3 callbacks suppressed [ 82.926517][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.448'. [ 83.006154][ T7526] openvswitch: netlink: IP tunnel dst address not specified [ 83.110796][ T7534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'. [ 83.113170][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.115884][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.117731][ T7534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.143946][ T7539] input: syz0 as /devices/virtual/input/input6 [ 83.152535][ T39] audit: type=1400 audit(1733980390.603:510): avc: denied { ioctl } for pid=5336 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2850 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.190880][ T39] audit: type=1400 audit(1733980390.643:511): avc: denied { map } for pid=7546 comm="syz.1.458" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.230680][ T7553] FAULT_INJECTION: forcing a failure. [ 83.230680][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 83.234315][ T7553] CPU: 2 UID: 0 PID: 7553 Comm: syz.1.460 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 83.237014][ T7553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.239847][ T7553] Call Trace: [ 83.240791][ T7553] [ 83.241615][ T7553] dump_stack_lvl+0x16c/0x1f0 [ 83.242854][ T7553] should_fail_ex+0x497/0x5b0 [ 83.244217][ T7553] should_failslab+0xc2/0x120 [ 83.245521][ T7553] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 83.246983][ T7553] ? skb_clone+0x190/0x3f0 [ 83.248189][ T7553] skb_clone+0x190/0x3f0 [ 83.249289][ T7553] netlink_deliver_tap+0xabd/0xd30 [ 83.250616][ T7553] netlink_unicast+0x6b4/0x7f0 [ 83.251874][ T7553] ? __pfx_netlink_unicast+0x10/0x10 [ 83.252161][ T7551] overlay: filesystem on ./file0 is read-only [ 83.253259][ T7553] ? genl_rcv_msg+0x4bd/0x800 [ 83.256776][ T7553] netlink_ack+0x6ac/0xb80 [ 83.257972][ T7553] netlink_rcv_skb+0x348/0x440 [ 83.259206][ T7553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.260484][ T7553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.261820][ T7553] ? down_read+0xc9/0x330 [ 83.262933][ T7553] ? __pfx_down_read+0x10/0x10 [ 83.264183][ T7553] ? netlink_deliver_tap+0x1ae/0xd30 [ 83.265536][ T7553] genl_rcv+0x28/0x40 [ 83.266524][ T7553] netlink_unicast+0x53c/0x7f0 [ 83.267724][ T7553] ? __pfx_netlink_unicast+0x10/0x10 [ 83.269081][ T7553] netlink_sendmsg+0x8b8/0xd70 [ 83.270337][ T7553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.271702][ T7553] ____sys_sendmsg+0xaaf/0xc90 [ 83.272970][ T7553] ? copy_msghdr_from_user+0x10b/0x160 [ 83.274445][ T7553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.275770][ T7553] ___sys_sendmsg+0x135/0x1e0 [ 83.276967][ T7553] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.278306][ T7553] ? __pfx_lock_release+0x10/0x10 [ 83.279627][ T7553] ? trace_lock_acquire+0x14e/0x1f0 [ 83.280976][ T7553] ? __fget_files+0x206/0x3a0 [ 83.282217][ T7553] __sys_sendmsg+0x16e/0x220 [ 83.283487][ T7553] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.284802][ T7553] do_syscall_64+0xcd/0x250 [ 83.285972][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.287509][ T7553] RIP: 0033:0x7f8b8a985d19 [ 83.288685][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.293520][ T7553] RSP: 002b:00007f8b887f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.295753][ T7553] RAX: ffffffffffffffda RBX: 00007f8b8ab75fa0 RCX: 00007f8b8a985d19 [ 83.297782][ T7553] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 83.299740][ T7553] RBP: 00007f8b887f6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.301793][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.303801][ T7553] R13: 0000000000000000 R14: 00007f8b8ab75fa0 R15: 00007fffde32dc18 [ 83.305902][ T7553] [ 83.411315][ T7578] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.466'. [ 83.414036][ T7570] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.466'. [ 83.513337][ T7589] xt_bpf: check failed: parse error [ 83.631227][ T7600] tmpfs: Bad value for 'mpol' [ 83.632545][ T7601] CUSE: info not properly terminated [ 83.774800][ T64] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.787860][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 83.904790][ T64] usb 6-1: device descriptor read/64, error -71 [ 83.950972][ T7604] process 'syz.3.476' launched '/dev/fd/3' with NULL argv: empty string added [ 83.988019][ T7606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.990224][ T7606] IPv6: NLM_F_CREATE should be set when creating new route [ 83.992114][ T7606] IPv6: NLM_F_CREATE should be set when creating new route [ 83.994072][ T7606] IPv6: NLM_F_CREATE should be set when creating new route [ 84.145055][ T64] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.179005][ T7618] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.483'. [ 84.274712][ T64] usb 6-1: device descriptor read/64, error -71 [ 84.396342][ T64] usb usb6-port1: attempt power cycle [ 84.488631][ T7649] openvswitch: netlink: Unknown nsh attribute 0 [ 84.490298][ T7649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.714071][ T7660] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 84.745798][ T64] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 84.771453][ T64] usb 6-1: device descriptor read/8, error -71 [ 85.004805][ T64] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 85.035332][ T64] usb 6-1: device descriptor read/8, error -71 [ 85.140146][ T7684] macsec1: entered promiscuous mode [ 85.141723][ T7684] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 85.143592][ T7684] macsec1: entered allmulticast mode [ 85.145201][ T7684] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 85.154995][ T64] usb usb6-port1: unable to enumerate USB device [ 85.161955][ T7682] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 85.314128][ T7694] autofs: Unknown parameter '0x0000000000000000fd' [ 85.460574][ T7702] input: syz1 as /devices/virtual/input/input7 [ 85.602532][ T7720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.822099][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 85.918386][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 85.918397][ T39] audit: type=1400 audit(1733980393.373:545): avc: denied { getopt } for pid=7764 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.987992][ T39] audit: type=1400 audit(1733980393.443:546): avc: denied { read } for pid=7781 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.071637][ T7800] vcan0 speed is unknown, defaulting to 1000 [ 86.138350][ T7811] xt_hashlimit: max too large, truncated to 1048576 [ 86.143499][ T7800] lo speed is unknown, defaulting to 1000 [ 86.243951][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 86.244487][ T7826] openvswitch: netlink: IP tunnel dst address not specified [ 86.255941][ T39] audit: type=1400 audit(1733980393.713:547): avc: denied { mounton } for pid=7824 comm="syz.0.543" path="/117/file0" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 86.256782][ T7826] syz.0.543: attempt to access beyond end of device [ 86.256782][ T7826] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 86.266769][ T7826] efs: cannot read volume header [ 86.312071][ T7835] input: syz0 as /devices/virtual/input/input8 [ 86.320698][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 86.325904][ T7832] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 86.374228][ T39] audit: type=1400 audit(1733980393.823:548): avc: denied { name_bind } for pid=7842 comm="syz.0.549" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.435549][ T7847] tipc: Started in network mode [ 86.436906][ T7847] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 86.439552][ T7847] tipc: Enabled bearer , priority 10 [ 86.460545][ T39] audit: type=1400 audit(1733980393.913:549): avc: denied { read } for pid=7842 comm="syz.0.549" path="socket:[20907]" dev="sockfs" ino=20907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.502900][ T39] audit: type=1400 audit(1733980393.953:550): avc: denied { watch } for pid=7855 comm="syz.3.555" path="/proc/455" dev="proc" ino=21721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 86.509555][ T39] audit: type=1400 audit(1733980393.953:551): avc: denied { watch_reads } for pid=7855 comm="syz.3.555" path="/proc/455" dev="proc" ino=21721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 86.558653][ T7870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=7870 comm=syz.3.558 [ 86.561970][ T7870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7870 comm=syz.3.558 [ 86.566685][ T39] audit: type=1400 audit(1733980394.023:552): avc: denied { read } for pid=7869 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.567129][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 86.573873][ T7870] bridge_slave_1: left allmulticast mode [ 86.575882][ T7870] bridge_slave_1: left promiscuous mode [ 86.577654][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.583310][ T7870] bridge_slave_0: left allmulticast mode [ 86.585862][ T7870] bridge_slave_0: left promiscuous mode [ 86.587762][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.649881][ T7877] erspan0: entered promiscuous mode [ 86.652213][ T7877] batadv_slave_1: entered promiscuous mode [ 86.654482][ T7877] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 86.657425][ T7877] Cannot create hsr debugfs directory [ 86.662935][ T7879] vcan0 speed is unknown, defaulting to 1000 [ 86.702474][ T7879] lo speed is unknown, defaulting to 1000 [ 86.739543][ T7886] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 86.764773][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 86.767852][ T7896] tmpfs: Unknown parameter '' [ 86.771875][ T7897] tmpfs: Unknown parameter '' [ 86.831580][ T39] audit: type=1400 audit(1733980394.283:553): avc: denied { write } for pid=7903 comm="syz.3.567" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.837295][ T39] audit: type=1400 audit(1733980394.283:554): avc: denied { watch } for pid=7903 comm="syz.3.567" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.874825][ T7904] vcan0 speed is unknown, defaulting to 1000 [ 86.908994][ T7913] gfs2: not a GFS2 filesystem [ 86.910075][ T7904] lo speed is unknown, defaulting to 1000 [ 86.914653][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 86.917397][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 86.920567][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.923129][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.925879][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.929240][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.931969][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.008470][ T7924] syz.3.571: attempt to access beyond end of device [ 87.008470][ T7924] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 87.011820][ T7924] EXT4-fs (nbd3): unable to read superblock [ 87.142042][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 87.143397][ T25] usbtmc 5-1:16.0: can't read capabilities [ 87.249299][ T7930] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 87.436703][ T5997] tipc: Node number set to 15444650 [ 87.703962][ T7941] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 87.717016][ T7941] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 87.836693][ T7961] ufs: You didn't specify the type of your ufs filesystem [ 87.836693][ T7961] [ 87.836693][ T7961] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 87.836693][ T7961] [ 87.836693][ T7961] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 87.845655][ T7961] ufs: failed to set blocksize [ 87.870810][ T7963] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 87.928773][ T7969] pim6reg: entered allmulticast mode [ 88.330907][ T7982] __nla_validate_parse: 2 callbacks suppressed [ 88.330920][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.591'. [ 88.370635][ T7985] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.517728][ T7987] kvm: kvm [7986]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 88.922287][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'. [ 88.927715][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'. [ 88.930646][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'. [ 88.933639][ T8014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 89.138966][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.605'. [ 89.476124][ T8047] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 89.478125][ T8044] overlay: Unknown parameter 'measure' [ 89.480355][ T8047] netlink: 'syz.3.611': attribute type 33 has an invalid length. [ 89.482422][ T8047] netlink: 152 bytes leftover after parsing attributes in process `syz.3.611'. [ 89.538203][ T25] usb 5-1: USB disconnect, device number 16 [ 89.613198][ T8064] netlink: 256 bytes leftover after parsing attributes in process `syz.1.617'. [ 89.618510][ T8064] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 89.784622][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 90.616638][ T8095] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 90.928814][ T39] kauditd_printk_skb: 167 callbacks suppressed [ 90.928825][ T39] audit: type=1400 audit(1733980398.383:722): avc: denied { mounton } for pid=8099 comm="syz.0.626" path="/125/file0" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.938863][ T8101] /dev/loop0: Can't open blockdev [ 90.941462][ T39] audit: type=1400 audit(1733980398.393:723): avc: denied { create } for pid=8102 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.959245][ T39] audit: type=1400 audit(1733980398.403:724): avc: denied { create } for pid=8102 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.964289][ T39] audit: type=1400 audit(1733980398.413:725): avc: denied { ioctl } for pid=8099 comm="syz.0.626" path="socket:[23220]" dev="sockfs" ino=23220 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.984802][ T39] audit: type=1400 audit(1733980398.433:726): avc: denied { create } for pid=8099 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.989848][ T39] audit: type=1400 audit(1733980398.433:727): avc: denied { write } for pid=8099 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.998271][ T39] audit: type=1400 audit(1733980398.433:728): avc: denied { read } for pid=8099 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.004697][ T39] audit: type=1400 audit(1733980398.433:729): avc: denied { create } for pid=8102 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.010035][ T39] audit: type=1400 audit(1733980398.433:730): avc: denied { read } for pid=8099 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.015611][ T39] audit: type=1400 audit(1733980398.433:731): avc: denied { write } for pid=8102 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.026644][ T8105] netlink: 'syz.1.627': attribute type 10 has an invalid length. [ 91.044253][ T8105] team0: Device ipvlan1 failed to register rx_handler [ 91.135584][ T8107] netlink: 64 bytes leftover after parsing attributes in process `syz.2.629'. [ 91.486216][ T5997] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 91.669561][ T8100] syz.0.626 (8100) used greatest stack depth: 21120 bytes left [ 91.689156][ T5997] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.692860][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.706359][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 91.709455][ T5997] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.713610][ T5997] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.734349][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.758623][ T5997] usb 6-1: config 0 descriptor?? [ 92.193824][ T5997] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 92.198230][ T5997] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 92.223176][ T5997] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 92.352739][ T8134] netlink: 'syz.3.637': attribute type 7 has an invalid length. [ 92.355383][ T8134] netlink: 'syz.3.637': attribute type 8 has an invalid length. [ 92.476402][ T6081] usb 6-1: USB disconnect, device number 10 [ 93.202265][ T8159] netlink: 'syz.2.646': attribute type 4 has an invalid length. [ 93.517080][ T8177] program syz.2.651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.320090][ T8187] bridge0: port 2(bridge_slave_1) entered learning state [ 94.647848][ T8205] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.656' sets config #1 [ 94.972444][ T8220] vcan0 speed is unknown, defaulting to 1000 [ 95.039069][ T8220] lo speed is unknown, defaulting to 1000 [ 95.084101][ T8218] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.236018][ T8234] __nla_validate_parse: 3 callbacks suppressed [ 95.236029][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'. [ 95.275864][ T8239] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 95.277799][ T8239] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.292259][ T8239] vhci_hcd vhci_hcd.0: Device attached [ 95.304202][ T8241] usbip_core: unknown command [ 95.306117][ T8241] vhci_hcd: unknown pdu 0 [ 95.307303][ T8241] usbip_core: unknown command [ 95.313870][ T1176] vhci_hcd: stop threads [ 95.315908][ T1176] vhci_hcd: release socket [ 95.317187][ T1176] vhci_hcd: disconnect device [ 95.442169][ T8249] overlayfs: failed to resolve './file1': -2 [ 95.939799][ T39] kauditd_printk_skb: 1058 callbacks suppressed [ 95.939811][ T39] audit: type=1400 audit(1733980403.393:1790): avc: denied { prog_load } for pid=8270 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.955311][ T39] audit: type=1400 audit(1733980403.393:1791): avc: denied { bpf } for pid=8270 comm="syz.2.672" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.964573][ T39] audit: type=1400 audit(1733980403.393:1792): avc: denied { perfmon } for pid=8270 comm="syz.2.672" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.969784][ T39] audit: type=1400 audit(1733980403.393:1793): avc: denied { perfmon } for pid=8270 comm="syz.2.672" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.985674][ T39] audit: type=1400 audit(1733980403.393:1794): avc: denied { perfmon } for pid=8270 comm="syz.2.672" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.991110][ T39] audit: type=1400 audit(1733980403.393:1795): avc: denied { perfmon } for pid=8270 comm="syz.2.672" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.006592][ T39] audit: type=1400 audit(1733980403.393:1796): avc: denied { perfmon } for pid=8270 comm="syz.2.672" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.011970][ T39] audit: type=1400 audit(1733980403.403:1797): avc: denied { bpf } for pid=8270 comm="syz.2.672" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.019270][ T39] audit: type=1400 audit(1733980403.403:1798): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 96.026870][ T39] audit: type=1400 audit(1733980403.403:1799): avc: denied { bpf } for pid=8270 comm="syz.2.672" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.066666][ T8285] netlink: 'syz.1.676': attribute type 39 has an invalid length. [ 96.232047][ T8291] binder: 8290:8291 ioctl c0306201 20000680 returned -22 [ 96.336938][ T8293] overlayfs: conflicting options: userxattr,redirect_dir=on [ 97.229934][ T6081] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 97.400497][ T6081] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 97.403184][ T6081] usb 5-1: can't read configurations, error -22 [ 97.525227][ T6081] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 97.620741][ T8321] SELinux: policydb version 1402900228 does not match my version range 15-33 [ 97.625926][ T8321] SELinux: failed to load policy [ 97.686996][ T6081] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 97.689388][ T6081] usb 5-1: can't read configurations, error -22 [ 97.697071][ T6081] usb usb5-port1: attempt power cycle [ 97.698606][ T8322] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 97.702813][ T8322] batman_adv: batadv0: Adding interface: team0 [ 97.704634][ T8322] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.711307][ T8322] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 97.718166][ T8322] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 97.720203][ T8322] netlink: 2 bytes leftover after parsing attributes in process `syz.2.688'. [ 97.723012][ T8322] team0: entered promiscuous mode [ 97.724381][ T8322] team_slave_0: entered promiscuous mode [ 97.726308][ T8322] team_slave_1: entered promiscuous mode [ 97.728129][ T8322] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.729933][ T8322] batman_adv: batadv0: Interface activated: team0 [ 97.731651][ T8322] batman_adv: batadv0: Interface deactivated: team0 [ 97.733498][ T8322] batman_adv: batadv0: Removing interface: team0 [ 97.745195][ T8322] bridge0: port 3(team0) entered blocking state [ 97.746948][ T8322] bridge0: port 3(team0) entered disabled state [ 97.748661][ T8322] team0: entered allmulticast mode [ 97.750043][ T8322] team_slave_0: entered allmulticast mode [ 97.751556][ T8322] team_slave_1: entered allmulticast mode [ 97.884616][ T8326] openvswitch: netlink: IP tunnel dst address not specified [ 98.030743][ T6081] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 98.093705][ T6081] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 98.095861][ T6081] usb 5-1: can't read configurations, error -22 [ 98.221030][ T6081] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 98.267088][ T8343] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 98.269553][ T6081] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 98.271758][ T6081] usb 5-1: can't read configurations, error -22 [ 98.273646][ T6081] usb usb5-port1: unable to enumerate USB device [ 98.390730][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.697'. [ 98.393578][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 98.432465][ C2] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.514014][ T8352] sctp: [Deprecated]: syz.1.698 (pid 8352) Use of int in max_burst socket option deprecated. [ 98.514014][ T8352] Use struct sctp_assoc_value instead [ 98.529340][ T8352] syz.1.698: vmalloc error: size 3383414784, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.533657][ T8352] CPU: 3 UID: 0 PID: 8352 Comm: syz.1.698 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 98.536415][ T8352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.539210][ T8352] Call Trace: [ 98.540106][ T8352] [ 98.540914][ T8352] dump_stack_lvl+0x16c/0x1f0 [ 98.542165][ T8352] warn_alloc+0x24d/0x3a0 [ 98.543341][ T8352] ? __pfx_warn_alloc+0x10/0x10 [ 98.544633][ T8352] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 98.546157][ T8352] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 98.547592][ T8352] ? kasan_save_stack+0x42/0x60 [ 98.548876][ T8352] ? kasan_save_stack+0x33/0x60 [ 98.550161][ T8352] ? kasan_save_track+0x14/0x30 [ 98.551479][ T8352] ? __kasan_kmalloc+0xaa/0xb0 [ 98.552753][ T8352] ? vb2_vmalloc_alloc+0xe2/0x3d0 [ 98.554129][ T8352] ? vb2_core_create_bufs+0x55d/0xab0 [ 98.555556][ T8352] ? vb2_create_bufs+0x566/0x780 [ 98.556873][ T8352] ? v4l_create_bufs+0x156/0x270 [ 98.558395][ T8352] __vmalloc_node_range_noprof+0x10df/0x1530 [ 98.560007][ T8352] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 98.561386][ T8352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.563071][ T8352] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 98.564451][ T8352] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 98.565884][ T8352] vmalloc_user_noprof+0x6b/0x90 [ 98.567209][ T8352] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 98.568537][ T8352] vb2_vmalloc_alloc+0x11e/0x3d0 [ 98.569845][ T8352] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 98.571303][ T8352] __vb2_queue_alloc+0x896/0x1230 [ 98.572648][ T8352] vb2_core_create_bufs+0x55d/0xab0 [ 98.574099][ T8352] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 98.575844][ T8352] ? rcu_is_watching+0x12/0xc0 [ 98.577264][ T8352] ? trace_contention_end+0xee/0x140 [ 98.578751][ T8352] vb2_create_bufs+0x566/0x780 [ 98.580110][ T8352] ? __pfx_vb2_create_bufs+0x10/0x10 [ 98.581542][ T8352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.583123][ T8352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.584706][ T8352] v4l_create_bufs+0x156/0x270 [ 98.585992][ T8352] __video_do_ioctl+0xaf0/0xf00 [ 98.587319][ T8352] ? __pfx___video_do_ioctl+0x10/0x10 [ 98.588756][ T8352] ? __might_fault+0xe3/0x190 [ 98.590026][ T8352] video_usercopy+0x4d2/0x1620 [ 98.591338][ T8352] ? __pfx___video_do_ioctl+0x10/0x10 [ 98.592775][ T8352] ? __pfx_video_usercopy+0x10/0x10 [ 98.594224][ T8352] v4l2_ioctl+0x1ba/0x250 [ 98.595379][ T8352] ? __pfx_v4l2_ioctl+0x10/0x10 [ 98.596688][ T8352] __x64_sys_ioctl+0x190/0x200 [ 98.597977][ T8352] do_syscall_64+0xcd/0x250 [ 98.599199][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.600781][ T8352] RIP: 0033:0x7f8b8a985d19 [ 98.601975][ T8352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.607217][ T8352] RSP: 002b:00007f8b887f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.609483][ T8352] RAX: ffffffffffffffda RBX: 00007f8b8ab75fa0 RCX: 00007f8b8a985d19 [ 98.611631][ T8352] RDX: 00000000200004c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 98.613779][ T8352] RBP: 00007f8b8aa01a20 R08: 0000000000000000 R09: 0000000000000000 [ 98.615901][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.617997][ T8352] R13: 0000000000000000 R14: 00007f8b8ab75fa0 R15: 00007fffde32dc18 [ 98.620070][ T8352] [ 98.620976][ C3] vkms_vblank_simulate: vblank timer overrun [ 98.622851][ T8352] Mem-Info: [ 98.623770][ T8352] active_anon:6262 inactive_anon:15236 isolated_anon:0 [ 98.623770][ T8352] active_file:22037 inactive_file:27449 isolated_file:0 [ 98.623770][ T8352] unevictable:1767 dirty:90 writeback:0 [ 98.623770][ T8352] slab_reclaimable:7106 slab_unreclaimable:72278 [ 98.623770][ T8352] mapped:24179 shmem:17736 pagetables:888 [ 98.623770][ T8352] sec_pagetables:298 bounce:0 [ 98.623770][ T8352] kernel_misc_reclaimable:0 [ 98.623770][ T8352] free:459209 free_pcp:7140 free_cma:0 [ 98.635612][ T8352] Node 0 active_anon:25040kB inactive_anon:60944kB active_file:88100kB inactive_file:109712kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96668kB dirty:360kB writeback:0kB shmem:67408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12720kB pagetables:3552kB sec_pagetables:1192kB all_unreclaimable? no [ 98.644184][ T8352] Node 1 active_anon:8kB inactive_anon:0kB active_file:48kB inactive_file:84kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 98.656534][ T8352] Node 0 DMA free:15028kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:268kB local_pcp:116kB free_cma:0kB [ 98.664226][ T8352] lowmem_reserve[]: 0 1212 0 0 0 [ 98.665558][ T8352] Node 0 DMA32 free:253952kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:25164kB inactive_anon:60944kB active_file:88100kB inactive_file:109712kB unevictable:3536kB writepending:360kB present:2080628kB managed:1269912kB mlocked:0kB bounce:0kB free_pcp:8440kB local_pcp:1352kB free_cma:0kB [ 98.674404][ T8352] lowmem_reserve[]: 0 0 0 0 0 [ 98.675743][ T8352] Node 1 Normal free:1567856kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:48kB inactive_file:84kB unevictable:3532kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:19940kB local_pcp:876kB free_cma:0kB [ 98.683287][ T8352] lowmem_reserve[]: 0 0 0 0 0 [ 98.684597][ T8352] Node 0 DMA: 15*4kB (U) 13*8kB (U) 14*16kB (U) 14*32kB (U) 12*64kB (U) 7*128kB (U) 11*256kB (U) 9*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 15044kB [ 98.690221][ T8352] Node 0 DMA32: 6*4kB (E) 215*8kB (UE) 310*16kB (UE) 167*32kB (UME) 295*64kB (UME) 188*128kB (UME) 138*256kB (UME) 117*512kB (UME) 89*1024kB (UME) 2*2048kB (UM) 2*4096kB (UM) = 253648kB [ 98.695104][ T8352] Node 1 Normal: 119*4kB (UME) 175*8kB (UME) 180*16kB (UME) 293*32kB (UME) 201*64kB (UME) 160*128kB (UE) 149*256kB (UE) 139*512kB (UME) 122*1024kB (UE) 6*2048kB (UME) 311*4096kB (M) = 1567860kB [ 98.700187][ T8352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.702650][ T8352] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.705127][ T8352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.707925][ T8352] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.710315][ T8352] 67222 total pagecache pages [ 98.711571][ T8352] 0 pages in swap cache [ 98.712646][ T8352] Free swap = 124252kB [ 98.713787][ T8352] Total swap = 124996kB [ 98.714885][ T8352] 1048443 pages RAM [ 98.719823][ T8352] 0 pages HighMem/MovableOnly [ 98.723275][ T8352] 281644 pages reserved [ 98.724421][ T8352] 0 pages cma reserved [ 99.125630][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 99.367898][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 99.370220][ T8377] bond0: option ad_select: unable to set because the bond device is up [ 99.455373][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 99.457763][ T8381] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 99.832157][ T8389] ceph: Path missing in source [ 99.947474][ T8391] program syz.0.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.950411][ T8391] ata1.00: invalid command format 0 [ 99.961945][ T8391] netlink: 732 bytes leftover after parsing attributes in process `syz.0.710'. [ 100.543977][ T8410] xt_hashlimit: size too large, truncated to 1048576 [ 100.741295][ T39] kauditd_printk_skb: 740 callbacks suppressed [ 100.741306][ T39] audit: type=1400 audit(1733980402.409:2540): avc: denied { create } for pid=8423 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.755970][ T39] audit: type=1400 audit(1733980402.420:2541): avc: denied { create } for pid=8423 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.773439][ T39] audit: type=1400 audit(1733980402.430:2542): avc: denied { create } for pid=8423 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.778740][ T39] audit: type=1400 audit(1733980402.430:2543): avc: denied { write } for pid=8423 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.784014][ T39] audit: type=1400 audit(1733980402.430:2544): avc: denied { read } for pid=8423 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.789080][ T39] audit: type=1400 audit(1733980402.430:2545): avc: denied { read } for pid=8423 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.794308][ T39] audit: type=1400 audit(1733980402.430:2546): avc: denied { ioctl } for pid=8423 comm="syz.3.718" path="socket:[25641]" dev="sockfs" ino=25641 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.800779][ T39] audit: type=1400 audit(1733980402.441:2547): avc: denied { write } for pid=8423 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.806141][ T39] audit: type=1400 audit(1733980402.451:2548): avc: denied { read write } for pid=5936 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.812260][ T39] audit: type=1400 audit(1733980402.451:2549): avc: denied { read write open } for pid=5936 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.319710][ T8437] 9pnet_fd: Insufficient options for proto=fd [ 101.328326][ T8437] vivid-000: ================= START STATUS ================= [ 101.330417][ T8437] vivid-000: Test Pattern: 75% Colorbar [ 101.332492][ T8437] vivid-000: Fill Percentage of Frame: 100 [ 101.334130][ T8437] vivid-000: Horizontal Movement: Move Right Fast [ 101.335781][ T8437] vivid-000: Vertical Movement: No Movement [ 101.337413][ T8437] vivid-000: OSD Text Mode: All [ 101.338751][ T8437] vivid-000: Show Border: false [ 101.340001][ T8437] vivid-000: Show Square: false [ 101.341212][ T8437] vivid-000: Sensor Flipped Horizontally: false [ 101.342837][ T8437] vivid-000: Sensor Flipped Vertically: true [ 