last executing test programs: 1m41.694900538s ago: executing program 2 (id=146): syz_io_uring_setup(0x10e, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2, 0x200}, &(0x7f0000000340), &(0x7f0000000280)) (async) r0 = syz_io_uring_setup(0x10e, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2, 0x200}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r3, 0x0, 0x0, 0x0, 0x80800}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e65742c706f7274"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e65742c706f7274"], 0x58}}, 0x0) io_uring_enter(r0, 0xb516, 0xc2de, 0x8, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/174, 0xae) (async) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/174, 0xae) 1m41.69392148s ago: executing program 2 (id=147): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) (async) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="599a609df17c52fac0643b2558e069110828b53ca5d8e6bdc138ce5872995eb806e2800eb8a9bc09f80636dfbad830c087c51d22a93769618bbc8ce493d0f387c6dbcd448c1ee22001b84a5dbecc510f09fc68d2bf437c5c7f639e7f8d3b23afd7a7bf8df29c3cfdcdae4aa69f65955ab7516d8df36a6018b210d2a8adce5c366b6ed7b5ddcc1fe4c567b6e71d1b095b4bc4b9eff62085ea48180fb9cf7dfcf15f354552a4258edc3fb99149154fc24d94bcf23c0c3356fd07bc64e427172f726566508bad56199e2b776866f249cccacd07b3bdb5657882098a56dbb5f9", 0xde) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000540)="8a21d57b0000", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r3, 0x0, 0x0) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0xe5) 1m41.625595343s ago: executing program 2 (id=149): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f0cf7441fad0e176f89550928b713582f419900f0e30010000f0000000000000000000000dbef78e300", 0x20}, 0x48, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000640)='asymmetric\x00', &(0x7f0000000040)=@secondary) keyctl$link(0x8, r5, r2) keyctl$search(0xa, r2, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, r5) close(r0) r6 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r6}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'sha3-512\x00'}}, 0x0, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, 0x0) 1m41.5754503s ago: executing program 2 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x22) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x22) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x2000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000002c0)={0x7, [[0x100, 0x0, 0x9e3, 0x3, 0x1, 0xe1, 0x401, 0x1ee1], [0xe2b, 0x1, 0xb, 0x6, 0x8000, 0x5, 0x7, 0x5], [0x7, 0x9, 0x10000, 0x1, 0xe75, 0x958f, 0x4, 0xffff]], '\x00', [{0x4080, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1}, {0x5, 0x1000}, {0x10000, 0x7, 0x1, 0x1}, {0x0, 0xd9d, 0x1, 0x1, 0x1, 0x1}, {0x1000, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x2c2a, 0x1}, {0x3c, 0xe, 0x1, 0x0, 0x1, 0x1}, {0xd8b, 0x0, 0x1, 0x0, 0x0, 0x1}], '\x00', 0xba}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x88) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}}, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x424195b52918dc63, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @empty, 0x81}, 0x1c) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000540)={0x2, [0x2, 0xaef], [{0x8, 0x3, 0x0, 0x1, 0x1, 0x1}, {0xfff, 0x800, 0x1, 0x1}, {0xfffff478, 0xed, 0x0, 0x0, 0x1}, {0x7, 0x70, 0x1}, {0x7fc00, 0x8, 0x0, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1, 0x1, 0x1}, {0xffffffc8, 0x8, 0x1, 0x1, 0x1}, {0x2, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x3, 0x1}, {0x9, 0x9e, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x7fff, 0x1}], 0x3}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 1m41.511674986s ago: executing program 2 (id=152): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000100)={0x1, 0xa, [{r2, 0x0, 0x0, 0xfffffffffffff000}, {r2, 0x0, 0x4000, 0xfffffffff0000000}, {r2, 0x0, 0x2000, 0x1000000000000}, {r2, 0x0, 0x100000000, 0x1000000}, {r2, 0x0, 0x4000}, {r2, 0x0, 0x1000000, 0xfffffffff0000000}, {r2, 0x0, 0x2000, 0xfffffffff0000000}, {r2, 0x0, 0x10000, 0xfffff000}, {r2, 0x0, 0xfffffffffeff7000, 0xfffffffffffff000}, {r0, 0x0, 0x1000000, 0xfffffffffffff000}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) close_range(r3, r4, 0x2) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m41.265081075s ago: executing program 2 (id=155): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000140)="41000200010001", 0x7) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 64) 1m41.209604171s ago: executing program 32 (id=155): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000140)="41000200010001", 0x7) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 64) 1m35.064307324s ago: executing program 1 (id=253): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000140)={'wlan0\x00'}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b8"], 0x159c}}, 0x0) 1m35.015084748s ago: executing program 1 (id=256): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x10) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000040)) r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x1, 0x2, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000140)={0x95, [0x7, 0x7], 0xfff9}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x250, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "3f6115acfadc8508654c3396e6f2a6ffd7e1c5fd7f9b95b65eac9334904a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf6, 0x3, "c9b7faabc70bcd06f153163a20b496b3776569789bd22be4073c898253850fcb05c72d42c9f22b1a08324dafc6038981fc53e0828e51b0961d08c2066a3cb74c75e6b1d21ce377f872bdd0d220e48c46a6a2b85ec1772162fb4e9ead1cfb86d77619d9ce0c900b08e1bc80b242bed735066fc06ac421097f39c8b68f2636e72b7031100e09fb0b69f4cc7f3aec07504294f4e39af44e60e97dad3b8422291f07ac07a4dbbc9e8ece5a0b8e977a1de78a75d62ea8ea4a7ab33d139f3cbe84354119d6544f220c966c55afe1ead8664bdee2d825a541686e18525ea9926d53f77d6d86628466e64225a6a33aec821b618f7c7c"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000844}, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x2, 0x43, 0x8000, 0x1, 0x0, 0x7, 0x4, 0x0, 0x0}, &(0x7f00000005c0)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000600)=@sack_info={r4, 0xbddb, 0x4}, 0xc) fcntl$setsig(r2, 0xa, 0x5) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000640)={r2, 0xa, {0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x0, 0xa, 0x16, 0x1, "d3ee289a210ff2cc16d2e79204ae3c53681a7c7cc82072ed93df81093df87c482cb46cdfdf387be79e3533e31d3bd0fda4c9a4d896895ff4d1634b48b1fe5ec0", "71ac00985fee8c110470f6987bd6198db153e280966950ed1bcc632733ae78f9b89fc9c085e14a5b9894c00617b1e2b2bea442fe71f0db14a0a5f81f705e2199", "949179df99e767d2179f196f5388c5c830d589249f3ad4ca90aac1e784997ae9", [0x2, 0x4]}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004804) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xff}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x1}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x31}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x800) pwritev2(r1, &(0x7f0000000f00)=[{&(0x7f0000000a00)="68a62d5f5727c48a2a75776ed0899273b288831a3cd59ebb426edc2bd27bfa313823ba28f5a7468586e61fe89d15d4e321b1d287767839cd1a631e752dcf390fbb63ddd6a7f838c0d9d1a623afeb3232fedd62874b1046faced19d5a0e61330c4ff2e3bd3cea769dfd5ebcd1a8d86ea9cefde43a0c9d94e1e60b0c790146776c55ce22593a81bba912646ce6a0c81586569ca53c840645466494fbf4827b248533f595df1d2043cbd03e62931be11e5e47a8fdbbf73e717cb9469bee21035381b08f3d80f365de6caf936397f5482c2cc80d5414597eed315b1900", 0xdb}, {&(0x7f0000000b00)="3cc556832a5e0a41b49b2401b3d740a22a9cc6ffd635bad3c983dece31c5ec902b82e3d31dfcdd94b7ed4e39de6b0bd155147f314b06f6e087b85b8dc1bf1fcee8531dc466f5c63d6efeaacf80e09cc914760752b06b7cd727ddefd7d43bb4003d079299aa8a264038beaf65beb709eed550c09e169c7aeaf6a9b0b5e646c8a80aa3902077c0fceba4d773ad6b85c1e178d226be456b83051b4b2621fef6a57368186ab6817db5f5ed38fd7ed7822e94af73f36e1879f1322f2c", 0xba}, {&(0x7f0000000bc0)="4dc2c065629765046183d2d2d5a51abb892e68257bdbd6315a4d37eb5564083c60edb83ffd1280661dd8a193ed9d0008fe78d2449e79b69c02f538490d4569da91e8eb8bb4f63ed2e17ad74a62601d210f8b4ac0dc469aa36207354cb2d12fa11aa33157b631c30e374c78429c5aef5aee544cb2c6d2bc8f2fb7796bc1a3487aa0e7a4290c9c98d11e8676b462606a05ac448f517c55e1ad98b6954a9ccaef0a74cfe526f8cfc04463c21223168dab866ce9eeb75cb8ae9805c72cf03b693753553b20c93df7edfe6dc43f74", 0xcc}, {&(0x7f0000000cc0)="23b6d05b1bbd2b133bb3969ba7e7464fd93e00bc13b1f6e0e73b12ca8aa23246099b0c79568ac9", 0x27}, {&(0x7f0000000d00)="f5eec2089b1cf4055168a46bd7d145bf7129f209fece6c7b38f4f26440faed5071cacca1a74374caea6274746dbe936e45c3d5e8b421d9e4395c620efaf7ba73bb6d837af8a9790944f03f9a6d9b10d684b0e15b71b14f7a59fe71e2519b7b57e8c01daff75b12a38bb0d0f3d1db79c0834b011cf133c2bdfbc28f9f5e2f7f0576bdf4fbe2f5dd7bf2a7ce63560f3c839496e61a5506df70e914d0f219f1ad2a9d73a7107c6170d3668154a8ff7f3fb8d96a306e9e7ec64b16fa81edf7a6f6ff368c9501e4be7173fc14709a30d6aa76997f193f7447a35e269035486f43f4f44e4bf8d0aee0e74385b8ae3981920902f0049951b6c730", 0xf7}, {&(0x7f0000000e00)="321a03a74c641339a779790681be9c4981e82473", 0x14}, {&(0x7f0000000e40)="2ead726d5ad3fef327b96409ed6dc0aa68d3a2bee515342343978385b7bae93c16a13f4f12c936ac63359b33b3291673610efb0ab2187f", 0x37}, {&(0x7f0000000e80)="cdc47c746f68a8a580f9d02ba89ef464330885140109b4dd0aa43efe113bbf61094855fdfe29ba96c3c9b2e5400bb02babca0236c6f86ea065252e94b0753bc0a21fc54d57a70aaa91fbeaf4564e37454719f21231bcdea32b832f97c85b74c8c731ecd22801e7d6082e9d71fc1d275d9b42a3e1", 0x74}], 0x8, 0x2, 0xd8a4, 0x0) connect$inet6(r2, &(0x7f0000000f80)={0xa, 0x4e20, 0x1, @mcast2, 0x8}, 0x1c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001100)={'syztnl1\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x7, 0x400, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x67, 0x0, 0xa, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@rr={0x7, 0x17, 0x86, [@rand_addr=0x64010101, @loopback, @private=0xa010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0xaf, [@empty, @multicast1, @private=0xa010102, @multicast1]}, @lsrr={0x83, 0x7, 0x1b, [@remote]}, @timestamp={0x44, 0x8, 0x10, 0x0, 0x6, [0x53]}, @lsrr={0x83, 0xb, 0x51, [@empty, @local]}, @timestamp_addr={0x44, 0x4c, 0xff, 0x1, 0xe, [{@empty, 0xbe}, {@broadcast}, {@empty, 0x8b7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x504}, {@multicast1, 0xe7f}, {@loopback, 0x9}, {@empty, 0x80}, {@remote, 0xd}, {@private=0xa010101, 0x4}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000001480)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001140)=@newqdisc={0x2c4, 0x24, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0xd}, {0x5, 0x7}, {0xffff, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5b8e0aa6}, @TCA_RATE={0x6, 0x5, {0x81, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @qdisc_kind_options=@q_red={{0x8}, {0x238, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x101}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0xc155}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x7, 0x9, 0x10, 0x15, 0xc, 0x3}}, @TCA_RED_MAX_P={0x8, 0x3, 0x171}, @TCA_RED_STAB={0x104, 0x2, "23cdd3720442a2280c292b87db664f971d491aa748070e384ddee24e39e6e9136c96a865b954effda69db2b1de756f4af6879d82fd20e651a08a7e927f8109275493363a397e3bc932c46c57ffa87b119e94cebb73fc16db132b2fcee2f82e40c8c3318eb5d7d9b19bf937e328562e1875f669f4ea777f55af79c0560ad774548c217807c4eb99858a244136657d803db9d7a1f0d087a71e710271fab033f12baf9c2ceac46e403f70a13be28293ff201f618cdd6e3f6c2f2005feb0c51b8680711494fcb8e72e2164c1fa36028472f8788dc360d55ef43f46dd5a5d21cf484132f0aeeb7382775612b56b8147b8581388f87cf61036356d6c556c865e6e35ea"}]}}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x0, "2cc097b78605a5f38d8f7ae4ba069fee"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x8800}, 0x40001) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000014c0)=@sack_info={r4, 0x9, 0x8}, &(0x7f0000001500)=0xc) rt_sigprocmask(0x2, &(0x7f0000001540)={[0x6000000000]}, &(0x7f0000001580), 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000015c0)={r4, 0x1}, &(0x7f0000001600)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001640)={r8, 0x7, 0x30, 0x8, 0xfc9}, &(0x7f0000001680)=0x18) connect$inet6(r2, &(0x7f00000016c0)={0xa, 0x4e22, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x7}, 0x6}, 0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001700)={r9, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}}, &(0x7f00000017c0)=0x84) 1m35.013645181s ago: executing program 1 (id=258): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40)={[&(0x7f0000000500)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\xe2\xb0I#\x8dZ\x8d\xf0\xa2\x97Q@\x0e^\x14\xe0\xbdv\xfd\xf2{\xda=\xfa\xca\x03\x10\xed\xd3\x96\xebUc\x88\x15\x05\xc7\x88u\x11R\x19P@z:\xc6<\xbb\x82\xa9\xcfU\x93\x85.Z#\x14 \n\xd9\xe3\xef\x15\xe8\x19\x92+\xe8\xb4[\xf8\xfb\xcfw\xbf\xab\x92\x01[\xc0\x9c\x94Q\x12\xdb\x1ai\x18\b\xd2\xd0\x8fD%\xfc\xe52\x18\x842\x19\x19V\x7f\xf8\x11I\x88\xb1\x9c\x7fl\nE}\x9d\xcbI\xdf\xa5\x90-w\x87\xbd\xc1\xa4\xaa\xfdf\xbe\xdf\xb5']}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x100, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file1', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) 1m21.568635883s ago: executing program 1 (id=261): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) gettid() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) 1m21.517370091s ago: executing program 1 (id=269): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) chdir(&(0x7f0000000080)='./file0\x00') (async) chdir(&(0x7f0000000080)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x200000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x2ac, 0x30, 0x829, 0x0, 0x0, {}, [{0x298, 0x1, [@m_bpf={0x124, 0x18, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0xd3, 0x6, "2e1b52ee7314fbf8f2443d19734bb6d7d724d305768d213f6d7bee2541d7a48834286149226a8dfc3be49f94911266a14df548b395d88c4d5265167a082c8809e0c7fb1d876f0a6fc392d10add9a245f1f6b05d84702c5d69f754a63d94215291112146954d7cd3515d934d562f853a00a4c2fe843b9f2b1817cde2c7c9aa9b13dd7238fbd66ad908ad58dbe42c9dc33b0e872a583bd8342f21949f610a85e60c950dc09b6e0e3a42a3af7860162308e5ac1de491be0822cc62102e3295c141b37eb2a2b349cca9d5ff6fa8f41db4d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x4c, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x1e, 0x6, "73bee146678e9fa3f3e8a2234d0b3b5c4990cc8a5aa4ec5ee19c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x124, 0x0, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x2, 0x0, 0x4, 0x8}, {0x5, 0x0, 0x16, 0x9}, {0x1, 0x82, 0x5, 0x6}, {0x0, 0x5, 0x7, 0xff}, {0x9, 0x7, 0x8, 0x8}, {0x8, 0x5, 0xff, 0xf17}]}]}, {0xae, 0x6, "77088beb4c968c67dd72f45c719a430a47b63a85a8ba103f70d07d8f89fbc04024d5bbb43a978d313906dc34d850a2580bf341ef292ca2df02a4f9df06646d63b00f7d62294cfbd6068ec43db29c9395e7e9b951029d957faa856281de93a9f271ae851438c4c6ab5b6fac8ea6b3bb33a7de2f773dd1d5af992b011b48ac1857c9a5f62e9ed3ea4e7ac95eb4a09473e23d7380afc5b5e58f05253948154354eb0aee06fcce8e0977fb9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2ac}}, 0x0) 1m21.355413538s ago: executing program 1 (id=273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="6467400f0174f631b9800000c00f3235000400000f30b9aa020000b87d000000ba000000000f30b9800000c00f3235010000000f30470f01cf640fc7280f01592744de4546c4a2f19384f8fa9f0000c74424005db80000c744240200000000c7442406000000000f011424", 0x6b}], 0x1, 0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (fail_nth: 9) 1m6.273981437s ago: executing program 33 (id=273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="6467400f0174f631b9800000c00f3235000400000f30b9aa020000b87d000000ba000000000f30b9800000c00f3235010000000f30470f01cf640fc7280f01592744de4546c4a2f19384f8fa9f0000c74424005db80000c744240200000000c7442406000000000f011424", 0x6b}], 0x1, 0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (fail_nth: 9) 4.863041281s ago: executing program 3 (id=824): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r0, r1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xee01, 0x0}}, './file0\x00'}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000280)=0x0) statx(r2, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r14) ptrace(0x8, r14) r15 = syz_pidfd_open(r14, 0x0) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r16, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r16, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r17, r18, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r20 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r23 = syz_open_dev$ttys(0xc, 0x2, 0x0) r24 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r25 = ioctl$KVM_CREATE_VM(r24, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r25, 0xae60) r26 = ioctl$KVM_CREATE_VCPU(r25, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r25, r26, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000004140)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="99c22f8bb080494528ab9d6d3adeb40f94966ee5a08985063e6779dd776d71d0", 0x20}, {&(0x7f00000000c0)="b676f9324c19e2789643683b6b3c6c269717b4962343be0ce8914a783a030c850ae2a1b3431e02dbf26f", 0x2a}], 0x2, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r17, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r20, r12, r13}}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r2, r23, r2, r2, r2, r15]}}, @rights={{0x18, 0x1, 0x1, [r1, r25]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r1, r1]}}], 0x140, 0x44000}}, {{&(0x7f0000002a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002ac0)="40e75e30379d51541b993a9f415c0b46eaf5ba070fc40b27e2d291ada570691517e8558009f1a52c6fbc6d09e5e7dbcc70719a650693", 0x36}], 0x1, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002b40)="5bab7204b18a494cf17f23b021b1f4cd119f821a233e1ce57db2a37d4bd5da892a944226a2e0f535219be6ee57053e064778580bdd5fcb26b1da5c27b9f5d4ffb07d0f487b776c3544135fc72d2ffafe44cda29c345c9f3b5ce6be2ee892159e097134640afb867bd9b636f7fd2a22930f6328c5ebd3fa3f9517944a6ab448e5d19f8582dbe5c32bca77c92ba77f8ba2d3f58520feb78da2cb2d43cbfd00bf6d76d9d8c460ae538d8936b44777afd7946431915c26eb8c4a91dcd9cecd52c82122d6838545a8bad2e9d492fb5445b2f9c608d7ddcfd9a9eec40b86ce966588e50984f5", 0xe3}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="cd665aaaa03d176103", 0x9}, {&(0x7f0000003c80)="4a823c9f012cea760a08e69ac291b373987be0fc5fe208a25e0abcbe4f836e3e25757d2310c48ba500b5164dafe74b52db08b659aaccbe4ee734c042b54a635feb8ac130afa1baf20247933ca14d1355b25e5be01f1bf7177f8420ae3359b09982aadabb95e73a751bd6a618d4514399bc8d81cb90252195c0b5f4fb28d6a8c868f11ba413485ef60e1bc0be9fea7f34bf97abee2d71f3ad6626d43f1ee51d96d5d35ec5e28585a33e0e65012e0cb85efce72744687dcca6ebc0fbfa9610e9d7c38dcff0d9b2a09c55559bf0dd84b9f79c18ab12cdb71a82209736f1", 0xdc}], 0x4, &(0x7f0000003e40)=[@rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r0, r26, 0xffffffffffffffff, r10, r23]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, r6, r16]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, r5}}}], 0xb0}}], 0x3, 0x4008890) 4.644467524s ago: executing program 3 (id=825): mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000001900)={[{@mode}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x200000, 0x0) r1 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) close_range(r1, 0xffffffffffffffff, 0x0) 4.642019904s ago: executing program 3 (id=826): r0 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x1, 0x1, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff]}}, 0x200, 0x6d9, 0x9, 0xfff, 0x7, 0x9, 'pim6reg1\x00', 'bridge_slave_1\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @multicast1, @loopback, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @empty, @broadcast, 0xa, 0x1}}}, {{@arp={@broadcast, @multicast2, 0xffffffff, 0xff, 0x8, 0x5, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0x7f]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0xf, 0x3b, 0x3, 0xffc0, 0x1, 0x4, 'tunl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 4.563723101s ago: executing program 3 (id=827): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1}}, './cgroup\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0xa4}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4d809}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) symlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') chdir(&(0x7f0000000140)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x200000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x16, '\x00', @string=0x0}}) 4.498542748s ago: executing program 3 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000005400e501040000000400000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="21000300fb"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00005403cb0086dd6003136c00188700fc020000000000000000000000800000ff0200000000000000000000000000013b"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000740)={0x0, 0x6, 0x4}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b40)={r6, 0x5e, 0x0, [0x722, 0x8, 0x5, 0x5, 0xfffffffffffffffc], [0x3, 0x5, 0xfffffffffffffffe, 0xac82, 0x7d4, 0x8, 0x2, 0x0, 0xb, 0x7, 0xffffffffffffa520, 0x4, 0x2, 0xdb39, 0x3, 0x1, 0x8000000000000001, 0x9, 0x6a98, 0x1, 0xa9e3, 0x7, 0x6, 0x2, 0x1, 0x5, 0xd, 0x4, 0x9, 0xfda, 0xb, 0x0, 0xf, 0x5, 0xff, 0x6, 0x8, 0x8, 0x401, 0x5, 0x1, 0x5, 0x9f, 0x4, 0x7fff, 0x2, 0x8, 0x1, 0x8, 0x87fe, 0x81, 0xfff, 0x9, 0xffff, 0x7fffffff, 0x0, 0x5, 0x8, 0x4, 0x200, 0xe041, 0xd, 0x2, 0x5, 0xfffffffffffffff8, 0x7, 0xffffffffba89d503, 0x0, 0x0, 0x1, 0x9, 0x4, 0x80, 0x100000000, 0x9, 0x2, 0xffffffffffff6259, 0x80000001, 0x7f, 0xffffffffffff0001, 0x1, 0x7, 0x4, 0x8, 0x3, 0x4, 0x2, 0x100, 0x9, 0x7, 0x9, 0x7ff, 0x7, 0xb124, 0x80, 0xfe2, 0x8, 0x3, 0x1, 0x0, 0x3, 0x7, 0x3, 0xd1, 0x100000000, 0x9, 0x9, 0x100, 0x9, 0x2, 0x8, 0x4, 0x6, 0xf0c, 0x2c, 0x6, 0x1, 0x22c, 0x2, 0x7ff, 0x8]}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0xffff}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r1}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 4.134527768s ago: executing program 3 