last executing test programs: 2.026951843s ago: executing program 3 (id=905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x138d, 0x8004, 0x1, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x7, 0x2070, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/82, 0x52}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001800018014000180080001000000000008000200cb141400240002800c00028005000100000000001400018008000100e000000208000200e0000002813b6cdca042772f6ad2a65428b34dee10ccc66bd88f2b539ff0368f3fe68c77d180127b86fe7bde"], 0x50}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400a6e74db9daacbae8b863000000000500000a5c000000090a010400000000000000000a0000042c001280140001800c0001006e6f747261636b0004000280140001800e000100636f6e6e6c696d697400000008000540000000020900020073797a310000000008000a40fffffff8140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f0000000380)=ANY=[@ANYBLOB='LINE \'Mic\' 000000000000'], 0xa9) close(r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 1.680460554s ago: executing program 3 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYBLOB="42347cb5aedbdffcf77019bc88ba8c6fff412a8ef00bbcf40af9dd46c4373997e8c140fa9313077c9d94d440"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x6f, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x2e, 0x78, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "da931356b1fd"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x58, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0xff, 0x1, 0x3, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xf4b3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x8, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x2ff, 0x9, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x2, 0x3, 0x1, 0x18, 0x3}, 0xa5, &(0x7f00000004c0)={0x5, 0xf, 0xa5, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x4, 0xfc}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x2, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0x216, 0xf000, 0x3, [0xc030, 0xff3fff, 0xf]}, @generic={0x77, 0x10, 0x1, "ae4ac3a8fedb40b28a258a5510b4394a829dc7e73355f9ebeaac020960f48eb929b87879f19cb53f2d6722a553187108e4bdf6c481d1f687a11b375a9a251a67193028e1b448dfca5e7a077269c3f074f31aaa1a7820483e3fa069ec405f9e0fb553f1989e07b0b719bb31d808c90be549c6c41b"}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x401}}, {0x51, &(0x7f0000000580)=@string={0x51, 0x3, "d61c26bcaf85d9c5e666a1271507db121c5ca51a51d348886298334207636153298d166437a093325efc9f52db8e5644f6babc734147f5b547f344498e51f2e5d97c3418b7d7bd9dadc1a0861f5560"}}, {0xf, &(0x7f00000003c0)=@string={0xf, 0x3, "eae31d737bd4ce7144c82173f5"}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000001c0)={r11, @in={{0x2, 0x4e24, @empty}}, 0x180000, 0x5, 0x3ffff, 0x2, 0xa1, 0xfffffffc, 0x4}, 0x9c) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000480)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r13, r12, 0x0, 0x0, 0x6, 0x105, {0x4, 0x1, 0x8, 0x69, 0x200, 0x0, 0x10, 0x8000, 0xe156, 0xe156, 0x400, 0x0, 0x60ff, 0x0, "fe0100003413000900000000000004b427ff001015000000000c00"}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000003000c0001"], 0x30}}, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 680.637357ms ago: executing program 1 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x4894) 611.079966ms ago: executing program 1 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x7ff, 0x4, 0x0, 0x1}) (async) close(r0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) (async) symlink(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}}, 0x24}}, 0x44080) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x89a3, &(0x7f0000000100)) (async) fsmount(r4, 0x0, 0x1) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) (async) io_setup(0x226, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f0000000a00)="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", 0x200, 0x200, 0x0, 0x0, r2}]) 503.622755ms ago: executing program 1 (id=931): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket(0x22, 0x2, 0x24) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="20c13d101b", 0x5) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4001) mq_open(&(0x7f0000000240)='\x00', 0x800, 0x2, &(0x7f0000000280)={0x4, 0x401, 0x1, 0xfffffffffffffffc}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff007}, {0x6}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socket(0x22, 0x2, 0x24) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="20c13d101b", 0x5) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4001) (async) mq_open(&(0x7f0000000240)='\x00', 0x800, 0x2, &(0x7f0000000280)={0x4, 0x401, 0x1, 0xfffffffffffffffc}) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff007}, {0x6}]}, 0x10) (async) 438.98342ms ago: executing program 0 (id=933): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x7c}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = fanotify_init(0x200, 0x0) r3 = dup(r0) fanotify_mark(r2, 0x1, 0x48001059, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r7, &(0x7f0000000280), 0xff9d) sendfile(r5, r7, &(0x7f0000000100), 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) futex_waitv(&(0x7f0000001480)=[{0xe0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x185003, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x203, 0x8, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r11 = socket(0x2, 0x3, 0xff) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ed", 0x14}], 0x1, 0x0, 0x0, 0x40c0094}}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x9, 0x3, 0x0, 0x8, 0x5, 0x4, 0x72, 0x0, 0xfa, '\x00', 0x3}) signalfd4(r9, &(0x7f0000000a00)={[0x8001]}, 0x4, 0x80800) ioctl$KVM_RUN(r10, 0xae80, 0x0) 385.347483ms ago: executing program 1 (id=935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x444b42, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x202802, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x54, &(0x7f00000000c0)=[@cr4={0x1, 0x190428}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000030305"], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x44000) writev(r5, &(0x7f0000001780)=[{&(0x7f0000000240)="8d29d67af0cfddf61cf7936ff78b10d1e9362531c5d392c0f4de2eda32c93006920c15f63a886f5575d05747586915c9d9fc06d6b070cd3383348ad975f63ea8f2cece3904fb4aed258cdaa38e2ad12b2dae6d7008edcc3cc70d058dcb6f6dbf6b3ab005aaa76a4c6597de77056b5dca65fd65199cd4894b8c679ae46961332cbe5ba90702f3649dd5cee42c", 0x8c}, {&(0x7f0000000380)="58edb76e8bf59d97351d5369dfea7f9dbe9423faf9b73bbba6b1f9d93e6fb2d8092ca9a2ee8ab227373bd257708c24ec4288c503249b52107b00dc188ab1b3b01829561dd3de83d0eb45abd70ed16bb5324824a80f455e8b568fbeb4fa5330369d6bb80427235d2becc112d0651d10052e8322", 0x73}, {&(0x7f0000000440)="88b4b3fa238d5b0427528471de0e2543ebe9cbd762abcaf11726e3850d4d3f1495834c9863b64fc0f07b73d39d2ed231f17eee531c8e783cfe00547130148f9cda6d6a46cbff1e741d53e365a46f21c42c4b1f4b3ce1428d90f87ccf417bfeb4748aad5b3ffed337c50fcd295a7dfa99df94183ac51757f3029042f1a22d41d5d05a8f0bf142cca32fb53fad7855e07e8075fffa749ac17f1e2f1fc2bd677b624488c41bd3eed3ade42fdf5c47aaaef2cb5fa4fa90ee1b4c3d4ebdf9", 0xbc}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="71d8f7ac38932f8c591322834d5746abb3aea14354c67adeb66d7583eb17cec3627f06f1d37fb71df89ae3571aaa751538ce3c10ce5453c5b8c700ab0b1124204e11dbf5e986d67490e691a8423957618792ea21113607dc1a4244d9b8d272c3e027eeddb64a28831c3769e20b446b852ea093a9ae", 0x75}, {&(0x7f0000000300)="df56ee7aafea087ee8f17f9caf", 0xd}], 0x6) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="ba420066edbaa00066edb85f058ed06659ee20efc79f0e000f20c0db3500000100e7e722c0dcf50f00103e0fd5b8000037", 0x31}], 0x1, 0xe, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000500)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0\x7f\x03gB!\xb0\xb8n\x01\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\x00\x00\x00\x00\xd7Yc\xec\xa6\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x02\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\x7f\xd6Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaO\xd1\x1a\xa2\xb7\xcc \xad$\x80&\x04\xa4\xaa\x10\f\xef\xd4\x86K\xd7M\x96\xc5\xbc\xb9\x1c\x117\x97\r\xf1\xcb\x14(|\xb2\xc9\xad\x9d\v<\x8d\x00\xd6\x9cj\x19Lh\x9b\xd0=\x14\xd6\xceqT\x00\x00\x00', 0x2) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x20000, 0x1000004}) fcntl$addseals(r6, 0x409, 0xb) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001bc0)={0x0, &(0x7f0000001800)=[@wr_crn={0x46, 0x20, {0x2, 0x2}}, @wrmsr={0x1e, 0x20, {0x27f, 0xf}}, @wr_crn={0x46, 0x20, {0x3, 0x8001}}, @wrmsr={0x1e, 0x20, {0xabd, 0x8}}, @cpuid={0x14, 0x18, {0xffff, 0x4}}, @cpuid={0x14, 0x18, {0x7cf3}}, @code={0xa, 0x5a, {"66ba610066b80b0066ef66baf80cb8daf3498cef66bafc0c66b8000066eff30f1eecb9030200000f32460f07660f38817300430f79eb0fc7a801000000c421ff107b2c26420f0178a8"}}, @cpuid={0x14, 0x18, {0x2}}, @wr_crn={0x46, 0x20, {0x4, 0x2bff}}, @wrmsr={0x1e, 0x20, {0x366, 0x61fbf42f}}, @cpuid={0x14, 0x18, {0xa09}}, @cpuid={0x14, 0x18, {0x40, 0x9}}, @code={0xa, 0x4c, {"0f01cac4217dd7e10f20d835080000000f22d80f0118660f142417f0418363090667420f01b300000000b9ba0800000f32f3450f09f042806530dd"}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x14, 0x18, {0x4, 0x6}}, @rdmsr={0x32, 0x18, {0x308}}, @code={0xa, 0x7b, {"420f79908e0000000f07b9800000c00f3235002000000f30c4a1c95d61ffc74424009d000000c744240200000000ff1c2448b800800000000000000f23c80f21f835000030000f23f8660f1a7100b805000000b9af0000000f01c1470f22030f20c035080000000f22c0"}}, @cpuid={0x14, 0x18, {0x9d71, 0xe7b}}, @wrmsr={0x1e, 0x20, {0x8cb, 0x9ad9}}, @wrmsr={0x1e, 0x20, {0xbcd, 0xffffffffffffffff}}, @cpuid={0x14, 0x18, {0x0, 0x3}}, @wrmsr={0x1e, 0x20, {0x340, 0x2}}, @rdmsr={0x32, 0x18, {0x854}}, @cpuid={0x14, 0x18, {0x6, 0x4}}, @wrmsr={0x1e, 0x20, {0xafa, 0x8}}], 0x381}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000001c00)={0x2, 0x0, [{0x1e0, 0x0, 0xc7}, {0xbcb, 0x0, 0x7}]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="0f01c866b9c60800000f32ba4300ed660f3a0e8ab1daf02e0f001bf3e48266b91d0300000f320f8707006766672e0f0d579564660f38829fecdc", 0x3a}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 268.099055ms ago: executing program 0 (id=936): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000061113400000000008510000002000000223450000100000095003300000000009500a5050000000079666e0e", @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6}, 0x94) 267.424676ms ago: executing program 2 (id=937): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="8b3329bd70000000000005000000080003"], 0x1c}}, 0x0) io_uring_setup(0x10e6, &(0x7f0000000000)={0x0, 0xe208, 0x800, 0x1, 0x27d}) 266.643711ms ago: executing program 0 (id=938): r0 = socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000400)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000b8b000/0x3000)=nil, 0x930, 0x300000b, 0x12, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x260, 0x0, 0xa, 0x1000000, 0x110, 0x0, 0x1c8, 0x230, 0x230, 0x1c8, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@addrtype={{0x30}, {0x660, 0x80}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00', {0xfffffffffffffffe}}}}, {{@ip={@remote, @private=0xa010101, 0xff000000, 0xffffff00, 'gre0\x00', '\x00', {}, {0xff}, 0x5c, 0x2, 0x4}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 266.262473ms ago: executing program 2 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x19, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x54, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7fff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xfb, 0x9, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3d, 0x5, 0x4e, 0x14, @ipv4={'\x00', '\xff\xff', @remote}, @private1, 0x8000, 0x20, 0x0, 0x6}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000600)={@private0, 0x0}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc8, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000ac0)={0x38, r1, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22c4ed0139e33b4d416ac5b57048c83473507e17a981483b8643bdd580713da66691ed80f9f6cdf38f125a88d97fca41cb2b76737fcb6e601dfb079c226126d8474bab2288101a88be9a7567b8f47a9c"], 0x0) 202.725964ms ago: executing program 3 (id=940): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$selinux_status(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) read(r3, 0x0, 0x0) io_uring_setup(0xc64, &(0x7f0000000400)={0x0, 0xf017, 0x1000, 0x3, 0x2d7, 0x0, r3}) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 202.26012ms ago: executing program 0 (id=941): r0 = socket$packet(0x11, 0x3, 0x300) io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xa205, 0x1046, 0x6}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0x64, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x86c}, {0x8, 0xb, 0x7c91}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x7, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 202.07255ms ago: executing program 2 (id=942): r0 = socket(0x1e, 0x4, 0x81) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="a03dec7ca07c20ca8289bd7d26dce3f74b0be343b9729cd4116276996fce51124d49942d6dfae5f2b731ecab8aa5c9e7d790a15dafbe75a8717a917e99e4ed29ff1e64b3e6fdb3acfdb912850092fcafb9e6bf26dff1a5203dd3af635fa1a3dc60ffbef271f90454b55ea5b5c686d20b2acc595bd33a64759c3ff04fb91e6ecd47c006f3f78a0a58b36cff22e321e7ed6e02dd6e78e88846e399dce2adf46be1c739b962bb8515e558b8208b2ce5c389b5b91810b4b890469804fde69d61adc3a469ab02cdad7f78f512dbb726b49ecf12b453ebf8cd315a8e7e6a9edd75ed050be0b07ab8c759dd7018f17d4f52a71e461437688811f6471a118898080f3b5f", 0x100}], 0x1, 0x0, 0x0, 0x440080d1}], 0x1, 0x4080) sendmmsg$inet_sctp(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3000140019f200008400000001000000feff17040c020000000000000000005c4e383400000000000000000000000000000000000000820700", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 128.113723ms ago: executing program 3 (id=943): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom$inet(r1, 0x0, 0x9, 0x53, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000210c0), 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002ac0)={'ip_vti0\x00', &(0x7f0000002a40)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffff7c3, {{0x5, 0x4, 0x0, 0x33, 0x14, 0x64, 0x0, 0x80, 0x4, 0x0, @broadcast, @multicast2}}}}) ioctl$VHOST_GET_FEATURES(r2, 0x4008af25, &(0x7f0000000040)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000080)={0x0, 'geneve0\x00', {0x3}, 0x5}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000001ed602, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r6, 0x0, 0x0, 0x3}]) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x4000) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r4, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, r4, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x2}) 127.673229ms ago: executing program 0 (id=944): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000"], 0x44}}, 0x4000000) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10080b0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)) fcntl$lock(r4, 0x7, &(0x7f0000000040)) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x7, 0x0, 0x1, {0x9, @sliced={0x3, [0x3, 0x47, 0x8, 0xc800, 0x5, 0x2, 0x7, 0xffff, 0x7ff, 0x8000, 0x9, 0xa, 0x1b0, 0x0, 0x400, 0x2, 0x7, 0x8000, 0x8, 0x1, 0x2, 0x1, 0x4, 0x6, 0x6, 0x6, 0x6, 0x0, 0xd89, 0xfff, 0x80, 0xeb4, 0x40, 0x100, 0xa, 0xcf69, 0xee, 0x2, 0x3, 0x716, 0x9, 0x0, 0x100, 0xfdee, 0x5, 0x6, 0x0, 0x1ff], 0x8a}}, 0x81e2}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 125.958804ms ago: executing program 2 (id=945): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x2) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = dup3(r2, r1, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r3, &(0x7f00000000c0)="0a5f11d4ad106bb21efdca373bd2c3b3171fdc815769dd66a990147bae1d276970a1bb651d8dabf6513ff98df5fbe1af6e362ab1a497ec6eb15152e42c4bbeeb3db3293e4fa6dbad2702f8f794cb913a2a3aba705ea36dffdc11d250dd273bc57abdc2852b50c4d7a87d5e6cac89bc35a89a269613fae26bcc1c96590cb77e649ab7ab2bbc26e2b4d89d0f3beb5d12575a8c3fca8d0a242ae92aee4f51b64090500fa3d5ae2bfb7663", 0xa9, 0x20040024, &(0x7f0000000200)={0x11, 0x1c, r4, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) (async) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async, rerun: 32) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32) socket(0x1, 0x7, 0x0) 66.134078ms ago: executing program 3 (id=946): pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async, rerun: 64) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x494048ff3a7c0750, &(0x7f0000000000)=ANY=[]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r0, 0x0) (async) r1 = getpgid(r0) setpgid(0x0, r1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) 65.781144ms ago: executing program 2 (id=947): clock_settime(0xffffffffffffffff, &(0x7f0000000000)) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}}) (async) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}}) rt_sigprocmask(0x2, &(0x7f0000000400)={[0x78e437d9]}, 0x0, 0x8) gettid() (async) r1 = gettid() tkill(r1, 0xb) (async) tkill(r1, 0xb) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2368e8fe]}, 