101.344446][ T8437] vivid-000: Insert SAV Code in Image: false [ 101.346029][ T8437] vivid-000: Insert EAV Code in Image: false [ 101.347600][ T8437] vivid-000: Insert Video Guard Band: false [ 101.349118][ T8437] vivid-000: Reduced Framerate: false [ 101.350448][ T8437] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 101.352340][ T8437] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 101.354357][ T8437] vivid-000: Enable Capture Cropping: true [ 101.355886][ T8437] vivid-000: Enable Capture Composing: true [ 101.357602][ T8437] vivid-000: Enable Capture Scaler: true [ 101.359214][ T8437] vivid-000: Timestamp Source: End of Frame [ 101.360722][ T8437] vivid-000: Colorspace: sRGB [ 101.361937][ T8437] vivid-000: Transfer Function: Default [ 101.363374][ T8437] vivid-000: Y'CbCr Encoding: Default [ 101.364841][ T8437] vivid-000: HSV Encoding: Hue 0-179 [ 101.367723][ T8437] vivid-000: Quantization: Default [ 101.369061][ T8437] vivid-000: Apply Alpha To Red Only: false [ 101.370598][ T8437] vivid-000: Standard Aspect Ratio: 4x3 [ 101.372004][ T8437] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 101.374093][ T8437] vivid-000: DV Timings: 640x480p59 inactive [ 101.375791][ T8437] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 101.377719][ T8437] vivid-000: Maximum EDID Blocks: 2 [ 101.379123][ T8437] vivid-000: Limited RGB Range (16-235): false [ 101.380763][ T8437] vivid-000: Rx RGB Quantization Range: Automatic [ 101.382407][ T8437] vivid-000: Power Present: 0x00000001 [ 101.384098][ T8437] tpg source WxH: 320x180 (Y'CbCr) [ 101.385625][ T8437] tpg field: 1 [ 101.386507][ T8437] tpg crop: 320x180@0x0 [ 101.387674][ T8437] tpg compose: 320x180@0x0 [ 101.388953][ T8437] tpg colorspace: 8 [ 101.390045][ T8437] tpg transfer function: 0/0 [ 101.391297][ T8437] tpg Y'CbCr encoding: 0/0 [ 101.392476][ T8437] tpg quantization: 0/0 [ 101.394429][ T8437] tpg RGB range: 0/2 [ 101.395576][ T8437] vivid-000: ================== END STATUS ================== [ 101.611364][ T8441] netlink: 200 bytes leftover after parsing attributes in process `syz.3.725'. [ 101.707323][ T5997] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 101.890787][ T5997] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 101.892999][ T5997] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 101.897593][ T5997] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 101.899998][ T5997] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 101.902908][ T5997] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 101.905867][ T5997] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 55528, setting to 8 [ 101.927892][ T5997] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 101.930132][ T5997] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 101.931994][ T5997] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 101.934284][ T5997] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 101.937300][ T5997] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 101.940057][ T5997] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 55528, setting to 8 [ 101.950110][ T5997] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 101.952293][ T5997] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 101.954157][ T5997] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 101.956496][ T5997] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 101.959354][ T5997] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 101.962003][ T5997] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 55528, setting to 8 [ 101.989708][ T5997] usb 5-1: string descriptor 0 read error: -22 [ 101.991357][ T5997] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.996779][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.016701][ T5997] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 102.248135][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.259864][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.267927][ T8439] ebt_among: dst integrity fail: 200 [ 102.290709][ T6081] usb 5-1: USB disconnect, device number 21 [ 102.682300][ T8480] openvswitch: netlink: Missing valid actions attribute. [ 102.684488][ T8480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.921496][ T8484] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.930682][ T8487] overlay: Unknown parameter 'dont_measure' [ 102.936433][ T8486] overlay: Unknown parameter 'dont_measure' [ 103.302438][ T8498] netlink: 44 bytes leftover after parsing attributes in process `syz.0.742'. [ 103.583179][ T8508] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 103.794829][ T8512] netlink: 'syz.0.747': attribute type 2 has an invalid length. [ 103.982599][ T8522] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.991030][ T8522] netlink: 72 bytes leftover after parsing attributes in process `syz.0.750'. [ 104.640060][ T8548] vcan0 speed is unknown, defaulting to 1000 [ 104.679262][ T8548] lo speed is unknown, defaulting to 1000 [ 105.319757][ T8569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.418053][ T8569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.489558][ T8569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.544600][ T39] kauditd_printk_skb: 873 callbacks suppressed [ 105.544613][ T39] audit: type=1400 audit(1733980407.448:3423): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.553328][ T39] audit: type=1400 audit(1733980407.448:3424): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.562767][ T39] audit: type=1400 audit(1733980407.448:3425): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.595194][ T39] audit: type=1400 audit(1733980407.511:3426): avc: denied { create } for pid=8571 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.600345][ T39] audit: type=1400 audit(1733980407.511:3427): avc: denied { getopt } for pid=8571 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.614717][ T39] audit: type=1400 audit(1733980407.511:3428): avc: denied { sqpoll } for pid=8571 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 105.623519][ T39] audit: type=1400 audit(1733980407.522:3429): avc: denied { create } for pid=8571 comm="syz.3.765" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.636982][ T39] audit: type=1400 audit(1733980407.522:3430): avc: denied { map } for pid=8571 comm="syz.3.765" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.643036][ T39] audit: type=1400 audit(1733980407.522:3431): avc: denied { read write } for pid=8571 comm="syz.3.765" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.649912][ T39] audit: type=1400 audit(1733980407.522:3432): avc: denied { map } for pid=8571 comm="syz.3.765" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.661049][ T8569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.732362][ T8569] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.744551][ T8569] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.756475][ T8569] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.771675][ T8569] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.327501][ T8592] netem: incorrect gi model size [ 106.329138][ T8592] netem: change failed [ 106.424976][ T8599] overlayfs: empty lowerdir [ 106.441917][ T8597] tmpfs: Unknown parameter 'mpolreCr' [ 106.572062][ T8608] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 106.576195][ T8605] IPVS: stopping master sync thread 8608 ... [ 106.722252][ T8620] xt_hashlimit: size too large, truncated to 1048576 [ 107.702724][ T8640] netlink: 'syz.2.786': attribute type 2 has an invalid length. [ 109.164074][ T8686] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 109.165775][ T8686] PKCS7: Only support pkcs7_signedData type [ 109.191188][ T8686] netlink: 'syz.1.794': attribute type 32 has an invalid length. [ 109.423877][ T8691] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.532133][ T8686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.794'. [ 109.929824][ T8712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.801'. [ 110.331413][ T39] kauditd_printk_skb: 967 callbacks suppressed [ 110.331425][ T39] audit: type=1400 audit(1733980412.477:4400): avc: denied { read } for pid=8723 comm="syz.0.807" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.338763][ T39] audit: type=1400 audit(1733980412.477:4401): avc: denied { read } for pid=8718 comm="syz.2.805" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.352606][ T39] audit: type=1400 audit(1733980412.487:4402): avc: denied { read open } for pid=8718 comm="syz.2.805" path="net:[4026532890]" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.375171][ T39] audit: type=1400 audit(1733980412.487:4403): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.386164][ T39] audit: type=1400 audit(1733980412.487:4404): avc: denied { read write open } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.392421][ T39] audit: type=1400 audit(1733980412.487:4405): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.414179][ T39] audit: type=1400 audit(1733980412.498:4406): avc: denied { create } for pid=8718 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.429390][ T39] audit: type=1400 audit(1733980412.508:4407): avc: denied { read open } for pid=8723 comm="syz.0.807" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.437467][ T39] audit: type=1400 audit(1733980412.508:4408): avc: denied { ioctl } for pid=8723 comm="syz.0.807" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.448457][ T39] audit: type=1400 audit(1733980412.592:4409): avc: denied { read write } for pid=8723 comm="syz.0.807" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.516046][ T8731] ntfs3(sr0): Primary boot signature is not NTFS. [ 110.518306][ T8731] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 110.622779][ T8736] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 110.983011][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.812'. [ 111.019290][ T8742] GUP no longer grows the stack in syz.2.812 (8742): 20004000-2000a000 (20002000) [ 111.021941][ T8742] CPU: 3 UID: 0 PID: 8742 Comm: syz.2.812 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 111.024558][ T8742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.027263][ T8742] Call Trace: [ 111.028109][ T8742] [ 111.028852][ T8742] dump_stack_lvl+0x16c/0x1f0 [ 111.030029][ T8742] gup_vma_lookup+0x1d2/0x220 [ 111.031241][ T8742] __get_user_pages+0x236/0x3b50 [ 111.032497][ T8742] ? find_held_lock+0x2d/0x110 [ 111.033714][ T8742] ? mtree_load+0x30a/0xa40 [ 111.034859][ T8742] ? __pfx_lock_release+0x10/0x10 [ 