last executing test programs: 1.449416274s ago: executing program 1 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x89f1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0xe9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22) 1.051477245s ago: executing program 1 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x26, &(0x7f0000000140)={@broadcast, @random="b39f46e5d9cf", @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x2a, 0x0, 0x0, 0x0, "a0b5a42d5a016e85d07c0ff2aa9e9da994db9e070401b89368a3cf74544f7bc095b55ffa826e849c7fc4580a8e392e1ad0a8cc23fcc73a89ceb2d21a2d41b42b"}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x101}}}}}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) (async) r7 = syz_open_dev$vim2m(&(0x7f0000001440), 0x2, 0x2) close(r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x1, 0x70bd2d, 0x25dfcbfb}, 0x14}, 0x1, 0x0, 0x0, 0x22044028}, 0x801) (async) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000001340)={0x9, {0x5, 0x0, 0xffffffff, 0x400}}) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x458041, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5460, &(0x7f0000001cc0)={{}, 0x0, 0x0, @unused, @devid}) (async) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100000, 0xf36, 0x7, "f694b8000000000000cc29e1f5eba328020016"}) (async) dup(r0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) (async) eventfd(0xfffffff9) 971.322381ms ago: executing program 1 (id=631): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x200) fchdir(r0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) (async) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0xf245) (async) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x200}, {r1, 0x4006}, {r0, 0x1}, {r1, 0x14}, {r1}, {r1}, {r1, 0xc216}, {r2, 0x200}, {r1, 0x384}, {r0, 0x1000}], 0xa, 0x80f) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x130) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @local, 0x18b}, 0x1c) (async) fcntl$setsig(r1, 0xa, 0x2d) (async) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x6, 0x100000000, 0xc65, 0x3, 0x1, 0x784, 0x4, 0x9}, &(0x7f0000000240)={0x4, 0xffffffffffffffff, 0x5, 0xffff, 0x4, 0x2, 0x8, 0xfffffffffffffa9f}, &(0x7f0000000280)={0x3, 0x7, 0x0, 0x8, 0x2, 0x3ff, 0x8ac, 0x9}, &(0x7f0000000300)={r3, r4+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0xeabf]}, 0x8}) (async) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000003c0)={[0x7]}, &(0x7f0000000400), &(0x7f00000004c0)={r5, r6+60000000}, 0x8) timer_create(0x2, &(0x7f0000000640)={0x0, 0xf, 0x1, @thr={&(0x7f0000000500)="e17f01f07bf774ad5222e5", &(0x7f0000000540)="73cc998828554fa6415dcf7aa2b6774944aa39d077e73f4c3b92207e8eea9fe7adef544623258f450ca5d2ca32cbc053381b3d0024370bd732bf9ef3001a6da164feb9bea6303cbd7da4536f7a029ed2b3407f1c7d73388491aebb1180abaa5a8f6c6b2d8fc01b7abfc76278eb1b2b668c4da3245c9fb45df8998aeb6807eae985731ed21a3f75897fef9b9a33aae427269ebf17a4bbc4150b05466876180483a33e5e4fc745b2a9546660c26b61ee946ae38e124829cc04c153ed3b834cb6b07ff2565b2ec007d62be4c6ddbec2ebc5683e3e4e04a1eff476"}}, &(0x7f0000000680)=0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000000700)={{r8, r9+10000000}, {0x77359400}}, &(0x7f0000000740)) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x80000) (async) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) recvmmsg(r10, &(0x7f0000000a80)=[{{&(0x7f0000000800)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000940)=""/100, 0x64}], 0x2, &(0x7f0000000a00)=""/123, 0x7b}, 0x9}], 0x1, 0x2042, &(0x7f0000000b00)={r11, r12+60000000}) (async) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r13, 0xc0045103, &(0x7f0000000b80)=0x8) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r14, 0x84, 0x21, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r15 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x44002, 0x82) execveat(r15, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000d40)={[&(0x7f0000000cc0)='(-\x00', &(0x7f0000000d00)='/dev/mixer\x00']}, &(0x7f0000001000)={[&(0x7f0000000d80)='/dev/snd/midiC#D#\x00', &(0x7f0000000dc0)='wg1\x00', &(0x7f0000000e00)='(\x00', &(0x7f0000000e40)='*([+-#-)&\x00', &(0x7f0000000e80)='^\x00', &(0x7f0000000ec0)='*/\x00', &(0x7f0000000f00)='/dev/mixer\x00', &(0x7f0000000f40)='\x00', &(0x7f0000000f80)='\x00', &(0x7f0000000fc0)=',\x00']}, 0x1000) r16 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080), 0x420200, 0x0) (async) r17 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r16, 0xc0189376, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r17, {0xeaa4}}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000001240)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x1000, r18, &(0x7f0000001140)="e80a1cbb83c6c0f1d8538658cefd8c7f80dd4108461383afabb98c2bd7d1e99794b9ef57deeda068a35090a3d7886e409ace6ad5e49b78940730eba75bade1840e01e0733c41b9eb6d17a53889eb967f00ae22bc501c03a7a5acbcdb022853464ceef2dd269e3c739df7d7bde8daf3fb0f118706f75950d2522f73c38b9be3d4044cff712b383164bf974d73d504ef2fb926db85791ad4ed18b41618ebc0253b00eafd5b86601df5f61e53a392265871c68fe886da", 0xb5, 0xffffffff}]) 550.990506ms ago: executing program 0 (id=636): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) (async) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r1, &(0x7f0000000040)="a43977d4f0983b2eb776064ac9d7b962b7d4bb82edaad0a53c4a61ec18d6a2d039b64585eaf5d20eaba774468ce25e337e31845979fb452f9847876ee8e109442f62e743cc0321b75e7dbf07827453f3d10410f528fd5a9c1a6cecbf0f78c1f8a64663d072b28db7ba3f433a15cff40b7db1ec39b66f250987d01d0eafd44fb89e139594f884cecd8f01dcbdf090dd5e993e82f7768d572469275b1a490c6a2034d23e4d2aef9d802f780211a58ed13033e57154cc62f5a9a38452de98978f63177e54c3", 0xc4) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x185880) (rerun: 32) r3 = syz_open_dev$loop(&(0x7f0000000180), 0xa5, 0x100) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000001c0)={r3, 0xc, {0x0, 0x0, 0x0, 0x8000000000000000, 0x400, 0x0, 0x1, 0x17, 0xc, "56af8e005772c758248535f92f9956bf350b93578901be731df83aeab35ffd24124169386a13e3da5c663ea6689489d5ac1dc7b103ba5224b11189680c228074", "ac07da5e60048b89b9a131e2efae9beb80d79b7ab00a714a3f534989a48c7998fd35684edb42c5386efb662cfa548ccd7d12b6381e9f2a0d7644c9bbc5e18771", "0eee2d7eefc8e5f7b49f59107b5b79fff7835f56f40c843e52262acc81bed421", [0x80000000, 0xfed2394]}}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendto$inet(r4, &(0x7f0000000340)="3f0fcc82942b5fb102f304cae7c02e563ab014786a5592411132c9b816c23dc6f75df326497aec7817", 0x29, 0x8014, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/fscaps', 0x400000, 0x4) pwrite64(r4, &(0x7f0000000400)="8930e8a7f97a007d42704c05717d9f01a0b57b592cc5046493cdfccd910c8769e545eafacd511ac35d3f9820b100313d41cf3e8c27b4fd59435fc6637ed8e488a3ce98cd44cfd425c11f6c1d49581f712820b1c7", 0x54, 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000480)={0x13, 0x65, 0xffff, 0xebe4, 0x6, '9P2000'}, 0x13) (async, rerun: 64) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000004c0)='\x00', 0x0, r6) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000540)={"cc319fd4265c7ee3e7e19ed00a071ac7", 0x0, 0x0, {0xcb7, 0x1}, {0xbb5, 0x7}, 0x8ac4, [0x5, 0xfff, 0xfffffffffffffff8, 0xffffffffffffff81, 0x8, 0x200, 0x6, 0xfffffffffffffff9, 0xa5, 0x9, 0xd, 0xcd96, 0x8, 0x7, 0xe890, 0xa7c]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000640)={{r1}, r7, 0x10, @unused=[0x11f, 0x80000001, 0xb705, 0x2e1], @subvolid=0x513}) (async) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000001640)={0x8001, 0x0, 0x100, 0x1}) (async) r8 = fsmount(r4, 0x1, 0x1) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000001680)={0x2, 0x0, [{0x2, 0x8, 0x2, 0x3, 0xffffffff, 0x555, 0x200}, {0x80000000, 0x4, 0x2, 0x335554de, 0x7f5083ad, 0x0, 0x2}]}) (async, rerun: 32) ioctl$FIBMAP(r6, 0x1, &(0x7f0000001700)=0xc) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000001740)=0xd) (async) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x1) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000001980)={0x1, 0x0, 0x1000, 0xe9, &(0x7f0000001780)="8d39ec36285252a55cc58dc62555a07025dc2acf7b54f05b4f5bfd2710f1d454aeaa31a4cd98a75f1393eae100a17afe4761dbd8e3414683e1c4350d3ffc12877f411ce92eaba49c40cbf2ac3045b120a15b8ad9e8236201a7b5296f9fb45fb2e81bef50737fa98c60cbb8a134cdc910a5ced88099576dd70ecb942ea231e697968004f843bdb78f25e89208842e2a804f4bdf83f8abd0faee45d4b459d452d634846faadc21192086b90219e0ef1c72f6400a1028c6c44a4cb26eb7cdb4673dc30a24d8c63b01bf0b9a45831bd0ad5c2a38177eaad3a19fe43a297d36a34f45cfea90bd571fa8ad1f", 0xc1, 