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x5c}}, 0x0) (async, rerun: 64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (rerun: 64) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) (async) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0x1000000010) (async, rerun: 32) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async, rerun: 32) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="3f031c0003020000000500008100", 0x60, 0x8880, &(0x7f0000000300)={0xc9, 0x88a8, r5, 0x1, 0x5}, 0x14) (async) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000002680)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4) 4.101739773s ago: executing program 34 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x5c}}, 0x0) (async, rerun: 64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (rerun: 64) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) (async) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0x1000000010) (async, rerun: 32) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async, rerun: 32) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="3f031c0003020000000500008100", 0x60, 0x8880, &(0x7f0000000300)={0xc9, 0x88a8, r5, 0x1, 0x5}, 0x14) (async) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000002680)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4) 1.072778581s ago: executing program 4 (id=872): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)=ANY=[@ANYBLOB="180000002a3bfe87297000fbdbdf25080000000000000000"], 0x18}}, 0x8800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x1, 0x3, 0xffffffff, 0x100}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0xffffffffffffffc6, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x0, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1.004833012s ago: executing program 4 (id=874): r0 = syz_io_uring_setup(0x463d, &(0x7f0000000480)={0x0, 0xb6c6, 0x800, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000300)="3797609f823ba401d14772dedafa00aad0e698614b22975c4d746c9983c252f95a4035d604436c3c19029ebc46f9d48c3468d5a220031e437795971930fc667aeb8bbef52acb0ffef0c4e7f0f47877d13ed1c5a5088350bae96c4a90df9ab0ee18de2aef49de118fe66f845360498c90835e1a72cfc3131212d36a3e48a8b3cb8d7f70b13301f6b5fe1b6bd58008f97515b0", 0x92, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="4ab3fa49300d271e8de48b86af97438531a2f9560188a447b2c13851173bfa0cdcc62fd708d486ca18f1889eaa3e26523a10578351acc055a8836b8a193ede98eb45329f92632938") (async) syz_clone(0x40000000, &(0x7f0000000300)="3797609f823ba401d14772dedafa00aad0e698614b22975c4d746c9983c252f95a4035d604436c3c19029ebc46f9d48c3468d5a220031e437795971930fc667aeb8bbef52acb0ffef0c4e7f0f47877d13ed1c5a5088350bae96c4a90df9ab0ee18de2aef49de118fe66f845360498c90835e1a72cfc3131212d36a3e48a8b3cb8d7f70b13301f6b5fe1b6bd58008f97515b0", 0x92, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="4ab3fa49300d271e8de48b86af97438531a2f9560188a447b2c13851173bfa0cdcc62fd708d486ca18f1889eaa3e26523a10578351acc055a8836b8a193ede98eb45329f92632938") io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x0, r0, 0x34, {0x1, 0x7f}, 0x8}, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) (async) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x20) (async) getsockname$l2tp6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x20) 923.638944ms ago: executing program 0 (id=875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000000c0)={0x8, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f00000004c0)={0x0, 0x5, 0xf2, 0xe, 0x7, 0x78}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r4, 0x0, 0x0, 0x1, &(0x7f0000000040)='?', 0x5}) 874.438316ms ago: executing program 0 (id=876): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001400050126bc70007bdbdf2511000d000100da880c"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001400050126bc70007bdbdf2511000d000100da880c"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 774.111819ms ago: executing program 0 (id=877): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@const={0xe, 0x0, 0x0, 0xa, 0x5}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @fwd={0xb}]}, {0x0, [0x5f, 0x0, 0x61, 0x5f, 0x30]}}, &(0x7f0000000080)=""/127, 0x43, 0x7f, 0x0, 0x8fb, 0x10000}, 0x28) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0xc9, &(0x7f0000000140)="24ecf9943e54a5ffe6f41425e52f62f7a01162eae9fcc77d604cda015dd73e143fef6dbe3b9d20ea109c6bf332354453d823e8da19d5edc1e7504404f0b0088bbdf598fe43cbf6b447b452d5c1edc6e12dc3052c5e990ef5f48626d5911a8755e5dcbf611be39ea24a530e5071fee6ff0960ebcd14c6c9394da046013fa8756df5aba12b6ebb3a8167e447709ec1e9a6077cd7b9f62106e5cc7145d9e7a3d97f88c56cd6e5258b78be01c007a024c9ebc3c9b01d9bf58c9fea7f31c6a772b1c8dbf1a006364e6b07f2", 0x7e, 0x0, &(0x7f0000000240)="62ef9594768e8a0408e9e862ff81810a30cc3af9884220cfc7fce2e9c0206ade06df5c3e5531b3f95a2f01540b2c5e8e7c64920b15529eeb0bc163c0a6c4ca094ceab540256582988c73e171113c134e2de9223175e22e6c512067848c9241a51ee6e0d00547c3bb1b8669301ff0d7cd1f34109632a1e9766290ac58b610"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8ce}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9a0f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r2, &(0x7f0000000540)='./file0\x00') r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000580)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x45) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x151001, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f0000000600)={0xa4, 0x0, 0x1}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000680)=0x3) syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc1}, "bb16103d52da0a14fc168ec94a1a5d1fa5c471cd90a292a21d1464d0b073e6d593f40fc2324ab24bfe23ad340843110bd27a03db825438f96955ecf8e87796bcdb22b6bea1b9d065a9236eac5990aa2de22271ee01a68c309c023cb5386dbaaff99746859fa2315479a0f5ba3bd17c7ca51359de12fdae955bba6f1699f5d97ea69e3f1dac01aeb671c35768214690f951b78f41cf0016804fad40dd3b5f104f977e88f523e0ed14f6ac3aeb76b7946d56c684569419820a8115dc94994cb01ed8"}, 0xc5) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='afs_flock_ev\x00', r5, 0x0, 0x9}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000840)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) write$cgroup_devices(r5, &(0x7f0000000880)={'c', ' *:* ', 'r\x00'}, 0x8) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000012c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)={0x964, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x7}, 0x0, 0x1, 0x9, 0x6, 0x11, 'syz0\x00', "5922572e7aeb1f99d2eef84c877a6ccead4d322a4d828e753ae1c99fcabeff5b", "9dcca14db02405e7415c7eb7368dc816ed6eb9cc0e0b07d69570f94223da31bf", [{0xf9d4, 0x4, {0x1, 0x73a3}}, {0x9, 0x7, {0x3, 0x81}}, {0x2, 0x101, {0x0, 0x9}}, {0x7, 0x80, {0x0, 0x10000}}, {0x4, 0x3, {0x0, 0x6}}, {0xfc01, 0xb2, {0x1, 0x4a}}, {0x2, 0xd20d, {0x1, 0x81}}, {0x401, 0x6, {0x2, 0xc}}, {0x2, 0x9, {0x2, 0x7fffffff}}, {0x1, 0x9c, {0x3, 0x9}}, {0x3, 0xb4, {0x0, 0x5}}, {0x4, 0x7, {0x1, 0xffffff00}}, {0x2, 0x5, {0x2}}, {0x9, 0x60, {0x3, 0x800}}, {0x401, 0x594f, {0x0, 0x45e6}}, {0x4, 0xfff8, {0x2, 0x3}}, {0x3, 0x65, {0x2, 0x6}}, {0x2, 0x5, {0x3, 0x6}}, {0x2, 0x9, {0x3, 0x80000001}}, {0x1, 0x60, {0x2, 0x38}}, {0x8, 0xa5, {0x2, 0x1}}, {0x5, 0x101, {0x1, 0x10}}, {0x7, 0x6, {0x3, 0x8001}}, {0x4, 0x0, {0x0, 0x2}}, {0x3, 0x7f, {0x0, 0x7ff}}, {0x4, 0x5, {0x1, 0x80000000}}, {0x8000, 0x9d40, {0x0, 0xdb}}, {0x9, 0xd43b, {0x0, 0x2}}, {0x6, 0x4, {0x3, 0x9}}, {0x400, 0xfff9, {0x3, 0x80}}, {0x3ff, 0x4, {0x2, 0x8}}, {0xb, 0x0, {0x0, 0x3}}, {0x8, 0x4, {0x0, 0x4}}, {0x7, 0x7, {0x1, 0xb3}}, {0x2, 0xc35, {0x0, 0xfffffffe}}, {0x9, 0x40, {0x1, 0x8001}}, {0x8, 0x7, {0x1, 0x9}}, {0xfff7, 0x3, {0x0, 0x8000}}, {0x4, 0x3, {0x0, 0x401}}, {0x4a, 0x1, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0xb, 0xd3, 0x81, 0x8, 0x18, 'syz1\x00', "c3cb2186b56afeab83dc935847463b3699c1f65cdf1caebb1c8da3876a421e1d", "11525c8d09e5e1ab4e5311f6f95b723d8c4a2b8004f3a0ca368b54bc0b654b8d", [{0x9, 0x0, {0x1, 0x400}}, {0x3, 0x8000, {0x1, 0x3}}, {0x1, 0x7f, {0x1, 0x80000000}}, {0x4, 0x4, {0x1, 0x4}}, {0xf720, 0x2, {0x2, 0xff}}, {0x0, 0x8, {0x0, 0x9}}, {0x0, 0x64, {0x2, 0x5d7}}, {0x2000, 0x3, {0x0, 0x6}}, {0x89, 0x5, {0x1, 0xfffffffb}}, {0x8, 0xa, {0x1, 0x400}}, {0x985, 0x3, {0x2, 0x3}}, {0x6, 0xffff, {0x1, 0x7}}, {0x9, 0x0, {0x0, 0xfffffffe}}, {0xdc, 0xe, {0x0, 0xfffffffb}}, {0xb55, 0xe, {0x1, 0xd}}, {0x7f, 0x5, {0x2, 0x3ff}}, {0x8, 0x4, {0x3, 0x5}}, {0x8, 0xef, {0x2, 0x995}}, {0x0, 0x6, {0x2}}, {0xfbff, 0xfff7, {0x1, 0xffffffff}}, {0x3, 0x6, {0x2, 0x180}}, {0x4, 0x6, {0x3, 0xc4}}, {0x2, 0x1, {0x1}}, {0x1, 0x4}, {0xe7c, 0x0, {0x2, 0xbc}}, {0x9, 0x0, {0x2, 0x8001}}, {0x3000, 0x7, {0x2, 0x9}}, {0x9, 0x2, {0x0, 0x5}}, {0x1, 0x0, {0x0, 0x8}}, {0x2, 0x3, {0x1, 0x4}}, {0x1, 0x1, {0x1, 0x8}}, {0xfffd, 0x2, {0x2, 0x1}}, {0x6, 0x43, {0x2, 0xe}}, {0x3ff, 0x4, {0x1, 0x7}}, {0x3, 0x7, {0x3, 0xe222}}, {0x4, 0x0, {0x0, 0x771}}, {0x1, 0x2, {0x2, 0x9}}, {0x735, 0x56, {0x2, 0x2}}, {0x9, 0x7, {0x1, 0xfffffffb}}, {0x8a, 0x2, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x2, 0xa, 0x6, 0x3, 0x6, 'syz0\x00', "36da187680899a729312c75221e44eb861fc83fc6ea0e3ebd5906315fb344878", "51f85bbfed7bc4dd9d90cd16d1e32eef11e8a18699b145fd54e6e135a20f7723", [{0x3ff, 0x5, {0x0, 0xf}}, {0x8, 0x401, {0x0, 0xffffffff}}, {0xa10, 0x5, {0x0, 0x8a514033}}, {0x6, 0x6, {0x2}}, {0x3, 0x1, {0x2, 0x16ef}}, {0x3, 0x0, {0x0, 0x2}}, {0x3, 0x4, {0x0, 0x6}}, {0x44, 0x0, {0x3, 0x2}}, {0x9, 0xd, {0x0, 0xa}}, {0x4, 0x1, {0x1, 0x7}}, {0xc, 0x46d4, {0x0, 0xfffffffc}}, {0x4, 0x6, {0x0, 0x2}}, {0xbd1, 0x1, {0x3, 0x1ff}}, {0x4, 0x3ff, {0x0, 0x5}}, {0x80, 0x659f, {0x1, 0xffffff9d}}, {0x0, 0x1, {0x0, 0x2}}, {0x4, 0xf, {0x2, 0xe}}, {0x1, 0x101, {0x0, 0x200}}, {0x4, 0x1b3c, {0x3}}, {0x7, 0x2, {0x1, 0x1}}, {0x6, 0x400, {0x1, 0x8}}, {0x2, 0x3, {0x3, 0x4}}, {0x1, 0x2, {0x0, 0xb}}, {0xfff7, 0xffd8, {0x0, 0x401}}, {0x5, 0xa55, {0x2, 0xa}}, {0x9, 0x5, {0x0, 0x9}}, {0x8, 0x6, {0x0, 0x9}}, {0x7, 0x9, {0x3}}, {0x8, 0x200, {0x1, 0x6}}, {0x9, 0x4, {0x2, 0x2}}, {0x1, 0x7f, {0x0, 0xffff}}, {0x3, 0x99, {0x3, 0x9}}, {0x5, 0x8000, {0x1, 0x37311942}}, {0x6, 0x5, {0x3, 0x1e26}}, {0x6, 0x7, {0x18729feba877fc39, 0x101}}, {0xfe50, 0x3bc7, {0x1}}, {0x0, 0x800, {0x2, 0x3}}, {0x9eb8, 0x3, {0x0, 0x6}}, {0x7, 0x4, {0x3, 0x4}}, {0xfff9, 0x4, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x6cd}, 0x0, 0x8, 0x7, 0xa8, 0x16, 'syz1\x00', "f7c4e209c5021002ff490eaec0cda5dd64f38df242a5b3361159a2b49fd0fb4e", "d42112578b853ce4ea8a427d3b49559793726c22e9b0d980b2085c4c5bf43598", [{0x6, 0x5, {0x0, 0x1}}, {0x1, 0x0, {0x1, 0x10000}}, {0xfff8, 0x20f, {0x0, 0x1}}, {0xd5, 0x3, {0x1}}, {0x8000, 0x6, {0x2, 0x7ff}}, {0x40, 0x4, {0x2, 0x1}}, {0x9f5, 0x9, {0x3, 0x4}}, {0x9, 0x8639, {0x2, 0xffffffff}}, {0xfffd, 0x7, {0x1, 0x4}}, {0x7, 0x2, {0x2, 0x4}}, {0xf, 0x3, {0x2, 0x3}}, {0x2, 0x9, {0x3, 0x449}}, {0x8000, 0xf, {0x3}}, {0x3, 0x729}, {0xedd0, 0x8000, {0x1, 0xa0e2fcd8}}, {0x9ec2, 0x8, {0x1, 0xb3}}, {0x5, 0x400, {0x0, 0x4}}, {0xe88, 0x6, {0x1, 0x6}}, {0x1, 0x9, {0x1, 0x9}}, {0x100, 0x3c2, {0x0, 0x4}}, {0x6, 0xfff7, {0x3, 0x4}}, {0x5, 0x9a3, {0x0, 0x8}}, {0x1, 0xc51, {0x0, 0x10}}, {0x80, 0xb, {0x0, 0x4}}, {0x2, 0xb, {0x3, 0x80}}, {0x4, 0xff3d, {0x2, 0x7b4f}}, {0x800, 0x5, {0x3, 0x2}}, {0x8, 0x8, {0x0, 0x9}}, {0x8, 0x4, {0x2, 0x400}}, {0x6, 0x0, {0x2, 0x6}}, {0x7, 0x4, {0x1, 0x1d3b}}, {0x7, 0xb388}, {0x7, 0x40, {0x2, 0x77c}}, {0xb, 0x7, {0x0, 0xf}}, {0x0, 0xffff, {0x1, 0xb691}}, {0x2, 0x5, {0x2259256ec3bb317a, 0x80}}, {0x1, 0x1, {0x1, 0x9}}, {0x2, 0x4, {0x0, 0x4}}, {0x2, 0xfff0, {0x2, 0x987}}, {0x7f, 0x5, {0x3, 0x7}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001340)) mount_setattr(r5, &(0x7f0000001300)='./file0\x00', 0x8800, &(0x7f0000001380)={0x108, 0x70, 0x20000, {r8}}, 0x20) read$FUSE(r5, &(0x7f00000013c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f0000003400)={0x18, 0x0, r9, {0x9b}}, 0x18) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000003500)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x30, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}}, 0x40) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x74, 0x0, 0x1, 0xa9facc3c870a3f31, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_LABELS_MASK={0x14, 0x17, [0x6, 0x6, 0x7, 0x6]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xdd7e}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}]}}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xb4794427e0033bea}, 0x80) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000003680)=0x4) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003940)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003900)={&(0x7f0000003700)={0x1d8, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff7}, @NFQA_CT={0x1a8, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x18fa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x851}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}]}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, @CTA_TUPLE_REPLY={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3}}]}}, @CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xec}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7fffffffffffffff}]}}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x1}, 0x20048400) mount(&(0x7f0000003980)=@rnullb, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)='exfat\x00', 0x140000, &(0x7f0000003a40)='\xff\xff') 773.745603ms ago: executing program 0 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000180)={r4, 0x3}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4, r2, 0x8000}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000000)) 554.757208ms ago: executing program 0 (id=879): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) write(r0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x180000000) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r4, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x136cc000) ioctl$FIONCLEX(r5, 0x5450) syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x20000) 554.279475ms ago: executing program 6 (id=833): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000ac0)=0xf4240) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1, 0x2}}, 0x30) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f00000006c0), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000080)=r11, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x801}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000a80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="00082dbd7000fcdbdf25020000008400018014000200000000000000000000000000000000000800030001000000140002006e723000000000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="0800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000300aab7032614000200626f6e643000000000000000000000002000018008000100", @ANYRES32=r12, @ANYBLOB="140002006e6963766630000000000000000000005c00018008000100", @ANYRES32=r7, @ANYBLOB="1400020067656e657665310000000000000000001400020077673000000000000000000000000000140002006970766c616e300000000000000000001400020062726964676530000000000000000000"], 0x114}, 0x1, 0x0, 0x0, 0xc0}, 0x4000010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f00000003c0)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFNL_MSG_ACCT_NEW(r11, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20480100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000000007000000080005580000d168"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x800) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r3, 0x3, 0x4, 0x8378}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f40)=ANY=[@ANYRESHEX=r10, @ANYRES16=r13, @ANYBLOB="000018000180140002006e657464657673696d300000000000000800150002000000be8212b73e55a16fdbc162e60309b1fe0f8205caf26d76d0f3a50f9e6eabbc6ac093e42bc59076337544f66405b413da7ae31ef976b62e8dbbed6e637adc14e5527e54503772b4011c2d65e886a58ddf01e250a302b0cd9fe2d19eb5d6d6cc02d155c063e03666d87a0c187a9ade66d223"], 0x34}, 0x1, 0x0, 0x0, 0x195}, 0x20000000) 553.674074ms ago: executing program 0 (id=880): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @local}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000040)={0xa, {0x1cf114c4, 0x6, 0x1, 0xa}}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x89110020, 0x0, 0x0) 494.515809ms ago: executing program 6 (id=881): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000032000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000002140000001100010000000000000000000300000a00"/136], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 494.254759ms ago: executing program 4 (id=882): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), 0x8400, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) 432.63566ms ago: executing program 4 (id=883): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setpriority(0x0, 0xffffffffffffffff, 0xf6) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 432.41939ms ago: executing program 6 (id=884): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1749d, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x2}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={0x0}) 431.017822ms ago: executing program 4 (id=885): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@nodevmap}]}}) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 288.928446ms ago: executing program 5 (id=886): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1000}, 0x10}], 0x1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = io_uring_setup(0x4aa8, &(0x7f0000000040)={0x0, 0x28a7, 0x80, 0x2, 0x111}) syz_io_uring_setup(0x3e96, &(0x7f0000001680)={0x0, 0x4627, 0x20, 0x3, 0x326, 0x0, r1}, &(0x7f0000001700), &(0x7f0000001740)) 279.747629ms ago: executing program 6 (id=887): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r3, 0x1000, &(0x7f0000001a80)=""/4096}) r4 = syz_io_uring_setup(0x310e, &(0x7f0000000140)={0x0, 0x388e, 0x0, 0x5, 0x2c1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="410000001800010000000048000000000200000005000000000000000c5a000000000000004800000600150004000000"], 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0xf, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 279.401606ms ago: executing program 4 (id=888): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (rerun: 64) r1 = inotify_init1(0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a0f4207a0e7322829f1d0380b3b7c95eb562c515ea37bd7606b410da726f5807dced35a2ceb0f2594a61fb78e4867ab9e9acf9035fe9b3db7e721d72136feb38098b5ad5a"], 0xe4}}, 0x4004010) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000180)=""/120, &(0x7f0000000280)=0x78) (async) fcntl$setown(r1, 0x8, r5) (async, rerun: 64) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) (rerun: 64) syz_open_procfs$pagemap(r6, &(0x7f0000000100)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r7, 0x120, 0x0) (async) getdents(r7, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000302000040"], 0x0) dup2(r1, r1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x9902, 0x0) (async) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=unix']) (async) userfaultfd(0x1) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x2201, 0x400000000000005}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/custom1\x00', 0x800, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/custom0\x00', 0x6, 0x0) dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 273.2285ms ago: executing program 5 (id=889): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'rti800\x00', [0x4f27, 0x5, 0x3, 0x37, 0x400, 0xcc7, 0xfff, 0x0, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x4, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfff7fdfd, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0xffffffff, 0x105, 0x8000000, 0xfffffff8]}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x6e0e41, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x8000000000000001, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x1, r2}) 273.094184ms ago: executing program 5 (id=890): mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x8, 0x1) (async, rerun: 64) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ntfs3\x00', 0x800000, 0x0) (rerun: 64) 117.236817ms ago: executing program 5 (id=891): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) read(r0, &(0x7f00000002c0)=""/215, 0xd7) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0xb, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x40044590, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x1) 2.621745ms ago: executing program 5 (id=892): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x8, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file1\x00', 0x60) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 1.016255ms ago: executing program 6 (id=893): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x1}, 0xfd}, 0x18) connect$netrom(r1, &(0x7f0000003a80)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x8, 0x80000) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002480)={'gre0\x00', &(0x7f0000002440)={'erspan0\x00', 0x0, 0x8, 0x7, 0x1000, 0x2, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x66, 0x0, 0x10, 0x0, 0x0, @empty, @local, {[@end, @end]}}}}}) r7 = syz_open_dev$audion(&(0x7f0000000380), 0x7, 0x204000) ioctl$COMEDI_SETRSUBD(r7, 0x6410) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000003b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003d00)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000004100)={{}, r9, 0xe, @unused=[0xfffffffffffffff7, 0x81, 0x7, 0x3], @devid=r10}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$qrtrtun(0xffffffffffffffff, &(0x7f0000003940)="bad35e62afe60d0031cc3c9b0072bd08cb25be627b837a13f6e2d160fe9c1c1ac13bc2d5db3b99f7a858e3cd70b6c4e944da253c4e898eeb3f74e9501ada0d1bda15cb7520aaac7e6d370d905d1c965ee9f5eb050d12c13fc7b025b6081ca448cfb4be2e0db221c04f5d260c0d3ab565cf8e6d888804198ffb1d3d5d15ab35db9607359e5444b7a5813f33d01685a6394ce070e3c84418f4cf5aa7e9d778c74f2c038d37b7ee3bd389251e7bfc02a3f3b017c3395e4c2022142b5915a72a9ae9e19fe67f97aacf50da5b56dcbdcdaa", 0xcf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000031c0)={'sit0\x00', &(0x7f0000003080)={'syztnl0\x00', 