111.036131][ T8742] ? __pfx___get_user_pages+0x10/0x10 [ 111.037467][ T8742] get_user_pages_remote+0x25e/0xb30 [ 111.038785][ T8742] ? __pfx_get_user_pages_remote+0x10/0x10 [ 111.040250][ T8742] __access_remote_vm+0x235/0x7b0 [ 111.041522][ T8742] ? __pfx___access_remote_vm+0x10/0x10 [ 111.042928][ T8742] ? lock_acquire+0x2f/0xb0 [ 111.044084][ T8742] ? proc_pid_cmdline_read+0x25c/0x900 [ 111.045455][ T8742] proc_pid_cmdline_read+0x4f5/0x900 [ 111.046777][ T8742] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 111.048260][ T8742] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 111.049739][ T8742] vfs_readv+0x6bf/0x890 [ 111.050827][ T8742] ? __pfx___lock_acquire+0x10/0x10 [ 111.052153][ T8742] ? __pfx_vfs_readv+0x10/0x10 [ 111.053377][ T8742] ? __fget_files+0x1fc/0x3a0 [ 111.054555][ T8742] ? __pfx_lock_release+0x10/0x10 [ 111.055817][ T8742] ? __fget_files+0x206/0x3a0 [ 111.057012][ T8742] ? do_preadv+0x1b1/0x270 [ 111.058150][ T8742] do_preadv+0x1b1/0x270 [ 111.059217][ T8742] ? __pfx_do_preadv+0x10/0x10 [ 111.060414][ T8742] do_syscall_64+0xcd/0x250 [ 111.061565][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.063058][ T8742] RIP: 0033:0x7fe5c3985d19 [ 111.064189][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.068949][ T8742] RSP: 002b:00007fe5c47ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 111.071034][ T8742] RAX: ffffffffffffffda RBX: 00007fe5c3b75fa0 RCX: 00007fe5c3985d19 [ 111.072977][ T8742] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 000000000000000a [ 111.074967][ T8742] RBP: 00007fe5c3a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 111.076944][ T8742] R10: 0000000000000500 R11: 0000000000000246 R12: 0000000000000000 [ 111.078929][ T8742] R13: 0000000000000000 R14: 00007fe5c3b75fa0 R15: 00007ffc361707a8 [ 111.080905][ T8742] [ 111.081752][ C3] vkms_vblank_simulate: vblank timer overrun [ 112.519966][ T93] Bluetooth: hci4: Frame reassembly failed (-84) [ 112.841637][ T8812] sctp: [Deprecated]: syz.3.831 (pid 8812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.841637][ T8812] Use struct sctp_sack_info instead [ 113.403845][ T8829] tmpfs: Bad value for 'mpol' [ 113.407642][ T8829] tmpfs: Bad value for 'mpol' [ 113.411328][ T8829] tmpfs: Bad value for 'mpol' [ 113.417982][ T8829] tmpfs: Bad value for 'mpol' [ 113.421665][ T8829] tmpfs: Bad value for 'mpol' [ 113.431453][ T8829] tmpfs: Bad value for 'mpol' [ 113.438555][ T8829] tmpfs: Bad value for 'mpol' [ 113.442351][ T8829] tmpfs: Bad value for 'mpol' [ 113.449340][ T8829] tmpfs: Bad value for 'mpol' [ 113.455790][ T8829] tmpfs: Bad value for 'mpol' [ 113.459823][ T8829] tmpfs: Bad value for 'mpol' [ 113.468162][ T8829] tmpfs: Bad value for 'mpol' [ 113.474739][ T8829] tmpfs: Bad value for 'mpol' [ 113.478707][ T8829] tmpfs: Bad value for 'mpol' [ 113.486418][ T8829] tmpfs: Bad value for 'mpol' [ 113.489943][ T8829] tmpfs: Bad value for 'mpol' [ 113.495877][ T8829] tmpfs: Bad value for 'mpol' [ 113.500242][ T8829] tmpfs: Bad value for 'mpol' [ 113.504073][ T8829] tmpfs: Bad value for 'mpol' [ 113.510228][ T8829] tmpfs: Bad value for 'mpol' [ 113.514131][ T8829] tmpfs: Bad value for 'mpol' [ 113.518263][ T8829] tmpfs: Bad value for 'mpol' [ 113.522207][ T8829] tmpfs: Bad value for 'mpol' [ 113.526115][ T8829] tmpfs: Bad value for 'mpol' [ 113.530386][ T8829] tmpfs: Bad value for 'mpol' [ 113.533848][ T8829] tmpfs: Bad value for 'mpol' [ 113.538099][ T8829] tmpfs: Bad value for 'mpol' [ 113.542001][ T8829] tmpfs: Bad value for 'mpol' [ 113.546201][ T8829] tmpfs: Bad value for 'mpol' [ 113.550267][ T8829] tmpfs: Bad value for 'mpol' [ 113.554420][ T8829] tmpfs: Bad value for 'mpol' [ 113.560199][ T8829] tmpfs: Bad value for 'mpol' [ 113.563909][ T8829] tmpfs: Bad value for 'mpol' [ 113.567563][ T8829] tmpfs: Bad value for 'mpol' [ 113.571405][ T8829] tmpfs: Bad value for 'mpol' [ 113.575681][ T8829] tmpfs: Bad value for 'mpol' [ 113.584770][ T8829] tmpfs: Bad value for 'mpol' [ 113.591928][ T8829] tmpfs: Bad value for 'mpol' [ 113.596795][ T8829] tmpfs: Bad value for 'mpol' [ 113.603779][ T8829] tmpfs: Bad value for 'mpol' [ 113.608083][ T8829] tmpfs: Bad value for 'mpol' [ 113.611980][ T8829] tmpfs: Bad value for 'mpol' [ 113.617142][ T8829] tmpfs: Bad value for 'mpol' [ 113.622120][ T8829] tmpfs: Bad value for 'mpol' [ 113.627148][ T8829] tmpfs: Bad value for 'mpol' [ 113.630999][ T8829] tmpfs: Bad value for 'mpol' [ 113.637544][ T8829] tmpfs: Bad value for 'mpol' [ 113.640872][ T8829] tmpfs: Bad value for 'mpol' [ 113.646586][ T8829] tmpfs: Bad value for 'mpol' [ 113.650194][ T8829] tmpfs: Bad value for 'mpol' [ 113.655745][ T8829] tmpfs: Bad value for 'mpol' [ 113.659660][ T8829] tmpfs: Bad value for 'mpol' [ 113.664602][ T8829] tmpfs: Bad value for 'mpol' [ 113.668864][ T8829] tmpfs: Bad value for 'mpol' [ 113.673373][ T8829] tmpfs: Bad value for 'mpol' [ 113.677850][ T8829] tmpfs: Bad value for 'mpol' [ 113.684108][ T8829] tmpfs: Bad value for 'mpol' [ 113.689252][ T8829] tmpfs: Bad value for 'mpol' [ 113.693492][ T8829] tmpfs: Bad value for 'mpol' [ 113.697512][ T8829] tmpfs: Bad value for 'mpol' [ 113.701867][ T8829] tmpfs: Bad value for 'mpol' [ 113.706045][ T8829] tmpfs: Bad value for 'mpol' [ 113.710370][ T8829] tmpfs: Bad value for 'mpol' [ 113.714403][ T8829] tmpfs: Bad value for 'mpol' [ 113.718394][ T8829] tmpfs: Bad value for 'mpol' [ 114.428476][ T8863] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 114.430550][ T5302] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.751605][ T8866] Cannot find set identified by id 65534 to match [ 114.990645][ T8874] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3000566761 (24004534088 ns) > initial count (3064201528 ns). Using initial count to start timer. [ 115.089630][ T66] Bluetooth: hci4: sending frame failed (-49) [ 115.092256][ T5302] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 115.117733][ T39] kauditd_printk_skb: 654 callbacks suppressed [ 115.117746][ T39] audit: type=1400 audit(1733980417.495:5064): avc: denied { create } for pid=8860 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.133682][ T39] audit: type=1400 audit(1733980417.516:5065): avc: denied { read write } for pid=5944 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.139743][ T39] audit: type=1400 audit(1733980417.516:5066): avc: denied { read write open } for pid=5944 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.146034][ T39] audit: type=1400 audit(1733980417.516:5067): avc: denied { ioctl } for pid=5944 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.189886][ T39] audit: type=1400 audit(1733980417.579:5068): avc: denied { read } for pid=8881 comm="syz.2.853" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.195857][ T39] audit: type=1400 audit(1733980417.579:5069): avc: denied { read open } for pid=8881 comm="syz.2.853" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.202190][ T39] audit: type=1400 audit(1733980417.579:5070): avc: denied { ioctl } for pid=8881 comm="syz.2.853" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.213985][ T39] audit: type=1400 audit(1733980417.579:5071): avc: denied { read } for pid=8881 comm="syz.2.853" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.220187][ T39] audit: type=1400 audit(1733980417.579:5072): avc: denied { read open } for pid=8881 comm="syz.2.853" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.228249][ T39] audit: type=1400 audit(1733980417.600:5073): avc: denied { watch watch_reads } for pid=8860 comm="syz.0.846" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 115.601414][ T8894] netlink: 292 bytes leftover after parsing attributes in process `syz.0.855'. [ 115.947561][ T8909] xt_hashlimit: max too large, truncated to 1048576 [ 116.904405][ T8934] Context (ID=0x0) not attached to queue pair (handle=0x4d8:0x0) [ 117.147688][ T8945] netlink: 80 bytes leftover after parsing attributes in process `syz.0.870'. [ 117.266832][ T8950] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 117.268553][ T8950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.279971][ T8950] vhci_hcd vhci_hcd.0: Device attached [ 117.524106][ T8963] mkiss: ax0: crc mode is auto. [ 117.548496][ T5997] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 117.633812][ T8970] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 118.434757][ T8998] SELinux: security policydb version 18 (MLS) not backwards compatible [ 118.436834][ T8998] SELinux: failed to load policy [ 118.542906][ T9002] bond_slave_0: entered promiscuous mode [ 118.544864][ T9002] bond_slave_1: entered promiscuous mode [ 118.546390][ T9002] macvlan2: entered promiscuous mode [ 118.547708][ T9002] bond0: entered promiscuous mode [ 118.550047][ T9002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.555502][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 118.574056][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 118.668908][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 118.676361][ T9010] hsr_slave_0: left promiscuous mode [ 118.679790][ T9010] hsr_slave_1: left promiscuous mode [ 118.813298][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.888'. [ 118.837743][ T9010] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 118.839846][ T9010] netlink: 224 bytes leftover after parsing attributes in process `syz.1.888'. [ 119.658415][ T9034] vcan0 speed is unknown, defaulting to 1000 [ 119.743350][ T9034] lo speed is unknown, defaulting to 1000 [ 119.886005][ T39] kauditd_printk_skb: 853 callbacks suppressed [ 119.886017][ T39] audit: type=1400 audit(1733980422.502:5927): avc: denied { read write } for pid=5936 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.901430][ T39] audit: type=1400 audit(1733980422.502:5928): avc: denied { read write open } for pid=5936 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.914711][ T39] audit: type=1400 audit(1733980422.502:5929): avc: denied { ioctl } for pid=5936 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.983851][ T39] audit: type=1400 audit(1733980422.607:5930): avc: denied { create } for pid=9042 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.989092][ T9043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9043 comm=syz.0.898 [ 120.002464][ T8952] vhci_hcd: connection reset by peer [ 120.005503][ T39] audit: type=1400 audit(1733980422.628:5931): avc: denied { create } for pid=9042 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.016837][ T1176] vhci_hcd: stop threads [ 120.017993][ T1176] vhci_hcd: release