0x0, &(0x7f0000001880)="aa318e6ac6deed86ca8190a139360c6fb3390c6a060abd5007c7b950e9a05d69eed88bafcfd20dda93edc24e98aceb8e621f3c33037c6b3583b9bfff17c1adbdf776ae13f414792524cd0266b0c6a272f6adc19837017f76e0a958f08edb12cd3140a4d73d30a194beb412dc0eaa5f3e08f0d563ee02e06275ba42d558d44b1ac6b0f2bdde1b6be8f632ddc11d150656b89f472e1eeca6925d37f347134fb8767dcc718e93ceae7f5f9e2e44f5a964da606270bea7a95b1f5c5684ed561a15b4ee"}) (async, rerun: 32) pwrite64(r0, &(0x7f0000001a00)="3311bd9f1d2fe60865b64b4e4f0cd1b72270b43e3ea06fed1829597efbbb900d51fa6add1e9a4c6163adde4533719ce0a138ea1bcd1d703807318528a92a81d4a88f77843611ec88fa4e7a88d16332307206e8e9f9350f51b1a6278515ca716bc6", 0x61, 0x7fff) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x7, 0x100, 0x397e, 0x2000, 0xffffffffffffffff, 0x444, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b00)={0x1b, 0x0, 0x0, 0x4a88fbc4, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) (async) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001d40)={0x0, @private, @remote}, &(0x7f0000001d80)=0xc) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x6, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x61, 0x61, 0x30, 0x30]}}, &(0x7f0000001e00)=""/172, 0x2a, 0xac, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1, 0x11, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c40)='syzkaller\x00', 0x4458, 0x8d, &(0x7f0000001c80)=""/141, 0x40f00, 0x2, '\x00', r10, @fallback=0x20, r11, 0x8, &(0x7f0000001f00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001f40)={0x2, 0xe, 0x2, 0x5}, 0x10, 0x0, r8, 0x1, 0x0, &(0x7f0000001f80)=[{0x1, 0x3, 0x10, 0x5}], 0x10, 0x6}, 0x94) (async) write$tcp_mem(r4, &(0x7f0000002080)={0x2, 0x20, 0x5, 0x20, 0x1}, 0x48) 550.780836ms ago: executing program 3 (id=637): mount(&(0x7f0000000140)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) 550.420635ms ago: executing program 0 (id=638): unshare(0x62040200) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086af0cc094c40846ccefd5cc326d6fd3f90cec2e9248bfd13b568d076dc5251a7e86b05320af5a3390d03608832c03ece760a8ddedbbe5470357c1f53ad8ded671c333a32000bb8a0370a02bfa3b2fca8073a48f1a27582b97b37fe7d96dda5339c6cc6f2c2fa1f09aa44a00b1c0bab47c05586ae853855776f23cec74e51d09dd"], 0x58) 490.642625ms ago: executing program 3 (id=639): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x4, 0x5}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000140)={0x6, "708bee867750ca318584b8705bced0daf09eb6d491eae0913ee94ee7378e51e2", 0x2, 0x20, 0x4, 0x4, 0x4, 0x1, 0x1, 0x9}) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe38, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x20000010) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000800)={0x0, "ac6d79e4902980361830f64d6a21f3dd62cb20b11a61cc4fa2800b1a57a5ff55", 0x4, 0x4, 0x80, 0xfffffffc, 0x2, 0x1, 0xce3, 0x10}) 411.35775ms ago: executing program 2 (id=640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x9114, 0x20, 0x694, 0x3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x401, 0x30, 0x2}, &(0x7f0000000140)=0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480140001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205"], 0x108}}, 0x0) 405.929421ms ago: executing program 0 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x3f4, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66c8c8ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc716aff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99a}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_NODE={0x20c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "a0c24860f09de48b5e18e83f019934ab17c18007d72f5839cc173f174a65e4"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "4b978e83c30856ffba50ecbfa3f389850ec6ac5d274160aae3cb909ceb309030d04b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "23afab7f6d9b261f866ebbfb338c4944bac3231bc30b75"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe8, 0x3, "eba29fcde1bc7ed8e47684a6d52edbd59a5da22dfdc6dffcc8d76ac612449e2ca06f11641e32d2535028cd9464ba2159d7be639db4892915da6fe1f3091d5bc4039e4448d79c3333126f328c055309b19cd7efebb7fa61d090ef84a1aae52dc39cbef9a63e959134b25c8de2fcea766f3866ab2d0137075654651b45c967d743fff5f75573145dc91f71b43e5346d9b4a8c0a8c488de667ac5ae78adf1076c230cb33c3d4b87a55d4052161b250319413e47d92af6022608c9ef2f6ea26e2fa89410511c2bf66e4dc9edda813740b3d4305001e607307ede28cfda592eeaf174624bc2d0"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "cc0bc9161b5097be2c794c5adcb61b7e831333614edbce3bcab2f5"}}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "86082bc6d6a1008f22e6e4065a1e68ab877563e90cd9e9b3b177cd61b69cc06b4b106fa4"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "5cc39c7df4173ca83194fa9d308d1756b4f9d2dc23846fb46398993943ff40c7"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x14801}, 0xd33b975f1fe33b15) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) shutdown(r3, 0x0) (async) r4 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, &(0x7f0000000040)) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) (async) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000b, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) (async, rerun: 32) accept4$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c, 0xc0000) (async, rerun: 32) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x18) getsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xa4) sendto$inet6(r3, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) (async) close(r3) 403.441635ms ago: executing program 3 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2a, 0x25dfcbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x40000) getsockname$packet(r1, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x6c, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) bind$qrtr(r5, &(0x7f0000000080), 0xc) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e73a3c43d76697274696f2c64666c747569643db6a9122950a4fc846285710d690843ceca40bfe258e4626b3ea2aebd697fa10200000000000000ab79392874746da75aafb23268744d91c6b98f0777329012c8e2aa02fa16bfcf597cf51b2031f365f811b561cf1e09b0805cc997e8c6a73c9e631f3bab39e85fbccdcc55078a30fd4aadbe0aa40948903b62a62bcece", @ANYRESHEX=0x0, @ANYBLOB=',uname=sysfs\x00,\x00']) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) (async) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2a, 0x25dfcbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x40000) (async) getsockname$packet(r1, 0x0, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) (async) open_tree(0xffffffffffffff9c, 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x6c, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) (async) bind$qrtr(r5, &(0x7f0000000080), 0xc) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e73a3c43d76697274696f2c64666c747569643db6a9122950a4fc846285710d690843ceca40bfe258e4626b3ea2aebd697fa10200000000000000ab79392874746da75aafb23268744d91c6b98f0777329012c8e2aa02fa16bfcf597cf51b2031f365f811b561cf1e09b0805cc997e8c6a73c9e631f3bab39e85fbccdcc55078a30fd4aadbe0aa40948903b62a62bcece", @ANYRESHEX=0x0, @ANYBLOB=',uname=sysfs\x00,\x00']) (async) 401.170527ms ago: executing program 0 (id=643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000002d, &(0x7f0000000200)=0xb1e0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410943, 0x110) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x4000) r4 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4112d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x50) 341.445591ms ago: executing program 3 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000df0500000008000300", @ANYRES32=r3], 0x24}}, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, r4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2041, 0x8) 341.098672ms ago: executing program 2 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0xa8, 0x4a, 0x403, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, r1, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0xa8}, 0x1, 0xba01, 0x0, 0x44844}, 0xd693af973192690) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0xa8, 0x4a, 0x403, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, r1, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0xa8}, 0x1, 0xba01, 0x0, 0x44844}, 0xd693af973192690) (async) 251.555174ms ago: executing program 2 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0xa) 251.191131ms ago: executing program 0 (id=647): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004880)=@polexpire={0xc0, 0x28, 0xffffffffffffffff, 0x0, 0x4, {{{@in6=@local, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0x4}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, 0x6a}}, 0xc0}}, 0x4000000) 237.910603ms ago: executing program 3 (id=648): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@fd={0x1fc, 0x2, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x5, 0x1a, 0x0, "0e718c6d"}, 0x6, 0x4, {}, 