0x0, 0x1, 0x10, 0x21c594e6, 0xfad, {{0x44, 0x4, 0x2, 0x7, 0x110, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@end, @noop, @timestamp={0x44, 0x8, 0x33, 0x0, 0x7, [0xa0]}, @ssrr={0x89, 0xb, 0x69, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x3f, 0x3, [{0x7, 0x6, "fd2a7b66"}, {0x2, 0xc, "bb974a0f5296cc3609e5"}, {0x6, 0xe, "74b0c6b0d0c483bcc721fd61"}, {0x1, 0xa, "16f7b852762989ac"}, {0x2, 0xf, "2e69bde756f5d3157ac30f4850"}]}, @timestamp_addr={0x44, 0x54, 0xee, 0x1, 0x1, [{@loopback, 0x7fff}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@loopback}, {@remote, 0x5}, {@empty, 0x2}, {@multicast2, 0x3ff}, {@broadcast, 0x4}]}, @ssrr={0x89, 0x1f, 0xba, [@local, @rand_addr=0x64010101, @remote, @rand_addr=0x64010102, @local, @remote, @multicast1]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x0, [{@broadcast, 0xfffff856}]}, @cipso={0x86, 0x27, 0x2, [{0x1, 0x2}, {0x5, 0xc, "270636bbf9f4cf2ecc9b"}, {0x7, 0xa, "86eb0b8025a15492"}, {0x1, 0x2}, {0x5, 0x7, "d61476a09c"}]}, @noop]}}}}}) sendmmsg$inet(r0, &(0x7f0000003680)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9ff27a0c52a8413851b194d629fd4453471f474a3ac213a631de1bc5d4662e1b02edd3becd6368ca9c948eeb49c75fdb5306f5467502c171c12c7e191bbad42b39e1caf45e999307fa412dd1551d5c6fbb64027095c46177cb781ecda5554c66dd126d5eb98fae8d49bc4af8c7a4d3c770b562ce88abebccb1e363d21bbd506483416c1c6906b0735f6f77dbc39400e9820782d3978819611de0b93ce34b412e5a4aa1d9bfbb3898039ab8c86067bff787558d2b693baea94fe0f56bca593fee9deab24e07fce324d9e8", 0xca}, {&(0x7f0000000040)="a51e58c72c2ad8a8dfc42650a1c7d09079df780b69a94f0b8a878b7473829dba246d423f8ffc73a70d6585fda94699baec2bafc4617dbdc9c68721ea21387afde9db6160ad09ffc6dee237", 0x4b}, {&(0x7f0000000140)="e9002363e0287c7c7ea718103bfb4342b2be9e39be9cd83ef109f671561a0659c879fc7b8abf6f992b288fac93beee80f1f19bd09b405c1202cb6c0e1b1b1ea0c517b806eab21d8e63bc8f5d65a075d9aba8892997d1156a0b7c069f85d30ee4eb73a762af16e0901666a61d3d461444f88ea1d0a1dee7696cde7f", 0x7b}, {&(0x7f00000003c0)="9584863e6edf90a2d295323bf49cc0b78a772b03a74e654be0e46af4ce64a2c98f522b15bc9759bbf35dfe83e139e1fbc1ad2078b0a6e7befc5434609127f7ff7b29136f730f63234e07a4a99c4be8c4399c2cb1b088053c69a5686deb7a89df1d8a8a8487845aec85e6b5a9a4221ae5270e5ff002fee5bb445ff1b5820be12f4c19d905f5d5c7aa93e8294c062834543469d82b7719b06a08f65e2e36a339eb5c1e40a354174f87cf474a832f2be6f59d2892001812a3045a05e96ba88ebce6", 0xc0}], 0x4, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}}, {{&(0x7f0000000340)={0x2, 0x9, @empty}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000480)="25d0358e43bc3bad12d7a42c84a5d4376ee4d03c1962fa2eb2d283b6b60c2706182817df69c42d5fb362cc0a82a9dbc7067186d941ed66d9a49ade9bf4a5422af69d6b6839d5581d814f0d2c78b93f9df9a35bad5e13881acfe884070f1ec1e5a96eadeac45f93c8dec81429282b19be3a100586677757eca8705d926ba6229f2dc3fe69c87e758077f3dee250de426524a6837d2398e6eaf1437f0bb079b050f1584e72fadb93d8b930f19bcf6e9366ee99a7e5c93454657f234e9cf3d56b9009112d79d61b04fa52", 0xc9}, {&(0x7f0000000580)="19145802e9b5c218ac6dfad964119757de8443ee57e9b5298f3b37e27e2bc7d6058117ceaf", 0x25}, {&(0x7f00000005c0)="dd1e2cf324100bc61d97ba2f428d446f4e4899f6ed273b35c986790fe1350b31d2866ff94c4b954104c397dd2ee03bea42732a742a2d5c42264f374f95c5bbd6ceeab61ffb83fe0c6794aba634148da2f7e2b37d92aa8490b88308feba54020cdd128100a7abe7df42e2c4bba399282fbc43fffbc132989ae8", 0x79}, {&(0x7f0000000640)="8cc7abf4fe08582269af6af3109298f73d1910c51bebfe955a8700ff6400d85d93c983b5f340a9", 0x27}, {&(0x7f0000000680)="5829c33448373488484c0d76c3fca7899d3bff0e7833322a394934a7fc0b895f18b09824a2f3f71591a661f248c4d88e8772ebfa7a152c55faf1b27248b5aada102c8ebf7dc6ed633ea23536f77e61e96b84dcc539ec937a039a509d9b28e57c11831b6473cd51bbd4f9c6f7f831e9f9d7b55905c106366bc199a3b721c46d06d7a53ec0e5a746856ff78ef1c7124e639b1d104c0d1a0d59c631886a052a8c3cd1619c2c39a3f82481a188c325ebc960f38cc7d0f955b3d9755a53ecab76d99ef88e8b214d2e", 0xc6}, {&(0x7f0000000780)="46c819bf93d84cd76c84161932a074d54291b771b1ce44e94fa710a54c50a4a615b92c680b8536b9ec9ceb5a9e69c4f252b282c4a22f3823f4a5a72bcffbff31bd8b4c5e2bc834f2d0e202d142db9036a760969093e52b91ac59c0f321a1e014fea8c870dad49d8940dcb1e2dd04fd9bf81db8def0343621f3180d9aa7d82abec26f27f2c0a889bd600bd124a16c71e1623a1c21e9c1e0f51cfe8d152b44e1ecfd75e4765458d618e1f2aecb6166f8a19d2e1a5d78553796ca8bc595ca1863e598b4a7b173cf5d2bf1ba96c2ce5c089d1b6488cb2c23e5bb79a1533b6504c283566c", 0xe2}, {&(0x7f0000000880)="565413d7e3b3fae996c29d5fc0b5b649fbd426112482ff3ce2f748c3a3ece2999e15d4c11504312e63da21b5cd37130bdf6d8ddb301cf34812dc5f18b5bc2b9cdf2b86109fde603a120b7a74ff6f4b638f8343218147928eb3f667e9346600564db4c9dc78ada5e623fd0b0fcf0c4c05d6b01334b2a7be75dc04c0f3ea5f9252c67ec679", 0x84}, {&(0x7f0000000940)="80e84dd4130700eada893e919ad374a920f615c2b7e31b4d3978343685f4f16b2d715ce0b10319a11a8601b280955409592ab5beefd8fe19c8735f1bf42a76c047557e2a20a572efffb47086b00694a2c376f79f039076de3607dda981c505dac21f1255970afd5d5c4edf8ab9b0375cb0329babd3525c062c158f6a983edb40cedf075dd3f407e9320068d72f3c56804ca46bbc6457b9e6a043d3898016e58836a7a490ec7ac4b150a075bb1282faab78b3d3d1afa6944a616f7a8a9e283d3701a1d90de782bbe7b8d9b18c233cd881585f94ad0338255b14c483100bf17b9d45672951bad6e0dd", 0xe8}], 0x8, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb47e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x78}}, {{&(0x7f0000000b40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="432b2e862d1313e4e867753aa8be7d72", 0x10}], 0x1, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @end, @noop, @ssrr={0x89, 0x7, 0x88, [@loopback]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x63}}, @ip_retopts={{0x44, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x9b, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp_addr={0x44, 0x14, 0xc1, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x7b}, 0x4cf}, {@multicast1, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x172}}], 0xe0}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000d40)="3f3e0cec896fd737c1181bfcf36db8ee6e57e8eb94348df0b7803db0ecf4a6b97a7befc907585a2ff43f4ef8bb110c3c9b7f92df894db43f14ec3b48cafc0ed6f7f18b1dbf6d4bea2bec449f0362fd8ad39bf35364ad7618bbc70a4cd29cdb3bfe0b323c77a189d206e46437b3e9774a681a1a62ad843c41dc73e8a954467e17ba577cb97e57029d9e80affb7d84d4d2f0d6032fd885d70c0968bc82cad3d809a9e047a2aec5b3fb8d1e10cd8fd8dd60184307988cd5ea942e037ee003d6e3093bb82828ffd5dee59a5b03dbeca945a7", 0xd0}, {&(0x7f0000000e40)="8ec9505e80ca2edee34999605dea381a815b641a216ecfb3ef244742f1898560398517ac06f5fba32c2440923e9ed7fdb1c432073233824220f82482910240a6e41bc5c657836684d7604b279f8eb12a726cab1915275f24ce9c67b958091af0aadc895205a8a81320a862a6569d0bf91c7db18aeb40b6c549304db8f58ed0a31840fb46cd428a80f1a33c87589f981e035e5528135e23f05b06a87db815f451759275676546dceaa90cdc79176fbac737fa", 0xb2}], 0x2, &(0x7f0000000f40)=ANY=[@ANYBLOB="3c000000000000000000000007000000442cf843e0000001006800007f00000100000008e0000001000000037f000001000001ffffffffff00000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac0414bbac14143e000000001400000000fbffffffffffff00000020e000000000010000"], 0x78}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000fc0)="7edb87c070c60d9cceab4a07fb647307f2636c781edaab500c7a01cec1164d30527d932178c5678781eb89552172e6005a7e7220ed001d09073050be0ea5a84091ec657dfc36165c77240a06bc2a87057ee8a7920b3cb0deb22cff35a2816daf1959d4cca94bc290d722689bb4e957bd8269a8991885d2feb11bf3ff21a4acd0be70c30b7e89e43d8bb224b500a0f3ce42512e2007b567f06211fc0e4023561d9c3e58de39efc6068d4f4557ae3eecb9307d48db20a5d3973b8eea774d4e8d4d81", 0xc1}, {&(0x7f00000010c0)="476c64759a3057a29916432300ae6440e211694eb072910081e41f9ab5abe96eab5f7fd26113eaabbafceba1d1b979fdf234793145e4", 0x36}, {&(0x7f0000001100)="c85b2bab3bbfaf834e9814c7a9d72b213b65a3c832eaab28b8a4092000e23f1545e5f5dc40ec1482e4a836ab09222249546f1c4a3877dd639d9549d237b64db530c751db3c40c2d297ce8c5fa0bf3b03bcda978caff50696e1ce34534eb35ce3b95c12db29ac2a5ccc6f2695feb973d30382b4f0d0755d72c92c26f318e5b652305d3aa362b816cffce4a710807786c2465f3a32d95cfdeee69ea782c39368f2df4be8d36a3481620f426c3916def6a8598b8c7db5d5bf91338b56c03229e7d0e429", 0xc2}, {&(0x7f0000001200)="a84a665123e0857918b6862cd18cfb8bfbe0cde97234295ad75055cfff076348a498c68a8270e7f3b9bbe0790de9338e12c0d2df19cdf6596bdcb0de80", 0x3d}, {&(0x7f0000001240)="100b522b85387d3bc2afb23a3a0c0787f6336f976ac90531e2738001d0d3ccc64dbf623e3d98ad68b5f12f1b36918c408bc3faf94c71226731578be9be0deb3430d77a9d34bf2f37a1ce8e2d3e09124b549c395a467688af130003747d597214", 0x60}, {&(0x7f00000012c0)="a47e9ce09e55aec156c14f7648a2ca05081d7ca096cd7b8a2034d53283f2ee23d951ae117c6d07283830b8b91583a517ec05ecd8603e852b6a87f02698575833044316cc8cca4f927ae4cad17bfd40bd12eef598384b80781508a5e551827e0a53c4627829cdded128a2ab11b0d6c0d03850d5fb78783a5b33fd90fcbf967a6ab127fee74e0fd7f0489e41599269ab4d2e7be582e401f9de3697a9288b6d4baf98e5a61d3cb1191a9d97b078423c31b125c3c0c667b210fd4088bb4ad2bd3e9fd40c05f95dd37b89c325d081", 0xcc}, {&(0x7f00000013c0)="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", 0x1000}], 0x7, &(0x7f00000024c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x395d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xde}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010100, @private=0xa010100}}}], 0x68}}, {{&(0x7f0000002540)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002580)="24754711da4a683d68", 0x9}, {&(0x7f00000025c0)="7553195af1016a51b9bb3db2e59dc4d9d3c25837fbe949472884b1da640adbb9233b9f62009848c493b870b3a581ee253c4e5a6813aea6aef8accb0dc89c01a579724ca3221282025ba36c6971b5f926e98eacf46766b03548e185abcd6d8ac330959435d09caf41f41a5f00f18dafad7ac5b1371372d29ad2d2d79c0d7658b85d5bf1ce1f03292888473ec0f6802790f7878c01eae82606fdb76ad3e02e6ea7b5b7df4c9b00be800f86e5db4220abb96e94cd705a823032666a3031ca76dd", 0xbf}, {&(0x7f0000002680)="4f66797dad1115ce90959573d3c632ba0490b12997aa81f46d14a594c216eaa7706c3ce29023baea8ca3170394366802e48be46f48c551695b4ce51d609f8f2f63946c1b4f4611c073d2ab4e3730f538e191b5e912c7e870d4399743223ee0cfef3fc6e07aa68365dc3bbd67339153f15486478680a033df1b79ed373cd3faec932a126ba327dd103a4ca39b8dde9715e7566b4a2630f5350375b66932663ccaeffe7aad1a6f0048fad41b4f2d8e153f4b1a9be1730492ed2c62edc4c728421e70b1265fc4e10ea9c4ebc2c68221cfc19c114a7333fa258f28ed53ddd02460acceca827cdab69d4fa9a5", 0xea}, {&(0x7f0000002780)="2ef5e65d2ba7f7926d5e5f4d0f8eff7eb538db2a2a6054b7893cfdd9f96151c973d2993bb50bb296a5a09b8313febc66319a6e5548d201360a9f7bf6f037469a3b7780ac17de862b309877f99d31b11f5481c57c281f4bf414d246297d5fe8570cb19413c40afb", 0x67}, {&(0x7f0000002800)="0aaff79955406ef600273facdaa49f97738cff1518cdccd4c9b91a20d985c128b7788f198850ff9968fc832cbf3d27fcb1df0d4b1e4caf79f8f6b7a05a7c7e72464da3eb125a0332b16fd858d59be0eb33e8e9137a4306299502eae7c4f443f4b1225fdff70950cab4a14cb2e3a506bc02a1d1e4dbea03779c878460cc0ebc8ddab68c87c46cfb931c65be24cc768f9e92f99aa34c03bab30da1353133b1229823fb7712ea4b98c48a1c2dc857388687be5f3e9c3eacf97be9123d9d32ee8a5b149ae76fba0a27cfc4685ab835da1feddf5b7994264c5eb9266f3f31f90734c1094ed61fa5ee50f257cd47189c06", 0xee}, {&(0x7f0000002900)="523cbedc6a8de84f36d6aa507d5a7e0378f3f33dcb54f600fb8d41b80cd8307e9f456a6d1c7328fb90d9684384269305873293d72fb7744535f5fcb0fc40abb55a8f92adbfb9017ef3e1f374848f9058fec42babbedcdfdc8c62d3f0a18d3fe519f9f12343503b144224c26b9d8450c06c802c35b823d519d5c8cb616b78", 0x7e}, {&(0x7f0000002980)="e0c613885c411e3ae8d23384d9e5d87b8f0921afe4f00ac79aef04f3ecccc8265a2815a303107a73d0084bfd6cc4a107af03d6b34084a20b1be24ba2b16a93f817c63f7860d70fa5b70f3b5bca74b4214d036467ee18eb9b389d6114fd331f005daef2dbdae96bd6b2ceeb2f00ae15ccaf57654bac0a87f1f2bc0bafa5836baead5e86d4e3374f83753eaa096599048ee13b3c92a368137a972b62d9ba5858fcda45bdb19eed32b5073fd85dad74b4929e01d19fb6e17e4462db9f4d23a18af5be792e12a638205d147c27e195b7a5538c41b202417f7ea7132ce78957d6bad55dad83b76f71f2a1975d95528f", 0xed}], 0x7, &(0x7f0000002b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}}, {{&(0x7f0000002b40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002b80)="67a70f5a818ac4e6c7ae56d128dde6c167f46b8366321a6b126c8318d5b47f53cca5a42be89fac8b1b2946dcdcd6868cf3e0d78f97638df2d70ecf904215785b579ab54218cd16850528ed67de8b9f6ffb04ab1ea1d7e9ac87211aed6ff64e2afa7f457acd92a8af70fb5a1ffebaacbd23256d2d48c87fe2c198aa1e996e537d4bcc77309123f9432a1fe8350d8c7b5117ca19ec34cef3406c9450e48062568c6d3c", 0xa2}, {&(0x7f0000002c40)="8cd02e27c54d2f58dd50bd755be3d30f2def601464677e05fe066875b0826198140ae21168ac40eb90b5555163aa42085a4eaec89b78d7ae706c7fe34f6a6e830e383347206ba5ba35e1", 0x4a}, {&(0x7f0000002cc0)="838c9e3b800f535ac7b177d322842fa69e91cf498ab1f3b429d014a0b91f95db2c9febd9898911736c32b0056a49945895", 0x31}, {&(0x7f0000002d00)="4c135d36afd354e9f7a4153743297ba90c2cb750e26ab1f5ab4f58554b503868506db9ea972bd1614f602d8b1f8e28f049a58f27d8d257e852395ffff897ea6afd43d49dc41efeea6a1e33", 0x4b}, {&(0x7f0000002d80)="3f6f9a57b346ae9ba4a0c6c7a06fc81f98dbc097a801100af5a8130a8c872842a5454446478e87d74ef827b3ee79de162054ce50ee5e702acdec38085b586b1aa660597f858c11fa3ae0cf4379800b88577adc9dbf9b394bb555817ba71fbae7fb9da2eb1e4efa4fa9fe0a4d80b43d649a605728f3864c16c5e02574bfbbac18e237a0d73418bf2286387944195a7fa72d28303e89826d6ee99830360057883448749d16f2a5b76a509247cc4b7d658475", 0xb1}, {&(0x7f0000002e40)="36952bdca4a3a701a72aaa2492b028ff628fc8e924b83ce5a27b42792159688ec5b05370564029a1f1a978df8059c957d7d1fcb9f10f03b6083de5a019edd61153e5f801af3eaaba2dca825fca04d610b057b59ad37e3d36c4d7706550ecfab581fa228b722b2db9a878fe608325ce98a57791531f6d046ba542c94010bbcb4a6f34f66562ed6823b89a9780ed0a005671084cdf211b163288a0d339ad4e10c97adfac0fb4e69df269e7ae5451d65d9d356ab9d2b909d2cc471f504b0bf5e1cc0b068408db245022179aa171338da0c3bc446acd791b6d93b0d9b3f7a5b265c89c824718ffd7", 0xe6}, {&(0x7f0000002f40)="fc2e8ed41d8945a3f000726cef00a6e783b921485257af7f9fe5a3fb06e79930f5bf6ddfc3537882ae6cd94d11238a5012992e32cae4701fcd35831e06f6f8172508e0b4a169bce88d61ca4379c55848903a47290a0abc0c00a2105aaa2e989234dcd17aa276e884c018a90619873e13c2c445ab161833475f2b0a83ca22526e0701ec0e5c18b1066464d4811d7b860ff4c836c8d39388823da363b56fce32f6", 0xa0}], 0x7, &(0x7f0000003200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x83c}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010102, @private=0xa010102}}}], 0x68}}, {{&(0x7f0000003280)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003380)=[{&(0x7f00000032c0)="57b9b8c7ead79135c3af34d46bc4241835da0207fc6ad0fd539a4e376bfb905140a151b90b4dacdf8c55f0ef75581350d01336831656ebbb139ff4445d58b454c4eb5a300522d679ff1754048d2207360bf764444a7e975b5eff862c5022944f04eab22d7e720f", 0x67}, {&(0x7f0000003340)="b50cf4639f45f5e63149420bb4608a199b4c", 0x12}], 0x2, &(0x7f0000005100)=ANY=[@ANYBLOB="14000000000008c34e0000000000010000000300000000000000280000000000000000000000070000000044147c610000000000000000ac1e000100000007000000110000001a00000000000000010000f7ffffff00000000001400000000000000ecff00000100000000000000000000000549c00d47af57aef3329fb1ecb3db415a5786841c9600b266f50a8053471a7c2d38942016047d3cb557577414dd946d32df2ae5c80eba52902c6ab8535b38fbf6282712c5544c3b7b5d5f165bc2c312cfc706b4aeca5e6aaba0a635af8a6031adda2d"], 0x70}}, {{&(0x7f0000003440)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003500)=[{&(0x7f0000003480)="b7f0ec1751efbfae21f69690062f510fdb0c611ef59056a50be039b51eaff81489741a8bd6086c4bf28915cb3132ce0111a0db201b435d535180686b7e52edc3f2cc1438b44efea1c80b5db70d9b1ba4a1722a670f878de5a1b3d7c1ed8cc574", 0x60}], 0x1}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003540)="b71c67b1c49f230916026e9e111560feeb42a041fdade08f281ab753a6a9771474b029e187441cf1eaf6b75e61de1ce0ca6493cc1ec727ed8a6adfab48b707072ac12309e45ceee936c7f5763d1a2b3d663ac3ef52083b218717c8f657b981dddd8a3a461c5ed1a0e678ea0b8b33cf4ce06c8a8549e9cf2e92ddeb1ed1bc64aaf88d9b2ad39abdd961932465d39915ecf41b0af7d5517d6be917958be18af426d51e5ab2a850fcb4970c82f1aa48b9868232781497676296a0008fa61012b52b1058d3f6262cc94fb05d05f79d5589fa95b6f479f55919a1c9a99d09785f686a63890d795d3bac1e89028d9c0c284700858cd4", 0xf3}], 0x1}}], 0xa, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r13, 0x1, 0x1d, &(0x7f00000000c0)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x3f, 0x0, &(0x7f0000000140)) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003a40)=ANY=[@ANYBLOB="1400000015000100000000080000000001000000236591b2aa710953"], 0x14}}, 0x0) 325.963µs ago: executing program 5 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'c6xdigio\x00', [0x4, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0xb, 0xa, 0x100, 0x2, 0x1, 0xfffffffd, 0x40, 0x6, 0x101, 0x29, 0x1a649, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e5a, 0xe, 0xe69, 0x3f, 0x8, 0x2, 0x0, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x2}}, 0x10) 0s ago: executing program 6 (id=895): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) fcntl$getown(r0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) kernel console output (not intermixed with test programs): e [ 64.179880][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.326706][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.363263][ T5983] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.363413][ T5987] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.478821][ T6578] veth0_vlan: entered promiscuous mode [ 64.486964][ T6578] veth1_vlan: entered promiscuous mode [ 64.513435][ T6578] veth0_macvtap: entered promiscuous mode [ 64.519332][ T6578] veth1_macvtap: entered promiscuous mode [ 64.535987][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.542467][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.549425][ T1184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.553888][ T1184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.562234][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.565906][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.621134][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.625402][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.655759][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.658568][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.685454][ T6714] FAULT_INJECTION: forcing a failure. [ 64.685454][ T6714] name failslab, interval 1, probability 0, space 0, times 1 [ 64.693574][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.0.188 Not tainted syzkaller #0 PREEMPT(full) [ 64.693598][ T6714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.693608][ T6714] Call Trace: [ 64.693614][ T6714] [ 64.693621][ T6714] dump_stack_lvl+0x16c/0x1f0 [ 64.693664][ T6714] should_fail_ex+0x512/0x640 [ 64.693689][ T6714] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 64.693724][ T6714] should_failslab+0xc2/0x120 [ 64.693744][ T6714] __kmalloc_cache_noprof+0x6a/0x3e0 [ 64.693771][ T6714] ? rcu_is_watching+0x12/0xc0 [ 64.693791][ T6714] ? vhost_task_create+0xe5/0x2e0 [ 64.693809][ T6714] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 64.693833][ T6714] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 64.693862][ T6714] vhost_task_create+0xe5/0x2e0 [ 64.693881][ T6714] ? __pfx_vhost_task_create+0x10/0x10 [ 64.693907][ T6714] ? __pfx_vhost_task_fn+0x10/0x10 [ 64.693936][ T6714] kvm_mmu_post_init_vm+0x1b7/0x380 [ 64.693954][ T6714] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 64.693978][ T6714] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 64.694006][ T6714] kvm_vcpu_ioctl+0x5eb/0x1690 [ 64.694031][ T6714] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.694054][ T6714] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.694075][ T6714] ? do_vfs_ioctl+0x128/0x14f0 [ 64.694102][ T6714] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.694127][ T6714] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.694162][ T6714] ? hook_file_ioctl_common+0x145/0x410 [ 64.694188][ T6714] ? selinux_file_ioctl+0x180/0x270 [ 64.694211][ T6714] ? selinux_file_ioctl+0xb4/0x270 [ 64.694237][ T6714] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.694261][ T6714] __x64_sys_ioctl+0x18b/0x210 [ 64.694290][ T6714] do_syscall_64+0xcd/0x4c0 [ 64.694312][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.694330][ T6714] RIP: 0033:0x7ff88178ebe9 [ 64.694345][ T6714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.694361][ T6714] RSP: 002b:00007ff882536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.694378][ T6714] RAX: ffffffffffffffda RBX: 00007ff8819c5fa0 RCX: 00007ff88178ebe9 [ 64.694389][ T6714] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 64.694400][ T6714] RBP: 00007ff882536090 R08: 0000000000000000 R09: 0000000000000000 [ 64.694410][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.694419][ T6714] R13: 00007ff8819c6038 R14: 00007ff8819c5fa0 R15: 00007ffee3233198 [ 64.694445][ T6714] [ 64.822160][ T6724] __nla_validate_parse: 3 callbacks suppressed [ 64.822177][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 64.828664][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 64.865258][ T6732] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 65.046008][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 65.048116][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 65.122416][ T5987] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 65.217627][ T6756] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 65.245983][ T6788] SELinux: policydb version 0 does not match my version range 15-35 [ 65.249166][ T6788] SELinux: failed to load policy [ 65.354281][ T6802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.390672][ T6809] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 65.537484][ T6830] block nbd4: Attempted send on invalid socket [ 65.539520][ T6830] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.543373][ T6831] netlink: 132 bytes leftover after parsing attributes in process `syz.1.209'. [ 65.548410][ T6830] block nbd4: Attempted send on invalid socket [ 65.550373][ T6830] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.554611][ T6830] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 65.557858][ T6830] block nbd4: Attempted send on invalid socket [ 65.559818][ T6830] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.562752][ T6830] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 65.569281][ T6830] block nbd4: Attempted send on invalid socket [ 65.571208][ T6830] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.576879][ T6830] block nbd4: Attempted send on invalid socket [ 65.585663][ T6830] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.588449][ T6830] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 65.593264][ T151] block nbd4: Attempted send on invalid socket [ 65.596347][ T151] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.600789][ T6830] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 65.607343][ T6830] block nbd4: Attempted send on invalid socket [ 65.609761][ T6830] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.615692][ T6830] block nbd4: Attempted send on invalid socket [ 65.617823][ T6830] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.621509][ T6830] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 65.624847][ T6830] block nbd4: Attempted send on invalid socket [ 65.626868][ T6830] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.630692][ T6830] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 65.634327][ T6830] block nbd4: Attempted send on invalid socket [ 65.636344][ T6830] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.639739][ T6830] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 65.642907][ T6830] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 65.646557][ T6830] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 65.723104][ T5987] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.836389][ T6846] kvm: kvm [6844]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 65.839775][ T6846] kvm: kvm [6844]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 65.858796][ T6846] kvm: kvm [6844]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 65.879065][ T6846] kvm: kvm [6844]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 65.882324][ T6846] kvm: kvm [6844]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 65.944881][ T6854] hugetlbfs: Unknown parameter 'des)e%8' [ 66.004149][ T34] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 66.174886][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 66.178282][ T34] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.181785][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 66.185564][ T34] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.189401][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.192924][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 66.197017][ T34] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.201081][ T34] usb 9-1: config 168 interface 0 has no altsetting 0 [ 66.203273][ T5987] Bluetooth: hci3: command tx timeout [ 66.204639][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 66.207291][ T34] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.210868][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 66.214585][ T34] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.218232][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.221673][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 66.225229][ T34] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.229323][ T34] usb 9-1: config 168 interface 0 has no altsetting 0 [ 66.232234][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 66.234755][ T34] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.238203][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 66.241540][ T34] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.245415][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.248885][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 66.252329][ T34] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.256581][ T34] usb 9-1: config 168 interface 0 has no altsetting 0 [ 66.260826][ T34] usb 9-1: string descriptor 0 read error: -22 [ 66.263104][ T34] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 66.265908][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.275081][ T34] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 66.303077][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.424406][ T6876] overlayfs: missing 'workdir' [ 66.443767][ T5987] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.443798][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.455525][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.459629][ T29] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.462816][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.465703][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.470525][ T6861] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 66.475097][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.476853][ T6269] usb 9-1: USB disconnect, device number 2 [ 66.583778][ T6883] FAULT_INJECTION: forcing a failure. [ 66.583778][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 66.588228][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.1.222 Not tainted syzkaller #0 PREEMPT(full) [ 66.588244][ T6883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.588250][ T6883] Call Trace: [ 66.588254][ T6883] [ 66.588259][ T6883] dump_stack_lvl+0x16c/0x1f0 [ 66.588301][ T6883] should_fail_ex+0x512/0x640 [ 66.588313][ T6883] ? __kmalloc_noprof+0xbf/0x510 [ 66.588326][ T6883] ? lsm_blob_alloc+0x68/0x90 [ 66.588337][ T6883] should_failslab+0xc2/0x120 [ 66.588350][ T6883] __kmalloc_noprof+0xd2/0x510 [ 66.588360][ T6883] ? __pfx_perf_event_init_task+0x10/0x10 [ 66.588375][ T6883] ? audit_alloc+0xa2/0x7b0 [ 66.588391][ T6883] lsm_blob_alloc+0x68/0x90 [ 66.588403][ T6883] security_task_alloc+0x2d/0x260 [ 66.588420][ T6883] copy_process+0x2205/0x7690 [ 66.588442][ T6883] ? __pfx_copy_process+0x10/0x10 [ 66.588458][ T6883] ? lockdep_init_map_type+0x5c/0x280 [ 66.588470][ T6883] ? lockdep_init_map_type+0x5c/0x280 [ 66.588480][ T6883] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 66.588495][ T6883] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 66.588512][ T6883] vhost_task_create+0x1d2/0x2e0 [ 66.588524][ T6883] ? __pfx_vhost_task_create+0x10/0x10 [ 66.588538][ T6883] ? __pfx_vhost_task_fn+0x10/0x10 [ 66.588556][ T6883] kvm_mmu_post_init_vm+0x1b7/0x380 [ 66.588569][ T6883] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 66.588585][ T6883] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 66.588602][ T6883] kvm_vcpu_ioctl+0x5eb/0x1690 [ 66.588617][ T6883] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.588632][ T6883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.588645][ T6883] ? do_vfs_ioctl+0x128/0x14f0 [ 66.588661][ T6883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 66.588677][ T6883] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.588698][ T6883] ? hook_file_ioctl_common+0x145/0x410 [ 66.588713][ T6883] ? selinux_file_ioctl+0x180/0x270 [ 66.588728][ T6883] ? selinux_file_ioctl+0xb4/0x270 [ 66.588743][ T6883] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.588758][ T6883] __x64_sys_ioctl+0x18b/0x210 [ 66.588775][ T6883] do_syscall_64+0xcd/0x4c0 [ 66.588788][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.588799][ T6883] RIP: 0033:0x7f9b6538ebe9 [ 66.588808][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.588818][ T6883] RSP: 002b:00007f9b6623a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.588829][ T6883] RAX: ffffffffffffffda RBX: 00007f9b655c5fa0 RCX: 00007f9b6538ebe9 [ 66.588836][ T6883] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 66.588842][ T6883] RBP: 00007f9b6623a090 R08: 0000000000000000 R09: 0000000000000000 [ 66.588848][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.588853][ T6883] R13: 00007f9b655c6038 R14: 00007f9b655c5fa0 R15: 00007ffceb80f8b8 [ 66.588867][ T6883] [ 66.756640][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 66.756651][ T40] audit: type=1400 audit(1757327783.710:378): avc: denied { bind } for pid=6887 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.756867][ T29] usb 8-1: USB disconnect, device number 4 [ 66.794856][ T40] audit: type=1400 audit(1757327783.750:379): avc: denied { listen } for pid=6887 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.803774][ T40] audit: type=1400 audit(1757327783.750:380): avc: denied { connect } for pid=6887 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.815533][ T40] audit: type=1400 audit(1757327783.760:381): avc: denied { write } for pid=6887 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.823376][ T40] audit: type=1400 audit(1757327783.760:382): avc: denied { accept } for pid=6887 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.831184][ T40] audit: type=1400 audit(1757327783.760:383): avc: denied { read } for pid=6887 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.840289][ T6890] netlink: 68 bytes leftover after parsing attributes in process `syz.3.225'. [ 66.985296][ T40] audit: type=1400 audit(1757327783.940:384): avc: denied { bind } for pid=6895 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.992562][ T40] audit: type=1400 audit(1757327783.940:385): avc: denied { name_bind } for pid=6895 comm="syz.3.228" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 66.999660][ T40] audit: type=1400 audit(1757327783.940:386): avc: denied { node_bind } for pid=6895 comm="syz.3.228" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 67.029593][ T6902] netlink: 'syz.4.229': attribute type 9 has an invalid length. [ 67.043664][ T40] audit: type=1400 audit(1757327784.000:387): avc: denied { getopt } for pid=6903 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.088731][ T6900] vlan2: entered promiscuous mode [ 67.091094][ T6900] bridge0: entered promiscuous mode [ 67.175948][ T6916] xt_policy: neither incoming nor outgoing policy selected [ 67.225545][ T6924] netlink: 'syz.4.236': attribute type 2 has an invalid length. [ 67.341963][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 67.397798][ T6944] 9pnet_fd: Insufficient options for proto=fd [ 67.397871][ T6943] 9pnet_fd: Insufficient options for proto=fd [ 67.417416][ T6940] team0: Port device team_slave_0 removed [ 67.542617][ T6056] IPVS: starting estimator thread 0... [ 67.654169][ T6960] IPVS: using max 40 ests per chain, 96000 per kthread [ 67.718599][ T6969] FAULT_INJECTION: forcing a failure. [ 67.718599][ T6969] name failslab, interval 1, probability 0, space 0, times 0 [ 67.722670][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT(full) [ 67.722687][ T6969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.722694][ T6969] Call Trace: [ 67.722698][ T6969] [ 67.722702][ T6969] dump_stack_lvl+0x16c/0x1f0 [ 67.722731][ T6969] should_fail_ex+0x512/0x640 [ 67.722747][ T6969] ? __kvmalloc_node_noprof+0x124/0x620 [ 67.722759][ T6969] should_failslab+0xc2/0x120 [ 67.722772][ T6969] __kvmalloc_node_noprof+0x137/0x620 [ 67.722783][ T6969] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 67.722799][ T6969] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 67.722816][ T6969] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 67.722832][ T6969] __kvm_mmu_topup_memory_cache+0x450/0x600 [ 67.722852][ T6969] mmu_topup_memory_caches+0x25/0x170 [ 67.722864][ T6969] kvm_mmu_load+0xd6/0x23c0 [ 67.722875][ T6969] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 67.722887][ T6969] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 67.722900][ T6969] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 67.722915][ T6969] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 67.722928][ T6969] ? __pfx_kvm_mmu_load+0x10/0x10 [ 67.722938][ T6969] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 67.722965][ T6969] ? kvm_check_and_inject_events+0x71c/0x1310 [ 67.722985][ T6969] vcpu_run+0x358c/0x5580 [ 67.723001][ T6969] ? __lock_acquire+0xb97/0x1ce0 [ 67.723022][ T6969] ? __pfx_vcpu_run+0x10/0x10 [ 67.723038][ T6969] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 67.723052][ T6969] ? __local_bh_enable_ip+0xa4/0x120 [ 67.723068][ T6969] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 67.723082][ T6969] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 67.723101][ T6969] kvm_vcpu_ioctl+0x5eb/0x1690 [ 67.723117][ T6969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.723131][ T6969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.723145][ T6969] ? do_vfs_ioctl+0x128/0x14f0 [ 67.723162][ T6969] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 67.723178][ T6969] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.723199][ T6969] ? hook_file_ioctl_common+0x145/0x410 [ 67.723215][ T6969] ? selinux_file_ioctl+0x180/0x270 [ 67.723229][ T6969] ? selinux_file_ioctl+0xb4/0x270 [ 67.723245][ T6969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.723259][ T6969] __x64_sys_ioctl+0x18b/0x210 [ 67.723276][ T6969] do_syscall_64+0xcd/0x4c0 [ 67.723290][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.723300][ T6969] RIP: 0033:0x7f9b6538ebe9 [ 67.723310][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.723320][ T6969] RSP: 002b:00007f9b6623a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.723330][ T6969] RAX: ffffffffffffffda RBX: 00007f9b655c5fa0 RCX: 00007f9b6538ebe9 [ 67.723337][ T6969] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 67.723343][ T6969] RBP: 00007f9b6623a090 R08: 0000000000000000 R09: 0000000000000000 [ 67.723348][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.723355][ T6969] R13: 00007f9b655c6038 R14: 00007f9b655c5fa0 R15: 00007ffceb80f8b8 [ 67.723368][ T6969] [ 67.844681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.850566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.854078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.858142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.861901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.865856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.869790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.872763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.876568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.905901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.025319][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.252'. [ 68.039313][ T6978] netlink: 180 bytes leftover after parsing attributes in process `syz.1.253'. [ 68.042172][ T6978] netlink: 180 bytes leftover after parsing attributes in process `syz.1.253'. [ 68.082398][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=6980 comm=syz.3.254 [ 68.088015][ T6980] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 68.126266][ T6990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.130583][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.236506][ T7000] FAULT_INJECTION: forcing a failure. [ 68.236506][ T7000] name failslab, interval 1, probability 0, space 0, times 0 [ 68.240407][ T7000] CPU: 0 UID: 0 PID: 7000 Comm: syz.3.262 Not tainted syzkaller #0 PREEMPT(full) [ 68.240422][ T7000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.240428][ T7000] Call Trace: [ 68.240433][ T7000] [ 68.240437][ T7000] dump_stack_lvl+0x16c/0x1f0 [ 68.240453][ T7000] should_fail_ex+0x512/0x640 [ 68.240466][ T7000] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 68.240479][ T7000] should_failslab+0xc2/0x120 [ 68.240492][ T7000] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 68.240502][ T7000] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 68.240519][ T7000] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 68.240534][ T7000] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 68.240552][ T7000] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 68.240572][ T7000] mmu_topup_memory_caches+0x25/0x170 [ 68.240585][ T7000] kvm_mmu_load+0xd6/0x23c0 [ 68.240595][ T7000] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 68.240607][ T7000] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 68.240619][ T7000] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 68.240634][ T7000] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 68.240647][ T7000] ? __pfx_kvm_mmu_load+0x10/0x10 [ 68.240657][ T7000] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 68.240674][ T7000] ? kvm_check_and_inject_events+0x71c/0x1310 [ 68.240693][ T7000] vcpu_run+0x358c/0x5580 [ 68.240708][ T7000] ? __lock_acquire+0xb97/0x1ce0 [ 68.240729][ T7000] ? __pfx_vcpu_run+0x10/0x10 [ 68.240746][ T7000] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 68.240759][ T7000] ? __local_bh_enable_ip+0xa4/0x120 [ 68.240776][ T7000] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 68.240791][ T7000] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 68.240810][ T7000] kvm_vcpu_ioctl+0x5eb/0x1690 [ 68.240826][ T7000] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.240847][ T7000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.240861][ T7000] ? do_vfs_ioctl+0x128/0x14f0 [ 68.240878][ T7000] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.240894][ T7000] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.240918][ T7000] ? hook_file_ioctl_common+0x145/0x410 [ 68.240934][ T7000] ? selinux_file_ioctl+0x180/0x270 [ 68.240948][ T7000] ? selinux_file_ioctl+0xb4/0x270 [ 68.240964][ T7000] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.240978][ T7000] __x64_sys_ioctl+0x18b/0x210 [ 68.240995][ T7000] do_syscall_64+0xcd/0x4c0 [ 68.241009][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.241020][ T7000] RIP: 0033:0x7f5af9f8ebe9 [ 68.241029][ T7000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.241039][ T7000] RSP: 002b:00007f5afad7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.241049][ T7000] RAX: ffffffffffffffda RBX: 00007f5afa1c5fa0 RCX: 00007f5af9f8ebe9 [ 68.241056][ T7000] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 68.241062][ T7000] RBP: 00007f5afad7b090 R08: 0000000000000000 R09: 0000000000000000 [ 68.241068][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.241073][ T7000] R13: 00007f5afa1c6038 R14: 00007f5afa1c5fa0 R15: 00007ffff4f37548 [ 68.241087][ T7000] [ 68.337754][ T5983] Bluetooth: hci3: command tx timeout [ 68.360051][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.362661][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.424714][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.431607][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.519533][ T1154] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.522300][ T1154] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.528812][ T1154] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.531547][ T1154] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.594297][ T7022] xt_time: unknown flags 0xf4 [ 69.540662][ T5983] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 69.543876][ T5983] Bluetooth: hci1: unexpected event for opcode 0x203e [ 70.363268][ T5983] Bluetooth: hci3: command tx timeout [ 71.168075][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.170131][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.564998][ T5983] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 73.567705][ T5983] Bluetooth: hci1: Injecting HCI hardware error event [ 73.570401][ T5983] Bluetooth: hci1: hardware error 0x00 [ 75.644658][ T5983] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 81.414397][ T72] cfg80211: failed to load regulatory.db [ 81.613484][ T7065] __nla_validate_parse: 2 callbacks suppressed [ 81.613494][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 81.618278][ T7065] openvswitch: netlink: Unknown nsh attribute 0 [ 81.620263][ T7065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.625300][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 81.625314][ T40] audit: type=1400 audit(1757327798.580:406): avc: denied { mounton } for pid=7063 comm="syz.1.269" path="/79/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 81.636388][ T40] audit: type=1400 audit(1757327798.580:407): avc: denied { mount } for pid=7063 comm="syz.1.269" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.646264][ T7066] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.651139][ T7066] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 81.662651][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 81.670327][ T7072] IPv6: sit1: Disabled Multicast RS [ 81.672560][ T7072] sit1: entered allmulticast mode [ 81.687981][ T7071] kvm: MWAIT instruction emulated as NOP! [ 81.699677][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 81.700447][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 81.706268][ T7074] xfrm1: entered promiscuous mode [ 81.708245][ T7074] xfrm1: entered allmulticast mode [ 81.728160][ T40] audit: type=1400 audit(1757327798.680:408): avc: denied { link } for pid=5970 comm="syz-executor" name="#b" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.737457][ T40] audit: type=1400 audit(1757327798.680:409): avc: denied { rename } for pid=5970 comm="syz-executor" name="#c" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.798400][ T7090] 9pnet_fd: Insufficient options for proto=fd [ 81.811821][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 81.976631][ T7105] binder: 7104:7105 ioctl c0306201 2000000005c0 returned -14 [ 81.979873][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 82.019640][ T7107] tap0: tun_chr_ioctl cmd 1074025672 [ 82.021391][ T7107] tap0: ignored: set checksum enabled [ 82.360882][ T40] audit: type=1400 audit(1757327799.310:410): avc: denied { accept } for pid=7110 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.450468][ T40] audit: type=1400 audit(1757327799.400:411): avc: denied { create } for pid=7119 comm="syz.4.286" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.472628][ T40] audit: type=1400 audit(1757327799.420:412): avc: denied { mounton } for pid=7119 comm="syz.4.286" path="/28/file0" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.484046][ T40] audit: type=1326 audit(1757327799.440:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.3.287" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5af9f8ebe9 code=0x0 [ 82.490636][ T40] audit: type=1400 audit(1757327799.440:414): avc: denied { create } for pid=7119 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.496581][ T40] audit: type=1400 audit(1757327799.440:415): avc: denied { ioctl } for pid=7119 comm="syz.4.286" path="socket:[17111]" dev="sockfs" ino=17111 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.581962][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 82.587923][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 82.621781][ T7143] netlink: 96 bytes leftover after parsing attributes in process `syz.0.292'. [ 82.732387][ T7151] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 82.758707][ T7153] netlink: 108 bytes leftover after parsing attributes in process `syz.0.295'. [ 83.053297][ T7174] use of bytesused == 0 is deprecated and will be removed in the future, [ 83.056738][ T7174] use the actual size instead. [ 83.065194][ T7174] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 83.258597][ T7178] netlink: 'syz.0.304': attribute type 30 has an invalid length. [ 83.432418][ T7187] kAFS: unparsable volume name [ 83.598156][ T7197] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 83.600659][ T7197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.605040][ T7197] vhci_hcd vhci_hcd.0: Device attached [ 83.608847][ T7197] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 83.611421][ T7197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.614625][ T7197] vhci_hcd vhci_hcd.0: Device attached [ 83.670202][ T7197] fuse: root generation should be zero [ 83.697433][ T7200] vhci_hcd: connection closed [ 83.698842][ T7198] vhci_hcd: connection closed [ 83.699007][ T1154] vhci_hcd: stop threads [ 83.704355][ T1154] vhci_hcd: release socket [ 83.706633][ T1154] vhci_hcd: disconnect device [ 83.708762][ T1154] vhci_hcd: stop threads [ 83.710139][ T1154] vhci_hcd: release socket [ 83.711628][ T1154] vhci_hcd: disconnect device [ 84.213067][ T7206] program syz.3.