socket [ 120.023659][ T39] audit: type=1400 audit(1733980422.639:5932): avc: denied { create } for pid=9042 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.024860][ T1176] vhci_hcd: disconnect device [ 120.032306][ T39] audit: type=1400 audit(1733980422.639:5933): avc: denied { write } for pid=9042 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.050328][ T39] audit: type=1400 audit(1733980422.660:5934): avc: denied { read write } for pid=5936 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.063375][ T39] audit: type=1400 audit(1733980422.660:5935): avc: denied { read write open } for pid=5936 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.069986][ T39] audit: type=1400 audit(1733980422.660:5936): avc: denied { ioctl } for pid=5936 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.159710][ T9049] No such timeout policy "syz0" [ 120.637071][ T9070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.904'. [ 120.683871][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'. [ 120.854805][ T9079] netlink: 'syz.3.909': attribute type 38 has an invalid length. [ 120.856873][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 121.006632][ T8] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 121.177758][ T8] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 121.179903][ T8] usb 7-1: config 0 has no interface number 0 [ 121.181455][ T8] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.184229][ T8] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 121.187183][ T8] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 15789, setting to 64 [ 121.196235][ T8] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.205968][ T8] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 121.208277][ T8] usb 7-1: New USB device strings: Mfr=201, Product=0, SerialNumber=0 [ 121.210327][ T8] usb 7-1: Manufacturer: syz [ 121.214883][ T8] usb 7-1: config 0 descriptor?? [ 121.227618][ T9078] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.239666][ T8] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 121.534684][ T5977] usb 7-1: USB disconnect, device number 9 [ 121.539797][ T5977] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 122.308923][ T9125] SELinux: policydb magic number 0x207d1e8c does not match expected magic number 0xf97cff8c [ 122.313987][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 122.319749][ T9125] SELinux: failed to load policy [ 122.426112][ T5997] vhci_hcd: vhci_device speed not set [ 122.616188][ T981] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 122.638217][ T9136] syz.3.926: attempt to access beyond end of device [ 122.638217][ T9136] md0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 122.642486][ T9136] gfs2: error -5 reading superblock [ 122.649247][ T9136] netlink: 124 bytes leftover after parsing attributes in process `syz.3.926'. [ 122.651685][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 122.766616][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 122.787563][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 122.796332][ T981] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 122.799164][ T981] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34303, setting to 1024 [ 122.806441][ T981] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 122.808936][ T981] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 122.826779][ T981] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.829054][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.831126][ T981] usb 7-1: Product: ⠉ [ 122.832277][ T981] usb 7-1: Manufacturer: 魭䣇 [ 122.833563][ T981] usb 7-1: SerialNumber: 态금끸莡樗᭿ఝ鎨沇ீꎣᆝ絴吝갈諷摣䀿ીሢꁜ᱐ﶬ枌戩鮫ϵ䯕Ｚ钊最˂馒砯ꄈᰔ팣ᩗ锨幵鉑緛ន堨ᾃ폥ힽ띟ጠ볼ᎊ꡺郊ꦷᬖ幋ꭟ뿽輨ꤼꎆ颈慬⃩ద䟻嶫舶ꮒ꺋ﲁ爰⃿৪돉鸲䟺⺡⺿ᰑ柔ꬵ돝㤞蹠䔆⍪ֈ⪢쎓֐탞㛽즵㈏ [ 122.858945][ T9150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9150 comm=syz.3.928 [ 122.866436][ T9131] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.966940][ T9153] devtmpfs: Bad value for 'mpol' [ 123.282851][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 123.321153][ T981] cdc_ncm 7-1:1.0: bind() failure [ 123.323807][ T981] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 123.325461][ T981] cdc_ncm 7-1:1.1: bind() failure [ 123.330912][ T981] usb 7-1: USB disconnect, device number 10 [ 124.345459][ T9183] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 124.703540][ T39] kauditd_printk_skb: 703 callbacks suppressed [ 124.703550][ T39] audit: type=1400 audit(1733980427.562:6640): avc: denied { create } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.711561][ T39] audit: type=1400 audit(1733980427.562:6641): avc: denied { create } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.717664][ T39] audit: type=1400 audit(1733980427.573:6642): avc: denied { write } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.725407][ T39] audit: type=1400 audit(1733980427.583:6643): avc: denied { read } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.729634][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 124.730543][ T39] audit: type=1400 audit(1733980427.583:6644): avc: denied { read } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.737899][ T39] audit: type=1400 audit(1733980427.583:6645): avc: denied { create } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.743271][ T39] audit: type=1400 audit(1733980427.583:6646): avc: denied { ioctl } for pid=9209 comm="syz.0.947" path="socket:[27595]" dev="sockfs" ino=27595 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.749417][ T39] audit: type=1400 audit(1733980427.583:6647): avc: denied { write } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.754523][ T39] audit: type=1400 audit(1733980427.594:6648): avc: denied { write } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.759689][ T39] audit: type=1400 audit(1733980427.594:6649): avc: denied { read } for pid=9209 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.957637][ T9248] bridge0: port 4(syz_tun) entered blocking state [ 125.960164][ T9248] bridge0: port 4(syz_tun) entered disabled state [ 125.961973][ T9248] syz_tun: entered allmulticast mode [ 125.963996][ T9248] syz_tun: entered promiscuous mode [ 125.965760][ T9248] bridge0: port 4(syz_tun) entered blocking state [ 125.968675][ T9248] bridge0: port 4(syz_tun) entered forwarding state [ 126.109161][ T9250] tmpfs: Bad value for 'huge' [ 126.365856][ T9254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.369096][ T9254] bond0: (slave bond1): Enslaving as an active interface with an up link [ 126.807185][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.968'. [ 126.956529][ T9278] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 126.958025][ T9278] PKCS7: Only support pkcs7_signedData type [ 126.968312][ T9278] 9p: Unknown Cache mode or invalid value mmap" [ 127.315766][ T9290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9290 comm=syz.2.974 [ 128.439883][ T9308] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 128.453446][ T9308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.547040][ T9314] overlayfs: overlapping lowerdir path [ 128.723439][ T9317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=9317 comm=syz.2.983 [ 129.317951][ T9332] xt_CT: No such helper "pptp" [ 129.474512][ T39] kauditd_printk_skb: 1115 callbacks suppressed [ 129.474524][ T39] audit: type=1400 audit(1733980432.580:7765): avc: denied { perfmon } for pid=9326 comm="syz.2.986" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.481529][ T39] audit: type=1400 audit(1733980432.580:7766): avc: denied { perfmon } for pid=9326 comm="syz.2.986" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.494583][ T39] audit: type=1400 audit(1733980432.580:7767): avc: denied { perfmon } for pid=9326 comm="syz.2.986" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.507150][ T39] audit: type=1400 audit(1733980432.580:7768): avc: denied { bpf } for pid=9326 comm="syz.2.986" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.520650][ T39] audit: type=1400 audit(1733980432.580:7769): avc: denied { prog_load } for pid=9326 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.530364][ T9328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.532271][ T9328] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 129.534257][ T9328] audit: backlog limit exceeded [ 129.535564][ T39] audit: type=1400 audit(1733980432.580:7770): avc: denied { bpf } for pid=9326 comm="syz.2.986" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.537054][ T9328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.660380][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 129.761525][ T9344] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 129.771608][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 130.095412][ T9358] Bluetooth: MGMT ver 1.23 [ 130.418634][ T9375] netlink: 'syz.1.1001': attribute type 3 has an invalid length. [ 130.735306][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.790510][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'. [ 131.041096][ T9390] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.043591][ T9390] SELinux: failed to load policy [ 131.196792][ T9394] binder: BINDER_SET_CONTEXT_MGR already set [ 131.199396][ T9394] binder: 9393:9394 ioctl 4018620d 20000040 returned -16 [ 131.325449][ T9401] fuse: Unknown parameter '' [ 131.327294][ T9399] fuse: Unknown parameter '' [ 131.389326][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 131.477973][ T9405] FAULT_INJECTION: forcing a failure. [ 131.477973][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.481468][ T9405] CPU: 3 UID: 0 PID: 9405 Comm: syz.1.1011 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 131.484227][ T9405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.486850][ T9405] Call Trace: [ 131.487684][ T9405] [ 131.488405][ T9405] dump_stack_lvl+0x16c/0x1f0 [ 131.489604][ T9405] should_fail_ex+0x497/0x5b0 [ 131.490772][ T9405] _copy_from_user+0x2e/0xd0 [ 131.491965][ T9405] move_addr_to_kernel+0x68/0x160 [ 131.493305][ T9405] __sys_bind+0x11c/0x260 [ 131.494417][ T9405] ? __pfx___sys_bind+0x10/0x10 [ 131.495685][ T9405] ? __fget_files+0x206/0x3a0 [ 131.496940][ T9405] ? __pfx_ksys_write+0x10/0x10 [ 131.498263][ T9405] __x64_sys_bind+0x72/0xb0 [ 131.499467][ T9405] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.500837][ T9405] do_syscall_64+0xcd/0x250 [ 131.502073][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.503682][ T9405] RIP: 0033:0x7f8b8a985d19 [ 131.504908][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.509791][ T9405] RSP: 002b:00007f8b887f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 131.511912][ T9405] RAX: ffffffffffffffda RBX: 00007f8b8ab75fa0 RCX: 00007f8b8a985d19 [ 131.513957][ T9405] RDX: 000000000000000e RSI: 0000000020000240 RDI: 0000000000000004 [ 131.515964][ T9405] RBP: 00007f8b887f6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.517927][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.519856][ T9405] R13: 0000000000000000 R14: 00007f8b8ab75fa0 R15: 00007fffde32dc18 [ 131.521799][ T9405] [ 131.522619][ C3] vkms_vblank_simulate: vblank timer overrun [ 131.561017][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 131.568724][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.571452][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.574052][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.583285][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.586683][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.589083][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.801063][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 131.802677][ T8] usbtmc 5-1:16.0: can't read capabilities [ 131.990721][ T9421] netlink: 'syz.3.1017': attribute type 29 has an invalid length. [ 132.051911][ T9424] netlink: 'syz.3.1017': attribute type 29 has an invalid length. [ 132.063446][ T9424] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1017'. [ 132.132350][ T64] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 132.311257][ T64] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 132.315175][ T64] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 132.317612][ T64] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.319909][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.553683][ T5997] usb 6-1: USB disconnect, device number 11 [ 132.636042][ T9434] vlan0: entered allmulticast mode [ 132.638354][ T9434] bond0: entered allmulticast mode [ 132.639724][ T9434] bond_slave_0: entered allmulticast mode [ 132.641136][ T9434] bond_slave_1: entered allmulticast mode [ 132.642608][ T9434] bond1: entered allmulticast mode [ 132.645944][ T9434] bond0: left allmulticast mode [ 132.647461][ T9434] bond_slave_0: left allmulticast mode [ 132.648856][ T9434] bond_slave_1: left allmulticast mode [ 132.650248][ T9434] bond1: left allmulticast mode [ 133.852236][ T981] usb 5-1: USB disconnect, device number 22 [ 133.933893][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 134.003265][ T9473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9473 comm=syz.0.1028 [ 134.008123][ T9473] netlink: 'syz.0.1028': attribute type 7 has an invalid length. [ 134.013370][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 134.083421][ T9473] fuse: blksize only supported for fuseblk [ 134.279148][ T39] kauditd_printk_skb: 883 callbacks suppressed [ 134.279160][ T39] audit: type=1400 audit(1733980437.620:8652): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.290574][ T39] audit: type=1400 audit(1733980437.630:8653): avc: denied { read write open } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.302423][ T39] audit: type=1400 audit(1733980437.641:8654): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.319500][ T39] audit: type=1400 audit(1733980437.641:8655): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.337024][ T39] audit: type=1400 audit(1733980437.641:8656): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.364048][ T39] audit: type=1400 audit(1733980437.641:8657): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.438847][ T39] audit: type=1400 audit(1733980437.787:8658): avc: denied { read } for pid=9483 comm="syz.1.1031" dev="nsfs" ino=4026533148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 134.448817][ T39] audit: type=1400 audit(1733980437.787:8659): avc: denied { read } for pid=9482 comm="syz.3.1030" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.454545][ T39] audit: type=1400 audit(1733980437.787:8660): avc: denied { read open } for pid=9483 comm="syz.1.1031" path="net:[4026533148]" dev="nsfs" ino=4026533148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 134.465803][ T39] audit: type=1400 audit(1733980437.787:8661): avc: denied { read open } for pid=9482 comm="syz.3.1030" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.758991][ T9494] openvswitch: netlink: IP tunnel dst address not specified [ 134.900183][ T9496] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 135.007445][ T9497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.792569][ T9527] netlink: 'syz.2.1047': attribute type 2 has an invalid length. [ 135.794671][ T9527] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1047'. [ 135.902813][ T9529] bridge_slave_0: default FDB implementation only supports local addresses [ 136.250398][ T9544] siw: device registration error -23 [ 136.299598][ T9537] afs: Bad value for 'source' [ 137.126436][ T9565] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 137.130236][ T9565] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 137.166368][ T9565] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1057'. [ 137.714217][ T9583] macvlan1: entered promiscuous mode [ 137.735877][ T9583] macvlan1 (unregistering): left promiscuous mode [ 138.034101][ T9589] xt_l2tp: invalid flags combination: c [ 138.484113][ T9612] overlayfs: failed to resolve '/': -2 [ 138.657678][ T981] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 138.781113][ T981] usb 5-1: device descriptor read/64, error -71 [ 139.009776][ T981] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 139.077470][ T39] kauditd_printk_skb: 678 callbacks suppressed [ 139.077480][ T39] audit: type=1400 audit(1733980442.659:9340): avc: denied { ioctl } for pid=9603 comm="syz.0.1069" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.142875][ T981] usb 5-1: device descriptor read/64, error -71 [ 139.166468][ T39] audit: type=1400 audit(1733980442.743:9341): avc: denied { read write } for pid=5944 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.173587][ T39] audit: type=1400 audit(1733980442.743:9342): avc: denied { read write open } for pid=5944 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.179729][ T39] audit: type=1400 audit(1733980442.743:9343): avc: denied { ioctl } for pid=5944 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.237479][ T39] audit: type=1400 audit(1733980442.816:9344): avc: denied { module_request } for pid=9622 comm="syz.2.1074" kmod="fs-hostfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 139.249123][ T39] audit: type=1400 audit(1733980442.837:9345): avc: denied { ioctl } for pid=9603 comm="syz.0.1069" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.251806][ T981] usb usb5-port1: attempt power cycle [ 139.258725][ T39] audit: type=1400 audit(1733980442.848:9346): avc: denied { ioctl } for pid=9603 comm="syz.0.1069" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.264867][ T39] audit: type=1400 audit(1733980442.848:9347): avc: denied { ioctl } for pid=9603 comm="syz.0.1069" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.311106][ T39] audit: type=1400 audit(1733980442.900:9348): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.320540][ T39] audit: type=1400 audit(1733980442.900:9349): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.652584][ T981] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 139.678482][ T981] usb 5-1: device descriptor read/8, error -71 [ 139.916300][ T981] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 139.936827][ T981] usb 5-1: device descriptor read/8, error -71 [ 140.048189][ T981] usb usb5-port1: unable to enumerate USB device [ 140.288314][ T9640] block nbd2: shutting down sockets [ 140.563027][ T9651] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.1084'. [ 140.667452][ T9653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.963754][ T9660] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 140.965338][ T9660] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 140.967359][ T9660] vhci_hcd vhci_hcd.0: Device attached [ 140.972340][ T9661] vhci_hcd: unknown pdu 1 [ 140.976934][ T1138] vhci_hcd: stop threads [ 140.978055][ T1138] vhci_hcd: release socket [ 140.979188][ T1138] vhci_hcd: disconnect device [ 141.628707][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 141.988537][ T9678] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 141.990614][ T9678] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 142.001636][ T9678] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 142.627583][ T9680] : renamed from bridge_slave_0 (while UP) [ 142.749510][ T9682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=9682 comm=syz.0.1096 [ 142.940452][ T9192] syz_tun (unregistering): left promiscuous mode [ 143.096460][ T9687] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 143.106168][ T9687] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 143.417200][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.420460][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.428263][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.432774][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.434954][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.436818][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.785755][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.790132][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.792638][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.795487][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.797549][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.799437][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.862652][ T39] kauditd_printk_skb: 473 callbacks suppressed [ 143.862664][ T39] audit: type=1400 audit(1733980447.677:9823): avc: denied { read } for pid=9705 comm="syz.2.1106" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.871798][ T39] audit: type=1400 audit(1733980447.677:9824): avc: denied { read open } for pid=9705 comm="syz.2.1106" path="net:[4026532890]" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.885098][ T39] audit: type=1400 audit(1733980447.677:9825): avc: denied { unlink } for pid=5934 comm="syz-executor" name="swradio0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.891023][ T39] audit: type=1400 audit(1733980447.677:9826): avc: denied { create } for pid=9705 comm="syz.2.