0x63}) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_delete(r2) (async) mq_notify(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x2b, 0x1, @thr={&(0x7f0000001880)="f30cabef24b2714f598c1f5fa5b00997228e5ae955b7581ec507e40236dd99dba2a02a1a39db4870176ff57196b388892532034e7a924830a2efb54dc5d8137dfff37015fc06d94a302558137cdebcf92ed44334e3a7c96c744b9d30ed41e2fcc86499e7acdee0b8a3d74ad09fa594e395a4c3c3ee14f564448607cba9635cda1949e7dc442a7329804cbae425bec25eeba76d866e3b28d7b43cf6ee5baa77c6f4c1abfa23d0f594dcd7be0e8999a33682bb001d348ec5bb52ca9046ef9db4c46259814f40008dcf49e30774bc2345083bd3154fd58925d820ee08464757986fb5b8446bd5fd2e646064b42f6af514571856e7fa61ac9c3e4a566bc5d908f4289b7e1e43e16cf243c043caa6482de713c9551cdbfa6fd67a4aa322146b67ad0b59b65d1e210759a5006c322cd705aaebdb83120dc9e12bef4c41be93443e83e403bb09e8d2b06af7800f33e91a6648e4a25e68c9fd964a19ae353908941de0d5da08320e1b8f8d0e7043fd49da819f39f87905d020fff0cd392452bb23017d7622a9c9920a3644a8c0d33a46331c93352be9a8ea93af8453613c7881ecb9b0efa3b282ae7418c7c2dc270228d47da90d51585409f90124e3c72e19eb12715f6c74db619d24fc9983a52b3fa15ce2a30f787288459fce4e6d91b6fb3e13405c0144328a4d28615131f026084d11998ba00b08d59a2bbdbed0377211d39cdc3d383006ffa9a10ca2d8ebc5170784826a49de87683e706d80f560bfd6c707c5db7deb3229507dc6b5d30a3b04c3e78141dfac720b9c98506fc6b86c481376aec9b02fbffebb3553022b1f44ca670694422c2441fba7c4ec5a90d951c46f9629bc3bf14d4e8c7c6fe5a3a6cd95dfb89eb4026334f188c674ad531654453326745c42da23943eac696f083c2f96e96eac8aa3a925f843245267e6977521001e469a93289bffa4f06cfab479b94ff560a9b3dec3e7e765553e853c0d7958ef6ab6797171eb4001e8dabac8ba11feb991a754f410389e4fb11a61dd09acf7e904b8bdbd595f4ecd7012f7cfb94c9a21fdd69e47a8b1b8f9895039066de61464f8895f8062b703f86a20529aa8f6809b6d3f12c0f33023343767c7f4a37c0c06a43846cda25fd6a93ffe3cc9d9673392ea4ccd17500182fed9a29fd6c213824c1a80f0f697f0dde199c7b5cf2b6d9cb2088b06e10616ba6068d1914d828a0aa370fbbcdeab4385dc14b62f1bd3a3f80d9c7e3c86910e2948fc52ea2f46c9e2004665a90eb9c053138f201aaebf49801d39d15f38c5ec305d20d758bc4afbc2db27f1908d5eb20ecaf48f4ae7f6ca5f3c66672b3cf29165fd3b3b86a8eab3c1e413407e8ee7f6f602f5e34df57f0ac2337109f072eb76bc6100d9a7f4ed0dcc22bb0f1e769ed9caa885f5c221b144f22a0698ede8a7014ae17df466590b32cd87daadc642fa2a5f2d125013152d700fe8e1a296b1d9b6c1fdfa8f041ac8c2e2930cccab879b54cd4831d0eb6d20e31d68e94848be402ba575778e6bcd7fd5a647d3474e1149db4faa602bd48ffccb6193e5a521fcfe6c8b089e5897ed423c40388e46c336e806bf5c6c0aaa7d129a928e26db449b651481f64995ac8fdaaa6affd278fb28b9ba5ea60fb226f56a4b8cca8288445580c55deb63ffe6d21a085cf7cc02818ef8c4a866b0220378001462c86f6a1db4cf5a5ad2b64e202339bb3af66523a31c8a401ee16c20de2d7680927a83c843e2c3d87ebc76a236634ac53ee9a7ce4bcb9580b568ca70e1e42383f73bce46b2c89c961deffbeddc5997d2441171a02b1683a6a63a4e77a9df125b272d308d8b892ae190b56b978c218f865f799f5b13089c19b8a9d7b558bf2bc77b733a61c1bcbf3aa47e6292adf41917cc2221a605a11e8ff815876f5d25191af6a31d728ef6c302d4d8fa99314276112f591c442683b30165f629f1f33fe3c2d8ae78a106b7670c3af7c434ff4ef91ea136c66ca8e7fa3bbdc1f5855e85f70e3d544ca08f4c2a3bb93748af88e809ec97a64a727edc465ea6f6b219cf1240b7ba6582d2e487a5b3241137427086030bb7d3c42c48c9f855366e88e56af4c731c9d674a2a9342ab3881a34575025f65980d9e02cd6fda316ec0edc9051f6adcae378bb060611b8c6ddd53f232c2bdfe55e1f2d5ed3117aaa61117f46d4d224f70eab789cdd1da7e9a3e175d5209492d4403b6eaf1c728020e48598b88d0c2c52b9d0838fceff7e587ab9827eaa45ccf8e9368259d860968ae32a7424b45e390c41d2ba0e8faca36871750aeec86958e7a1d150e4b58921232fe6290eaf5fb285fa11fbb3f5ff3a75ff60862e0bbb01c555e47b2428a10b35546bc7afa11f3117878b7e0e2be912a0b0354f6152de5a9d56109b9bb2d82779e51a631d3f85b36a807c4b6b6e7d49d267454f4906114f80ef49ab4609cc8d6510911be2c082209599deae08c7aedd794c7f033475449e31319b4f70ca63ef895998cc5a4cbb7082230261258257c20001500dc3636cfe09c2af7b3c95ffd5612c8ef8439b2d3f42aece894b13a36bd47d175f9f690e8d5eed74cf1cb9675dc5cb100254029714254fc303b292df4bffdc5a28cf1cd7d26a3c609fcf5b637f33c145296463cdc8c334b87d352174f6b37ade17507d4c317e1eb272e52512524aa3bfedb3cddbc58015d25edc6ddf6bb2d99b7db52f3fe512fe996d0fbb9219f21ed616deed37837d3990453ce0e8dcafb4b7fe75a4bb36fd3aa83283b04a780bb538a4ac866cf9504074832a9175dafc52e0b4945fb597e3c49dc172ee227faec890364289ead3272f68eab2fe71d9c85cd4c51b30b9a1c2cb604a57efc2e99a3b410462ba6c53db867e3cdebdf59ea9c1a247554355a808286d75df01c9b669f7b369dcd5a323b86f45825fc33ab3fa7264d168c99f38f71572fad2140bf9a14306fdc994313f563562167850e31ae6e0ff675379f8f095fe2ff0d9af35f5370db9eb79c5c9a2b5e3f766a6e0132a5d090168568f43b327e3611750469c1f57c5f924eb23a2434029974e4f03cdfcf62b19950d4860af05bb83827a4feeff4f3872530bc25b929ee382293b0f3aeb93aba155c023b9306db4bce91d9c7772bfda28dbb2d4ddc878d0f4b7c12f53b2e981bf276d16df549b21905838b4b3990ae27bee64f4113a91f4c050b77129977e0f4fbe42fe8baf280caa8c13530aa62e332483673a62d1294d4a6f764002629ad08aa257411409a9ec2219eeb6e56e84c424bf86dbf7c0288474d9e45c4b9b1dae46fd70ed242412011b8c8b2c519fc38b8e4691ebea34d2d5c47ac280f1854521473a720e326271f284d2e1dc406d747ead5ab40ee97a13985f5573317235f6871b7c4fe5c4d365645e33fca5b67456eb01440483cf8561f66cac2bf4b2719d6f24998ef9b10030b4f8b307b76092c7072e6d97a55c86fec9be35145a9beddcaa604170e394c5ceff8251849f8e6eacd9d506b88dec7d652531f10b92932bec9df17859fe055be62a43dadcd4829d56a96e73f548db5f696d806dc6171f6572a560311da3da23392a61cf0c498a1bb654252dac7a8109e8b851e76dfb30b95ae53199282271600bd17fcd1fc0b90e18d3743728c43a65491e6f4dab6491e1c06478b91f3b72da84c646e6c807dcf964ade588865ac14c547beccd8afc0519fc9751a9774b8dac0032201b6a846a8cc18626aaf5de620de9f02f6390d67ae92e17c6039d09b7f2a3810d3f573ce7db2ca9f1f852f3087c42aae6bdf73658b0e7bbbd6a0ea3bcc69bd3f13fc136ee53b5a36dee2dbf39083693ca7104ebd24773c66f81e79095f2842eba98e5494fd2fb9595da073a8549a9c666283198c9ec77ae422b95fb411460c63c8238a8b2ebf0e6c2dc9cfb4245857d7993dda9d079c96f3e7cbb55f8e11aedf0fbbcb4166e9de4f96bf478357906bb549cde46351ec758aae55165abeebda4a26f84e46eef9383c1e46e05eae930008841fd7273a28fd8fae24d0719d687da76a7015efd9bc33c53dcad307603cf4416fd57f19e5a09b36c2887120ae958fe07ff2194a3334d201bb8e4d91cb6fa4aa1975c6de7055c4b287dec0ae80cf90c091d197544feae52d74cde95c9e076175bf29ca2d8048a73a662e577181b7e5e3672ea49d61c3c75014e55f8d78e9c5f4eb3c0b2bc3374fcdedffd6022abfbbb66ab4d445946c520212390d10ba98ae4842dc9577f455a1712e5c0cb0debae07fa62cde70d20d779f346af6481a20acd736777ea194f5b158051d64dfc73fa7d30814a3e3c9781f8ddd62118dbf7abd823045557a2f318fe26694f883e0478880cd93b6db4e2f79d5e62733ee31013ef96ae0117105b8d85fc1ae37360d01474db64157f10ca4cfd4bf02b2967834308483cbe20c37041246d70808854b02e30142247e20d55af2ee118a2081bf3a2aae574fb514efe197fba43da553928877917c057157bffd9d1825142276f322a6959b482ab560563260bf688516f4da6bdfe23f9789c3db270fc2dbca6c36c966b2bc06fef63d2b38e1e7899e3a5d7c0bc7bb9382b3e7dba9ba7d3be606e0c9b2a1ef681c82e875e8c24bf2d47c3af2b9823db69b132acef4c0f64d8c848509594c5f2982698f4db95e401ea6b2b1c76fc0d349e653dcef2c804ae1110553306c4ef346d1c85af5ef079c467b60a60266571084ea42a9e88aed82da4d5d2e7cbdeb13e7105592c903ac8f45db45244d65072ce56b40301414f62981625b9e54d8d07b90ee5f9da398b790645230b8170330404f1d58f61543a9061e9b5015b6b82cdf2687c00d5ae5913327e4ef7d997451969596940e281da642849c53f6a2810ba1533cbb70ad7d4b3d0595cfdf70da0105a137f471a42b703b927ff543e92bcba561598d3a5f01f98833fc7901c6a9e6b4d551223b0f3cf460252b6999f216153d7261f319ac9e21893dda66c6818a447386bc6c7dcd935d80354f6273ac6868abf7e42b6bd1f95aef4dcf0e4c7aecc07af3b6f43d469dce339fac2fac77cc5afcee75b98b2cbd0a8020e34bb50ee6c6f3d79c6634bd08014099572609444aa923b5fceea85b59b9399f8b1c080efc5407f267e2531a584807859df575d124ab7e9b870035f16c2a138e51398b3637e0f52f74a7d7ad217629b1e211ab75a9338595c94c9a8607aa4dfea28ba79e4785b09601d5ff8720cbb8771625e0ac82ef41b816ac4cd677df4479ca99553de0375d0944495040823c4def9c0df40ff55ddcf7bd7ef883eaf2883417baf836fa6df023822ed82d3d2383b8b5aba33c65012669fa3113c30ad1321588cde21193922abeca21f0a6b4b345bba4cd997d17159c9e3c1cb2b03e52b6154c444cdf7c5aa83381a7f692d1bc36b9b9f5c7b32da8d769f9e41f66288557d1ca099ba83f87ee7f926d9534d72a366627c40567a0c62f106a74dc1d7f43f415158218b2d6785fcec927ad9d1c4ff6c6141025515b4b7d9a6be7300c689856be384fccd5a1f7f554ef63ff5271b70b2493a469f7853b37c6e7dfadc6b4bdcc9522982401ccb9b87fe8632525639a848b4bc0f855895b7cc0eb949f0333a01193bc4a6355b3afc4bcf856b061dc9150b6c568fe3e1e6bd83b58e1ecf8f822a0a0105424f740359cea40b3844c3cf11113942d61b053c99487f39f79bdbe705b68982335279e0ba6ccfdf85921794d65ce697f60731d44e5577a4adf7de1f1b8db7b744e638e1cc6c492adb0de2069f5261a902d78ab21bbf1b0bc06f88c59e02332cbcc7199d28e289c34f", &(0x7f0000000fc0)}}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000080)={{r3, r4+10000000}}, &(0x7f0000000f80)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 237.389236ms ago: executing program 0 (id=649): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect(0x3, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e10630715108856000000010902"], 