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.324529][ T7223] netlink: 'syz.3.312': attribute type 3 has an invalid length. [ 84.327762][ T7223] /dev/sg0: Can't lookup blockdev [ 84.383454][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 94.890676][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 94.890687][ T40] audit: type=1400 audit(1757327811.840:425): avc: denied { append } for pid=7278 comm="syz.4.324" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.016921][ T40] audit: type=1400 audit(1757327811.970:426): avc: denied { audit_control } for pid=7296 comm="syz.0.329" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.141206][ T40] audit: type=1400 audit(1757327812.090:427): avc: denied { ioctl } for pid=7315 comm="syz.3.333" path="socket:[18865]" dev="sockfs" ino=18865 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.150614][ T40] audit: type=1400 audit(1757327812.100:428): avc: denied { bind } for pid=7315 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.187848][ T7318] __nla_validate_parse: 9 callbacks suppressed [ 95.187859][ T7318] netlink: 60 bytes leftover after parsing attributes in process `syz.3.334'. [ 95.320495][ T40] audit: type=1400 audit(1757327812.270:429): avc: denied { getopt } for pid=7319 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.735469][ T40] audit: type=1400 audit(1757327812.690:430): avc: denied { ioctl } for pid=7322 comm="syz.3.336" path="socket:[16179]" dev="sockfs" ino=16179 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.844283][ T40] audit: type=1326 audit(1757327812.790:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc58ebe9 code=0x7ffc0000 [ 95.854953][ T40] audit: type=1326 audit(1757327812.790:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc58ebe9 code=0x7ffc0000 [ 95.862203][ T40] audit: type=1326 audit(1757327812.810:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.338" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1dc58ebe9 code=0x7ffc0000 [ 95.870568][ T40] audit: type=1400 audit(1757327812.810:434): avc: denied { write } for pid=7327 comm="syz.4.338" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 95.935122][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=7331 comm=syz.4.339 [ 95.954932][ T7331] netlink: 'syz.4.339': attribute type 29 has an invalid length. [ 95.978912][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 96.061134][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.4.343'. [ 96.071806][ T7341] vlan1: entered promiscuous mode [ 96.075600][ T7341] bridge0: entered promiscuous mode [ 96.160865][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 96.486204][ T7370] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 96.491180][ T7370] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 96.773094][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 96.861891][ T7377] SELinux: security_context_str_to_sid () failed with errno=-22 [ 96.900411][ T7379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.356'. [ 96.943131][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 96.946363][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.950826][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.954230][ T24] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 96.957054][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.968263][ T24] usb 9-1: config 0 descriptor?? [ 96.992423][ T5987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.996819][ T5987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.999542][ T5987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.002827][ T5987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.006441][ T5987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.125584][ T7385] chnl_net:caif_netlink_parms(): no params data found [ 97.189181][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.191518][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.193954][ T7385] bridge_slave_0: entered allmulticast mode [ 97.196547][ T7385] bridge_slave_0: entered promiscuous mode [ 97.200561][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.202810][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.205619][ T7385] bridge_slave_1: entered allmulticast mode [ 97.208200][ T7385] bridge_slave_1: entered promiscuous mode [ 97.274411][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.280498][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.295162][ T7395] devtmpfs: Cannot change global quota limit on remount [ 97.319665][ T7385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.325926][ T7385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.392773][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.392808][ T24] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 97.404016][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.411755][ T7385] team0: Port device team_slave_0 added [ 97.426065][ T7385] team0: Port device team_slave_1 added [ 97.489487][ T7385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.491702][ T7385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.500723][ T7385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.515639][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.518796][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.524987][ T7385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.527146][ T7385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.535165][ T7385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.574032][ T7385] hsr_slave_0: entered promiscuous mode [ 97.576304][ T7385] hsr_slave_1: entered promiscuous mode [ 97.580166][ T7385] debugfs: 'hsr0' already exists in 'hsr' [ 97.581343][ T24] usb 9-1: USB disconnect, device number 3 [ 97.582453][ T7385] Cannot create hsr debugfs directory [ 97.597687][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.600870][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.604135][ T72] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.727250][ T7385] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.731554][ T7385] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.743238][ T7385] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.758422][ T7385] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.774042][ T13] bridge_slave_1: left allmulticast mode [ 97.774460][ T72] usb 5-1: config 0 has no interfaces? [ 97.775862][ T13] bridge_slave_1: left promiscuous mode [ 97.779443][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.780426][ T72] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 97.786033][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.788517][ T72] usb 5-1: Product: syz [ 97.789774][ T72] usb 5-1: Manufacturer: syz [ 97.791206][ T72] usb 5-1: SerialNumber: syz [ 97.793739][ T13] bridge_slave_0: left allmulticast mode [ 97.797785][ T13] bridge_slave_0: left promiscuous mode [ 97.798942][ T72] usb 5-1: config 0 descriptor?? [ 97.799949][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.947728][ T13] bridge0 (unregistering): left promiscuous mode [ 98.188875][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.195450][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.199056][ T13] bond0 (unregistering): Released all slaves [ 98.205221][ T13] bond1 (unregistering): Released all slaves [ 98.212682][ T7405] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 98.319694][ T61] usb 5-1: USB disconnect, device number 2 [ 98.375607][ T7417] tipc: Started in network mode [ 98.376957][ T7422] fuse: Bad value for 'user_id' [ 98.377206][ T7417] tipc: Node identity 9e6315815a1c, cluster identity 4711 [ 98.378756][ T7422] fuse: Bad value for 'user_id' [ 98.381117][ T7417] tipc: Enabled bearer , priority 0 [ 98.389265][ T7417] syzkaller0: entered promiscuous mode [ 98.390986][ T7417] syzkaller0: entered allmulticast mode [ 98.396163][ T7417] tipc: Resetting bearer [ 98.414421][ T7417] overlayfs: missing 'lowerdir' [ 98.439538][ T7385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.452650][ T7427] netlink: 76 bytes leftover after parsing attributes in process `syz.4.366'. [ 98.464186][ T7385] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.472823][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.475091][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.480060][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.482329][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.506760][ T7416] tipc: Resetting bearer [ 98.519962][ T7416] tipc: Disabling bearer [ 98.583201][ T13] batadv_slave_1: left promiscuous mode [ 98.592760][ T13] hsr_slave_0: left promiscuous mode [ 98.595866][ T13] hsr_slave_1: left promiscuous mode [ 98.597773][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.600550][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.605615][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.608009][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.635871][ T13] veth1_macvtap: left promiscuous mode [ 98.637661][ T13] veth0_macvtap: left promiscuous mode [ 98.639435][ T13] veth1_vlan: left promiscuous mode [ 98.641146][ T13] veth0_vlan: left promiscuous mode [ 98.686531][ T7460] block device autoloading is deprecated and will be removed. [ 98.691348][ T7460] usb usb9: usbfs: process 7460 (syz.3.372) did not claim interface 0 before use [ 99.083275][ T5987] Bluetooth: hci1: command tx timeout [ 99.191230][ T13] team0 (unregistering): Port device team_slave_1 removed [ 99.636787][ T7464] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.651521][ T7467] dvmrp1: entered allmulticast mode [ 99.659633][ T7385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.737239][ T7479] NILFS (loop4): device size too small [ 99.851904][ T7385] veth0_vlan: entered promiscuous mode [ 99.856997][ T7385] veth1_vlan: entered promiscuous mode [ 99.917416][ T7507] cgroup: Name too long [ 99.934886][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 99.934896][ T40] audit: type=1400 audit(1757327816.890:465): avc: denied { accept } for pid=7505 comm="syz.0.382" path="socket:[21663]" dev="sockfs" ino=21663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 99.976975][ T7385] veth0_macvtap: entered promiscuous mode [ 99.982560][ T7385] veth1_macvtap: entered promiscuous mode [ 99.989012][ T13] IPVS: stop unused estimator thread 0... [ 99.992155][ T7385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.997915][ T7385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.016541][ T1145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.019442][ T1145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.025046][ T1145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.031558][ T1145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.059010][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.061588][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.081102][ T9] libceph: connect (1)[c::]:6789 error -101 [ 100.085937][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 100.108941][ T6056] libceph: connect (1)[c::]:6789 error -101 [ 100.112486][ T6056] libceph: mon0 (1)[c::]:6789 connect error [ 100.118450][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.120908][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.152542][ T40] audit: type=1400 audit(1757327817.100:466): avc: denied { setopt } for pid=7519 comm="syz.4.385" lport=34247 faddr=fe80::aa fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.155914][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.385'. [ 100.180472][ T40] audit: type=1326 audit(1757327817.130:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.5.354" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f124138ebe9 code=0x0 [ 100.285869][ T40] audit: type=1400 audit(1757327817.240:468): avc: denied { append } for pid=7529 comm="syz.5.354" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.345261][ T9] libceph: connect (1)[c::]:6789 error -101 [ 100.347263][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 100.373826][ T6056] libceph: connect (1)[c::]:6789 error -101 [ 100.375807][ T6056] libceph: mon0 (1)[c::]:6789 connect error [ 100.469414][ T40] audit: type=1326 audit(1757327817.420:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.3.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9f8ebe9 code=0x7fc00000 [ 100.806236][ T40] audit: type=1400 audit(1757327817.760:470): avc: denied { create } for pid=7543 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.813819][ T40] audit: type=1400 audit(1757327817.760:471): avc: denied { ioctl } for pid=7543 comm="syz.3.388" path="socket:[19063]" dev="sockfs" ino=19063 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.854123][ T9] libceph: connect (1)[c::]:6789 error -101 [ 100.856286][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 100.874797][ T7516] ceph: No mds server is up or the cluster is laggy [ 100.874819][ T7523] ceph: No mds server is up or the cluster is laggy [ 100.883792][ T6056] libceph: connect (1)[c::]:6789 error -101 [ 100.886332][ T6056] libceph: mon0 (1)[c::]:6789 connect error [ 101.163279][ T5987] Bluetooth: hci1: command tx timeout [ 101.193060][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 101.306105][ T7567] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 101.308384][ T7567] netlink: 'syz.4.395': attribute type 2 has an invalid length. [ 101.353076][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 101.364017][ T9] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 101.367781][ T9] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 101.371006][ T9] usb 8-1: Product: syz [ 101.372701][ T9] usb 8-1: Manufacturer: syz [ 101.374382][ T9] usb 8-1: SerialNumber: syz [ 101.377541][ T9] usb 8-1: config 0 descriptor?? [ 101.418386][ T40] audit: type=1400 audit(1757327818.370:472): avc: denied { map } for pid=7574 comm="syz.4.397" path="socket:[19931]" dev="sockfs" ino=19931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.436630][ T40] audit: type=1400 audit(1757327818.380:473): avc: denied { connect } for pid=7574 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.454485][ T40] audit: type=1400 audit(1757327818.390:474): avc: denied { ioctl } for pid=7575 comm="syz.5.396" path="socket:[21998]" dev="sockfs" ino=21998 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.524744][ T7589] netlink: 48 bytes leftover after parsing attributes in process `syz.4.400'. [ 101.584860][ T72] usb 8-1: USB disconnect, device number 5 [ 101.601029][ T7593] syz.5.401 (7593): drop_caches: 2 [ 101.718508][ T7619] netem: incorrect gi model size [ 101.720843][ T7619] netem: change failed [ 101.983077][ T6030] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 102.122882][ T7629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7629 comm=syz.3.411 [ 102.153101][ T6030] usb 9-1: Using ep0 maxpacket: 16 [ 102.156618][ T6030] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.161171][ T6030] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.164768][ T6030] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.168731][ T6030] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.171537][ T6030] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.175355][ T6030] usb 9-1: config 0 descriptor?? [ 102.582018][ T6030] microsoft 0003:045E:07DA.0003: item fetching failed at offset 0/34 [ 102.585068][ T6030] microsoft 0003:045E:07DA.0003: parse failed [ 102.587009][ T6030] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 102.614523][ T7624] bridge0: entered promiscuous mode [ 102.616559][ T7624] macsec1: entered promiscuous mode [ 102.789248][ T9] usb 9-1: USB disconnect, device number 4 [ 103.081262][ T7653] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 103.084054][ T7653] PKCS7: Only support pkcs7_signedData type [ 103.125176][ T7656] tmpfs: Unknown parameter 'K' [ 103.197280][ T7660] nfs4: Bad value for 'source' [ 103.243120][ T5987] Bluetooth: hci1: command tx timeout [ 103.621815][ T7687] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 103.634058][ T7687] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 103.638305][ T7687] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 103.645531][ T7687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.650194][ T7687] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.660940][ T7687] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 103.757690][ T7694] netlink: 'syz.3.432': attribute type 5 has an invalid length. [ 103.760991][ T7694] netlink: 'syz.3.432': attribute type 17 has an invalid length. [ 103.948826][ T7720] pim6reg: entered allmulticast mode [ 103.949545][ T7723] program syz.4.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.950742][ T7721] pim6reg: left allmulticast mode [ 103.963143][ T5987] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 103.966752][ T5987] Bluetooth: hci3: Injecting HCI hardware error event [ 103.970129][ T5983] Bluetooth: hci3: hardware error 0x00 [ 104.201656][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.445'. [ 104.546578][ T7758] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.549377][ T7758] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.631131][ T5987] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 104.788578][ T7769] netlink: 1072 bytes leftover after parsing attributes in process `syz.4.454'. [ 104.792294][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 104.838509][ T7769] sp0: Synchronizing with TNC [ 105.057797][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 105.057812][ T40] audit: type=1400 audit(1757327822.010:496): avc: denied { ioctl } for pid=7777 comm="syz.5.457" path="socket:[21050]" dev="sockfs" ino=21050 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.057871][ T7780] mmap: syz.5.457 (7780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.078353][ T7778] ip6erspan0: entered promiscuous mode [ 105.080897][ T40] audit: type=1326 audit(1757327822.030:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.090530][ T40] audit: type=1326 audit(1757327822.030:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.099814][ T40] audit: type=1326 audit(1757327822.030:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.107289][ T40] audit: type=1326 audit(1757327822.030:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.107485][ T7782] netlink: 244 bytes leftover after parsing attributes in process `syz.5.458'. [ 105.114635][ T40] audit: type=1326 audit(1757327822.030:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.125704][ T40] audit: type=1326 audit(1757327822.030:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.132863][ T40] audit: type=1326 audit(1757327822.030:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.140218][ T40] audit: type=1326 audit(1757327822.030:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.141035][ T7785] virtio-fs: tag not found [ 105.147643][ T40] audit: type=1326 audit(1757327822.030:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88178ebe9 code=0x7fc00000 [ 105.179738][ T7785] batadv_slave_1: entered promiscuous mode [ 105.191250][ T7785] batadv_slave_1: left promiscuous mode [ 105.258887][ T7791] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.261476][ T7791] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 105.265694][ T7791] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.268787][ T7791] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 105.307882][ T7791] syzkaller0: entered promiscuous mode [ 105.309797][ T7791] syzkaller0: entered allmulticast mode [ 105.323251][ T5979] Bluetooth: hci1: command tx timeout [ 105.457545][ T7802] tmpfs: Bad value for 'huge' [ 106.054578][ T5983] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 106.929262][ T7817] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 106.932487][ T7817] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.470'. [ 106.962062][ T7806] Set syz1 is full, maxelem 65536 reached [ 106.996065][ T7823] policy can only be matched on NF_INET_PRE_ROUTING [ 106.996076][ T7823] unable to load match [ 