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.895726][ T39] audit: type=1400 audit(1733980447.698:9827): avc: denied { unlink } for pid=5934 comm="syz-executor" name="v4l-touch0" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.901571][ T39] audit: type=1400 audit(1733980447.708:9828): avc: denied { execute } for pid=9707 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 143.907168][ T39] audit: type=1400 audit(1733980447.708:9829): avc: denied { unlink } for pid=5934 comm="syz-executor" name="media4" dev="devtmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.912623][ T39] audit: type=1400 audit(1733980447.708:9830): avc: denied { execute_no_trans } for pid=9707 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 143.918668][ T39] audit: type=1400 audit(1733980447.708:9831): avc: denied { unlink } for pid=5934 comm="syz-executor" name="cec2" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.920214][ T9709] fuse: Bad value for 'fd' [ 143.924115][ T39] audit: type=1400 audit(1733980447.708:9832): avc: denied { execute } for pid=9707 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 144.034303][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.038133][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.040719][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.043323][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.046088][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.047956][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.104181][ T9711] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1108'. [ 144.142964][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1109'. [ 144.284007][ T9726] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1112'. [ 144.287386][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1112'. [ 144.290956][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.294858][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.298093][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.305064][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.308388][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.310403][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.343133][ T9730] x_tables: duplicate underflow at hook 3 [ 144.935768][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.940625][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.943395][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.950219][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.952315][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.955880][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.692533][ T9756] bridge0: port 5(veth0_to_bridge) entered blocking state [ 145.694541][ T9756] bridge0: port 5(veth0_to_bridge) entered disabled state [ 145.696347][ T9756] veth0_to_bridge: entered allmulticast mode [ 145.698621][ T9756] veth0_to_bridge: entered promiscuous mode [ 145.878364][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'. [ 146.236261][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1126'. [ 146.238568][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1126'. [ 147.470580][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'. [ 147.472864][ T9808] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1129'. [ 148.624550][ T9836] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 148.633794][ T39] kauditd_printk_skb: 492 callbacks suppressed [ 148.633805][ T39] audit: type=1400 audit(1733980452.684:10325): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 148.642955][ T39] audit: type=1400 audit(1733980452.684:10326): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.648300][ T39] audit: type=1400 audit(1733980452.684:10327): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.655201][ T39] audit: type=1400 audit(1733980452.684:10328): avc: denied { append open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.661190][ T39] audit: type=1400 audit(1733980452.684:10329): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.713696][ T39] audit: type=1400 audit(1733980452.768:10330): avc: denied { create } for pid=9837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.795893][ T39] audit: type=1400 audit(1733980452.863:10331): avc: denied { execute } for pid=9838 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 148.801433][ T39] audit: type=1400 audit(1733980452.863:10332): avc: denied { execute_no_trans } for pid=9838 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 148.810299][ T39] audit: type=1400 audit(1733980452.863:10333): avc: denied { execute } for pid=9838 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 148.817120][ T39] audit: type=1400 audit(1733980452.873:10334): avc: denied { execmem } for pid=9838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 148.861491][ T9840] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.029068][ T9844] xt_l2tp: v2 doesn't support IP mode SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1102 state=3 status=67 (errno 32: Broken pipe) [ 151.330888][ T9890] 9pnet_rdma: rdma_create_trans (9890): problem binding to privport: 13 [ 151.344237][ T9890] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 151.348178][ T9890] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.465864][ T9888] bridge0: port 4(syz_tun) entered disabled state [ 151.474848][ T9888] syz_tun (unregistering): left allmulticast mode [ 151.476473][ T9888] syz_tun (unregistering): left promiscuous mode [ 151.478266][ T9888] bridge0: port 4(syz_tun) entered disabled state VM DIAGNOSIS: 05:14:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=1ffff92000881ef7 RCX=ffffffff8176a9e9 RDX=fffffbfff20be2bb RSI=0000000000000008 RDI=ffffffff905f15d0 RBP=0000000000000000 RSP=ffffc9000440f7a8 R8 =0000000000000000 R9 =fffffbfff20be2ba R10=ffffffff905f15d7 R11=0000000000000002 R12=ffffffff9a9b3100 R13=0000000000000001 R14=dffffc0000000000 R15=0000000000000206 RIP=ffffffff8176a9f1 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557b892500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f84102a8740 CR3=000000003f402000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557b8927e0 000055557b8927e0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003fdc8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840f74b448 00007f840f74b460 00007f840f74b468 00007f840f74b440 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840f74b488 00007f840f74b480 00007f840f74b478 00007f840f74b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84102ad100 00007f840f74b440 00007f840f74b458 00007f840f74b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f840f74b498 00007f840f74b490 00007f840f74b488 00007f840f74b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=1ffff920007efeed RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88802265d35c RBP=0000000000000046 RSP=ffffc90003f7f760 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f15d7 R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e1bb500 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8176b993 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555561cb5500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd9ae85d98 CR3=00000000332f4000 CR4=00352ef0 DR0=0000000000003000 DR1=0000000000006e50 DR2=0000000000000000 DR3=0000000000000f80 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f8854b6a3 00007f6f8854b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ae88520 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000030000000a 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 000000040000000d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000019 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555561d408cd 0000555561d40090 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6568742065747563 657865206f742064 656c69616620796c 6465746165706572 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302a8080009a803 03bc080009a00300 0409900300020008 ba0300020008b803 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104800440861000 04015603ffffffff 0402ec8408000100 000e080606011390 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100002e8100018 1000060e5eec5010 0009800424100006 0101c80100000608 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0609c80308808008 0009c00304080009 b80300080009b003 02a8080009a80303 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc080009a0030004 09900300020008ba 0300020008b80318 080008ac03020800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000002 RBX=0000000000000000 RCX=ffffffff81e4e736 RDX=ffff8880246e4880 RSI=ffffffff81e4e77e RDI=0000000000000001 RBP=ffffc9000696fa30 RSP=ffffc9000696f7c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000007 R12=0000000000000008 R13=ffff88804a69a9b0 R14=dffffc0000000000 R15=ffffea00012971c0 RIP=ffffffff819a03bb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555668e7500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f23364a56c0 CR3=0000000029aaa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3837bee0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23358029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23358029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23358029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23358029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2335802a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2335802b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=00000000000000b7 RCX=ffffffff8175c19e RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96e4ccd0 RBP=ffffffff96e4ccd0 RSP=ffffc9000339f7c8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff96e4ccd7 R11=0000000000000003 R12=0000000000000000 R13=ffff888058468000 R14=00000000000000b7 R15=ffff888058468b30 RIP=ffffffff81fcb6e6 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556cc98500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe5c3a3aa22 CR3=0000000042010000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0000003 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc36170b40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5c3a029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5c3a029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5c3a029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5c3a029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5c3a02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5c3a02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 250073657479625f 6e695f74696d696c 5f74666f732e7972 6f6d656d2f732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005640515c475f 4b4c5f514c484c49 5f51434a560b5c57 4a4840480a560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000