0x8}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @empty, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @echo}}}}, 0x0) 64.167617ms ago: executing program 1 (id=948): syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x2, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x22, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "07000000000000001b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async, rerun: 64) r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x3, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) 64.013928ms ago: executing program 3 (id=949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001a000100000000000000000064010102000000000000000000000000ac14140000000000002dd1f79080251f77000008486785000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003"], 0x138}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="3f0000000000e7ff024d564b"]) 1.800186ms ago: executing program 2 (id=950): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d00810700eaff00000000000300000004"], 0x18}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8004) 259.825µs ago: executing program 0 (id=951): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000"], 0x7c}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6c4, 0x1, 0x1, 0x0, 0x56}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000024000480200001800700010063740000140002800800014000000013080002400000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4008844) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000240)="0421e2881464621d", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket(0x28, 0x5, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x4) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) close(0x4) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000600)=0x1, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x3ff, 0x0, 0x0, "1f41ca375ced51c872fe07c4184579f44b6f26582885343ccac7bc940ed4de9b", 0x34324948}) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@rand_addr=0x64010100, @remote, @empty}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) 0s ago: executing program 1 (id=952): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xaf, 0x5543, 0x42, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x58, 0x7f, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x8000, 0x5, 0x1, {0x22, 0x923}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0xa3, 0xe1, 0x0, 0x731cd4db7f11ae43, 0x1}, 0xf, &(0x7f00000005c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x5, 0xb3}]}, 0x9, [{0xad, &(0x7f0000000600)=@string={0xad, 0x3, "e446b604cdb822f5c5470d38623782344c9b91dbc5f852562e38ee09c8b71b3c5bfbf6a724a1ea6574aa314e05d8b231716440d8f5479d33772002fa215fe323aa79a7e30387e08a2b4f45b299a5b0af488235ed07a5b1879a920afc19fba4ef8c704a6952c0373222fb0f26da5a00c12766ebea92b7bc84e0b30010dfb35d33b16f5e24ef971b28a7462498ef141ed497544d4687622ba8d145f82e490ba040ef340bbe260f8c81186b7d"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x66, &(0x7f0000000780)=@string={0x66, 0x3, "fc16c10728bb006f7f43aab6cea0adfb355856bac49c0fa90737a8921452b0c90853203f3b35f219c41938a5f2499d84a1bf71c2735fbed7c64ea5f4c49b9421e0d1cae41a0bc5c1e8afc99c2bcedcb4617d483044956fb734b876bd1813995fbe369d76"}}, {0xb3, &(0x7f0000000800)=@string={0xb3, 0x3, "53729f865341debbeef098b4e34524cc1f45a4c521842ec7f66680c4c85433b74ed9c206c925b63a0f4a106bbf7688ee049df8200b13b18dfefaa251178cc376dabcf22622afdaf1ef51cd05c86a7be662c992df5a3ebdf1ca102bd828a67045c3a089321805dc99cfce4303809097c563242230d4b1b8331c684b0e96b30ac49bf94b96f20cb016e7f627c84797af51a3578af0025a6a28f3e477ed64b6d531633850f8e8f235d2abd0a5c38a509a3f28"}}, {0xad, &(0x7f0000000900)=@string={0xad, 0x3, "dce644cad5d39f205e400ffd275417454f594ecd5a65420018bab50aae3c95e660e6d69ae6dcd7efc245d2e29b9fa35d8c37928e9c1cced662117ff6b912d0f5c9c6471bf339415fb0c4492652c0de1ddcff765d895107ec3d36e2194c1c031269ba92c0a0682e0cbc37865db309b73f3cdb3a806b80f69aed90554feef0368e38a924dbcb8b4ff02ddbd34a54fceec436a6534507dab34f0ff8c2764ecdeb1b023120273fd7ce7f85b841"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x801}}, {0xad, &(0x7f0000000a40)=@string={0xad, 0x3, "e0612860a30f11efd13e24e073ba6fdccb06335c91425f6baefea83b64ba0d1d2f389d97bd38b1790024e1423b9fde13a1f442c2929c4beef39dc7beb69658ca233a8aa0afb9b35ed0b5a33dadcef1971f3f5ae667048d8bee6ec3b33e32d8644b6ddc7971f72a93c589ae4ea058aaea156c62a573e1ff4117c79c2f53c274ec0d4afe5a59a2f899b7571d3d56a6bb36c45ac0cb2b211c01df8f48ea66e76ddb3ba570a8262f1fb699be43"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x446}}]}) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000001c0)={0x0, 0xfffffffffffffd38, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200029bd7000fbdbdf253400000008000300", @ANYRES32=r7, @ANYBLOB="0a000600030000000000000000001f0107000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x2000c800) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000f40)={0x324, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xaf, 0x2, "1220bb8f5fda63228fc3278a3dea6c1a41bf571420b4edd7649c736819e154ca2b5ecdb93bba2fd9f2ee8b8f4f6cb6b3874a68e8dbf6b33a54ad2f4a36dec4cb4473032e7ad28005087bf8a3cb35b85fdb81babef206c2402783d824c06c7bf6064bc6f07b2357359044f33f59ace46f6f0b58564789ae07218bda09cab2df22663da314c20747a6ac4536b5216d95e68c2e7365093aff83a681a6458bcea400f1e33ae86098c50dcc6a52"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x238, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x0, 0x2, "a06176281982e9950eb897d0de636b9873b672431153c18f4d050ed133959598051039c500eb5ee5d5bba696ad3c8a466d33ce96c99bee0a94acc857722bac4d66b2c8b4fb78adc304462c2252c899e1c6e1b33a1570fabc38b21ad53a9b85004c86c8c55e370942fe7ff32404d51a4e431a478f6cf0beb636a16ca6f4d3fcc10e97b8b4d7"}}, {0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x2c, 0x2, "89a8606b38bc8310516270d60105eb9a223dfe5337d3f575e3d4d3d56b998a61689bd9954ec91507"}}, {0x118, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x113, 0x1, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0xfffffffffffffe65, 0x1, 0xfa}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x324}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004045) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000480)={0x81, 0x21, {0x4000034, 0x23, 0x4, 0xe, 0x2, 0xda, 0x4, 0x3a, 0x1}}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0xd8, &(0x7f00000000c0)=""/216, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x6, 0x3, 0x76}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x3, 0x4, 0xe, 0xc}, {0x4, 0x1, 0xf, 0x2}, {0x4, 0x5, 0x4, 0x9}, {0x5, 0x4, 0x2, 0x8}], 0x10, 0x200}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r9, 0x4) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 1) entered disabled state [ 46.060715][ T5963] bridge_slave_1: entered allmulticast mode [ 46.064552][ T5963] bridge_slave_1: entered promiscuous mode [ 46.069826][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.073259][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.075703][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.078125][ T5958] bridge_slave_1: entered allmulticast mode [ 46.080779][ T5958] bridge_slave_1: entered promiscuous mode [ 46.211187][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.216193][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.221107][ T5952] team0: Port device team_slave_0 added [ 46.228692][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.233238][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.237237][ T5952] team0: Port device team_slave_1 added [ 46.305120][ T5958] team0: Port device team_slave_0 added [ 46.324685][ T5963] team0: Port device team_slave_0 added [ 46.356988][ T5958] team0: Port device team_slave_1 added [ 46.359845][ T5963] team0: Port device team_slave_1 added [ 46.362371][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.364564][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.372997][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.397118][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.400170][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.403512][ T5951] bridge_slave_0: entered allmulticast mode [ 46.406917][ T5951] bridge_slave_0: entered promiscuous mode [ 46.494131][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.496363][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.504610][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.508335][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.510601][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.513159][ T5951] bridge_slave_1: entered allmulticast mode [ 46.515753][ T5951] bridge_slave_1: entered promiscuous mode [ 46.518759][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.521334][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.529329][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.533269][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.535564][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.543715][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.551377][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.553723][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.561752][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.581019][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.583202][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.590810][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.620971][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.625491][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.784586][ T5952] hsr_slave_0: entered promiscuous mode [ 46.787094][ T5952] hsr_slave_1: entered promiscuous mode [ 46.806947][ T5958] hsr_slave_0: entered promiscuous mode [ 46.809930][ T5958] hsr_slave_1: entered promiscuous mode [ 46.812768][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.815966][ T5958] Cannot create hsr debugfs directory [ 46.820706][ T5951] team0: Port device team_slave_0 added [ 46.840570][ T5963] hsr_slave_0: entered promiscuous mode [ 46.842925][ T5963] hsr_slave_1: entered promiscuous mode [ 46.845038][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.847389][ T5963] Cannot create hsr debugfs directory [ 46.850767][ T5951] team0: Port device team_slave_1 added [ 46.900161][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.904258][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.911969][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.950900][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.953756][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.961709][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.121770][ T5951] hsr_slave_0: entered promiscuous mode [ 47.124287][ T5951] hsr_slave_1: entered promiscuous mode [ 47.126302][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.128579][ T5951] Cannot create hsr debugfs directory [ 47.375411][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.387649][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.393875][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.399726][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.441259][ T5963] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.446610][ T5963] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.451557][ T5963] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.457309][ T5963] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.492658][ T5967] Bluetooth: hci0: command tx timeout [ 47.492672][ T5959] Bluetooth: hci1: command tx timeout [ 47.496389][ T63] Bluetooth: hci2: command tx timeout [ 47.509834][ T5958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.516489][ T5958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.522373][ T5958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.526620][ T5958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.572418][ T63] Bluetooth: hci3: command tx timeout [ 47.585475][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.587693][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.594713][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.599372][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.609798][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.619849][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.631693][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.633928][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.650356][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.652665][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.671240][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.714121][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.720266][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.728004][ T40] audit: type=1400 audit(1753511903.766:89): avc: denied { sys_module } for pid=5952 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.728606][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.736859][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.746155][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.748533][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.761251][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.765656][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.775161][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.777479][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.787866][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.790239][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.801987][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.818117][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.820575][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.825347][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.827721][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.847633][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.893353][ T5952] veth0_vlan: entered promiscuous mode [ 47.902758][ T5952] veth1_vlan: entered promiscuous mode [ 47.926980][ T5952] veth0_macvtap: entered promiscuous mode [ 47.931828][ T5952] veth1_macvtap: entered promiscuous mode [ 47.950486][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.963121][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.969021][ T5952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.974777][ T5952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.977554][ T5952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.980236][ T5952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.002739][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.011182][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.040371][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.043112][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.057682][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.067152][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.071254][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.078823][ T5958] veth0_vlan: entered promiscuous mode [ 48.093336][ T5958] veth1_vlan: entered promiscuous mode [ 48.102490][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.102736][ T5963] veth0_vlan: entered promiscuous mode [ 48.119842][ T5963] veth1_vlan: entered promiscuous mode [ 48.130512][ T5951] veth0_vlan: entered promiscuous mode [ 48.137398][ T5958] veth0_macvtap: entered promiscuous mode [ 48.143433][ T5951] veth1_vlan: entered promiscuous mode [ 48.146749][ T5958] veth1_macvtap: entered promiscuous mode [ 48.160388][ T5963] veth0_macvtap: entered promiscuous mode [ 48.164610][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.169353][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.177400][ T5963] veth1_macvtap: entered promiscuous mode [ 48.182790][ T5958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.186176][ T5958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.189545][ T5958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.193366][ T5958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.215297][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.229870][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.240264][ T5951] veth0_macvtap: entered promiscuous mode [ 48.244383][ T5963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.246828][ T5963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.249166][ T5963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.251564][ T5963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.256192][ T5951] veth1_macvtap: entered promiscuous mode [ 48.283646][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.287227][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.288341][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.300856][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.317491][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.318455][ T6042] ieee802154 phy0 wpan0: encryption failed: -22 [ 48.320175][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.325883][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.328554][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.333547][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.335896][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.348431][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.350955][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.365859][ T6044] process 'syz.3.6' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 48.387840][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.390345][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.417948][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.420793][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.435230][ T6051] SELinux: failed to load policy [ 48.445632][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.449141][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.561058][ T6061] cgroup: none used incorrectly [ 48.564242][ T6060] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 48.585274][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.590108][ T6066] tmpfs: Bad value for 'mpol' [ 48.594104][ T6066] No such timeout policy "syz0" [ 48.597156][ T6068] tmpfs: Bad value for 'mpol' [ 48.666207][ T6073] comedi comedi3: comedi_config --init_data is deprecated [ 48.707561][ T6080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'. [ 48.818163][ T6092] ======================================================= [ 48.818163][ T6092] WARNING: The mand mount option has been deprecated and [ 48.818163][ T6092] and is ignored by this kernel. Remove the mand [ 48.818163][ T6092] option from the mount to silence this warning. [ 48.818163][ T6092] ======================================================= [ 48.829272][ T6092] cgroup: subsys name conflicts with all [ 48.868448][ T6097] netlink: 'syz.2.19': attribute type 2 has an invalid length. [ 48.960164][ T6098] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20'. [ 49.257703][ T6126] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 49.458948][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 49.573100][ T63] Bluetooth: hci0: command tx timeout [ 49.573162][ T5959] Bluetooth: hci2: command tx timeout [ 49.573180][ T5967] Bluetooth: hci1: command tx timeout [ 49.652572][ T5959] Bluetooth: hci3: command tx timeout [ 49.822726][ T6154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.825711][ T6154] IPv6: NLM_F_CREATE should be set when creating new route [ 49.829204][ T6154] lo: entered allmulticast mode [ 49.833212][ T6154] tunl0: entered allmulticast mode [ 49.836918][ T6154] gre0: entered allmulticast mode [ 49.839179][ T6156] Zero length message leads to an empty skb [ 49.844832][ T6154] gretap0: entered allmulticast mode [ 49.850259][ T6154] erspan0: entered allmulticast mode [ 49.855580][ T6154] ip_vti0: entered allmulticast mode [ 49.859160][ T6154] ip6_vti0: entered allmulticast mode [ 49.866652][ T6154] sit0: entered allmulticast mode [ 49.871632][ T6154] ip6tnl0: entered allmulticast mode [ 49.876634][ T6154] ip6gre0: entered allmulticast mode [ 49.880837][ T6154] syz_tun: entered allmulticast mode [ 49.885801][ T6154] ip6gretap0: entered allmulticast mode [ 49.891054][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.893705][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.897957][ T6154] bridge0: entered allmulticast mode [ 49.901005][ T6154] vcan0: entered allmulticast mode [ 49.904169][ T6154] bond0: entered allmulticast mode [ 49.905727][ T6154] bond_slave_0: entered allmulticast mode [ 49.907463][ T6154] bond_slave_1: entered allmulticast mode [ 49.912967][ T6154] team0: entered allmulticast mode [ 49.914704][ T6154] team_slave_0: entered allmulticast mode [ 49.916831][ T6154] team_slave_1: entered allmulticast mode [ 49.920247][ T6154] dummy0: entered allmulticast mode [ 49.925062][ T6154] nlmon0: entered allmulticast mode [ 49.927602][ T6154] caif0: entered allmulticast mode [ 49.929379][ T6154] batadv0: entered allmulticast mode [ 49.932641][ T6154] vxcan0: entered allmulticast mode [ 49.934646][ T6154] vxcan1: entered allmulticast mode [ 49.936994][ T6154] veth0: entered allmulticast mode [ 49.940968][ T6154] veth1: entered allmulticast mode [ 49.948172][ T6154] wg0: entered allmulticast mode [ 49.951739][ T6154] wg1: entered allmulticast mode [ 49.955407][ T6154] wg2: entered allmulticast mode [ 49.958029][ T6154] veth0_to_bridge: entered allmulticast mode [ 49.964024][ T6154] veth1_to_bridge: entered allmulticast mode [ 49.969473][ T6154] veth0_to_bond: entered allmulticast mode [ 49.974787][ T6154] veth1_to_bond: entered allmulticast mode [ 49.981371][ T6154] veth0_to_team: entered allmulticast mode [ 49.990243][ T6154] veth1_to_team: entered allmulticast mode [ 49.998959][ T6154] veth0_to_batadv: entered allmulticast mode [ 50.002235][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.004919][ T6154] batadv_slave_0: entered allmulticast mode [ 50.008857][ T6154] veth1_to_batadv: entered allmulticast mode [ 50.011887][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.014854][ T6154] batadv_slave_1: entered allmulticast mode [ 50.018107][ T6154] xfrm0: entered allmulticast mode [ 50.021112][ T6154] veth0_to_hsr: entered allmulticast mode [ 50.024767][ T6154] hsr_slave_0: entered allmulticast mode [ 50.027898][ T6154] veth1_to_hsr: entered allmulticast mode [ 50.030835][ T6154] hsr_slave_1: entered allmulticast mode [ 50.034472][ T6154] hsr0: entered allmulticast mode [ 50.038124][ T6154] veth1_virt_wifi: entered allmulticast mode [ 50.041440][ T6154] veth0_virt_wifi: entered allmulticast mode [ 50.045971][ T6154] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 50.048883][ T6154] veth1_vlan: entered allmulticast mode [ 50.053034][ T6154] veth0_vlan: entered allmulticast mode [ 50.059542][ T6154] vlan0: entered allmulticast mode [ 50.061258][ T6154] vlan1: entered allmulticast mode [ 50.065338][ T6154] macvlan0: entered allmulticast mode [ 50.070055][ T6154] macvlan1: entered allmulticast mode [ 50.073169][ T6154] ipvlan0: entered allmulticast mode [ 50.074891][ T6154] ipvlan1: entered allmulticast mode [ 50.077094][ T6154] veth1_macvtap: entered allmulticast mode [ 50.080628][ T6154] veth0_macvtap: entered allmulticast mode [ 50.086064][ T6154] macvtap0: entered allmulticast mode [ 50.090508][ T6154] macsec0: entered allmulticast mode [ 50.096416][ T6154] geneve0: entered allmulticast mode [ 50.101729][ T6154] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.108305][ T6154] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.112690][ T6154] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.115733][ T6154] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.119444][ T6154] geneve1: entered allmulticast mode [ 50.123188][ T6154] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 50.128409][ T6154] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 50.136240][ T6154] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 50.141698][ T6154] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 50.151474][ T6154] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 50.161907][ T6154] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 50.183659][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 50.183670][ T40] audit: type=1400 audit(1753511906.226:191): avc: denied { mounton } for pid=6186 comm="syz.0.41" path="/bus" dev="ramfs" ino=8771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 50.202304][ T6188] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.204874][ T6188] overlayfs: failed to set xattr on upper [ 50.206727][ T6188] overlayfs: ...falling back to redirect_dir=nofollow. [ 50.209459][ T6188] overlayfs: ...falling back to index=off. [ 50.211281][ T6188] overlayfs: ...falling back to uuid=null. [ 50.215626][ T6188] overlayfs: conflicting lowerdir path [ 50.273583][ T6233] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 50.319128][ T40] audit: type=1400 audit(1753511906.356:192): avc: denied { watch watch_reads } for pid=6238 comm="syz.0.46" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.390117][ T6246] 9p: Unknown access argument 18446744073709551615: -34 [ 50.392433][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 50.404419][ T6241] xt_hashlimit: size too large, truncated to 1048576 [ 50.411346][ T40] audit: type=1400 audit(1753511906.446:193): avc: denied { create } for pid=6248 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.417970][ T40] audit: type=1400 audit(1753511906.456:194): avc: denied { ioctl } for pid=6248 comm="syz.3.50" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.435608][ T40] audit: type=1400 audit(1753511906.466:195): avc: denied { connect } for pid=6248 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.455281][ T40] audit: type=1400 audit(1753511906.466:196): avc: denied { setopt } for pid=6248 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.465090][ T40] audit: type=1400 audit(1753511906.466:197): avc: denied { shutdown } for pid=6248 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.469412][ T6247] block device autoloading is deprecated and will be removed. [ 50.471268][ T40] audit: type=1400 audit(1753511906.496:198): avc: denied { getopt } for pid=6240 comm="syz.1.47" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.481900][ T40] audit: type=1400 audit(1753511906.496:199): avc: denied { connect } for pid=6240 comm="syz.1.47" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.503856][ T6262] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 50.507076][ T40] audit: type=1400 audit(1753511906.546:200): avc: denied { wake_alarm } for pid=6260 comm="syz.2.52" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.511705][ T6262] capability: warning: `syz.2.52' uses 32-bit capabilities (legacy support in use) [ 50.673295][ T6273] usb usb8: usbfs: process 6273 (syz.1.54) did not claim interface 0 before use [ 50.697471][ T6268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.55'. [ 50.700390][ T6268] netlink: 'syz.3.55': attribute type 6 has an invalid length. [ 50.703637][ T6268] netlink: 'syz.3.55': attribute type 5 has an invalid length. [ 50.706187][ T6268] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 50.709752][ T6269] netlink: 44 bytes leftover after parsing attributes in process `syz.3.55'. [ 50.713019][ T6269] netlink: 'syz.3.55': attribute type 6 has an invalid length. [ 50.715405][ T6269] netlink: 'syz.3.55': attribute type 5 has an invalid length. [ 50.717755][ T6269] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 50.737545][ T6279] netlink: 'syz.0.56': attribute type 21 has an invalid length. [ 50.764458][ T6282] netlink: 72 bytes leftover after parsing attributes in process `syz.2.57'. [ 50.770691][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 50.777169][ T6279] netlink: 6 bytes leftover after parsing attributes in process `syz.0.56'. [ 50.869046][ T6302] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 50.885989][ T6302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.898684][ T6301] vlan2: entered promiscuous mode [ 50.900716][ T6301] bond1: entered promiscuous mode [ 50.904135][ T6301] vlan2: entered allmulticast mode [ 50.905987][ T6301] bond1: entered allmulticast mode [ 50.915035][ T6302] bond1: (slave gretap1): making interface the new active one [ 50.917353][ T6302] gretap1: entered promiscuous mode [ 50.919024][ T6302] gretap1: entered allmulticast mode [ 50.921824][ T6302] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 50.931357][ T6314] openvswitch: netlink: Key type 179 is out of range max 32 [ 51.272303][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.422076][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 51.425946][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.429356][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.432417][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 51.436336][ T9] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 51.439130][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.444219][ T9] usb 8-1: config 0 descriptor?? [ 51.648978][ T6337] random: crng reseeded on system resumption [ 51.652666][ T5959] Bluetooth: hci2: command tx timeout [ 51.652780][ T5967] Bluetooth: hci1: command tx timeout [ 51.656842][ T63] Bluetooth: hci0: command tx timeout [ 51.665379][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 51.667822][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 51.675745][ T9] usb 8-1: USB disconnect, device number 2 [ 51.742218][ T63] Bluetooth: hci3: command tx timeout [ 51.939327][ T6354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.045744][ T6361] netlink: 100 bytes leftover after parsing attributes in process `syz.0.76'. [ 52.145250][ T6367] 9pnet_virtio: no channels available for device syz [ 52.151873][ T6364] sctp: failed to load transform for md5: -2 [ 52.188003][ T6376] support for cryptoloop has been removed. Use dm-crypt instead. [ 52.283423][ T6383] IPv4: Oversized IP packet from 127.202.26.0 [ 52.288205][ T6383] tmpfs: Unknown parameter 'usrquota_block_hardlimt' [ 52.291973][ T6383] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 52.591131][ T6396] warning: `syz.3.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.923080][ T6416] tipc: Invalid UDP bearer configuration [ 52.923125][ T6416] tipc: Enabling of bearer rejected, failed to enable media [ 52.960350][ T6418] trusted_key: encrypted_key: insufficient parameters specified [ 53.110887][ T6430] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 53.270819][ T6442] binder: 6441:6442 ioctl 4018620d 0 returned -22 [ 53.732527][ T63] Bluetooth: hci1: command tx timeout [ 53.732620][ T5967] Bluetooth: hci0: command tx timeout [ 53.813173][ T5967] Bluetooth: hci3: command tx timeout [ 53.983811][ T6469] PKCS8: Unsupported PKCS#8 version [ 53.988446][ T6469] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 53.994791][ T6469] team0: Device ipvlan1 failed to register rx_handler [ 54.002402][ T6467] can: request_module (can-proto-3) failed. [ 54.116727][ T6484] tipc: Enabling of bearer rejected, failed to enable media [ 54.816823][ T5967] Bluetooth: hci2: unexpected subevent 0x01 length: 23 > 18 [ 54.966964][ T6521] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 54.970664][ T6521] VFS: Can't find a romfs filesystem on dev nullb0. [ 54.970664][ T6521] [ 55.020529][ T6529] __nla_validate_parse: 5 callbacks suppressed [ 55.020539][ T6529] netlink: 132 bytes leftover after parsing attributes in process `syz.1.130'. [ 55.083365][ T60] IPVS: starting estimator thread 0... [ 55.084087][ T6541] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 55.113800][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 55.116850][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 55.174302][ T6542] IPVS: using max 44 ests per chain, 105600 per kthread [ 55.318983][ T6577] x_tables: duplicate underflow at hook 1 [ 55.380373][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 55.380387][ T40] audit: type=1400 audit(1753511911.416:308): avc: denied { read } for pid=6584 comm="syz.0.146" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.391234][ T40] audit: type=1400 audit(1753511911.416:309): avc: denied { open } for pid=6584 comm="syz.0.146" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.393203][ T6585] autofs4:pid:6585:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 55.400593][ T40] audit: type=1400 audit(1753511911.426:310): avc: denied { setattr } for pid=6582 comm="syz.2.147" name="/" dev="9p" ino=35913923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.413186][ T40] audit: type=1400 audit(1753511911.426:311): avc: denied { mount } for pid=6584 comm="syz.0.146" name="/" dev="configfs" ino=3095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.421794][ T40] audit: type=1400 audit(1753511911.436:312): avc: denied { ioctl } for pid=6584 comm="syz.0.146" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.430914][ T40] audit: type=1400 audit(1753511911.466:313): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.529195][ T6596] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 55.532194][ T6596] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 55.538258][ T6596] xt_time: unknown flags 0xb4 [ 55.593253][ T40] audit: type=1400 audit(1753511911.636:314): avc: denied { load_policy } for pid=6597 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.594018][ T6598] SELinux: failed to load policy [ 55.612578][ T6598] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 55.614836][ T6598] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.617691][ T6598] vhci_hcd vhci_hcd.0: Device attached [ 55.620495][ T6599] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 55.625658][ T6225] vhci_hcd: stop threads [ 55.627274][ T6225] vhci_hcd: release socket [ 55.628729][ T6225] vhci_hcd: disconnect device [ 55.883593][ T40] audit: type=1400 audit(1753511911.926:315): avc: denied { read write } for pid=6601 comm="syz.1.153" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.890635][ T40] audit: type=1400 audit(1753511911.926:316): avc: denied { open } for pid=6601 comm="syz.1.153" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.927941][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 56.099471][ T6612] affs: No valid root block on device nullb0 [ 56.126900][ T40] audit: type=1400 audit(1753511912.166:317): avc: denied { read write } for pid=6613 comm="syz.1.157" name="vsock" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.133284][ T6614] sctp: [Deprecated]: syz.1.157 (pid 6614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.133284][ T6614] Use struct sctp_sack_info instead [ 56.342994][ T6637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.346037][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 56.373833][ T63] Bluetooth: hci1: command tx timeout [ 56.654749][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 56.669823][ T6672] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.672667][ T6672] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.675254][ T6672] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.677877][ T6672] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.681781][ T6672] vxlan0: entered promiscuous mode [ 56.693407][ T6674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.699782][ T6674] bond0: (slave rose0): Enslaving as an active interface with an up link [ 56.754442][ T6687] nftables ruleset with unbound chain [ 56.759073][ T6687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=6687 comm=syz.2.179 [ 57.403527][ T6741] loop2: detected capacity change from 0 to 7 [ 57.409145][ T6741] Dev loop2: unable to read RDB block 7 [ 57.411276][ T6741] loop2: unable to read partition table [ 57.414854][ T6741] loop2: partition table beyond EOD, truncated [ 57.416833][ T6741] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 57.474974][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 57.554355][ T6755] bridge0: entered promiscuous mode [ 57.556205][ T6755] macvlan2: entered promiscuous mode [ 57.613712][ T6757] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 57.668613][ T6763] netlink: 'syz.0.196': attribute type 3 has an invalid length. [ 57.709830][ T6767] netlink: 7 bytes leftover after parsing attributes in process `syz.1.198'. [ 57.833211][ T1338] cfg80211: failed to load regulatory.db [ 57.921526][ T6785] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.092888][ T6802] random: crng reseeded on system resumption [ 58.098144][ T6804] befs: (nullb0): No write support. Marking filesystem read-only [ 58.101469][ T6804] befs: (nullb0): invalid magic header [ 58.174544][ T6810] trusted_key: encrypted_key: master key parameter 'T6t' is invalid [ 58.199255][ T5365] Dev loop2: unable to read RDB block 7 [ 58.201761][ T5365] loop2: unable to read partition table [ 58.204463][ T5365] loop2: partition table beyond EOD, truncated [ 58.439973][ T5365] Dev loop2: unable to read RDB block 7 [ 58.442384][ T5365] loop2: unable to read partition table [ 58.444759][ T5365] loop2: partition table beyond EOD, truncated [ 58.458658][ T6821] mmap: syz.2.213 (6821) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.496323][ T5365] Dev loop2: unable to read RDB block 7 [ 58.498191][ T5365] loop2: unable to read partition table [ 58.500254][ T5365] loop2: partition table beyond EOD, truncated [ 58.521093][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 58.597500][ T5365] Dev loop2: unable to read RDB block 7 [ 58.599728][ T5365] loop2: unable to read partition table [ 58.602910][ T5365] loop2: partition table beyond EOD, truncated [ 58.644630][ T5365] Dev loop2: unable to read RDB block 7 [ 58.646793][ T5365] loop2: unable to read partition table [ 58.649054][ T5365] loop2: partition table beyond EOD, truncated [ 58.657188][ T6832] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 58.923462][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'. [ 59.001608][ T6838] netlink: 'syz.1.219': attribute type 10 has an invalid length. [ 59.372273][ T6838] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 59.376203][ T6837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.380613][ T6843] sp0: Synchronizing with TNC [ 59.822201][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.825491][ T6863] ucma_write: process 168 (syz.2.226) changed security contexts after opening file descriptor, this is not allowed. [ 59.914150][ T6869] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 60.002587][ T60] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 60.006419][ T60] usb 5-1: config 0 has no interfaces? [ 60.006895][ T6877] /dev/sg0: Can't lookup blockdev [ 60.008963][ T60] usb 5-1: config 0 has no interfaces? [ 60.022532][ T60] usb 5-1: config 0 has no interfaces? [ 60.026333][ T60] usb 5-1: config 0 has no interfaces? [ 60.029017][ T60] usb 5-1: config 0 has no interfaces? [ 60.031514][ T60] usb 5-1: config 0 has no interfaces? [ 60.034387][ T60] usb 5-1: config 0 has no interfaces? [ 60.036957][ T60] usb 5-1: config 0 has no interfaces? [ 60.041135][ T60] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 60.044197][ T60] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 60.046700][ T60] usb 5-1: Product: syz [ 60.048058][ T60] usb 5-1: Manufacturer: syz [ 60.049597][ T60] usb 5-1: SerialNumber: syz [ 60.053886][ T60] usb 5-1: config 0 descriptor?? [ 60.267798][ T6901] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 60.273535][ T1338] usb 5-1: USB disconnect, device number 2 [ 60.419537][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 60.419548][ T40] audit: type=1400 audit(1753511916.456:385): avc: denied { ioctl } for pid=6908 comm="syz.3.242" path="socket:[12144]" dev="sockfs" ino=12144 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.496439][ T40] audit: type=1400 audit(1753511916.536:386): avc: denied { checkpoint_restore } for pid=6918 comm="syz.1.246" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.497585][ T6920] binder: 6918:6920 ioctl 40045565 1c3 returned -22 [ 60.509175][ T6920] kAFS: Can only specify source 'none' with -o dyn [ 60.668668][ T6932] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 60.677552][ T6932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.680084][ T6932] IPv6: NLM_F_CREATE should be set when creating new route [ 60.682367][ T6932] IPv6: NLM_F_CREATE should be set when creating new route [ 60.685672][ T6932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.766128][ T6935] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 60.766375][ T6936] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 60.766472][ T6939] sg_write: data in/out 425951/6 bytes for SCSI command 0xec-- guessing data in; [ 60.766472][ T6939] program syz.1.251 not setting count and/or reply_len properly [ 60.779668][ T6936] syz_tun: entered promiscuous mode [ 60.785784][ T6936] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 60.831688][ T40] audit: type=1400 audit(1753511916.866:387): avc: denied { append } for pid=6947 comm="syz.3.254" name="event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.884893][ T40] audit: type=1400 audit(1753511916.926:388): avc: denied { listen } for pid=6950 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.890833][ T40] audit: type=1400 audit(1753511916.926:389): avc: denied { bind } for pid=6950 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.896788][ T40] audit: type=1400 audit(1753511916.926:390): avc: denied { accept } for pid=6950 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.956987][ T6965] __nla_validate_parse: 1 callbacks suppressed [ 60.956998][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 61.058070][ T6982] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.060396][ T6982] overlayfs: failed to set xattr on upper [ 61.062413][ T6982] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.064548][ T6982] overlayfs: ...falling back to index=off. [ 61.066360][ T6982] overlayfs: ...falling back to uuid=null. [ 61.073299][ T6982] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 61.094541][ T6984] capability: warning: `syz.1.263' uses deprecated v2 capabilities in a way that may be insecure [ 61.136655][ T40] audit: type=1400 audit(1753511917.176:391): avc: denied { rename } for pid=6989 comm="syz.3.267" name="file0" dev="9p" ino=35913934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.139501][ T6992] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 61.143812][ T40] audit: type=1400 audit(1753511917.176:392): avc: denied { unlink } for pid=6989 comm="syz.3.267" name="file1" dev="9p" ino=35913942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.152716][ T6994] fuse: Bad value for 'user_id' [ 61.154578][ T6994] fuse: Bad value for 'user_id' [ 61.162198][ T40] audit: type=1400 audit(1753511917.176:393): avc: denied { create } for pid=6990 comm="syz.1.266" name="#f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.168679][ T40] audit: type=1400 audit(1753511917.176:394): avc: denied { link } for pid=6990 comm="syz.1.266" name="#f" dev="tmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.341136][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 61.412730][ T63] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 61.416747][ T63] Bluetooth: hci0: Injecting HCI hardware error event [ 61.419512][ T63] Bluetooth: hci0: hardware error 0x00 [ 61.442127][ T1338] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.461813][ T7025] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 61.461879][ T7020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.592094][ T1338] usb 7-1: Using ep0 maxpacket: 8 [ 61.599310][ T1338] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 61.603565][ T1338] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 61.608621][ T1338] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.611416][ T1338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.614325][ T1338] usb 7-1: Product: syz [ 61.615610][ T1338] usb 7-1: Manufacturer: syz [ 61.617014][ T1338] usb 7-1: SerialNumber: syz [ 61.742127][ T7040] raw_sendmsg: syz.0.281 forgot to set AF_INET. Fix it! [ 61.778345][ T7044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.826652][ T1338] cdc_ncm 7-1:1.0: bind() failure [ 61.831423][ T1338] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 61.834786][ T1338] cdc_ncm 7-1:1.1: bind() failure [ 61.838381][ T1338] usb 7-1: USB disconnect, device number 2 [ 62.170195][ T7059] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 62.220189][ T7059] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 62.448772][ T7077] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 62.533156][ T7082] program syz.3.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.723931][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 62.727608][ T7092] netlink: 'syz.1.297': attribute type 30 has an invalid length. [ 62.822114][ T6040] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.983174][ T6040] usb 8-1: Using ep0 maxpacket: 8 [ 62.987998][ T6040] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.033345][ T7103] random: crng reseeded on system resumption [ 63.038469][ T7103] program syz.1.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.141227][ T7116] netlink: 'syz.0.306': attribute type 39 has an invalid length. [ 63.212062][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 63.449910][ T7136] block device autoloading is deprecated and will be removed. [ 63.456981][ T7130] md: md2 stopped. [ 63.460535][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 63.467400][ T7130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.502190][ T63] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 64.288014][ T7168] bridge0: port 3(gretap0) entered blocking state [ 64.290140][ T7168] bridge0: port 3(gretap0) entered disabled state [ 64.294643][ T7168] gretap0: entered promiscuous mode [ 64.530366][ T7183] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 64.531901][ T7184] evm: overlay not supported [ 64.585069][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 64.653870][ T7195] netlink: 'syz.2.332': attribute type 13 has an invalid length. [ 64.657399][ T7195] macvtap0: entered promiscuous mode [ 64.659893][ T7195] macvtap0: left allmulticast mode [ 64.664867][ T7195] macvtap0: refused to change device tx_queue_len [ 64.793032][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'. [ 64.830498][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 64.953353][ T7214] binder: 7213:7214 ioctl 5429 2000000004c0 returned -22 [ 65.092319][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.118925][ T7223] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 65.118936][ T7232] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 65.152673][ T7234] netlink: 'syz.1.347': attribute type 2 has an invalid length. [ 65.155199][ T7234] netlink: 'syz.1.347': attribute type 1 has an invalid length. [ 65.243818][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.247502][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.251232][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.255733][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.258623][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.264946][ T9] usb 7-1: config 0 descriptor?? [ 65.293480][ T7239] ceph: Path missing in source [ 65.576321][ T6040] usb 8-1: string descriptor 0 read error: -71 [ 65.578383][ T6040] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.581244][ T6040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.587149][ T6040] usb 8-1: can't set config #1, error -71 [ 65.590808][ T6040] usb 8-1: USB disconnect, device number 3 [ 65.671907][ T9] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 65.684959][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 65.883856][ T7254] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 65.885997][ T7255] loop4: detected capacity change from 0 to 524255232 [ 65.890251][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 65.894078][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 65.952570][ T7254] loop4: detected capacity change from 524255232 to 524287956 [ 65.975808][ T7207] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 65.975841][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 65.975848][ T40] audit: type=1400 audit(1753511922.016:439): avc: denied { read } for pid=7206 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.985393][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.990193][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.012415][ T6336] usb 7-1: USB disconnect, device number 3 [ 66.128995][ T7282] netlink: 'syz.1.360': attribute type 9 has an invalid length. [ 66.137713][ T40] audit: type=1400 audit(1753511922.176:440): avc: denied { sqpoll } for pid=7279 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.286456][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 66.290069][ T63] CPU: 2 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 66.290093][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.290106][ T63] Workqueue: hci3 hci_rx_work [ 66.290146][ T63] Call Trace: [ 66.290153][ T63] [ 66.290161][ T63] dump_stack_lvl+0x16c/0x1f0 [ 66.290194][ T63] sysfs_warn_dup+0x7f/0xa0 [ 66.290230][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 66.290260][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 66.290287][ T63] ? find_held_lock+0x2b/0x80 [ 66.290316][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 66.290338][ T63] kobject_add_internal+0x2c4/0x9b0 [ 66.290363][ T63] kobject_add+0x16e/0x240 [ 66.290382][ T63] ? __pfx_kobject_add+0x10/0x10 [ 66.290404][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 66.290424][ T63] ? kobject_put+0xab/0x5a0 [ 66.290450][ T63] device_add+0x288/0x1a70 [ 66.290473][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 66.290501][ T63] ? __pfx_device_add+0x10/0x10 [ 66.290523][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 66.290563][ T63] hci_conn_add_sysfs+0x17e/0x230 [ 66.290584][ T63] le_conn_complete_evt+0x1075/0x1d70 [ 66.290620][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 66.290647][ T63] ? hci_event_packet+0x459/0x11c0 [ 66.290683][ T63] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 66.290714][ T63] ? skb_pull_data+0x166/0x210 [ 66.290743][ T63] hci_le_meta_evt+0x357/0x5e0 [ 66.290760][ T63] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 66.290788][ T63] hci_event_packet+0x682/0x11c0 [ 66.290810][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 66.290829][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 66.290855][ T63] ? kcov_remote_start+0x3c9/0x6d0 [ 66.290874][ T63] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.290906][ T63] hci_rx_work+0x2c5/0x16b0 [ 66.290924][ T63] ? rcu_is_watching+0x12/0xc0 [ 66.290950][ T63] process_one_work+0x9cc/0x1b70 [ 66.290973][ T63] ? __pfx_process_one_work+0x10/0x10 [ 66.290988][ T63] ? assign_work+0x1a0/0x250 [ 66.290999][ T63] worker_thread+0x6c8/0xf10 [ 66.291016][ T63] ? __pfx_worker_thread+0x10/0x10 [ 66.291026][ T63] kthread+0x3c2/0x780 [ 66.291037][ T63] ? __pfx_kthread+0x10/0x10 [ 66.291047][ T63] ? rcu_is_watching+0x12/0xc0 [ 66.291059][ T63] ? __pfx_kthread+0x10/0x10 [ 66.291069][ T63] ret_from_fork+0x5d4/0x6f0 [ 66.291084][ T63] ? __pfx_kthread+0x10/0x10 [ 66.291093][ T63] ret_from_fork_asm+0x1a/0x30 [ 66.291111][ T63] [ 66.291126][ T63] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.380654][ T63] Bluetooth: hci3: failed to register connection device [ 66.383663][ T40] audit: type=1400 audit(1753511922.406:441): avc: denied { read } for pid=7300 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.896144][ T7305] nbd: couldn't find device at index -1605786504 [ 67.054863][ T40] audit: type=1400 audit(1753511923.096:442): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.100727][ T7321] xt_hashlimit: max too large, truncated to 1048576 [ 67.104395][ T7321] xt_bpf: check failed: parse error [ 67.145037][ T40] audit: type=1400 audit(1753511923.186:443): avc: denied { append } for pid=7331 comm="syz.2.377" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.176507][ T7334] netlink: 348 bytes leftover after parsing attributes in process `syz.3.378'. [ 67.185241][ T7334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=7334 comm=syz.3.378 [ 67.218994][ T40] audit: type=1400 audit(1753511923.256:444): avc: denied { ioctl } for pid=7343 comm="syz.3.381" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.234393][ T7337] kvm: MWAIT instruction emulated as NOP! [ 67.270475][ T40] audit: type=1400 audit(1753511923.306:445): avc: denied { map } for pid=7352 comm="syz.3.385" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 67.361799][ T7361] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 67.479066][ T7374] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 67.484590][ T7374] team0: Device ipvlan1 failed to register rx_handler [ 67.501815][ T7374] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 67.504851][ T7376] bridge1: entered promiscuous mode [ 67.511161][ T7374] cramfs: wrong magic [ 67.567672][ T7385] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20018 [ 67.638612][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 67.690387][ T7393] all: renamed from bridge_slave_0 (while UP) [ 67.733665][ T7396] binder_alloc: 7395: binder_alloc_buf size 1052672 failed, no address space [ 67.739220][ T7396] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 67.747317][ T40] audit: type=1400 audit(1753511923.786:446): avc: denied { execute } for pid=7395 comm="syz.1.400" path="/dev/audio" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 67.885482][ T40] audit: type=1400 audit(1753511923.926:447): avc: denied { getopt } for pid=7412 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.899626][ T40] audit: type=1400 audit(1753511923.936:448): avc: denied { shutdown } for pid=7412 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.011005][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.405082][ T7430] team0: entered allmulticast mode [ 68.406792][ T7430] team_slave_0: entered allmulticast mode [ 68.408636][ T7430] team_slave_1: entered allmulticast mode [ 68.465361][ T7435] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.615834][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 68.621620][ T7464] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 69.602063][ T7461] comedi comedi2: reset error (fatal) [ 69.663181][ T7503] loop4: detected capacity change from 0 to 7 [ 69.666592][ T7263] Dev loop4: unable to read RDB block 7 [ 69.668376][ T7263] loop4: AHDI p1 p2 [ 69.669644][ T7263] loop4: partition table partially beyond EOD, truncated [ 69.672995][ T7263] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 69.680280][ T7503] Dev loop4: unable to read RDB block 7 [ 69.682628][ T7503] loop4: AHDI p1 p2 [ 69.684278][ T7503] loop4: partition table partially beyond EOD, truncated [ 69.687762][ T7503] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 69.712358][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 69.721982][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 70.032286][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.170777][ T7513] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.174474][ T7514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.202151][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 70.205998][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.210240][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.214155][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 70.218684][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 70.223316][ T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 70.227352][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.238801][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 70.242243][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 70.248352][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 70.250235][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 70.257258][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 70.259832][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 70.637131][ T7528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 70.639860][ T7528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.643296][ T7528] vhci_hcd vhci_hcd.0: Device attached [ 70.649752][ T7528] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 70.652519][ T7528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.656342][ T7528] vhci_hcd vhci_hcd.0: Device attached [ 70.660930][ T7528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 70.663006][ T7528] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.666021][ T7528] vhci_hcd vhci_hcd.0: Device attached [ 70.670566][ T7531] vhci_hcd: connection closed [ 70.670666][ T7529] vhci_hcd: connection closed [ 70.670817][ T1142] vhci_hcd: stop threads [ 70.672605][ T7533] vhci_hcd: connection closed [ 70.676142][ T1142] vhci_hcd: release socket [ 70.679067][ T1142] vhci_hcd: disconnect device [ 70.680691][ T1142] vhci_hcd: stop threads [ 70.683682][ T1142] vhci_hcd: release socket [ 70.685178][ T1142] vhci_hcd: disconnect device [ 70.687725][ T1142] vhci_hcd: stop threads [ 70.688962][ T1142] vhci_hcd: release socket [ 70.690215][ T1142] vhci_hcd: disconnect device [ 70.982117][ T40] kauditd_printk_skb: 10335 callbacks suppressed [ 70.982132][ T40] audit: type=1326 audit(1753511927.016:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefc738d45f code=0x50000 [ 70.994072][ T40] audit: type=1326 audit(1753511927.026:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc738e9a9 code=0x50000 [ 71.001179][ T40] audit: type=1326 audit(1753511927.026:10786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefc738d45f code=0x50000 [ 71.008481][ T40] audit: type=1326 audit(1753511927.026:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc738e9a9 code=0x50000 [ 71.017697][ T40] audit: type=1326 audit(1753511927.026:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefc738d45f code=0x50000 [ 71.026957][ T40] audit: type=1326 audit(1753511927.026:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc738e9a9 code=0x50000 [ 71.036282][ T40] audit: type=1326 audit(1753511927.026:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefc738d45f code=0x50000 [ 71.043420][ T40] audit: type=1326 audit(1753511927.026:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc738e9a9 code=0x50000 [ 71.050376][ T40] audit: type=1326 audit(1753511927.026:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefc738d45f code=0x50000 [ 71.057371][ T40] audit: type=1326 audit(1753511927.026:10793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.1.436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc738e9a9 code=0x50000 [ 71.096995][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.099043][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.135022][ T7510] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 71.613565][ T835] usb 7-1: USB disconnect, device number 4 [ 72.387448][ T7577] netlink: 'syz.2.449': attribute type 63 has an invalid length. [ 72.635820][ T7571] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.639083][ T7571] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.648471][ T7571] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.652473][ T7571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.654488][ T7571] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.657853][ T7571] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.663188][ T7571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.665684][ T7571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.671730][ T7571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.676305][ T7571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.978950][ T7593] fuse: Unknown parameter '0000000000000000000000400000000000000000003' [ 73.894762][ T5967] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.150274][ T7644] IPVS: length: 188 != 8 [ 74.151753][ T7644] IPVS: length: 188 != 8 [ 74.703127][ T5967] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.703162][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.734415][ T7661] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65301 sclass=netlink_xfrm_socket pid=7661 comm=syz.3.480 [ 74.869564][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 74.918606][ T7681] sp0: Synchronizing with TNC [ 74.925673][ T7681] sp0: Found TNC qemu-system-x86_64: warning: 9p: bad client: T_read request on directory only expected with 9P2000.u protocol version [ 75.122114][ T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.153312][ T7698] netlink: 'syz.2.493': attribute type 8 has an invalid length. [ 75.179254][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 75.242488][ T7707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.496'. [ 75.248065][ T7710] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 75.251759][ T7713] cgroup: Invalid name [ 75.268679][ T7710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.282097][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 75.293317][ T60] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 75.293921][ T7711] vlan2: entered allmulticast mode [ 75.296326][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.298126][ T7711] veth1: entered allmulticast mode [ 75.303512][ T60] usb 5-1: config 0 descriptor?? [ 75.308791][ T60] as10x_usb: device has been detected [ 75.310883][ T60] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 75.328931][ T60] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 75.360315][ T7723] Bluetooth: MGMT ver 1.23 [ 75.362001][ T60] as10x_usb: error during firmware upload part1 [ 75.365233][ T60] Registered device nBox DVB-T Dongle [ 75.518994][ T7674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.484'. [ 75.535802][ T60] usb 5-1: USB disconnect, device number 3 [ 75.558215][ T60] Unregistered device nBox DVB-T Dongle [ 75.558914][ T60] as10x_usb: device has been disconnected [ 75.618018][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 75.620926][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'. [ 75.627303][ T7751] geneve2: entered promiscuous mode [ 75.629062][ T7751] geneve2: entered allmulticast mode [ 75.667632][ T7766] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 75.984945][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.092263][ T53] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.222133][ T53] usb 8-1: device descriptor read/64, error -71 [ 76.305374][ T40] kauditd_printk_skb: 48922 callbacks suppressed [ 76.305385][ T40] audit: type=1400 audit(1753512188.344:59716): avc: denied { append } for pid=7811 comm="syz.1.519" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.410724][ T7826] JFS: discard option not supported on device [ 76.413774][ T7826] syz.1.522: attempt to access beyond end of device [ 76.413774][ T7826] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 76.418160][ T7826] syz.1.522: attempt to access beyond end of device [ 76.418160][ T7826] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 76.426015][ T7826] Mount JFS Failure: -5 [ 76.427776][ T7826] jfs_mount failed w/return code = -5 [ 76.462206][ T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.575081][ T40] audit: type=1400 audit(1753512188.614:59717): avc: denied { setopt } for pid=7838 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.587931][ T7839] bridge3: entered promiscuous mode [ 76.590147][ T7839] bridge3: entered allmulticast mode [ 76.593823][ T53] usb 8-1: device descriptor read/64, error -71 [ 76.630350][ T40] audit: type=1400 audit(1753512188.664:59718): avc: denied { map } for pid=7843 comm="syz.2.526" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.698686][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 76.702550][ T53] usb usb8-port1: attempt power cycle [ 76.706496][ T40] audit: type=1400 audit(1753512188.734:59719): avc: denied { ioctl } for pid=7858 comm="syz.2.528" path="socket:[18453]" dev="sockfs" ino=18453 ioctlcmd=0x8b21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.772429][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.774564][ T5967] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.848942][ T40] audit: type=1326 audit(1753512188.884:59720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.2.530" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f3178e9a9 code=0x0 [ 76.997763][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.533'. [ 77.000702][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 77.062254][ T53] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.070404][ T6029] libceph: connect (1)[c::]:6789 error -101 [ 77.072948][ T6029] libceph: mon0 (1)[c::]:6789 connect error [ 77.094177][ T53] usb 8-1: device descriptor read/8, error -71 [ 77.166347][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 77.169945][ T7885] openvswitch: netlink: Flow key attr not present in new flow. [ 77.241349][ T7887] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 77.281480][ T40] audit: type=1400 audit(1753512189.314:59721): avc: denied { create } for pid=7890 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.287939][ T40] audit: type=1400 audit(1753512189.314:59722): avc: denied { write } for pid=7890 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.294588][ T40] audit: type=1400 audit(1753512189.314:59723): avc: denied { nlmsg_read } for pid=7890 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.333752][ T6029] libceph: connect (1)[c::]:6789 error -101 [ 77.336230][ T6029] libceph: mon0 (1)[c::]:6789 connect error [ 77.338141][ T53] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 77.352596][ T53] usb 8-1: device descriptor read/8, error -71 [ 77.413824][ T7893] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 77.417287][ T40] audit: type=1400 audit(1753512189.454:59724): avc: denied { relabelto } for pid=7892 comm="syz.1.540" name="cec1" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 77.427564][ T40] audit: type=1400 audit(1753512189.454:59725): avc: denied { associate } for pid=7892 comm="syz.1.540" name="cec1" dev="devtmpfs" ino=975 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 77.474364][ T53] usb usb8-port1: unable to enumerate USB device [ 77.829300][ T7875] ceph: No mds server is up or the cluster is laggy [ 78.062080][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.852266][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.862157][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.101096][ T7952] qrtr: Invalid version 0 [ 79.313633][ T7977] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 79.328150][ T7977] CUSE: unknown device info "&b%ZW)3\my " [ 79.330372][ T7977] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 79.336970][ T7977] CUSE: DEVNAME unspecified [ 79.787966][ T8008] syzkaller1: entered promiscuous mode [ 79.789803][ T8008] syzkaller1: entered allmulticast mode [ 79.913875][ T8019] __nla_validate_parse: 7 callbacks suppressed [ 79.913885][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 79.918057][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 79.921865][ T6227] bond0: (slave bond_slave_0): interface is now down [ 79.925312][ T6227] bond0: (slave bond_slave_1): interface is now down [ 79.934094][ T6227] bond0: now running without any active interface! [ 80.067996][ T8030] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 80.070333][ T8030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.075292][ T8030] vhci_hcd vhci_hcd.0: Device attached [ 80.088893][ T8032] vhci_hcd: connection closed [ 80.090084][ T6224] vhci_hcd: stop threads [ 80.093576][ T6224] vhci_hcd: release socket [ 80.095001][ T6224] vhci_hcd: disconnect device [ 80.187605][ T8042] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 80.200418][ T8043] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 80.366557][ T8049] Cannot find set identified by id 0 to match [ 80.492986][ T6224] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 80.640344][ T8072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19157 sclass=netlink_route_socket pid=8072 comm=syz.2.598 [ 80.644913][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'. [ 80.714111][ T54] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.759768][ T8084] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.895907][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 80.898904][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.902071][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.904964][ T54] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.909892][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.913495][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.916987][ T54] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.920263][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.924751][ T8058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.928023][ T54] hub 5-1:1.0: bad descriptor, ignoring hub [ 80.929925][ T54] hub 5-1:1.0: probe with driver hub failed with error -5 [ 80.932405][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 80.934130][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 80.936843][ T54] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 80.938943][ T54] cdc_wdm 5-1:1.0: Unknown control protocol [ 80.981407][ T5967] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.030392][ T8099] fuse: Bad value for 'user_id' [ 81.031975][ T8099] fuse: Bad value for 'user_id' [ 81.229463][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 81.232065][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 81.234024][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 81.255618][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 81.258886][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'. [ 81.459031][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 82.238669][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 82.238686][ T40] audit: type=1400 audit(1753512194.144:59745): avc: denied { create } for pid=8131 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.246711][ T40] audit: type=1400 audit(1753512194.144:59746): avc: denied { bind } for pid=8131 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.491158][ T40] audit: type=1400 audit(1753512194.388:59747): avc: denied { write } for pid=8136 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.494751][ T8141] tap0: tun_chr_ioctl cmd 1074025673 [ 82.500524][ T8140] tap0: tun_chr_ioctl cmd 1074025675 [ 82.502208][ T8140] tap0: persist disabled [ 82.504676][ T8141] afs: Unknown parameter '' [ 82.506940][ T8140] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 82.513697][ T40] audit: type=1400 audit(1753512194.406:59748): avc: denied { ioctl } for pid=8136 comm="syz.2.617" path="socket:[21774]" dev="sockfs" ino=21774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.634242][ T8143] openvswitch: netlink: Unknown key attributes 2 [ 82.687575][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 82.781985][ T8157] SELinux: syz.1.624 (8157) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.788346][ T40] audit: type=1400 audit(1753512194.668:59749): avc: denied { setopt } for pid=8156 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.793738][ T8157] sp0: Synchronizing with TNC [ 83.205140][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.762723][ T837] usb 5-1: USB disconnect, device number 4 [ 83.800938][ T40] audit: type=1400 audit(1753512195.604:59750): avc: denied { mounton } for pid=8165 comm="syz.2.627" path="/138/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.803879][ T8166] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 83.920590][ T8174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.921524][ T40] audit: type=1400 audit(1753512195.725:59751): avc: denied { ioctl } for pid=8173 comm="syz.0.630" path="socket:[18768]" dev="sockfs" ino=18768 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.924511][ T8175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.958015][ T40] audit: type=1400 audit(1753512195.753:59752): avc: denied { setopt } for pid=8178 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.078679][ T8188] netlink: zone id is out of range [ 84.082735][ T8188] netlink: set zone limit has 4 unknown bytes [ 84.085604][ T8188] 9pnet_virtio: no channels available for device syz [ 84.610315][ T40] audit: type=1400 audit(1753512196.361:59753): avc: denied { append } for pid=8195 comm="syz.2.638" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.642908][ T40] audit: type=1400 audit(1753512196.389:59754): avc: denied { getopt } for pid=8200 comm="syz.0.640" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.646582][ T8204] netlink: 'syz.2.639': attribute type 21 has an invalid length. [ 84.653578][ T8204] netlink: 156 bytes leftover after parsing attributes in process `syz.2.639'. [ 84.797518][ T8217] kvm: kvm [8216]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x7 [ 85.024748][ T8224] netlink: 'syz.2.646': attribute type 4 has an invalid length. [ 85.027366][ T8224] netlink: 152 bytes leftover after parsing attributes in process `syz.2.646'. [ 85.030703][ T8224] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 85.094778][ T8232] dlm: no local IP address has been set [ 85.096827][ T8232] dlm: cannot start dlm midcomms -107 [ 85.175838][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.652'. [ 85.617643][ T8257] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 85.625337][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.630494][ T8257] bridge_slave_1: left allmulticast mode [ 85.634914][ T8257] bridge_slave_1: left promiscuous mode [ 85.637521][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.645797][ T8257] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 85.802933][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 85.964815][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.968266][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.971381][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.975440][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.978946][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.984064][ T10] usb 8-1: config 0 descriptor?? [ 86.214562][ T8259] __nla_validate_parse: 1 callbacks suppressed [ 86.214573][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 86.253989][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 86.254009][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 86.254067][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 86.254120][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 86.359177][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 86.364714][ T8275] No source specified [ 86.384011][ T8268] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 86.419841][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 86.422295][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 86.428293][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 86.430669][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 86.432967][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 86.436507][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 86.452720][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 86.459407][ T10] usb 8-1: USB disconnect, device number 8 [ 86.526629][ T8303] fido_id[8303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 86.623316][ T8318] Bluetooth: MGMT ver 1.23 [ 86.652449][ T8318] input: syz1 as /devices/virtual/input/input9 [ 86.735853][ T8336] netlink: 228 bytes leftover after parsing attributes in process `syz.2.682'. [ 86.739265][ T8336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.741960][ T8336] IPv6: NLM_F_CREATE should be set when creating new route [ 86.745895][ T8332] loop6: detected capacity change from 0 to 524287999 [ 86.751150][ T8336] loop2: detected capacity change from 0 to 7 [ 86.753855][ T8336] Dev loop2: unable to read RDB block 7 [ 86.765295][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 86.768334][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 86.771509][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 86.774645][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 86.777790][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 86.781660][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 86.785338][ C0] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 86.789253][ C0] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 86.792554][ C0] I/O error, dev loop6, sector 4090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 86.795578][ C0] I/O error, dev loop6, sector 4090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 86.798828][ T8336] loop2: AHDI p1 p2 p3 [ 86.800646][ T8336] loop2: partition table partially beyond EOD, truncated [ 86.803289][ T8336] loop2: p1 start 1601398130 is beyond EOD, truncated [ 86.805409][ T8336] loop2: p2 start 1702059890 is beyond EOD, truncated [ 86.889037][ T8345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'. [ 86.899618][ T8343] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.971723][ T8357] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 86.974642][ T8357] netlink: 500 bytes leftover after parsing attributes in process `syz.2.691'. [ 86.978254][ T8357] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 87.005797][ T8367] fuse: Unknown parameter 'f+' [ 87.006266][ T8357] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.008906][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 87.016323][ T8367] program syz.3.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.070114][ T8367] program syz.3.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.177223][ T8383] netlink: 'syz.2.700': attribute type 2 has an invalid length. [ 87.281044][ T8405] openvswitch: netlink: Missing key (keys=40, expected=100) [ 87.648784][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 87.648796][ T40] audit: type=1400 audit(1753512199.205:59774): avc: denied { setattr } for pid=8440 comm="syz.3.718" name="/" dev="configfs" ino=3095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.680203][ T40] audit: type=1400 audit(1753512199.224:59775): avc: denied { ioctl } for pid=8440 comm="syz.3.718" path="socket:[22018]" dev="sockfs" ino=22018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.718634][ T40] audit: type=1400 audit(1753512199.270:59776): avc: denied { mounton } for pid=8440 comm="syz.3.718" path="/170/file0" dev="configfs" ino=3095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.718742][ T8446] overlayfs: failed to resolve 'verity=require': -2 [ 88.087397][ T8461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.129563][ T8464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.192304][ T8472] xt_l2tp: wrong L2TP version: 0 [ 88.194797][ T8472] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 88.197908][ T8472] overlayfs: missing 'lowerdir' [ 88.217234][ T40] audit: type=1400 audit(1753512199.738:59777): avc: denied { mount } for pid=8480 comm="syz.2.731" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 88.230674][ T8483] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.238709][ T40] audit: type=1400 audit(1753512199.757:59778): avc: denied { ioctl } for pid=8482 comm="syz.3.732" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 88.275259][ T8486] binder: 8485:8486 ioctl c018620c 200000000540 returned -22 [ 88.325534][ T8498] 9pnet_fd: p9_fd_create_tcp (8498): problem binding to privport [ 88.457321][ T40] audit: type=1400 audit(1753512199.963:59779): avc: denied { listen } for pid=8517 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.468571][ T40] audit: type=1400 audit(1753512199.963:59780): avc: denied { accept } for pid=8517 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.480577][ T8510] can: request_module (can-proto-0) failed. [ 88.484151][ T40] audit: type=1400 audit(1753512199.981:59781): avc: denied { remount } for pid=8480 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 88.484170][ T8498] debugfs: Bad value for 'uid' [ 88.499169][ T8498] debugfs: Bad value for 'uid' [ 88.608110][ T8534] tipc: Started in network mode [ 88.609704][ T8534] tipc: Node identity 3a1721ce5068, cluster identity 4711 [ 88.612090][ T8534] tipc: Enabled bearer , priority 0 [ 88.614919][ T8534] syzkaller0: entered promiscuous mode [ 88.616727][ T8534] syzkaller0: entered allmulticast mode [ 88.619792][ T40] audit: type=1400 audit(1753512200.112:59782): avc: denied { append } for pid=8533 comm="syz.1.742" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.655354][ T8533] tipc: Resetting bearer [ 88.664475][ T8533] tipc: Disabling bearer [ 88.695995][ T8545] netlink: 'syz.0.747': attribute type 3 has an invalid length. [ 88.699971][ T40] audit: type=1400 audit(1753512200.187:59783): avc: denied { ioctl } for pid=8544 comm="syz.0.747" path="socket:[19355]" dev="sockfs" ino=19355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.715436][ T8546] trusted_key: syz.3.745 sent an empty control message without MSG_MORE. [ 88.999364][ T8298] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 89.159716][ T8298] usb 6-1: Using ep0 maxpacket: 32 [ 89.163685][ T8298] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 89.167731][ T8298] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 89.174668][ T8298] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.179760][ T8298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.184970][ T8298] usb 6-1: Product: ⷈ瓳ửᗳ쨻숻 [ 89.187553][ T8298] usb 6-1: Manufacturer: ఄ [ 89.189613][ T8298] usb 6-1: SerialNumber: 钊Ἥᡔﲚﯷ湙賺䨙씋쓥Ͱ⊬뻉䃨惝트猾숭礔⮕睹々⮈䧌몄뾳ሩ랰㵊駼稯⽟ [ 89.200192][ T8559] Malformed UNC in devname [ 89.200192][ T8559] [ 89.203784][ T8559] CIFS: VFS: Malformed UNC in devname [ 89.432574][ T8298] cdc_ncm 6-1:1.0: bind() failure [ 89.437101][ T8298] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 89.439953][ T8298] cdc_ncm 6-1:1.1: bind() failure [ 89.447104][ T8298] usb 6-1: USB disconnect, device number 2 [ 89.487417][ T6222] Bluetooth: hci4: Frame reassembly failed (-84) [ 90.144518][ T6226] bond0: (slave bridge_slave_1): interface is now down [ 90.147473][ T6226] bond0: now running without any active interface! [ 90.228934][ T53] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 90.337190][ T8633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.391222][ T53] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 90.393627][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.397131][ T53] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.401056][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.404477][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.407782][ T8635] netlink: 'syz.2.769': attribute type 3 has an invalid length. [ 90.409151][ T53] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 90.411886][ T8635] netlink: 'syz.2.769': attribute type 2 has an invalid length. [ 90.413752][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.413767][ T53] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.423819][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.427492][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.434446][ T53] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 90.436866][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.440194][ T53] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.444366][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.447810][ T53] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.453875][ T53] usb 5-1: string descriptor 0 read error: -22 [ 90.455849][ T53] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 90.458710][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.466077][ T8641] openvswitch: netlink: Flow actions attr not present in new flow. [ 90.467901][ T53] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 90.500760][ T8644] xt_hashlimit: size too large, truncated to 1048576 [ 90.682884][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.689211][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.701639][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.705132][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.922504][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.925650][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.930714][ T60] usb 5-1: USB disconnect, device number 5 [ 90.933611][ T8662] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 90.936445][ T8662] nbd: must specify a device to reconfigure [ 90.938551][ T8662] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 90.941024][ T8662] nbd: must specify a device to reconfigure [ 90.943570][ T8662] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 90.947498][ T8662] nbd: must specify a device to reconfigure [ 90.950218][ T8662] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 90.953352][ T8662] nbd: must specify a device to reconfigure [ 90.956651][ T8662] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 90.959828][ T8662] nbd: must specify a device to reconfigure [ 90.962669][ T8662] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 90.965743][ T8662] nbd: must specify a device to reconfigure [ 90.969061][ T8662] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 90.971945][ T8662] nbd: must specify a device to reconfigure [ 90.974582][ T8662] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 90.977794][ T8662] nbd: must specify a device to reconfigure [ 90.980396][ T8662] nbd: must specify a device to reconfigure [ 90.982887][ T8662] nbd: must specify a device to reconfigure [ 90.985142][ T8662] nbd: must specify a device to reconfigure [ 90.987249][ T8662] nbd: must specify a device to reconfigure [ 90.989500][ T8662] nbd: must specify a device to reconfigure [ 90.992401][ T8662] nbd: must specify a device to reconfigure [ 90.994575][ T8662] nbd: must specify a device to reconfigure [ 90.996764][ T8662] nbd: must specify a device to reconfigure [ 90.998944][ T8662] nbd: must specify a device to reconfigure [ 91.001062][ T8662] nbd: must specify a device to reconfigure [ 91.003315][ T8662] nbd: must specify a device to reconfigure [ 91.005402][ T8662] nbd: must specify a device to reconfigure [ 91.007495][ T8662] nbd: must specify a device to reconfigure [ 91.009989][ T8662] nbd: must specify a device to reconfigure [ 91.012530][ T8662] nbd: must specify a device to reconfigure [ 91.014604][ T8662] nbd: must specify a device to reconfigure [ 91.016695][ T8662] nbd: must specify a device to reconfigure [ 91.018713][ T8662] nbd: must specify a device to reconfigure [ 91.020934][ T8662] nbd: must specify a device to reconfigure [ 91.023012][ T8662] nbd: must specify a device to reconfigure [ 91.025130][ T8662] nbd: must specify a device to reconfigure [ 91.027220][ T8662] nbd: must specify a device to reconfigure [ 91.029369][ T8662] nbd: must specify a device to reconfigure [ 91.031590][ T8662] nbd: must specify a device to reconfigure [ 91.033717][ T8662] nbd: must specify a device to reconfigure [ 91.035765][ T8662] nbd: must specify a device to reconfigure [ 91.037793][ T8662] nbd: must specify a device to reconfigure [ 91.039882][ T8662] nbd: must specify a device to reconfigure [ 91.042007][ T8662] nbd: must specify a device to reconfigure [ 91.044174][ T8662] nbd: must specify a device to reconfigure [ 91.046248][ T8662] nbd: must specify a device to reconfigure [ 91.048327][ T8662] nbd: must specify a device to reconfigure [ 91.050400][ T8662] nbd: must specify a device to reconfigure [ 91.052501][ T8662] nbd: must specify a device to reconfigure [ 91.054520][ T8662] nbd: must specify a device to reconfigure [ 91.056673][ T8662] nbd: must specify a device to reconfigure [ 91.058746][ T8662] nbd: must specify a device to reconfigure [ 91.060746][ T8662] nbd: must specify a device to reconfigure [ 91.063007][ T8662] nbd: must specify a device to reconfigure [ 91.065084][ T8662] nbd: must specify a device to reconfigure [ 91.067157][ T8662] nbd: must specify a device to reconfigure [ 91.069208][ T8662] nbd: must specify a device to reconfigure [ 91.071248][ T8662] nbd: must specify a device to reconfigure [ 91.073442][ T8662] nbd: must specify a device to reconfigure [ 91.075542][ T8662] nbd: must specify a device to reconfigure [ 91.077629][ T8662] nbd: must specify a device to reconfigure [ 91.080096][ T8662] nbd: must specify a device to reconfigure [ 91.082346][ T8662] nbd: must specify a device to reconfigure [ 91.085138][ T8662] nbd: must specify a device to reconfigure [ 91.087237][ T8662] nbd: must specify a device to reconfigure [ 91.089346][ T8662] nbd: must specify a device to reconfigure [ 91.091586][ T8662] nbd: must specify a device to reconfigure [ 91.094001][ T8662] nbd: must specify a device to reconfigure [ 91.096312][ T8662] nbd: must specify a device to reconfigure [ 91.098505][ T8662] nbd: must specify a device to reconfigure [ 91.101115][ T8662] nbd: must specify a device to reconfigure [ 91.103225][ T8662] nbd: must specify a device to reconfigure [ 91.206557][ T8673] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.371050][ T8686] overlayfs: missing 'lowerdir' [ 91.554591][ T8708] input: syz1 as /devices/virtual/input/input11 [ 91.672005][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.699163][ T8706] atomic_op ffff88802d609998 conn xmit_atomic 0000000000000000 [ 91.720969][ T8718] __nla_validate_parse: 112 callbacks suppressed [ 91.720981][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.797'. [ 92.095164][ T8750] sctp: [Deprecated]: syz.2.807 (pid 8750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.095164][ T8750] Use struct sctp_sack_info instead [ 92.531590][ T8765] block nbd3: NBD_DISCONNECT [ 92.679648][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 92.721471][ T8784] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 92.728563][ T8783] syz_tun: entered allmulticast mode [ 92.733201][ T8783] lo: entered allmulticast mode [ 92.735788][ T8781] syz_tun: left allmulticast mode [ 92.770695][ T8786] netlink: 372 bytes leftover after parsing attributes in process `syz.1.819'. [ 92.794582][ T8787] wg2: entered promiscuous mode [ 92.798529][ T8787] wg2: entered allmulticast mode [ 92.802897][ T8789] overlay: Unknown parameter 'w3No޳OrE@!@~ތ8uBvO@Al5{]Y3Z_gt{]P)![ &>u#z:e], priority 0 [ 94.404724][ T8896] syzkaller0: MTU too low for tipc bearer [ 94.406559][ T8896] tipc: Disabling bearer [ 94.424428][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.427720][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.433097][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.436498][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.439468][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.443570][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.446053][ T8899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.448087][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.451408][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.453800][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.456113][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.458371][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.460640][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.463201][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.465481][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.467816][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.468734][ T8899] bond2: (slave geneve2): making interface the new active one [ 94.470098][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.474629][ T8899] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 94.476993][ T53] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 94.487026][ T53] hid-generic 0002:0004:0009.0004: hidraw1: HID v0.04 Device [syz0] on syz0 [ 94.500861][ T8899] bond2: entered promiscuous mode [ 94.505966][ T8899] geneve2: entered promiscuous mode [ 94.544268][ T8911] fido_id[8911]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.657325][ T8928] syz.3.862 (8928): /proc/8926/oom_adj is deprecated, please use /proc/8926/oom_score_adj instead. [ 94.686747][ T5967] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 94.690994][ T8938] ip6tnl1: entered allmulticast mode [ 94.721725][ T8944] binder: BC_ATTEMPT_ACQUIRE not supported [ 94.723594][ T8944] binder: 8942:8944 ioctl c0306201 200000000c40 returned -22 [ 94.964741][ T8298] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.104517][ T8298] usb 5-1: device descriptor read/64, error -71 [ 95.360226][ T8298] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.499228][ T8298] usb 5-1: device descriptor read/64, error -71 [ 95.617418][ T8298] usb usb5-port1: attempt power cycle [ 95.795050][ T8989] @: renamed from vlan0 [ 95.980297][ T8298] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 96.002109][ T8298] usb 5-1: device descriptor read/8, error -71 [ 96.258298][ T8298] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.261153][ T8998] validate_nla: 62 callbacks suppressed [ 96.261163][ T8998] netlink: 'syz.1.885': attribute type 5 has an invalid length. [ 96.281078][ T8298] usb 5-1: device descriptor read/8, error -71 [ 96.398071][ T8298] usb usb5-port1: unable to enumerate USB device [ 96.523727][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.828630][ T9025] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 96.964362][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 96.987032][ T9033] overlayfs: failed to resolve './bus': -2 [ 97.027031][ T9038] QAT: Invalid ioctl 35123 [ 97.519827][ T8298] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 97.690803][ T8298] usb 6-1: Using ep0 maxpacket: 8 [ 97.702399][ T8298] usb 6-1: config 2 interface 0 has no altsetting 0 [ 97.706192][ T8298] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 97.709042][ T8298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.711513][ T8298] usb 6-1: Product: syz [ 97.713079][ T8298] usb 6-1: Manufacturer: syz [ 97.714542][ T8298] usb 6-1: SerialNumber: syz [ 97.939801][ T8298] usb 6-1: USB disconnect, device number 3 [ 98.117023][ T9065] __nla_validate_parse: 202 callbacks suppressed [ 98.117033][ T9065] netlink: 260 bytes leftover after parsing attributes in process `syz.3.905'. [ 98.118816][ T9067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.316361][ T9075] No source specified [ 98.322485][ T9075] tipc: Enabled bearer , priority 10 [ 98.356505][ T9079] input: syz1 as /devices/virtual/input/input12 [ 98.394534][ T9083] comedi: valid board names for 8255 driver are: [ 98.398361][ T9083] 8255 [ 98.399287][ T9083] comedi: valid board names for vmk80xx driver are: [ 98.401355][ T9083] vmk80xx [ 98.402505][ T9083] comedi: valid board names for usbduxsigma driver are: [ 98.404779][ T9083] usbduxsigma [ 98.405864][ T9083] comedi: valid board names for usbduxfast driver are: [ 98.409130][ T9083] usbduxfast [ 98.410235][ T9083] comedi: valid board names for usbdux driver are: [ 98.412080][ T9084] fuseblk: Bad value for 'fd' [ 98.412338][ T9083] usbdux [ 98.414828][ T9083] comedi: valid board names for ni6501 driver are: [ 98.416869][ T9083] ni6501 [ 98.418983][ T9083] comedi: valid board names for dt9812 driver are: [ 98.421037][ T9083] dt9812 [ 98.421994][ T9083] comedi: valid board names for ni_labpc_cs driver are: [ 98.424198][ T9083] ni_labpc_cs [ 98.425301][ T9083] comedi: valid board names for ni_daq_700 driver are: [ 98.427455][ T9083] ni_daq_700 [ 98.428931][ T9083] comedi: valid board names for labpc_pci driver are: [ 98.431055][ T9083] labpc_pci [ 98.432183][ T9083] comedi: valid board names for adl_pci9118 driver are: [ 98.434346][ T9083] pci9118dg [ 98.435413][ T9083] pci9118hg [ 98.436484][ T9083] pci9118hr [ 98.437579][ T9083] comedi: valid board names for 8255_pci driver are: [ 98.441095][ T9083] 8255_pci [ 98.442326][ T9083] comedi: valid board names for s526 driver are: [ 98.444358][ T9083] s526 [ 98.445281][ T9083] comedi: valid board names for multiq3 driver are: [ 98.447384][ T9083] multiq3 [ 98.448402][ T9083] comedi: valid board names for pcmuio driver are: [ 98.450537][ T9083] pcmuio48 [ 98.451668][ T9083] pcmuio96 [ 98.452721][ T9083] comedi: valid board names for pcmmio driver are: [ 98.454754][ T9083] pcmmio [ 98.455780][ T9083] comedi: valid board names for pcmda12 driver are: [ 98.457817][ T9083] pcmda12 [ 98.458838][ T9083] comedi: valid board names for pcmad driver are: [ 98.461080][ T9083] pcmad12 [ 98.462160][ T9083] pcmad16 [ 98.463167][ T9083] comedi: valid board names for ni_labpc driver are: [ 98.465336][ T9083] lab-pc-1200 [ 98.466493][ T9083] lab-pc-1200ai [ 98.467754][ T9083] lab-pc+ [ 98.468789][ T9083] comedi: valid board names for atmio16 driver are: [ 98.470854][ T9083] atmio16 [ 98.471955][ T9083] atmio16d [ 98.472940][ T9083] comedi: valid board names for ni_at_ao driver are: [ 98.475146][ T9083] at-ao-6 [ 98.476165][ T9083] at-ao-10 [ 98.477176][ T9083] comedi: valid board names for ni_at_a2150 driver are: [ 98.479309][ T9083] ni_at_a2150 [ 98.480408][ T9083] comedi: valid board names for adq12b driver are: [ 98.482525][ T9083] adq12b [ 98.483473][ T9083] comedi: valid board names for mpc624 driver are: [ 98.485460][ T9083] mpc624 [ 98.486528][ T9083] comedi: valid board names for c6xdigio driver are: [ 98.488894][ T9083] c6xdigio [ 98.490023][ T9083] comedi: valid board names for aio_iiro_16 driver are: [ 98.492240][ T9083] aio_iiro_16 [ 98.493577][ T9083] comedi: valid board names for aio_aio12_8 driver are: [ 98.494807][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 98.495755][ T9083] aio_aio12_8 [ 98.495761][ T9083] aio_ai12_8 [ 98.495765][ T9083] aio_ao12_4 [ 98.501877][ T9083] comedi: valid board names for fl512 driver are: [ 98.504022][ T9083] fl512 [ 98.504910][ T9083] comedi: valid board names for dmm32at driver are: [ 98.506825][ T9083] dmm32at [ 98.507814][ T9083] comedi: valid board names for dt282x driver are: [ 98.509786][ T9083] dt2821 [ 98.510726][ T9083] dt2821-f [ 98.511761][ T9083] dt2821-g [ 98.512766][ T9083] dt2823 [ 98.513705][ T9083] dt2824-pgh [ 98.514894][ T9083] dt2824-pgl [ 98.515965][ T9083] dt2825 [ 98.516905][ T9083] dt2827 [ 98.517813][ T9083] dt2828 [ 98.518733][ T9083] dt2829 [ 98.519670][ T9083] dt21-ez [ 98.520632][ T9083] dt23-ez [ 98.521695][ T9083] dt24-ez [ 98.522682][ T9083] dt24-ez-pgl [ 98.523775][ T9083] comedi: valid board names for dt2817 driver are: [ 98.526225][ T9083] dt2817 [ 98.528069][ T9083] comedi: valid board names for dt2815 driver are: [ 98.530596][ T9083] dt2815 [ 98.531552][ T9083] comedi: valid board names for dt2814 driver are: [ 98.533643][ T9083] dt2814 [ 98.534592][ T9083] comedi: valid board names for dt2811 driver are: [ 98.536746][ T9083] dt2811-pgh [ 98.537814][ T9083] dt2811-pgl [ 98.538478][ T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 98.539070][ T9083] comedi: valid board names for dt2801 driver are: [ 98.539077][ T9083] dt2801 [ 98.539080][ T9083] comedi: valid board names for das6402 driver are: [ 98.539085][ T9083] das6402-12 [ 98.539088][ T9083] das6402-16 [ 98.539092][ T9083] comedi: valid board names for das1800 driver are: [ 98.539096][ T9083] das-1701st [ 98.539100][ T9083] das-1701st-da [ 98.539104][ T9083] das-1702st [ 98.539107][ T9083] das-1702st-da [ 98.539111][ T9083] das-1702hr [ 98.539114][ T9083] das-1702hr-da [ 98.539118][ T9083] das-1701ao [ 98.539121][ T9083] das-1702ao [ 98.539125][ T9083] das-1801st [ 98.539128][ T9083] das-1801st-da [ 98.539132][ T9083] das-1802st [ 98.539135][ T9083] das-1802st-da [ 98.539139][ T9083] das-1802hr [ 98.539142][ T9083] das-1802hr-da [ 98.539146][ T9083] das-1801hc [ 98.539149][ T9083] das-1802hc [ 98.539153][ T9083] das-1801ao [ 98.539156][ T9083] das-1802ao [ 98.539159][ T9083] comedi: valid board names for das800 driver are: [ 98.539164][ T9083] das-800 [ 98.539168][ T9083] cio-das800 [ 98.539171][ T9083] das-801 [ 98.539175][ T9083] cio-das801 [ 98.539178][ T9083] das-802 [ 98.539181][ T9083] cio-das802 [ 98.539185][ T9083] cio-das802/16 [ 98.539188][ T9083] comedi: valid board names for isa-das08 driver are: [ 98.539193][ T9083] isa-das08 [ 98.539197][ T9083] das08-pgm [ 98.539201][ T9083] das08-pgh [ 98.539205][ T9083] das08-pgl [ 98.539208][ T9083] das08-aoh [ 98.539211][ T9083] das08-aol [ 98.539215][ T9083] das08-aom [ 98.539218][ T9083] das08/jr-ao [ 98.539222][ T9083] das08jr-16-ao [ 98.539226][ T9083] pc104-das08 [ 98.539229][ T9083] das08jr/16 [ 98.539232][ T9083] comedi: valid board names for das16m1 driver are: [ 98.539237][ T9083] das16m1 [ 98.539240][ T9083] comedi: valid board names for dac02 driver are: [ 98.539245][ T9083] dac02 [ 98.539248][ T9083] comedi: valid board names for rti802 driver are: [ 98.539253][ T9083] rti802 [ 98.539256][ T9083] comedi: valid board names for rti800 driver are: [ 98.539261][ T9083] rti800 [ 98.539264][ T9083] rti815 [ 98.539267][ T9083] comedi: valid board names for pcm3724 driver are: [ 98.539272][ T9083] pcm3724 [ 98.539275][ T9083] comedi: valid board names for pcl818 driver are: [ 98.539280][ T9083] pcl818l [ 98.539283][ T9083] pcl818h [ 98.539287][ T9083] pcl818hd [ 98.539290][ T9083] pcl818hg [ 98.539293][ T9083] pcl818 [ 98.539297][ T9083] pcl718 [ 98.539300][ T9083] pcm3718 [ 98.539303][ T9083] comedi: valid board names for pcl816 driver are: [ 98.539308][ T9083] pcl816 [ 98.539311][ T9083] pcl814b [ 98.539315][ T9083] comedi: valid board names for pcl812 driver are: [ 98.539319][ T9083] pcl812 [ 98.539322][ T9083] pcl812pg [ 98.539326][ T9083] acl8112pg [ 98.539329][ T9083] acl8112dg [ 98.539333][ T9083] acl8112hg [ 98.539336][ T9083] a821pgl [ 98.539340][ T9083] a821pglnda [ 98.539343][ T9083] a821pgh [ 98.539346][ T9083] a822pgl [ 98.539350][ T9083] a822pgh [ 98.539353][ T9083] a823pgl [ 98.539357][ T9083] a823pgh [ 98.539360][ T9083] pcl813 [ 98.539363][ T9083] pcl813b [ 98.539367][ T9083] acl8113 [ 98.539370][ T9083] iso813 [ 98.539373][ T9083] acl8216 [ 98.539377][ T9083] a826pg [ 98.539380][ T9083] comedi: valid board names for pcl730 driver are: [ 98.539385][ T9083] pcl730 [ 98.539388][ T9083] iso730 [ 98.539392][ T9083] acl7130 [ 98.539395][ T9083] pcm3730 [ 98.539398][ T9083] pcl725 [ 98.539402][ T9083] p8r8dio [ 98.539405][ T9083] acl7225b [ 98.539409][ T9083] p16r16dio [ 98.539412][ T9083] pcl733 [ 98.539415][ T9083] pcl734 [ 98.539419][ T9083] opmm-1616-xt [ 98.539422][ T9083] pearl-mm-p [ 98.539426][ T9083] ir104-pbf [ 98.539429][ T9083] comedi: valid board names