107.061333][ T7826] 8021q: VLANs not supported on sit0 [ 107.108818][ T7830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.301003][ T7857] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.304292][ T7857] overlayfs: failed to set xattr on upper [ 107.306218][ T7857] overlayfs: ...falling back to redirect_dir=nofollow. [ 107.308549][ T7857] overlayfs: ...falling back to metacopy=off. [ 107.310689][ T7857] overlayfs: ...falling back to index=off. [ 107.313166][ T7857] overlayfs: ...falling back to uuid=null. [ 107.329627][ T7863] loop3: detected capacity change from 0 to 1 [ 107.334312][ T7863] Dev loop3: unable to read RDB block 1 [ 107.336425][ T7863] loop3: unable to read partition table [ 107.338709][ T7863] loop3: partition table beyond EOD, truncated [ 107.341198][ T7863] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 107.368901][ T7867] Illegal XDP return value 3576272106 on prog (id 104) dev N/A, expect packet loss! [ 107.570846][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.491'. [ 107.607043][ T7886] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 107.609150][ T7886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.612587][ T7886] vhci_hcd vhci_hcd.0: Device attached [ 107.618067][ T7887] vhci_hcd: connection closed [ 107.619849][ T13] vhci_hcd: stop threads [ 107.622770][ T13] vhci_hcd: release socket [ 107.624582][ T13] vhci_hcd: disconnect device [ 107.783314][ T6056] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 107.839507][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 107.953447][ T6056] usb 10-1: Using ep0 maxpacket: 8 [ 107.963460][ T6056] usb 10-1: config 0 descriptor has 1 excess byte, ignoring [ 107.965859][ T6056] usb 10-1: config 0 interface 0 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.969877][ T6056] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.971989][ T6056] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.02 [ 107.983063][ T6056] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.989857][ T6056] usb 10-1: config 0 descriptor?? [ 108.156970][ T7920] netlink: 'syz.4.502': attribute type 2 has an invalid length. [ 108.159457][ T7920] netlink: 68 bytes leftover after parsing attributes in process `syz.4.502'. [ 108.227264][ T7923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.503'. [ 108.258540][ T7925] tipc: Enabling of bearer rejected, media not registered [ 108.334428][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.506'. [ 108.376181][ T7931] blk_print_req_error: 2 callbacks suppressed [ 108.376197][ T7931] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.381370][ T7931] MINIX-fs: unable to read superblock [ 108.391043][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 108.542474][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.667570][ T7942] binder: BINDER_SET_CONTEXT_MGR already set [ 108.670304][ T7942] binder: 7941:7942 ioctl 4018620d 2000000001c0 returned -16 [ 108.735592][ T7952] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 108.740190][ T7952] Error validating options; rc = [-22] [ 108.741311][ T61] hid-generic 0005:0C45:0009.0004: unknown main item tag 0x0 [ 108.752175][ T61] hid-generic 0005:0C45:0009.0004: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 109.518065][ T7963] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 109.599328][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.620930][ T7967] ufs: You didn't specify the type of your ufs filesystem [ 109.620930][ T7967] [ 109.620930][ T7967] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 109.620930][ T7967] [ 109.620930][ T7967] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 109.630903][ T7967] ufs: ufstype=old is supported read-only [ 109.633779][ T7967] nbd_handle_cmd: 2 callbacks suppressed [ 109.633795][ T7967] block nbd3: Attempted send on invalid socket [ 109.638153][ T7967] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.777451][ T7970] syzkaller1: entered promiscuous mode [ 109.779780][ T7970] syzkaller1: entered allmulticast mode [ 109.919293][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.521'. [ 110.140858][ T40] kauditd_printk_skb: 404 callbacks suppressed [ 110.140874][ T40] audit: type=1400 audit(1757327827.090:910): avc: denied { create } for pid=7991 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.151067][ T40] audit: type=1400 audit(1757327827.100:911): avc: denied { remove_name } for pid=7991 comm="syz.4.523" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.158110][ T40] audit: type=1400 audit(1757327827.100:912): avc: denied { unlink } for pid=7991 comm="syz.4.523" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.166437][ T40] audit: type=1400 audit(1757327827.100:913): avc: denied { write } for pid=7991 comm="syz.4.523" path="socket:[22853]" dev="sockfs" ino=22853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.227395][ T7984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.522'. [ 110.350860][ T40] audit: type=1400 audit(1757327827.300:914): avc: denied { read } for pid=8004 comm="syz.4.527" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.429710][ T6056] usb 10-1: string descriptor 0 read error: -71 [ 110.435420][ T6056] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 110.440453][ T6056] usb 10-1: USB disconnect, device number 2 [ 110.484636][ T40] audit: type=1400 audit(1757327827.440:915): avc: denied { nlmsg_write } for pid=8030 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.568414][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 110.790782][ T40] audit: type=1400 audit(1757327827.740:916): avc: denied { checkpoint_restore } for pid=8051 comm="syz.4.541" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.791745][ T8052] openvswitch: netlink: IP tunnel TTL not specified. [ 110.813468][ T6056] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 110.813674][ T1179] Bluetooth: hci4: Frame reassembly failed (-90) [ 110.879258][ T8059] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 110.912885][ T8063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8063 comm=syz.3.544 [ 110.912893][ T8062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8062 comm=syz.3.544 [ 110.963284][ T6056] usb 10-1: Using ep0 maxpacket: 8 [ 110.969788][ T6056] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.976386][ T6056] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.979416][ T6056] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.982503][ T6056] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.988878][ T6056] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.992473][ T6056] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.208848][ T40] audit: type=1400 audit(1757327828.160:917): avc: denied { write } for pid=8028 comm="syz.5.534" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.217020][ T6056] usb 10-1: usb_control_msg returned -71 [ 111.218762][ T6056] usbtmc 10-1:16.0: can't read capabilities [ 111.225123][ T6056] usb 10-1: USB disconnect, device number 3 [ 111.354966][ T40] audit: type=1400 audit(1757327828.310:918): avc: denied { write } for pid=8081 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.828070][ T8095] lo: entered promiscuous mode [ 112.059379][ T40] audit: type=1400 audit(1757327829.010:919): avc: denied { setopt } for pid=8107 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.166696][ T8115] __nla_validate_parse: 2 callbacks suppressed [ 112.166712][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 112.296264][ T8132] netlink: 60 bytes leftover after parsing attributes in process `syz.3.558'. [ 112.673170][ T6056] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 112.693271][ T8147] 9pnet_fd: Insufficient options for proto=fd [ 112.695654][ T8147] 9pnet_fd: Insufficient options for proto=fd [ 112.752681][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.565'. [ 112.760035][ T8151] team_slave_0: entered promiscuous mode [ 112.762737][ T8151] team_slave_1: entered promiscuous mode [ 112.766962][ T8151] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.843145][ T5979] Bluetooth: hci4: command 0x1003 tx timeout [ 112.844934][ T5983] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.845873][ T6056] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 112.845900][ T6056] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 112.845912][ T6056] usb 8-1: config 0 interface 0 has no altsetting 0 [ 112.847559][ T6056] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.858557][ T8153] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 112.863040][ T8153] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.866292][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.867537][ T8153] vhci_hcd vhci_hcd.0: Device attached [ 112.872737][ T6056] usb 8-1: Product: syz [ 112.873856][ T8158] vhci_hcd: unknown pdu 2 [ 112.876466][ T6056] usb 8-1: Manufacturer: syz [ 112.876501][ T6056] usb 8-1: SerialNumber: syz [ 112.878287][ T6056] usb 8-1: config 0 descriptor?? [ 112.880820][ T13] vhci_hcd: stop threads [ 112.884660][ T13] vhci_hcd: release socket [ 112.884967][ T6056] hub 8-1:0.0: bad descriptor, ignoring hub [ 112.886094][ T13] vhci_hcd: disconnect device [ 112.890804][ T6056] hub 8-1:0.0: probe with driver hub failed with error -5 [ 112.904311][ T6056] usb 8-1: selecting invalid altsetting 0 [ 113.774413][ T8145] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 113.939790][ T8145] usb 8-1: device firmware changed [ 113.944263][ T9] usb 8-1: USB disconnect, device number 6 [ 114.084382][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 114.234951][ T9] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 114.237474][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.240624][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.245705][ T9] usb 8-1: string descriptor 0 read error: -22 [ 114.248023][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.250765][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.255093][ T9] usb 8-1: config 0 descriptor?? [ 114.258298][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 114.260106][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 114.263857][ T9] usb 8-1: selecting invalid altsetting 0 [ 114.653285][ T6056] usb 8-1: USB disconnect, device number 7 [ 126.889610][ T8199] netlink: 100 bytes leftover after parsing attributes in process `syz.5.574'. [ 126.908675][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 126.908685][ T40] audit: type=1400 audit(1757327843.860:961): avc: denied { shutdown } for pid=8198 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.917887][ T40] audit: type=1400 audit(1757327843.870:962): avc: denied { remount } for pid=8198 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.007889][ T8211] binder: BINDER_SET_CONTEXT_MGR already set [ 127.009838][ T8212] QAT: Device 2 not found [ 127.011240][ T8211] binder: 8210:8211 ioctl 4018620d 2000000000c0 returned -16 [ 127.018017][ T8211] QAT: Invalid ioctl 37730 [ 127.020175][ T8212] QAT: Invalid ioctl 37730 [ 127.022091][ T8211] binder: BINDER_SET_CONTEXT_MGR already set [ 127.024456][ T8211] binder: 8210:8211 ioctl 4018620d 200000000280 returned -16 [ 127.024710][ T8212] binder: BINDER_SET_CONTEXT_MGR already set [ 127.026805][ T40] audit: type=1400 audit(1757327843.980:963): avc: denied { read } for pid=8207 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.028671][ T8212] binder: 8210:8212 ioctl 4018620d 200000000280 returned -16 [ 127.034716][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.183531][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 127.186857][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.189937][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.193798][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.198116][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.201510][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.206249][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.217383][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.220195][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.223966][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.226742][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.229511][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.233173][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.241974][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.245485][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.249826][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.256466][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.260063][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.264566][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.269429][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.273151][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.277501][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.283060][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.286779][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.291115][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.297538][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.301093][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.304638][ T9] usb 5-1: Product: syz [ 127.306362][ T9] usb 5-1: Manufacturer: syz [ 127.308227][ T9] usb 5-1: SerialNumber: syz [ 127.314064][ T9] usb 5-1: config 0 descriptor?? [ 127.321308][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 127.467208][ T40] audit: type=1400 audit(1757327844.420:964): avc: denied { listen } for pid=8229 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 127.473363][ T40] audit: type=1400 audit(1757327844.420:965): avc: denied { accept } for pid=8229 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 127.580047][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 127.580240][ T61] usb 5-1: USB disconnect, device number 3 [ 127.586559][ T61] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 127.696883][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 127.801319][ T40] audit: type=1400 audit(1757327844.750:966): avc: denied { map } for pid=8241 comm="syz.3.584" path="socket:[25866]" dev="sockfs" ino=25866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.808780][ T40] audit: type=1400 audit(1757327844.750:967): avc: denied { accept } for pid=8241 comm="syz.3.584" path="socket:[25866]" dev="sockfs" ino=25866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.831193][ T5983] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 127.895934][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 127.906410][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'. [ 128.323853][ T8266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.591'. [ 128.325049][ T8268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.592'. [ 128.330382][ T8268] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.333642][ T8268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.339438][ T8268] Bluetooth: MGMT ver 1.23 [ 128.358344][ T8271] affs: No valid root block on device sr0 [ 128.366499][ T8273] overlayfs: conflicting options: nfs_export=on,index=off [ 128.370798][ T61] IPVS: starting estimator thread 0... [ 128.395855][ T8279] bridge0: entered allmulticast mode [ 128.400525][ T8276] 9pnet: Could not find request transport: fo=0x0000000000000004 [ 128.440814][ T40] audit: type=1400 audit(1757327845.390:968): avc: denied { map } for pid=8281 comm="syz.4.598" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.463124][ T8274] IPVS: using max 42 ests per chain, 100800 per kthread [ 128.498954][ T8283] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 128.501540][ T8283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.598'. [ 128.536252][ T8288] fuse: Unknown parameter 'rootm0000004000' [ 128.540224][ T8288] fuse: Unknown parameter 'rootm0000004000' [ 128.579000][ T8293] overlayfs: upper fs does not support file handles, falling back to index=off. [ 128.593582][ T40] audit: type=1400 audit(1757327845.550:969): avc: denied { ioctl } for pid=8292 comm="syz.4.600" path="socket:[25942]" dev="sockfs" ino=25942 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.603597][ T40] audit: type=1326 audit(1757327845.550:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.4.600" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1dc58ebe9 code=0x0 [ 128.676623][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 128.693257][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.707179][ T8297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.602'. [ 128.710947][ T8297] netlink: 'syz.3.602': attribute type 7 has an invalid length. [ 128.714675][ T8297] netlink: 'syz.3.602': attribute type 8 has an invalid length. [ 128.717913][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 128.760559][ T8299] Failed to get privilege flags for destination (handle=0x2:0x0) [ 128.843181][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 128.847999][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 128.852486][ T29] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 128.856191][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.859256][ T29] usb 5-1: Product: ც蒑樠颷࢞צӲ賫ꡱ餻Ꮜ第蛊䵣폰騝᜻ℂ牨ኤ뒖ᛃ萤羜渐扉좀鏟䶂ἴ [ 128.865125][ T29] usb 5-1: Manufacturer: 蜒럻怋⻞懓聻儲牋퍷챺䩪ﲦগ᪟기岹뵭ũ䱾ο⍣ꆼ겷盛嵫ᔆㅍ讁饙 [ 128.870596][ T29] usb 5-1: SerialNumber: ﭰ燳Ί誅釰뾏ꂭ≣尿쓁큅䡫돷이먋ᣓ┅昷൵斱蘿㥈ː瘄ۗ៭寂귥苟ఓヌ匕룼孞橹隁쳼چۗ☶稣帙녴롦ㅝ宏块괛嫬㉅繕쟅㎘檋炐⇠࣌㽀톡姴꫑Ə㑨窆窛ᜬ哾癅䤁놽둺豸ᾈ蕣攛ᅃ㼬禂활큸⣳㾕層꒨慧鵨囕쫤黝鍁齤쥲ݿ⸪ [ 129.095201][ T29] usbhid 5-1:1.0: can't add hid device: -71 [ 129.097183][ T29] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 129.101133][ T29] usb 5-1: USB disconnect, device number 4 [ 129.965265][ T8338] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.968054][ T8338] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.435619][ T8398] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 130.438154][ T8398] binder: 8396:8398 ioctl 4018620d 2000000000c0 returned -1 [ 130.447705][ T8399] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 130.449715][ T8399] binder: 8396:8399 ioctl 4018620d 2000000000c0 returned -1 [ 130.482517][ T8404] bridge_slave_0: left allmulticast mode [ 130.490339][ T8404] bridge_slave_0: left promiscuous mode [ 130.498547][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.507243][ T8404] bridge_slave_1: left allmulticast mode [ 130.508997][ T8404] bridge_slave_1: left promiscuous mode [ 130.510757][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.518829][ T8404] bond0: (slave bond_slave_0): Releasing backup interface [ 130.526320][ T8404] bond0: (slave bond_slave_1): Releasing backup interface [ 130.531929][ T8404] team_slave_0: left promiscuous mode [ 130.540376][ T8404] team0: Port device team_slave_0 removed [ 130.544330][ T8404] team_slave_1: left promiscuous mode [ 130.547585][ T8404] team0: Port device team_slave_1 removed [ 130.550287][ T8404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.552547][ T8404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.559056][ T8404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.561535][ T8404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.650908][ T8425] overlayfs: failed to resolve './file0': -2 [ 130.719730][ T8430] netlink: 'syz.3.632': attribute type 18 has an invalid length. [ 130.722795][ T8430] netlink: 'syz.3.632': attribute type 18 has an invalid length. [ 130.797401][ T8432] Invalid option length (1048180) for dns_resolver key [ 131.290698][ T8437] dvmrp0: entered allmulticast mode [ 131.298583][ T8437] dvmrp0: left allmulticast mode [ 131.377721][ T8443] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 132.032431][ T8469] __nla_validate_parse: 10 callbacks suppressed [ 132.032448][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 132.053510][ T8471] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 132.346029][ T8490] netlink: 48 bytes leftover after parsing attributes in process `syz.4.650'. [ 132.389286][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.651'. [ 132.606877][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.609348][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.702287][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 132.707506][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 132.707515][ T40] audit: type=1400 audit(1757328105.658:985): avc: denied { accept } for pid=8500 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.829577][ T8505] ip6tnl1: entered promiscuous mode [ 132.831438][ T8505] ip6tnl1: entered allmulticast mode [ 132.973253][ T40] audit: type=1400 audit(1757328105.918:986): avc: denied { read } for pid=8508 comm="syz.3.656" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 132.981233][ T40] audit: type=1400 audit(1757328105.918:987): avc: denied { open } for pid=8508 comm="syz.3.656" path="/165/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 132.996558][ T8515] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.000455][ T8515] block device autoloading is deprecated and will be removed. [ 133.005771][ T40] audit: type=1400 audit(1757328105.958:988): avc: denied { ioctl } for pid=8508 comm="syz.3.656" path="/165/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 133.136574][ T8509] md2: using deprecated bitmap file support [ 133.139988][ T8509] md2: error: bitmap file must be a regular file [ 133.421420][ T40] audit: type=1400 audit(1757328106.368:989): avc: denied { ioctl } for pid=8535 comm="syz.3.664" path="socket:[25434]" dev="sockfs" ino=25434 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.547561][ T40] audit: type=1400 audit(1757328106.498:990): avc: denied { associate } for pid=8542 comm="syz.3.666" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.558493][ T40] audit: type=1400 audit(1757328106.508:991): avc: denied { read write } for pid=8542 comm="syz.3.666" name="file1" dev="9p" ino=35913950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.567951][ T40] audit: type=1400 audit(1757328106.518:992): avc: denied { open } for