0x0) fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/net\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100094313c10d0d61c5e6806010000000000000000000000000a14000000110001000000000070000000f500000a"], 0x28}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbd) 181.243697ms ago: executing program 2 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, 0x0, &(0x7f00000000c0)='GPL\x00', 0x6}, 0x94) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000009f000040"]) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x14000) 180.844921ms ago: executing program 3 (id=651): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)={r3}) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)='+', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r5}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5303f9667d00000000", @ANYRES16=r8, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="05003400c4000000080026006c0900000600240002e00000"], 0x34}, 0x1, 0x0, 0x0, 0x40091}, 0x0) r10 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000080)=0x1000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 111.150531ms ago: executing program 1 (id=652): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000002c0)={'vlan1\x00', {0x2, 0x4e23, @broadcast}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delqdisc={0x98, 0x25, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x12, 0xfff2}, {0x8, 0xe}, {0x6, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @qdisc_kind_options=@q_htb={{0x8}, {0x5c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xb06}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xa}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8000}}]}}, @TCA_RATE={0x6, 0x5, {0x62, 0x38}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}]}}}]}, 0x44}}, 0x0) 110.719064ms ago: executing program 1 (id=653): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x2000000004, 0x4, 0xb46}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x40810, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) accept4(r0, &(0x7f0000000300)=@ieee802154={0x24, @long}, &(0x7f0000000140)=0x80, 0x800) 1.581837ms ago: executing program 2 (id=654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000005560ca72000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 1.342845ms ago: executing program 1 (id=655): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='./file2\x00', 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r3, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000001bc0)=[{&(0x7f00000008c0)=""/118, 0x76}], 0x1, 0xaf6, 0xba) prctl$PR_MCE_KILL_GET(0x22) accept4$inet6(r3, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0x100, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x10, 0xffffffffffffffff, 0x6a855000) syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/cgroup\x00') r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x528d, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0x3, 0x100, 0x2, 0x7fffffff, 0x8, 0x1, 0x6, 0x101, 0x9, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0x1b, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000400)={0x4, 0x10000, 0x0, 0xc, 0x0, 0x139, 0x10, 0x4, 0x80, 0x3, 0x2, 0x8, &(0x7f00000001c0)=[0x1, 0x2, 0xc, 0x1, 0x8], 0x5, &(0x7f0000000200)="c961e4b167128d3226a4c3587c11073a0e0cb25e62d3", 0x16}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000480)="3e0fc7b70d000000a99391c62d670f78c5c4c29d3f5970b82e8278cc0f23d80f21f835000000300f23f8f4651d66c000000f01799e0fc7b70000000066b825018ec0", 0x42}], 0x1, 0x6c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000380)="0fc778fcf30f2c0acf0f00dc3e0f18b4266d440f20c0663503000000440f22c0f30fa6c0e756b8ff0f8ed0d9fd", 0x2d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000000)='\'!]\\\x00', 0x5) 0s ago: executing program 2 (id=656): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x380000000000004, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a80200000800500040002000000140005"], 0x40}, 0x1, 0x0, 0x0, 0x24004001}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "110100005c000000463300", 0x49433553}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x3, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x3031334d}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) kernel console output (not intermixed with test programs): [ 43.567640][ T40] audit: type=1400 audit(1753019628.251:61): avc: denied { siginh } for pid=5890 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:20489' (ED25519) to the list of known hosts. [ 44.562522][ T40] audit: type=1400 audit(1753019629.261:62): avc: denied { name_bind } for pid=5931 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.582206][ T40] audit: type=1400 audit(1753019629.281:63): avc: denied { write } for pid=5932 comm="sh" path="pipe:[7217]" dev="pipefs" ino=7217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.596681][ T40] audit: type=1400 audit(1753019629.291:64): avc: denied { execute } for pid=5932 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.603810][ T40] audit: type=1400 audit(1753019629.291:65): avc: denied { execute_no_trans } for pid=5932 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.680468][ T40] audit: type=1400 audit(1753019631.381:66): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.683268][ T5932] cgroup: Unknown subsys name 'net' [ 46.802198][ T5932] cgroup: Unknown subsys name 'cpuset' [ 46.806172][ T5932] cgroup: Unknown subsys name 'rlimit' [ 47.081919][ T5941] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.799544][ T5932] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.289784][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.289801][ T40] audit: type=1400 audit(1753019635.991:80): avc: denied { execmem } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.489466][ T40] audit: type=1400 audit(1753019636.191:81): avc: denied { create } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.495755][ T40] audit: type=1400 audit(1753019636.191:82): avc: denied { read write } for pid=5949 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.517799][ T40] audit: type=1400 audit(1753019636.191:83): avc: denied { open } for pid=5949 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.525941][ T40] audit: type=1400 audit(1753019636.211:84): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="socket:[6341]" dev="sockfs" ino=6341 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.558644][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.559876][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.568765][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.571216][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.571421][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.574533][ T5964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.576343][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.578602][ T5964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.581587][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.583427][ T5964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.585598][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.587480][ T5964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.598022][ T40] audit: type=1400 audit(1753019636.301:85): avc: denied { read } for pid=5949 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.604310][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.607143][ T40] audit: type=1400 audit(1753019636.301:86): avc: denied { open } for pid=5949 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.611994][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.615737][ T5965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.616602][ T5965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.617326][ T40] audit: type=1400 audit(1753019636.301:87): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.621156][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.624743][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.630976][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.639744][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.802773][ T40] audit: type=1400 audit(1753019636.501:88): avc: denied { module_request } for pid=5949 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.880618][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 51.894314][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 51.953761][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 51.999194][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 52.086516][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.090768][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.093460][ T5949] bridge_slave_0: entered allmulticast mode [ 52.096038][ T5949] bridge_slave_0: entered promiscuous mode [ 52.170863][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.172979][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.175193][ T5949] bridge_slave_1: entered allmulticast mode [ 52.177650][ T5949] bridge_slave_1: entered promiscuous mode [ 52.193755][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.195918][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.198307][ T5957] bridge_slave_0: entered allmulticast mode [ 52.200803][ T5957] bridge_slave_0: entered promiscuous mode [ 52.203710][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.205872][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.208977][ T5957] bridge_slave_1: entered allmulticast mode [ 52.211436][ T5957] bridge_slave_1: entered promiscuous mode [ 52.343600][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.346523][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.350126][ T5951] bridge_slave_0: entered allmulticast mode [ 52.353894][ T5951] bridge_slave_0: entered promiscuous mode [ 52.360067][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.379624][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.382568][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.385533][ T5958] bridge_slave_0: entered allmulticast mode [ 52.389539][ T5958] bridge_slave_0: entered promiscuous mode [ 52.397163][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.401624][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.404557][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.407489][ T5951] bridge_slave_1: entered allmulticast mode [ 52.411615][ T5951] bridge_slave_1: entered promiscuous mode [ 52.416785][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.445779][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.448770][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.451169][ T5958] bridge_slave_1: entered allmulticast mode [ 52.453746][ T5958] bridge_slave_1: entered promiscuous mode [ 52.470232][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.514133][ T5949] team0: Port device team_slave_0 added [ 52.519588][ T5949] team0: Port device team_slave_1 added [ 52.593718][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.622855][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.653513][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.658219][ T5957] team0: Port device team_slave_0 added [ 52.661456][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.664906][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.667806][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.677930][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.697434][ T5957] team0: Port device team_slave_1 added [ 52.714346][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.717115][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.726911][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.777631][ T5951] team0: Port device team_slave_0 added [ 52.781932][ T5958] team0: Port device team_slave_0 added [ 52.798182][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.800695][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.810302][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.814994][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.817422][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.826423][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.831580][ T5951] team0: Port device team_slave_1 added [ 52.835392][ T5958] team0: Port device team_slave_1 added [ 52.975269][ T5949] hsr_slave_0: entered promiscuous mode [ 52.977740][ T5949] hsr_slave_1: entered promiscuous mode [ 52.980678][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.982880][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.991978][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.996005][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.998573][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.007379][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.029523][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.032295][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.040847][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.045024][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.047504][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.056472][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.085301][ T5957] hsr_slave_0: entered promiscuous mode [ 53.087460][ T5957] hsr_slave_1: entered promiscuous mode [ 53.090329][ T5957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.092669][ T5957] Cannot create hsr debugfs directory [ 53.207137][ T5958] hsr_slave_0: entered promiscuous mode [ 53.211442][ T5958] hsr_slave_1: entered promiscuous mode [ 53.213834][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.216333][ T5958] Cannot create hsr debugfs directory [ 53.238980][ T5951] hsr_slave_0: entered promiscuous mode [ 53.241291][ T5951] hsr_slave_1: entered promiscuous mode [ 53.243398][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.245763][ T5951] Cannot create hsr debugfs directory [ 53.492841][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.500008][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.504942][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.512974][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.541690][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.545620][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.550151][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.554264][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.602376][ T5958] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.606303][ T5958] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.610606][ T5958] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.615127][ T5958] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.618227][ T62] Bluetooth: hci2: command tx timeout [ 53.618231][ T5955] Bluetooth: hci0: command tx timeout [ 53.674001][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.680695][ T5957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.692206][ T5957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.698322][ T62] Bluetooth: hci1: command tx timeout [ 53.698344][ T5955] Bluetooth: hci3: command tx timeout [ 53.706060][ T5957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.711926][ T5957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.731083][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.750047][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.752281][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.756022][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.758438][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.773463][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.810603][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.826049][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.834488][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.837230][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.851126][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.855981][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.858842][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.861747][ T40] audit: type=1400 audit(1753019638.561:89): avc: denied { sys_module } for pid=5949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.878205][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.880381][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.887184][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.890195][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.899844][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.919989][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.938968][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.941353][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.955021][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.957518][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.984149][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.019154][ T5949] veth0_vlan: entered promiscuous mode [ 54.022151][ T5957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.035828][ T5949] veth1_vlan: entered promiscuous mode [ 54.067555][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.072213][ T5949] veth0_macvtap: entered promiscuous mode [ 54.076213][ T5949] veth1_macvtap: entered promiscuous mode [ 