for pcl726 driver are: [ 98.663730][ T9083] pcl726 [ 98.664684][ T9083] pcl727 [ 98.665633][ T9083] pcl728 [ 98.666675][ T9083] acl6126 [ 98.667731][ T9083] acl6128 [ 98.669040][ T9083] comedi: valid board names for pcl724 driver are: [ 98.671122][ T9083] pcl724 [ 98.672121][ T9083] pcl722 [ 98.673075][ T9083] pcl731 [ 98.674065][ T9083] acl7122 [ 98.675276][ T9083] acl7124 [ 98.676596][ T9083] pet48dio [ 98.677803][ T9083] pcmio48 [ 98.678816][ T9083] onyx-mm-dio [ 98.680175][ T9083] comedi: valid board names for pcl711 driver are: [ 98.682303][ T9083] pcl711 [ 98.683417][ T9083] pcl711b [ 98.684655][ T9083] acl8112hg [ 98.686059][ T9083] acl8112dg [ 98.687174][ T9083] comedi: valid board names for amplc_pc263 driver are: [ 98.689351][ T9083] pc263 [ 98.690261][ T9083] comedi: valid board names for amplc_pc236 driver are: [ 98.692359][ T9083] pc36at [ 98.693277][ T9083] comedi: valid board names for amplc_dio200 driver are: [ 98.695436][ T9083] pc212e [ 98.695786][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 98.696479][ T9083] pc214e [ 98.698919][ T9083] pc215e [ 98.699861][ T9083] pc218e [ 98.700355][ T53] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.700813][ T9083] pc272e [ 98.700819][ T9083] comedi: valid board names for comedi_parport driver are: [ 98.703861][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.704660][ T9083] comedi_parport [ 98.707167][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.709984][ T9083] comedi: valid board names for comedi_test driver are: [ 98.711587][ T53] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.714933][ T9083] comedi_test [ 98.714939][ T9083] comedi: valid board names for comedi_bond driver are: [ 98.714944][ T9083] comedi_bond [ 98.725592][ T53] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.728943][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.764714][ T40] kauditd_printk_skb: 805 callbacks suppressed [ 98.764770][ T40] audit: type=1400 audit(1753512209.607:60620): avc: denied { read write } for pid=5958 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.775353][ T40] audit: type=1400 audit(1753512209.607:60621): avc: denied { open } for pid=5958 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.783467][ T40] audit: type=1400 audit(1753512209.607:60622): avc: denied { ioctl } for pid=5958 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.791357][ T40] audit: type=1400 audit(1753512209.616:60623): avc: denied { read append } for pid=9108 comm="syz.1.920" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.802593][ T40] audit: type=1400 audit(1753512209.616:60624): avc: denied { open } for pid=9108 comm="syz.1.920" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.810042][ T40] audit: type=1400 audit(1753512209.616:60625): avc: denied { ioctl } for pid=9108 comm="syz.1.920" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.818934][ T40] audit: type=1400 audit(1753512209.616:60626): avc: denied { create } for pid=9108 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.825572][ T40] audit: type=1400 audit(1753512209.616:60627): avc: denied { write } for pid=9108 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.832342][ T40] audit: type=1400 audit(1753512209.635:60628): avc: denied { read write } for pid=5951 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.839998][ T40] audit: type=1400 audit(1753512209.635:60629): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.949102][ T53] usb 8-1: GET_CAPABILITIES returned 0 [ 98.950907][ T53] usbtmc 8-1:16.0: can't read capabilities [ 99.177041][ T9073] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.201252][ T1338] usb 8-1: USB disconnect, device number 9 [ 99.222616][ T9127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.926'. [ 99.340564][ T9134] tipc: Cannot configure node identity twice [ 99.496329][ T9146] tipc: Can't bind to reserved service type 0 [ 99.531342][ T10] tipc: Node number set to 3734721549 [ 99.554137][ T9151] random: crng reseeded on system resumption [ 99.561171][ T9159] delete_channel: no stack [ 99.565478][ T9159] delete_channel: no stack [ 99.571458][ T9155] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 99.575132][ T9155] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 99.602009][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 99.659798][ T9150] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 99.708440][ T9169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'. [ 99.796561][ T9177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.799989][ T9177] bond0: (slave bond3): Enslaving as an active interface with an up link [ 99.809309][ T9177] netlink: 'syz.3.940': attribute type 4 has an invalid length. [ 99.865017][ T9184] netlink: 'syz.3.943': attribute type 3 has an invalid length. [ 99.868080][ T9184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.943'. [ 99.990580][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.950'. [ 99.997554][ T9209] ------------[ cut here ]------------ [ 99.999544][ T9209] WARNING: CPU: 0 PID: 9209 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 100.003223][ T9209] Modules linked in: [ 100.004910][ T9209] CPU: 0 UID: 0 PID: 9209 Comm: syz.2.950 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 100.010455][ T9209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.010466][ T9209] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 100.010488][ T9209] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 100.024970][ T9209] RSP: 0018:ffffc9000e907438 EFLAGS: 00010246 [ 100.024990][ T9209] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 100.024998][ T9209] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040dc0 [ 100.025006][ T9209] RBP: 0000000080000000 R08: 0000000000000005 R09: 0000000000000000 [ 100.025014][ T9209] R10: 0000000010000000 R11: 0000000000000001 R12: 0000000000000013 [ 100.025021][ T9209] R13: 1ffff92001d20e9c R14: 0000000080000000 R15: 0000000000000013 [ 100.025029][ T9209] FS: 00007f4f326356c0(0000) GS:ffff8880d6720000(0000) knlGS:0000000000000000 [ 100.025053][ T9209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.025062][ T9209] CR2: 0000200000001000 CR3: 000000005a946000 CR4: 0000000000352ef0 [ 100.025070][ T9209] Call Trace: [ 100.025074][ T9209] [ 100.025083][ T9209] ? stack_trace_save+0x8e/0xc0 [ 100.025100][ T9209] ? __pfx_stack_trace_save+0x10/0x10 [ 100.060970][ T9209] ? stack_depot_save_flags+0x28/0xa40 [ 100.061022][ T9209] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 100.061054][ T9209] ? kasan_save_stack+0x42/0x60 [ 100.061080][ T9209] ? kasan_save_stack+0x33/0x60 [ 100.061114][ T9209] ? kasan_save_track+0x14/0x30 [ 100.061141][ T9209] ? __kasan_kmalloc+0xaa/0xb0 [ 100.061167][ T9209] ? common_read+0xc1/0x3d0 [ 100.061194][ T9209] ? policydb_read+0x871/0x3220 [ 100.061221][ T9209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.081428][ T9209] ? hashtab_init+0x1b1/0x290 [ 100.081464][ T9209] __alloc_pages_noprof+0xb/0x1b0 [ 100.081497][ T9209] ___kmalloc_large_node+0x84/0x1e0 [ 100.081526][ T9209] ? hashtab_init+0x1b1/0x290 [ 100.081552][ T9209] __kmalloc_large_node_noprof+0x1c/0x70 [ 100.081578][ T9209] __kmalloc_noprof.cold+0xc/0x61 [ 100.081612][ T9209] hashtab_init+0x1b1/0x290 [ 100.081640][ T9209] ? __asan_memcpy+0x3c/0x60 [ 100.081665][ T9209] common_read+0x1c2/0x3d0 [ 100.081691][ T9209] ? __pfx_common_read+0x10/0x10 [ 100.081713][ T9209] ? __kmalloc_noprof+0x242/0x510 [ 100.081746][ T9209] ? __pfx_common_read+0x10/0x10 [ 100.081769][ T9209] policydb_read+0x871/0x3220 [ 100.103357][ T9209] ? __pfx_policydb_read+0x10/0x10 [ 100.103390][ T9209] security_load_policy+0x15c/0x12c0 [ 100.103406][ T9209] ? irqentry_exit+0x3b/0x90 [ 100.103425][ T9209] ? __pfx_security_load_policy+0x10/0x10 [ 100.103443][ T9209] ? _copy_from_user+0x93/0xd0 [ 100.103456][ T9209] sel_write_load+0x332/0x1bd0 [ 100.103476][ T9209] ? __lock_acquire+0xb8a/0x1c90 [ 100.103487][ T9209] ? __pfx_sel_write_load+0x10/0x10 [ 100.103511][ T9209] ? __pfx_sel_write_load+0x10/0x10 [ 100.103525][ T9209] vfs_write+0x2a0/0x1150 [ 100.103543][ T9209] ? __pfx___mutex_lock+0x10/0x10 [ 100.103555][ T9209] ? __pfx_vfs_write+0x10/0x10 [ 100.103573][ T9209] ? __fget_files+0x20e/0x3c0 [ 100.103588][ T9209] ksys_write+0x12a/0x250 [ 100.103603][ T9209] ? __pfx_ksys_write+0x10/0x10 [ 100.103622][ T9209] do_syscall_64+0xcd/0x4c0 [ 100.103634][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.103661][ T9209] RIP: 0033:0x7f4f3178e9a9 [ 100.103672][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.103683][ T9209] RSP: 002b:00007f4f32635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.103695][ T9209] RAX: ffffffffffffffda RBX: 00007f4f319b5fa0 RCX: 00007f4f3178e9a9 [ 100.103703][ T9209] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 100.103710][ T9209] RBP: 00007f4f31810d69 R08: 0000000000000000 R09: 0000000000000000 [ 100.103717][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.103724][ T9209] R13: 0000000000000000 R14: 00007f4f319b5fa0 R15: 00007ffc4f7bfd28 [ 100.103738][ T9209] [ 100.153751][ T9209] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.153762][ T9209] CPU: 0 UID: 0 PID: 9209 Comm: syz.2.950 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 100.153776][ T9209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.153783][ T9209] Call Trace: [ 100.153788][ T9209] [ 100.153793][ T9209] dump_stack_lvl+0x3d/0x1f0 [ 100.153814][ T9209] panic+0x71c/0x800 [ 100.153832][ T9209] ? __pfx_panic+0x10/0x10 [ 100.153848][ T9209] ? show_trace_log_lvl+0x29b/0x3e0 [ 100.153869][ T9209] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 100.153886][ T9209] check_panic_on_warn+0xab/0xb0 [ 100.153903][ T9209] __warn+0xf6/0x3c0 [ 100.153912][ T9209] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 100.153929][ T9209] report_bug+0x3c3/0x580 [ 100.153944][ T9209] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 100.153960][ T9209] handle_bug+0x184/0x210 [ 100.153972][ T9209] exc_invalid_op+0x17/0x50 [ 100.153984][ T9209] asm_exc_invalid_op+0x1a/0x20 [ 100.153995][ T9209] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 100.154011][ T9209] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 100.154022][ T9209] RSP: 0018:ffffc9000e907438 EFLAGS: 00010246 [ 100.154032][ T9209] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 100.154038][ T9209] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040dc0 [ 100.154045][ T9209] RBP: 0000000080000000 R08: 0000000000000005 R09: 0000000000000000 [ 100.154051][ T9209] R10: 0000000010000000 R11: 0000000000000001 R12: 0000000000000013 [ 100.154058][ T9209] R13: 1ffff92001d20e9c R14: 0000000080000000 R15: 0000000000000013 [ 100.154074][ T9209] ? stack_trace_save+0x8e/0xc0 [ 100.154089][ T9209] ? __pfx_stack_trace_save+0x10/0x10 [ 100.154103][ T9209] ? stack_depot_save_flags+0x28/0xa40 [ 100.154125][ T9209] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 100.154142][ T9209] ? kasan_save_stack+0x42/0x60 [ 100.154157][ T9209] ? kasan_save_stack+0x33/0x60 [ 100.154171][ T9209] ? kasan_save_track+0x14/0x30 [ 100.154185][ T9209] ? __kasan_kmalloc+0xaa/0xb0 [ 100.154199][ T9209] ? common_read+0xc1/0x3d0 [ 100.154213][ T9209] ? policydb_read+0x871/0x3220 [ 100.154228][ T9209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.154246][ T9209] ? hashtab_init+0x1b1/0x290 [ 100.154260][ T9209] __alloc_pages_noprof+0xb/0x1b0 [ 100.154276][ T9209] ___kmalloc_large_node+0x84/0x1e0 [ 100.154291][ T9209] ? hashtab_init+0x1b1/0x290 [ 100.154305][ T9209] __kmalloc_large_node_noprof+0x1c/0x70 [ 100.154319][ T9209] __kmalloc_noprof.cold+0xc/0x61 [ 100.154337][ T9209] hashtab_init+0x1b1/0x290 [ 100.154352][ T9209] ? __asan_memcpy+0x3c/0x60 [ 100.154366][ T9209] common_read+0x1c2/0x3d0 [ 100.154381][ T9209] ? __pfx_common_read+0x10/0x10 [ 100.154395][ T9209] ? __kmalloc_noprof+0x242/0x510 [ 100.154413][ T9209] ? __pfx_common_read+0x10/0x10 [ 100.154428][ T9209] policydb_read+0x871/0x3220 [ 100.154447][ T9209] ? __pfx_policydb_read+0x10/0x10 [ 100.154472][ T9209] security_load_policy+0x15c/0x12c0 [ 100.154486][ T9209] ? irqentry_exit+0x3b/0x90 [ 100.154496][ T9209] ? __pfx_security_load_policy+0x10/0x10 [ 100.154513][ T9209] ? _copy_from_user+0x93/0xd0 [ 100.154525][ T9209] sel_write_load+0x332/0x1bd0 [ 100.154545][ T9209] ? __lock_acquire+0xb8a/0x1c90 [ 100.154555][ T9209] ? __pfx_sel_write_load+0x10/0x10 [ 100.154578][ T9209] ? __pfx_sel_write_load+0x10/0x10 [ 100.154591][ T9209] vfs_write+0x2a0/0x1150 [ 100.154609][ T9209] ? __pfx___mutex_lock+0x10/0x10 [ 100.154620][ T9209] ? __pfx_vfs_write+0x10/0x10 [ 100.154638][ T9209] ? __fget_files+0x20e/0x3c0 [ 100.154652][ T9209] ksys_write+0x12a/0x250 [ 100.154667][ T9209] ? __pfx_ksys_write+0x10/0x10 [ 100.154686][ T9209] do_syscall_64+0xcd/0x4c0 [ 100.154697][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.154708][ T9209] RIP: 0033:0x7f4f3178e9a9 [ 100.154716][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.154727][ T9209] RSP: 002b:00007f4f32635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.154736][ T9209] RAX: ffffffffffffffda RBX: 00007f4f319b5fa0 RCX: 00007f4f3178e9a9 [ 100.154743][ T9209] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 100.154749][ T9209] RBP: 00007f4f31810d69 R08: 0000000000000000 R09: 0000000000000000 [ 100.154756][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.154762][ T9209] R13: 0000000000000000 R14: 00007f4f319b5fa0 R15: 00007ffc4f7bfd28 [ 100.154775][ T9209] [ 100.156764][ T9209] Kernel Offset: disabled VM DIAGNOSIS: 06:39:16 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff855a5880 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc9000e906da8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff9b0b9e70 R14=ffffffff9b0b9e20 R15=ffffffff9b0ba0e0 RIP=ffffffff855a58a7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4f326356c0 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000005a946000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f31811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f31811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f31811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f31811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f31811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f31811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f31986488 00007f4f31986480 00007f4f31986478 00007f4f31986450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f324ed100 00007f4f31986440 00007f4f31986458 00007f4f319864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f31986498 00007f4f31986490 00007f4f31986488 00007f4f31986480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000019709 RBX=ffff88806a642080 RCX=ffffc900073a2000 RDX=0000000000080000 RSI=ffffffff81afd3c9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900056af598 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c8411 R15=ffff88806a53b580 RIP=ffffffff81afd3cb RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fefc82296c0 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000054986000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc7411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc7411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc7411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc7411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc7411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc7411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc7586488 00007fefc7586480 00007fefc7586478 00007fefc7586450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc80ed100 00007fefc7586440 00007fefc7586458 00007fefc75864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc7586498 00007fefc7586490 00007fefc7586488 00007fefc7586480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 0000000000000000 000000000000eda8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000f209d RBX=0000000000000002 RCX=ffffffff8b869c99 RDX=0000000000000000 RSI=ffffffff8de3046a RDI=ffffffff8c1574e0 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90a94250 R15=0000000000000000 RIP=ffffffff8b8687ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c338e4d CR3=000000003c178000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000316f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000124c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000025 RCX=dead000000000040 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffea0000e68948 RBP=dffffc0000000000 RSP=ffffc9000e01f610 R8 =0000000000000000 R9 =fffff940001cd12e R10=ffffea0000e68977 R11=0000000000000001 R12=ffffea0000e68940 R13=ffffea0000e68974 R14=ffffea0000e68940 R15=0000000000000000 RIP=ffffffff8213c392 RFL=00000207 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa800c876c0 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c35f9f1 CR3=000000003c178000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7ffe11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000316f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000124c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000