pid=8542 comm="syz.3.666" path="/170/file0/file1" dev="9p" ino=35913950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.843688][ T8548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.667'. [ 134.067673][ T8558] vlan0: entered allmulticast mode [ 134.069466][ T8558] bond0: entered allmulticast mode [ 134.071248][ T8558] bond_slave_0: entered allmulticast mode [ 134.073707][ T8558] bond_slave_1: entered allmulticast mode [ 134.123735][ T8562] dns_resolver: Unsupported server list version (0) [ 134.437881][ T8568] netlink: 64 bytes leftover after parsing attributes in process `syz.3.673'. [ 134.588927][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 134.634842][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 134.637776][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 134.910465][ T8597] kvm: pic: non byte read [ 134.913245][ T8597] kvm: pic: level sensitive irq not supported [ 134.913536][ T8597] kvm: pic: non byte read [ 134.918222][ T8597] kvm: pic: non byte read [ 134.921225][ T8597] kvm: pic: non byte read [ 134.924528][ T8597] kvm: pic: non byte read [ 134.927023][ T8597] kvm: pic: single mode not supported [ 134.927032][ T8597] kvm: pic: level sensitive irq not supported [ 134.929400][ T8597] kvm: pic: non byte read [ 134.934627][ T8597] kvm: pic: non byte read [ 134.936698][ T5983] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 134.937569][ T8597] kvm: pic: non byte read [ 134.942739][ T8597] kvm: pic: non byte read [ 134.947815][ T40] audit: type=1400 audit(1757328107.898:993): avc: denied { ioctl } for pid=8596 comm="syz.4.683" path="socket:[26320]" dev="sockfs" ino=26320 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.999928][ T8605] netlink: 'syz.4.683': attribute type 5 has an invalid length. [ 136.876940][ T40] audit: type=1400 audit(1757328109.828:994): avc: denied { remount } for pid=8617 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 136.888913][ T8619] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 137.551477][ T8623] overlayfs: unescaped trailing colons in lowerdir mount option. [ 137.676841][ T8632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.694'. [ 137.706924][ T8642] veth1_to_bond: entered allmulticast mode [ 137.711817][ T8641] veth1_to_bond: left allmulticast mode [ 137.742185][ T8645] xt_socket: unknown flags 0xe4 [ 137.745130][ T8645] openvswitch: netlink: Key type 143 is out of range max 32 [ 137.749920][ T8645] usb usb8: usbfs: process 8645 (syz.4.700) did not claim interface 0 before use [ 137.756804][ T40] audit: type=1400 audit(1757328110.708:995): avc: denied { getopt } for pid=8644 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.780535][ T40] audit: type=1400 audit(1757328110.728:996): avc: denied { bind } for pid=8646 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.787323][ T40] audit: type=1400 audit(1757328110.728:997): avc: denied { getopt } for pid=8646 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.810183][ T8652] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 137.839502][ T8652] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 137.846353][ T8652] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 137.857558][ T8652] bond2: (slave wireguard0): making interface the new active one [ 137.861550][ T8652] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 137.918915][ T8666] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 137.922636][ T8666] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 137.934318][ T8666] geneve2: entered promiscuous mode [ 137.936677][ T8666] geneve2: entered allmulticast mode [ 137.939336][ T1154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 137.945911][ T1154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 137.949651][ T1154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 137.954162][ T1154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 138.051220][ T8687] input: syz1 as /devices/virtual/input/input8 [ 138.072811][ T8689] devtmpfs: Cannot change global quota limit on remount [ 138.078830][ T8689] input: syz0 as /devices/virtual/input/input10 [ 138.097188][ T8689] input: syz0 as /devices/virtual/input/input11 [ 138.106693][ T40] audit: type=1400 audit(1757328111.058:998): avc: denied { ioctl } for pid=8688 comm="syz.4.714" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 138.116167][ T40] audit: type=1400 audit(1757328111.058:999): avc: denied { connect } for pid=8690 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.130651][ T40] audit: type=1400 audit(1757328111.078:1000): avc: denied { read } for pid=8690 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.271216][ T40] audit: type=1400 audit(1757328111.218:1001): avc: denied { map } for pid=8711 comm="syz.0.720" path="/proc/554/net/arp" dev="proc" ino=4026532892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 138.279766][ T8715] tipc: Started in network mode [ 138.281369][ T8715] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 138.288258][ T8715] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 138.290841][ T8715] tipc: Enabled bearer , priority 10 [ 138.443316][ T40] audit: type=1400 audit(1757328111.388:1002): avc: denied { setopt } for pid=8728 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.541333][ T8742] usb 2-1: USB disconnect, device number 2 [ 138.570367][ T8745] netlink: 830 bytes leftover after parsing attributes in process `syz.5.725'. [ 138.636064][ T40] audit: type=1400 audit(1757328111.588:1003): avc: denied { setopt } for pid=8754 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.638458][ T8737] cgroup: subsys name conflicts with all [ 138.684637][ T40] audit: type=1400 audit(1757328111.638:1004): avc: denied { read } for pid=8762 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.710995][ T8763] 9pnet: Could not find request transport: vrtio [ 138.850817][ T8783] openvswitch: netlink: Duplicate or invalid key (type 0). [ 138.853198][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.297431][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 139.404820][ T5975] tipc: Node number set to 1 [ 140.203123][ T5983] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.203167][ T29] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.207602][ T29] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 142.293033][ T5983] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.293093][ T29] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 142.297486][ T29] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 144.363293][ T29] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 144.363340][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.365917][ T29] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 144.442563][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 144.442574][ T40] audit: type=1400 audit(1757328117.388:1009): avc: denied { unmount } for pid=7385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 144.563930][ T8811] block nbd3: Attempted send on invalid socket [ 144.567585][ T8811] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 144.571830][ T8811] EXT4-fs (nbd3): unable to read superblock [ 144.753103][ T5975] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 144.865293][ T40] audit: type=1400 audit(1757328117.818:1010): avc: denied { read write } for pid=8835 comm="syz.3.744" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.872768][ T40] audit: type=1400 audit(1757328117.818:1011): avc: denied { open } for pid=8835 comm="syz.3.744" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.880466][ T40] audit: type=1400 audit(1757328117.818:1012): avc: denied { ioctl } for pid=8835 comm="syz.3.744" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.915878][ T5975] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.919268][ T5975] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 144.919412][ T40] audit: type=1400 audit(1757328117.868:1013): avc: granted { setsecparam } for pid=8841 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 144.923490][ T5975] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.932065][ T5975] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 144.936113][ T5975] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 144.940666][ T5975] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.943578][ T5975] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.945984][ T5975] usb 9-1: Product: syz [ 144.947280][ T5975] usb 9-1: Manufacturer: syz [ 144.952561][ T5975] cdc_wdm 9-1:1.0: skipping garbage [ 144.954420][ T5975] cdc_wdm 9-1:1.0: skipping garbage [ 144.957949][ T5975] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 144.960154][ T5975] cdc_wdm 9-1:1.0: Unknown control protocol [ 144.988365][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 145.066897][ T8852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65117 sclass=netlink_route_socket pid=8852 comm=syz.0.751 [ 145.080732][ T8854] batadv_slave_0: entered promiscuous mode [ 145.082661][ T8854] batadv_slave_0: entered allmulticast mode [ 145.153078][ T40] audit: type=1400 audit(1757328118.098:1014): avc: denied { read write } for pid=8802 comm="syz.4.739" name="cdc-wdm0" dev="devtmpfs" ino=3009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 145.156250][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 145.161856][ T40] audit: type=1400 audit(1757328118.108:1015): avc: denied { open } for pid=8802 comm="syz.4.739" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 145.164106][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 145.164353][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 145.177620][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 145.180383][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 145.183049][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 145.186055][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 145.188815][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 145.191608][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 145.194360][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 145.196921][ T840] usb 9-1: USB disconnect, device number 5 [ 145.466058][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 145.518574][ T40] audit: type=1400 audit(1757328118.468:1016): avc: denied { write } for pid=8873 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.525660][ T8875] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.759'. [ 145.710225][ T40] audit: type=1400 audit(1757328118.658:1017): avc: denied { module_load } for pid=8880 comm="syz.0.762" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 145.712734][ T8881] Bluetooth: MGMT ver 1.23 [ 145.806234][ T8885] netlink: 'syz.0.763': attribute type 11 has an invalid length. [ 145.809296][ T8885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.763'. [ 145.949760][ T40] audit: type=1400 audit(1757328118.898:1018): avc: denied { append } for pid=8888 comm="syz.3.765" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.223101][ T8910] fuse: Unknown parameter 'Bqj J!߇fd' [ 146.272890][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 146.281258][ T8921] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 146.445858][ T6030] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 146.556860][ T8937] block nbd4: Attempted send on invalid socket [ 146.558770][ T8937] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.561757][ T8937] block nbd4: Attempted send on invalid socket [ 146.565406][ T8937] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.568347][ T8937] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 146.571727][ T8937] block nbd4: Attempted send on invalid socket [ 146.573810][ T8937] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.576723][ T8937] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 146.580251][ T8937] block nbd4: Attempted send on invalid socket [ 146.582182][ T8937] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.587148][ T8937] block nbd4: Attempted send on invalid socket [ 146.589637][ T8937] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.595439][ T8937] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 146.600472][ T8937] block nbd4: Attempted send on invalid socket [ 146.606564][ T8937] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.610515][ T8937] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 146.617673][ T8937] block nbd4: Attempted send on invalid socket [ 146.620350][ T8937] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.626016][ T8937] block nbd4: Attempted send on invalid socket [ 146.628484][ T8937] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.632372][ T8937] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 146.639912][ T8937] block nbd4: Attempted send on invalid socket [ 146.642267][ T8937] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.645500][ T8937] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 146.648892][ T8937] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 146.652586][ T8937] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 146.655737][ T8937] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 146.676906][ T8952] binder_alloc: binder_alloc_mmap_handler: 8951 200000ffe000-200000fff000 already mapped failed -16 [ 146.681413][ T8952] binder_alloc: binder_alloc_mmap_handler: 8951 200000ffd000-200001000000 already mapped failed -16 [ 146.712775][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.969790][ T8972] netlink: 'syz.3.779': attribute type 30 has an invalid length. [ 146.973308][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.123101][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 147.128689][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.133612][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.137259][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.141567][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.145548][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 147.149060][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.158600][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 147.160986][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 147.164489][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 147.166839][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 147.173196][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 147.176183][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 147.359632][ T8960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.365098][ T8960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.447411][ T8960] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 147.464094][ T53] usb 5-1: USB disconnect, device number 5 [ 156.916111][ T8994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2067 sclass=netlink_route_socket pid=8994 comm=syz.5.782 [ 156.921136][ T8994] netem: incorrect ge model size [ 156.923731][ T8994] netem: change failed [ 156.926185][ T9009] netlink: 56 bytes leftover after parsing attributes in process `syz.4.785'. [ 156.960927][ T9016] netlink: 'syz.3.786': attribute type 6 has an invalid length. [ 156.966971][ T9016] IPv6: syztnl2: Disabled Multicast RS [ 157.001390][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 157.027276][ T9025] netlink: 72 bytes leftover after parsing attributes in process `syz.3.790'. [ 157.058405][ T9025] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.090737][ T9036] bond0: option mode: unable to set because the bond device has slaves [ 157.093490][ T9037] bond0: option mode: unable to set because the bond device has slaves [ 157.172678][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 157.172694][ T40] audit: type=1400 audit(1757328130.118:1024): avc: denied { getopt } for pid=9051 comm="syz.5.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.205218][ T40] audit: type=1400 audit(1757328130.158:1025): avc: denied { read } for pid=9057 comm="syz.5.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.221769][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 157.290912][ T9067] netlink: 504 bytes leftover after parsing attributes in process `syz.0.805'. [ 157.685475][ T9094] netlink: 48 bytes leftover after parsing attributes in process `syz.0.814'. [ 157.778701][ T9103] loop7: detected capacity change from 0 to 524255232 [ 158.035650][ T40] audit: type=1400 audit(1757328130.978:1026): avc: denied { listen } for pid=9114 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.255082][ T9128] program syz.4.823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.812840][ T9146] netlink: 'syz.0.829': attribute type 11 has an invalid length. [ 158.815553][ T9147] netlink: 'syz.0.829': attribute type 11 has an invalid length. [ 158.816045][ T9146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.829'. [ 158.818286][ T9147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.829'. [ 158.968067][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.034474][ T9157] dlm: no locking on control device [ 159.037239][ T9157] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 159.051596][ T9104] netlink: 49140 bytes leftover after parsing attributes in process `syz.5.816'. [ 159.056797][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.089649][ T9157] bond6: (slave bridge2): making interface the new active one [ 159.092287][ T9157] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 159.123830][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.157460][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.161187][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.164027][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.166762][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.169257][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.177059][ T5983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.179392][ T5983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.182000][ T5983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.185258][ T5983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.187783][ T5983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.203715][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.277194][ T9176] dlm: no local IP address has been set [ 159.279059][ T9176] dlm: cannot start dlm midcomms -107 [ 159.326457][ T9167] chnl_net:caif_netlink_parms(): no params data found [ 159.329466][ T9179] dlm: no local IP address has been set [ 159.331255][ T9179] dlm: cannot start dlm midcomms -107 [ 159.458782][ T1145] dvmrp1 (unregistering): left allmulticast mode [ 159.611013][ T40] audit: type=1400 audit(1757328132.558:1027): avc: denied { execute } for pid=9190 comm="syz.0.842" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 159.695440][ T1145] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 159.698408][ T1145] bond0 (unregistering): Released all slaves [ 159.707940][ T1145] bond1 (unregistering): Released all slaves [ 159.721728][ T9186] syzkaller1: entered promiscuous mode [ 159.724606][ T9186] syzkaller1: entered allmulticast mode [ 159.769854][ T9167] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.772201][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.774714][ T9167] bridge_slave_0: entered allmulticast mode [ 159.777370][ T9167] bridge_slave_0: entered promiscuous mode [ 159.780395][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.782655][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.786286][ T9167] bridge_slave_1: entered allmulticast mode [ 159.790332][ T9167] bridge_slave_1: entered promiscuous mode [ 159.839286][ T1145] tipc: Left network mode [ 159.840862][ T9167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.846219][ T9167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.851485][ T40] audit: type=1400 audit(1757328132.798:1028): avc: denied { map } for pid=9198 comm="syz.5.844" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.901858][ T9167] team0: Port device team_slave_0 added [ 159.906822][ T9167] team0: Port device team_slave_1 added [ 159.913030][ T5975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 159.944285][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.946727][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.954551][ T9167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.959436][ T9201] usb usb8: usbfs: process 9201 (syz.4.845) did not claim interface 0 before use [ 159.959921][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.965993][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.974294][ T9167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.060388][ T9167] hsr_slave_0: entered promiscuous mode [ 160.062911][ T9167] hsr_slave_1: entered promiscuous mode [ 160.074237][ T5975] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.077825][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 160.081392][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.085210][ T5975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.089265][ T5975] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.091991][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.097632][ T5975] usb 5-1: config 0 descriptor?? [ 160.105118][ T9193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.146418][ T1145] hsr_slave_0: left promiscuous mode [ 160.149184][ T1145] hsr_slave_1: left promiscuous mode [ 160.171263][ T1145] veth1_macvtap: left promiscuous mode [ 160.174111][ T1145] veth0_macvtap: left promiscuous mode [ 160.175940][ T1145] veth1_vlan: left promiscuous mode [ 160.367654][ T9233] SELinux: policydb version -885641263 does not match my version range 15-35 [ 160.371498][ T9233] SELinux: failed to load policy [ 160.716986][ T5975] usbhid 5-1:0.0: can't add hid device: -71 [ 160.718904][ T5975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 160.731600][ T5975] usb 5-1: USB disconnect, device number 6 [ 161.243086][ T5983] Bluetooth: hci0: command tx timeout [ 161.440648][ T9275] nbd_handle_cmd: 3 callbacks suppressed [ 161.440668][ T9275] block nbd5: Attempted send on invalid socket [ 161.447237][ T9275] blk_print_req_error: 3 callbacks suppressed [ 161.447254][ T9275] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.468516][ T9275] block nbd5: Attempted send on invalid socket [ 161.471128][ T9275] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.484864][ T9275] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 161.488831][ T9275] block nbd5: Attempted send on invalid socket [ 161.492168][ T9167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.498522][ T9275] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.501693][ T9275] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 161.506073][ T9275] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 161.506583][ T9167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.508468][ T9275] UDF-fs: Scanning with blocksize 512 failed [ 161.513587][ T9275] block nbd5: Attempted send on invalid socket [ 161.516351][ T9275] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.525850][ T9167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.526056][ T9275] block nbd5: Attempted send on invalid socket [ 161.531553][ T9275] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.536020][ T9167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.536615][ T9275] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 161.544293][ T9275] block nbd5: Attempted send on invalid socket [ 161.547575][ T9275] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.552269][ T9275] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 161.557764][ T9275] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 161.560917][ T9275] UDF-fs: Scanning with blocksize 1024 failed [ 161.565864][ T9275] block nbd5: Attempted send on invalid socket [ 161.568423][ T9275] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.569431][ T9287] bond0: entered promiscuous mode [ 161.572385][ T9275] block nbd5: Attempted send on invalid socket [ 161.574096][ T9287] bond_slave_0: entered promiscuous mode [ 161.577059][ T9275] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.578337][ T9287] bond_slave_1: entered promiscuous mode [ 161.582019][ T9275] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 161.584611][ T9287] batadv0: entered promiscuous mode [ 161.589556][ T9275] block nbd5: Attempted send on invalid socket [ 161.590546][ T9287] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 161.592325][ T9275] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.595424][ T9287] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 161.595719][ T9287] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.599793][ T9275] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 161.609913][ T9275] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 161.609921][ T9287] bond0: left promiscuous mode [ 161.609933][ T9287] bond_slave_0: left promiscuous mode [ 161.612746][ T9275] UDF-fs: Scanning with blocksize 2048 failed [ 161.614656][ T9287] bond_slave_1: left promiscuous mode [ 161.616880][ T9275] block nbd5: Attempted send on invalid socket [ 161.622800][ T9275] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.622836][ T9287] batadv0: left promiscuous mode [ 161.626347][ T9275] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 161.631270][ T9275] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 161.635282][ T9275] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 161.638271][ T9275] UDF-fs: Scanning with blocksize 4096 failed [ 161.640595][ T9275] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 161.652394][ T9285] bond0: entered promiscuous mode [ 161.654814][ T9285] bond_slave_0: entered promiscuous mode [ 161.657305][ T9285] bond_slave_1: entered promiscuous mode [ 161.660508][ T9285] batadv0: entered promiscuous mode [ 161.663576][ T9285] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 161.667532][ T9285] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 161.671841][ T9285] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.676892][ T9285] bond0: left promiscuous mode [ 161.678845][ T9285] bond_slave_0: left promiscuous mode [ 161.681168][ T9285] bond_slave_1: left promiscuous mode [ 161.684120][ T9285] batadv0: left promiscuous mode [ 161.738952][ T40] audit: type=1400 audit(1757328134.688:1029): avc: denied { write } for pid=9299 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.772613][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.797572][ T9167] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.806712][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.809569][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.825771][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.828619][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.867244][ T9167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.922210][ T9319] netlink: 'syz.4.869': attribute type 2 has an invalid length. [ 162.009155][ T9330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15146 sclass=netlink_route_socket pid=9330 comm=syz.4.872 [ 162.018183][ T9167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.021164][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 162.025035][ T9330] netlink: 'syz.4.872': attribute type 30 has an invalid length. [ 162.030040][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 162.211525][ T9356] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 162.323774][ T9167] veth0_vlan: entered promiscuous mode [ 162.330011][ T9167] veth1_vlan: entered promiscuous mode [ 162.349493][ T9167] veth0_macvtap: entered promiscuous mode [ 162.353551][ T9167] veth1_macvtap: entered promiscuous mode [ 162.355483][ T40] audit: type=1400 audit(1757328135.308:1030): avc: denied { map } for pid=9366 comm="syz.0.878" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 162.369195][ T40] audit: type=1400 audit(1757328135.308:1031): avc: denied { execute } for pid=9366 comm="syz.0.878" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 162.381589][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.386981][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.392386][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.397574][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.405149][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.408089][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.456411][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.459253][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.474380][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.477327][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.488666][ T40] audit: type=1400 audit(1757328135.438:1032): avc: denied { mounton } for pid=9167 comm="syz-executor" path="/syzkaller.YgxxIf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 162.504615][ T40] audit: type=1400 audit(1757328135.458:1033): avc: denied { mounton } for pid=9167 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 162.590502][ T9378] netlink: 76 bytes leftover after parsing attributes in process `syz.6.881'. [ 162.751670][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.887'. [ 162.755979][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.887'. [ 162.802487][ T9403] /dev/sg0: Can't lookup blockdev [ 162.806487][ T9403] /dev/sg0: Can't lookup blockdev [ 162.808847][ T9403] /dev/sg0: Can't lookup blockdev [ 162.811124][ T9403] /dev/sg0: Can't lookup blockdev [ 162.827849][ T9403] /dev/sg0: Can't lookup blockdev [ 162.829655][ T9403] /dev/sg0: Can't lookup blockdev [ 162.831697][ T9403] /dev/sg0: Can't lookup blockdev [ 162.834826][ T9403] /dev/sg0: Can't lookup blockdev [ 162.836678][ T9403] /dev/sg0: Can't lookup blockdev [ 162.838446][ T9403] /dev/sg0: Can't lookup blockdev [ 162.840354][ T9403] /dev/sg0: Can't lookup blockdev [ 162.842527][ T9403] /dev/sg0: Can't lookup blockdev [ 162.845441][ T9403] /dev/sg0: Can't lookup blockdev [ 162.847323][ T9403] /dev/sg0: Can't lookup blockdev [ 162.849164][ T9403] /dev/sg0: Can't lookup blockdev [ 162.850961][ T9403] /dev/sg0: Can't lookup blockdev [ 162.852760][ T9403] /dev/sg0: Can't lookup blockdev [ 162.856578][ T9403] /dev/sg0: Can't lookup blockdev [ 162.858312][ T9403] /dev/sg0: Can't lookup blockdev [ 162.860046][ T9403] /dev/sg0: Can't lookup blockdev [ 162.861702][ T9403] /dev/sg0: Can't lookup blockdev [ 162.864210][ T9403] /dev/sg0: Can't lookup blockdev [ 162.865941][ T9403] /dev/sg0: Can't lookup blockdev [ 162.867694][ T9403] /dev/sg0: Can't lookup blockdev [ 162.869400][ T9403] /dev/sg0: Can't lookup blockdev [ 162.871130][ T9403] /dev/sg0: Can't lookup blockdev [ 162.872873][ T9403] /dev/sg0: Can't lookup blockdev [ 162.876176][ T9403] /dev/sg0: Can't lookup blockdev [ 162.877972][ T9403] /dev/sg0: Can't lookup blockdev [ 162.879742][ T9403] /dev/sg0: Can't lookup blockdev [ 162.881550][ T9403] /dev/sg0: Can't lookup blockdev [ 162.884624][ T9403] /dev/sg0: Can't lookup blockdev [ 162.886489][ T9403] /dev/sg0: Can't lookup blockdev [ 162.888295][ T9403] /dev/sg0: Can't lookup blockdev [ 162.890034][ T9403] /dev/sg0: Can't lookup blockdev [ 162.891854][ T9403] /dev/sg0: Can't lookup blockdev [ 162.903586][ T9403] /dev/sg0: Can't lookup blockdev [ 162.905396][ T9403] /dev/sg0: Can't lookup blockdev [ 162.910649][ T9403] /dev/sg0: Can't lookup blockdev [ 162.912405][ T9403] /dev/sg0: Can't lookup blockdev [ 162.914493][ T9403] /dev/sg0: Can't lookup blockdev [ 162.916268][ T9403] /dev/sg0: Can't lookup blockdev [ 162.918118][ T9403] /dev/sg0: Can't lookup blockdev [ 162.919891][ T9403] /dev/sg0: Can't lookup blockdev [ 162.921648][ T9403] /dev/sg0: Can't lookup blockdev [ 162.924757][ T9403] /dev/sg0: Can't lookup blockdev [ 162.926486][ T9403] /dev/sg0: Can't lookup blockdev [ 162.928462][ T9403] /dev/sg0: Can't lookup blockdev [ 162.930206][ T9403] /dev/sg0: Can't lookup blockdev [ 162.932031][ T9403] /dev/sg0: Can't lookup blockdev [ 162.934968][ T9403] /dev/sg0: Can't lookup blockdev [ 162.936861][ T9403] /dev/sg0: Can't lookup blockdev [ 162.938801][ T9403] /dev/sg0: Can't lookup blockdev [ 162.940680][ T9403] /dev/sg0: Can't lookup blockdev [ 162.942764][ T9403] /dev/sg0: Can't lookup blockdev [ 162.945986][ T9403] /dev/sg0: Can't lookup blockdev [ 162.947821][ T9403] /dev/sg0: Can't lookup blockdev [ 162.949692][ T9403] /dev/sg0: Can't lookup blockdev [ 162.951500][ T9403] /dev/sg0: Can't lookup blockdev [ 162.954241][ T9403] /dev/sg0: Can't lookup blockdev [ 162.956052][ T9403] /dev/sg0: Can't lookup blockdev [ 162.957836][ T9403] /dev/sg0: Can't lookup blockdev [ 162.959638][ T9403] /dev/sg0: Can't lookup blockdev [ 162.961454][ T9403] /dev/sg0: Can't lookup blockdev [ 162.964522][ T9403] /dev/sg0: Can't lookup blockdev [ 163.066360][ T9415] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.893'. [ 163.071497][ T40] audit: type=1400 audit(1757328136.018:1034): avc: denied { write } for pid=9414 comm="syz.6.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.107525][ T9417] comedi comedi3: c6xdigio: I/O port conflict (0x4,3) [ 163.109883][ T9417] ------------[ cut here ]------------ [ 163.111681][ T9417] Unexpected driver unregister! [ 163.116998][ T9417] WARNING: CPU: 2 PID: 9417 at drivers/base/driver.c:273 driver_unregister+0x90/0xb0 [ 163.120317][ T9417] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 163.121741][ T9417] CPU: 2 UID: 0 PID: 9417 Comm: syz.5.894 Not tainted syzkaller #0 PREEMPT(full) [ 163.127069][ T9417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.130439][ T9417] RIP: 0010:driver_unregister+0x90/0xb0 [ 163.132218][ T9417] Code: 48 89 ef e8 92 13 4b fc 48 89 df e8 3a 93 ff ff 5b 5d e9 73 4f a4 fb e8 6e 4f a4 fb 90 48 c7 c7 00 87 42 8c e8 f1 f2 62 fb 90 <0f> 0b 90 90 5b 5d e9 55 4f a4 fb e8 f0 aa 0a fc eb 94 e8 e9 aa 0a [ 163.138470][ T9417] RSP: 0018:ffffc90003b579b0 EFLAGS: 00010286 [ 163.140754][ T9417] RAX: 0000000000000000 RBX: ffffffff90191020 RCX: ffffc90007b83000 [ 163.143478][ T9417] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 163.145940][ T9417] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 163.148396][ T9417] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff90190f60 [ 163.150840][ T9417] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888025ad0800 [ 163.153580][ T9417] FS: 00007f12421976c0(0000) GS:ffff8880d68b8000(0000) knlGS:0000000000000000 [ 163.156402][ T9417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.158650][ T9417] CR2: 000000110c244601 CR3: 0000000046013000 CR4: 0000000000352ef0 [ 163.161163][ T9417] Call Trace: [ 163.162235][ T9417] [ 163.163476][ T9417] comedi_device_detach_locked+0x12f/0xa50 [ 163.165350][ T9417] comedi_device_detach+0x67/0xb0 [ 163.166931][ T9417] comedi_device_attach+0x43d/0x900 [ 163.168569][ T9417] do_devconfig_ioctl+0x1b1/0x710 [ 163.170185][ T9417] ? __mutex_lock+0x1c5/0x1060 [ 163.171716][ T9417] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 163.173653][ T9417] ? find_held_lock+0x2b/0x80 [ 163.175210][ T9417] comedi_unlocked_ioctl+0x165d/0x2f00 [ 163.176938][ T9417] ? futex_wake+0x1ad/0x530 [ 163.178394][ T9417] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 163.180258][ T9417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.182135][ T9417] ? do_vfs_ioctl+0x128/0x14f0 [ 163.183065][ T6269] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 163.184100][ T9417] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 163.188515][ T9417] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 163.190792][ T9417] ? hook_file_ioctl_common+0x145/0x410 [ 163.192546][ T9417] ? selinux_file_ioctl+0x180/0x270 [ 163.194501][ T9417] ? selinux_file_ioctl+0xb4/0x270 [ 163.196124][ T9417] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 163.197886][ T9417] __x64_sys_ioctl+0x18b/0x210 [ 163.199386][ T9417] do_syscall_64+0xcd/0x4c0 [ 163.200821][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.202773][ T9417] RIP: 0033:0x7f124138ebe9 [ 163.204341][ T9417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.210221][ T9417] RSP: 002b:00007f1242197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.212851][ T9417] RAX: ffffffffffffffda RBX: 00007f12415c5fa0 RCX: 00007f124138ebe9 [ 163.215353][ T9417] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000004 [ 163.217832][ T9417] RBP: 00007f1241411e19 R08: 0000000000000000 R09: 0000000000000000 [ 163.220287][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.222711][ T9417] R13: 00007f12415c6038 R14: 00007f12415c5fa0 R15: 00007ffca82279f8 [ 163.225342][ T9417] [ 163.226332][ T9417] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 163.228596][ T9417] CPU: 2 UID: 0 PID: 9417 Comm: syz.5.894 Not tainted syzkaller #0 PREEMPT(full) [ 163.231441][ T9417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.235062][ T9417] Call Trace: [ 163.236491][ T9417] [ 163.237754][ T9417] dump_stack_lvl+0x3d/0x1f0 [ 163.239715][ T9417] vpanic+0x6e8/0x7a0 [ 163.241491][ T9417] ? __pfx_vpanic+0x10/0x10 [ 163.243451][ T9417] ? driver_unregister+0x90/0xb0 [ 163.245537][ T9417] panic+0xca/0xd0 [ 163.247141][ T9417] ? __pfx_panic+0x10/0x10 [ 163.249067][ T9417] check_panic_on_warn+0xab/0xb0 [ 163.251183][ T9417] __warn+0xf6/0x3c0 [ 163.252860][ T9417] ? preempt_schedule_notrace+0x62/0xe0 [ 163.255239][ T9417] ? driver_unregister+0x90/0xb0 [ 163.257383][ T9417] report_bug+0x3c3/0x580 [ 163.259215][ T9417] ? driver_unregister+0x90/0xb0 [ 163.261317][ T9417] handle_bug+0x184/0x210 [ 163.263217][ T9417] exc_invalid_op+0x17/0x50 [ 163.265157][ T9417] asm_exc_invalid_op+0x1a/0x20 [ 163.267203][ T9417] RIP: 0010:driver_unregister+0x90/0xb0 [ 163.269526][ T9417] Code: 48 89 ef e8 92 13 4b fc 48 89 df e8 3a 93 ff ff 5b 5d e9 73 4f a4 fb e8 6e 4f a4 fb 90 48 c7 c7 00 87 42 8c e8 f1 f2 62 fb 90 <0f> 0b 90 90 5b 5d e9 55 4f a4 fb e8 f0 aa 0a fc eb 94 e8 e9 aa 0a [ 163.277452][ T9417] RSP: 0018:ffffc90003b579b0 EFLAGS: 00010286 [ 163.280049][ T9417] RAX: 0000000000000000 RBX: ffffffff90191020 RCX: ffffc90007b83000 [ 163.283384][ T9417] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 163.286648][ T9417] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 163.289945][ T9417] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff90190f60 [ 163.293230][ T9417] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888025ad0800 [ 163.296494][ T9417] ? __warn_printk+0x1a5/0x350 [ 163.298311][ T9417] comedi_device_detach_locked+0x12f/0xa50 [ 163.300171][ T9417] comedi_device_detach+0x67/0xb0 [ 163.301786][ T9417] comedi_device_attach+0x43d/0x900 [ 163.303440][ T9417] do_devconfig_ioctl+0x1b1/0x710 [ 163.305049][ T9417] ? __mutex_lock+0x1c5/0x1060 [ 163.306556][ T9417] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 163.308315][ T9417] ? find_held_lock+0x2b/0x80 [ 163.309802][ T9417] comedi_unlocked_ioctl+0x165d/0x2f00 [ 163.311531][ T9417] ? futex_wake+0x1ad/0x530 [ 163.312970][ T9417] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 163.315133][ T9417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.317508][ T9417] ? do_vfs_ioctl+0x128/0x14f0 [ 163.318987][ T9417] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 163.320671][ T9417] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 163.322865][ T9417] ? hook_file_ioctl_common+0x145/0x410 [ 163.324663][ T9417] ? selinux_file_ioctl+0x180/0x270 [ 163.326312][ T9417] ? selinux_file_ioctl+0xb4/0x270 [ 163.327953][ T9417] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 163.329780][ T9417] __x64_sys_ioctl+0x18b/0x210 [ 163.331298][ T9417] do_syscall_64+0xcd/0x4c0 [ 163.332757][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.334662][ T9417] RIP: 0033:0x7f124138ebe9 [ 163.336071][ T9417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.342026][ T9417] RSP: 002b:00007f1242197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.344655][ T9417] RAX: ffffffffffffffda RBX: 00007f12415c5fa0 RCX: 00007f124138ebe9 [ 163.347102][ T9417] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000004 [ 163.349550][ T9417] RBP: 00007f1241411e19 R08: 0000000000000000 R09: 0000000000000000 [ 163.352048][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.354569][ T9417] R13: 00007f12415c6038 R14: 00007f12415c5fa0 R15: 00007ffca82279f8 [ 163.357841][ T9417] [ 163.359846][ T9417] Kernel Offset: disabled [ 163.361216][ T9417] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:59:45 Registers: info registers vcpu 0 CPU#0 RAX=fffff52005fec993 RBX=fffff52005fec994 RCX=ffffffff81a6db45 RDX=fffff52005fec994 RSI=0000000000000004 RDI=ffffc9002ff64c98 RBP=fffff52005fec993 RSP=ffffc90000007d80 R8 =0000000000000001 R9 =fffff52005fec993 R10=ffffc9002ff64c9b R11=0000000000000000 R12=ffffffff8197c982 R13=0000000000000001 R14=ffffc9002fecd000 R15=0000000000000006 RIP=ffffffff8221e33c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fae65af7d60 CR3=00000000314f5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee32336a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee32336a6 00007ffee32336ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8819974a8 00007ff8819974a0 00007ff881997498 00007ff881997470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8824fd100 00007ff881997460 00007ff881990004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8819974b8 00007ff8819974b0 00007ff8819974a8 00007ff8819974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006b00000 RBX=ffff888106d90000 RCX=ffffffff819bec67 RDX=1ffff11020db225a RSI=ffffffff86b37caf RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006a0eb0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff90ab4fa0 R13=dffffc0000000000 R14=ffff888106d912d0 R15=0000000000000000 RIP=ffffffff86b37cd7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c245d6d CR3=00000000506b5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8e2f6570 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8e2f66f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8e2f66f6 00007ffc8e2f66fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dc612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dc612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dc612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dc612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dc612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dc612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85643db0 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90003b572c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3622466 R15=dffffc0000000000 RIP=ffffffff85643dd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f12421976c0 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c244601 CR3=0000000046013000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca8227d80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca8227f06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca8227f06 00007ffca8227f0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1241412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1241412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1241412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1241412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1241412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1241412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c1260 RCX=ffffc900006d0001 RDX=0000000000000000 RSI=ffffffff8df440a6 RDI=ffffffff8c162a00 RBP=0000000000000001 RSP=ffffc900006cf7c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=00000000000086a6 R12=ffffffff816ae8a4 R13=0000000000000202 R14=ffff88801ead2440 R15=ffffc900006cf8bc RIP=ffffffff8b9403d5 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f12415c7dac CR3=00000000514dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3233520 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee32336a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee32336a6 00007ffee32336ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff881812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000