54.082119][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.091446][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.099527][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.110518][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.113414][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.116003][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.120734][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.144881][ T5951] veth0_vlan: entered promiscuous mode [ 54.155634][ T5958] veth0_vlan: entered promiscuous mode [ 54.158797][ T5951] veth1_vlan: entered promiscuous mode [ 54.163832][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.183445][ T5958] veth1_vlan: entered promiscuous mode [ 54.201419][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.204470][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.222890][ T5951] veth0_macvtap: entered promiscuous mode [ 54.227348][ T5957] veth0_vlan: entered promiscuous mode [ 54.235920][ T5951] veth1_macvtap: entered promiscuous mode [ 54.243626][ T5957] veth1_vlan: entered promiscuous mode [ 54.252711][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.255125][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.255147][ T5958] veth0_macvtap: entered promiscuous mode [ 54.265165][ T5958] veth1_macvtap: entered promiscuous mode [ 54.269282][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.283449][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.290794][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.294304][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.298505][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.302030][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.309696][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.310107][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.325218][ T5957] veth0_macvtap: entered promiscuous mode [ 54.331432][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.334391][ T5957] veth1_macvtap: entered promiscuous mode [ 54.351975][ T5958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.355171][ T5958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.358881][ T5958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.362487][ T5958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.391242][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.393832][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.396488][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.405078][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.420418][ T5957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.423320][ T5957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.426274][ T5957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.430072][ T5957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.437073][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.441167][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.463559][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.466220][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.511727][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.514515][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.527497][ T6050] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 54.551255][ T6050] bridge_slave_0: left allmulticast mode [ 54.553543][ T6050] bridge_slave_0: left promiscuous mode [ 54.556251][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.583904][ T6050] bridge_slave_1: left allmulticast mode [ 54.585578][ T6050] bridge_slave_1: left promiscuous mode [ 54.587370][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.594706][ T6050] bond0: (slave bond_slave_0): Releasing backup interface [ 54.601262][ T6050] bond0: (slave bond_slave_1): Releasing backup interface [ 54.610379][ T6050] team0: Port device team_slave_0 removed [ 54.614916][ T6050] team0: Port device team_slave_1 removed [ 54.622405][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.624772][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.629299][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.631617][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.639296][ T215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.641728][ T215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.644354][ T6052] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6'. [ 54.653627][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 54.673840][ T6056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 54.676608][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.680356][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.692022][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 54.694802][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 54.697485][ T6057] Zero length message leads to an empty skb [ 54.850547][ T6070] Bluetooth: MGMT ver 1.23 [ 54.853691][ T5955] Bluetooth: Unexpected continuation frame (len 370) [ 54.915228][ T6072] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 54.917309][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.921650][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 54.924194][ T6073] usbip_core: unknown command [ 54.925760][ T6073] vhci_hcd: unknown pdu 808464432 [ 54.928391][ T6073] usbip_core: unknown command [ 54.931318][ T76] vhci_hcd: stop threads [ 54.932815][ T76] vhci_hcd: release socket [ 54.934476][ T76] vhci_hcd: disconnect device [ 55.311578][ T6087] misc userio: Begin command sent, but we're already running [ 55.520960][ T6091] syzkaller1: entered promiscuous mode [ 55.523209][ T6091] syzkaller1: entered allmulticast mode [ 55.708059][ T5955] Bluetooth: hci0: command tx timeout [ 55.708102][ T62] Bluetooth: hci2: command tx timeout [ 55.778186][ T62] Bluetooth: hci1: command tx timeout [ 55.787866][ T62] Bluetooth: hci3: command tx timeout [ 55.829046][ T6094] ALSA: mixer_oss: invalid index 100000 [ 55.891011][ T6100] netlink: 'syz.1.21': attribute type 12 has an invalid length. [ 55.893273][ T6100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21'. [ 55.930210][ T6102] syz.1.22: attempt to access beyond end of device [ 55.930210][ T6102] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 55.934408][ T6102] gfs2: error -5 reading superblock [ 56.061001][ T6114] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.433055][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 56.433072][ T40] audit: type=1400 audit(1753019641.131:183): avc: denied { name_bind } for pid=6128 comm="syz.2.30" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.443615][ T40] audit: type=1400 audit(1753019641.131:184): avc: denied { write } for pid=6128 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.572541][ T40] audit: type=1400 audit(1753019641.271:185): avc: denied { append } for pid=6130 comm="syz.2.31" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.579551][ T40] audit: type=1400 audit(1753019641.271:186): avc: denied { read write } for pid=6130 comm="syz.2.31" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.586664][ T40] audit: type=1400 audit(1753019641.271:187): avc: denied { open } for pid=6130 comm="syz.2.31" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.594237][ T40] audit: type=1400 audit(1753019641.291:188): avc: denied { wake_alarm } for pid=6130 comm="syz.2.31" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.643634][ T40] audit: type=1400 audit(1753019641.341:189): avc: denied { ioctl } for pid=6130 comm="syz.2.31" path="/dev/comedi3" dev="devtmpfs" ino=1305 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.784390][ T6135] netlink: 'syz.2.32': attribute type 6 has an invalid length. [ 56.787520][ T6135] netlink: 'syz.2.32': attribute type 6 has an invalid length. [ 56.891206][ T40] audit: type=1400 audit(1753019641.591:190): avc: denied { create } for pid=6139 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.897084][ T40] audit: type=1400 audit(1753019641.591:191): avc: denied { ioctl } for pid=6139 comm="syz.3.34" path="socket:[7783]" dev="sockfs" ino=7783 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.020235][ T40] audit: type=1400 audit(1753019641.721:192): avc: denied { read } for pid=6145 comm="syz.2.36" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.036373][ T6153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6153 comm=syz.3.37 [ 57.049533][ T6153] netlink: 348 bytes leftover after parsing attributes in process `syz.3.37'. [ 57.286955][ T6171] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 57.292087][ T6171] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 57.297457][ T6171] netlink: 500 bytes leftover after parsing attributes in process `syz.3.44'. [ 57.384389][ T6173] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 57.394313][ T6173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.738051][ T885] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.778549][ T62] Bluetooth: hci2: command tx timeout [ 57.857787][ T62] Bluetooth: hci1: command tx timeout [ 57.902256][ T885] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 57.905813][ T885] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.909691][ T885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.913037][ T885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 57.916431][ T885] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.921760][ T885] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.924843][ T885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.930101][ T885] usb 8-1: config 0 descriptor?? [ 57.932957][ T6182] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.157337][ T885] usbhid 8-1:0.0: can't add hid device: -71 [ 58.159758][ T885] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 58.166031][ T885] usb 8-1: USB disconnect, device number 2 [ 58.204408][ T6206] ntfs3: Unknown parameter 'áaõ6wL¡[èì2û?U`Ìè늭À« ãeoýÒ 0Ü{¥×Œ†5”X' [ 58.498120][ T62] Bluetooth: hci3: command tx timeout [ 58.741686][ T6223] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.61'. [ 58.967205][ T6236] netlink: 'syz.2.64': attribute type 5 has an invalid length. [ 58.976936][ T6230] netlink: 830 bytes leftover after parsing attributes in process `syz.0.46'. [ 59.146317][ T6245] overlayfs: missing 'lowerdir' [ 59.501357][ T6257] syzkaller1: entered promiscuous mode [ 59.503561][ T6257] syzkaller1: entered allmulticast mode [ 59.724646][ T6265] __nla_validate_parse: 1 callbacks suppressed [ 59.724664][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 59.731458][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'. [ 59.734915][ T6265] netlink: 'syz.0.75': attribute type 19 has an invalid length. [ 59.828186][ T885] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.857844][ T5955] Bluetooth: hci2: command tx timeout [ 59.859082][ T5963] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 59.862136][ T5963] Bluetooth: hci0: Injecting HCI hardware error event [ 59.864609][ T5963] Bluetooth: hci0: hardware error 0x00 [ 59.938149][ T5955] Bluetooth: hci1: command tx timeout [ 59.987912][ T885] usb 6-1: Using ep0 maxpacket: 32 [ 59.992495][ T885] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 59.996975][ T885] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 60.000876][ T885] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.006212][ T885] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 60.009121][ T885] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 60.011875][ T885] usb 6-1: Product: syz [ 60.013220][ T885] usb 6-1: Manufacturer: syz [ 60.014652][ T885] usb 6-1: SerialNumber: syz [ 60.027598][ T885] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input6 [ 60.227920][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.232429][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.247156][ T9] usb 6-1: USB disconnect, device number 2 [ 60.249007][ C0] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 60.263276][ T9] appletouch 6-1:1.0: input: appletouch disconnected [ 61.011752][ T6278] block device autoloading is deprecated and will be removed. [ 61.014693][ T6278] syz.2.80: attempt to access beyond end of device [ 61.014693][ T6278] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 61.443520][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 61.443535][ T40] audit: type=1400 audit(1753019646.141:308): avc: denied { write } for pid=6300 comm="syz.3.83" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.455217][ T40] audit: type=1400 audit(1753019646.141:309): avc: denied { write } for pid=6300 comm="syz.3.83" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.464499][ T40] audit: type=1400 audit(1753019646.141:310): avc: denied { open } for pid=6300 comm="syz.3.83" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.474294][ T40] audit: type=1400 audit(1753019646.141:311): avc: denied { ioctl } for pid=6300 comm="syz.3.83" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.483979][ T40] audit: type=1400 audit(1753019646.171:312): avc: denied { ioctl } for pid=6303 comm="syz.2.84" path="socket:[10851]" dev="sockfs" ino=10851 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.523418][ T40] audit: type=1400 audit(1753019646.221:313): avc: denied { getopt } for pid=6307 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.545609][ T40] audit: type=1400 audit(1753019646.241:314): avc: denied { mount } for pid=6313 comm="syz.3.86" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 61.556229][ T40] audit: type=1400 audit(1753019646.251:315): avc: denied { mounton } for pid=6313 comm="syz.3.86" path="/19/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.566288][ T40] audit: type=1400 audit(1753019646.261:316): avc: denied { read write } for pid=6315 comm="syz.2.87" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 61.574540][ T6316] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 61.574833][ T40] audit: type=1400 audit(1753019646.261:317): avc: denied { open } for pid=6315 comm="syz.2.87" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 61.604547][ T6318] overlay: Unknown parameter 'dont_hash' [ 61.661169][ T6322] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 61.663761][ T6322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.666856][ T6322] vhci_hcd vhci_hcd.0: Device attached [ 61.671843][ T6323] usbip_core: unknown command [ 61.673662][ T6323] vhci_hcd: unknown pdu 0 [ 61.675161][ T6323] usbip_core: unknown command [ 61.678717][ T13] vhci_hcd: stop threads [ 61.680303][ T13] vhci_hcd: release socket [ 61.682130][ T13] vhci_hcd: disconnect device [ 61.857852][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 61.857991][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.914098][ T6336] program syz.2.92 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.937774][ T5963] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 62.182148][ T6356] ipvlan2: entered promiscuous mode [ 62.277458][ T6336] IPv4: Oversized IP packet from 127.202.26.0 [ 62.293413][ T6363] warning: `syz.1.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.347920][ T5985] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.355722][ T6366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6366 comm=syz.2.101 [ 62.518954][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 62.520377][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'. [ 62.522952][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.524801][ T6392] netlink: 'syz.3.107': attribute type 7 has an invalid length. [ 62.529785][ T5985] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.532509][ T6392] netlink: 'syz.3.107': attribute type 8 has an invalid length. [ 62.536240][ T5985] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 62.539206][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 62.542149][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.550840][ T6392] gretap0: entered promiscuous mode [ 62.552965][ T6392] batadv_slave_1: entered promiscuous mode [ 62.555113][ T6392] erspan0: entered promiscuous mode [ 62.571365][ T5985] usb 5-1: config 0 descriptor?? [ 62.682599][ T6412] IPVS: Unknown mcast interface: nicvf0 [ 62.743332][ T6415] 9pnet: Could not find request transport: virtðhÔqý(4rio [ 62.746558][ T6415] overlay: Unknown parameter 'euid<00000000000000016877' [ 62.753833][ T6415] overlay: Unknown parameter 'fsuuid' [ 62.756016][ T6413] process 'syz.3.112' launched './file0' with NULL argv: empty string added [ 62.928722][ T6422] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 62.940340][ T6422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.977134][ T6422] bond1: (slave veth3): Enslaving as an active interface with a down link [ 62.984023][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 62.999699][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 63.004360][ T6422] bond1: (slave batadv1): making interface the new active one [ 63.008641][ T6422] batadv1: entered promiscuous mode [ 63.011108][ T6422] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 63.014871][ T6422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.115'. [ 63.290365][ T6458] ======================================================= [ 63.290365][ T6458] WARNING: The mand mount option has been deprecated and [ 63.290365][ T6458] and is ignored by this kernel. Remove the mand [ 63.290365][ T6458] option from the mount to silence this warning. [ 63.290365][ T6458] ======================================================= [ 63.300955][ T6458] tmpfs: Cannot change global quota limit on remount [ 63.350605][ T5985] usbhid 5-1:0.0: can't add hid device: -71 [ 63.352543][ T5985] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 63.366226][ T5985] usb 5-1: USB disconnect, device number 2 [ 63.381438][ T6472] netlink: 'syz.1.125': attribute type 32 has an invalid length. [ 63.456890][ T6483] [U] [ 63.457936][ T6483] [U] [ 63.458812][ T6483] [U] [ 63.459738][ T6483] [U] [ 63.462780][ T6483] [U] [ 63.463677][ T6483] [U] [ 63.464534][ T6483] [U] [ 63.465419][ T6483] [U] [ 63.466298][ T6483] [U] [ 63.467150][ T6483] [U] [ 63.468021][ T6483] [U] [ 63.468872][ T6483] [U] [ 63.469878][ T6483] [U] [ 63.470780][ T6483] [U] [ 63.471657][ T6483] [U] [ 63.472523][ T6483] [U] [ 63.474252][ T6483] [U] [ 63.475132][ T6483] [U] [ 63.475998][ T6483] [U] [ 63.476887][ T6483] [U] [ 63.485501][ T6483] [U] [ 63.486763][ T6483] [U] [ 63.487847][ T6483] [U] [ 63.488863][ T6483] [U] [ 63.494717][ T6483] [U] [ 63.495735][ T6483] [U] [ 63.496699][ T6483] [U] [ 63.497717][ T6483] [U] [ 63.498683][ T6483] [U] [ 63.499552][ T6483] [U] [ 63.500413][ T6483] [U] [ 63.501294][ T6483] [U] [ 63.502179][ T6483] [U] [ 63.503043][ T6483] [U] [ 63.503886][ T6483] [U] [ 63.504735][ T6483] [U] [ 63.505663][ T6483] [U] [ 63.506543][ T6483] [U] [ 63.507418][ T6483] [U] [ 63.508296][ T6483] [U] [ 63.509539][ T6483] [U] [ 63.510433][ T6483] [U] [ 63.511305][ T6483] [U] [ 63.512170][ T6483] [U] [ 63.513052][ T6483] [U] [ 63.513913][ T6483] [U] [ 63.514758][ T6483] [U] [ 63.515570][ T6483] [U] [ 63.516480][ T6483] [U] [ 63.517429][ T6483] [U] [ 63.518288][ T6483] [U] [ 63.519119][ T6483] [U] [ 63.520033][ T6483] [U] [ 63.520882][ T6483] [U] [ 63.521751][ T6483] [U] [ 63.522582][ T6483] [U] [ 63.523507][ T6483] [U] [ 63.524339][ T6483] [U] [ 63.525203][ T6483] [U] [ 63.526051][ T6483] [U] [ 63.527382][ T6483] [U] [ 63.528270][ T6483] [U] [ 63.529146][ T6483] [U] [ 63.530010][ T6483] [U] [ 63.530970][ T6483] [U] [ 63.531958][ T6483] [U] [ 63.532838][ T6483] [U] [ 63.533700][ T6483] [U] [ 63.534574][ T6483] [U] [ 63.535437][ T6483] [U] [ 63.536270][ T6483] [U] [ 63.537141][ T6483] [U] [ 63.538194][ T6483] [U] [ 63.539135][ T6483] [U] [ 63.540002][ T6483] [U] [ 63.540858][ T6483] [U] [ 63.541736][ T6483] [U] [ 63.542593][ T6483] [U] [ 63.543456][ T6483] [U] [ 63.544322][ T6483] [U] [ 63.545295][ T6483] [U] [ 63.546188][ T6483] [U] [ 63.547043][ T6483] [U] [ 63.547901][ T6483] [U] [ 63.548898][ T6483] [U] [ 63.549802][ T6483] [U] [ 63.550657][ T6483] [U] [ 63.551522][ T6483] [U] [ 63.552387][ T6483] [U] [ 63.553240][ T6483] [U] [ 63.554082][ T6483] [U] [ 63.554945][ T6483] [U] [ 63.555813][ T6483] [U] [ 63.556647][ T6483] [U] [ 63.557510][ T6483] [U] [ 63.558412][ T6483] [U] [ 63.559370][ T6483] [U] [ 63.560234][ T6483] [U] [ 63.561096][ T6483] [U] [ 63.561988][ T6483] [U] [ 63.562857][ T6483] [U] [ 63.563726][ T6483] [U] [ 63.564595][ T6483] [U] [ 63.565463][ T6483] [U] [ 63.566354][ T6483] [U] [ 63.567253][ T6483] [U] [ 63.568392][ T6483] [U] [ 63.569410][ T6483] [U] [ 63.570393][ T6483] [U] [ 63.571259][ T6483] [U] [ 63.572130][ T6483] [U] [ 63.573000][ T6483] [U] [ 63.573935][ T6483] [U] [ 63.574801][ T6483] [U] [ 63.575657][ T6483] [U] [ 63.576554][ T6483] [U] [ 63.577460][ T6483] [U] [ 63.578366][ T6483] [U] [ 63.579502][ T6483] [U] [ 63.580665][ T6483] [U] [ 63.581974][ T6483] [U] [ 63.583144][ T6483] [U] [ 63.584137][ T6483] [U] [ 63.585353][ T6483] [U] [ 63.586536][ T6483] [U] [ 63.587661][ T6483] [U] [ 63.588847][ T6483] [U] [ 63.594146][ T6482] [U] [ 63.681793][ T6502] binder: BC_ACQUIRE_RESULT not supported [ 63.683617][ T6502] binder: 6501:6502 ioctl c0306201 200000000180 returned -22 [ 63.686477][ T6502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 63.692818][ T6505] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 63.705508][ T6502] ip6t_REJECT: ECHOREPLY is not supported [ 63.757833][ T6515] program syz.1.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.900500][ T6527] binder: 6526:6527 ioctl c0306201 200000000640 returned -22 [ 63.944970][ T6530] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 64.149059][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 64.213615][ T6550] pim6reg: entered allmulticast mode [ 64.216143][ T6550] pim6reg: left allmulticast mode [ 64.283734][ T6559] syz.0.147 uses old SIOCAX25GETINFO [ 64.376296][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.569470][ T6588] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 64.647655][ T6594] comedi comedi4: comedi_config --init_data is deprecated [ 64.715856][ T6598] mkiss: ax0: crc mode is auto. [ 64.764900][ T6603] loop2: detected capacity change from 0 to 7 [ 64.769466][ T6603] Dev loop2: unable to read RDB block 7 [ 64.771932][ T6603] loop2: unable to read partition table [ 64.774447][ T6603] loop2: partition table beyond EOD, truncated [ 64.776985][ T6603] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 64.966598][ T6622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.001305][ T6624] binder: 6623:6624 ioctl c0306201 200000001a80 returned -11 [ 65.003884][ T6624] binder: 6623:6624 ioctl c0306201 200000000540 returned -11 [ 65.511705][ T6643] netlink: 68 bytes leftover after parsing attributes in process `syz.2.174'. [ 65.512875][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 65.550789][ T6650] capability: warning: `syz.1.176' uses deprecated v2 capabilities in a way that may be insecure [ 65.857991][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 65.942255][ T6679] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.097769][ T5963] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 66.100347][ T5963] Bluetooth: hci1: Injecting HCI hardware error event [ 66.103189][ T5963] Bluetooth: hci1: hardware error 0x00 [ 66.153211][ T6703] capability: warning: `syz.1.190' uses 32-bit capabilities (legacy support in use) [ 66.792675][ T6719] netlink: 'syz.0.194': attribute type 2 has an invalid length. [ 66.795563][ T40] kauditd_printk_skb: 194 callbacks suppressed [ 66.795577][ T40] audit: type=1400 audit(1753019651.491:512): avc: denied { watch_mount watch_reads } for pid=6718 comm="syz.0.194" path="/27" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.806798][ T40] audit: type=1400 audit(1753019651.491:513): avc: denied { read } for pid=6718 comm="syz.0.194" name="msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.817542][ T40] audit: type=1400 audit(1753019651.491:514): avc: denied { open } for pid=6718 comm="syz.0.194" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.912672][ T40] audit: type=1400 audit(1753019651.611:515): avc: denied { setopt } for pid=6724 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.948068][ T40] audit: type=1400 audit(1753019651.621:516): avc: denied { create } for pid=6724 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.955663][ T40] audit: type=1400 audit(1753019651.621:517): avc: denied { write } for pid=6724 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.219863][ T40] audit: type=1400 audit(1753019651.921:518): avc: denied { create } for pid=6731 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.226727][ T40] audit: type=1400 audit(1753019651.921:519): avc: denied { bind } for pid=6731 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.516872][ T40] audit: type=1400 audit(1753019652.211:520): avc: denied { bind } for pid=6751 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.526607][ T40] audit: type=1400 audit(1753019652.221:521): avc: denied { write } for pid=6751 comm="syz.1.206" path="socket:[14550]" dev="sockfs" ino=14550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.540970][ T6758] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.207'. [ 67.714909][ T6780] netlink: 'syz.1.213': attribute type 10 has an invalid length. [ 67.725745][ T6780] team0: Device hsr_slave_0 failed to register rx_handler [ 67.822601][ T6778] binder: binder_mmap: 6776 200000ffc000-200000fff000 bad vm_flags failed -1 [ 67.959086][ T6797] 9pnet: Could not find request transport: virt>|Œio [ 67.964632][ T6797] 9pnet: Could not find request transport: virt>|Œio [ 68.177821][ T5963] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 68.208871][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'. [ 68.217035][ T6811] ipt_REJECT: TCP_RESET invalid for non-tcp [ 68.250442][ T6816] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 68.253291][ T6816] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 68.256919][ T6816] vhci_hcd vhci_hcd.0: Device attached [ 68.270974][ T6822] vhci_hcd vhci_hcd.0: port 0 already used [ 68.273419][ T6818] vhci_hcd: connection closed [ 68.277414][ T215] vhci_hcd: stop threads [ 68.283418][ T215] vhci_hcd: release socket [ 68.285170][ T215] vhci_hcd: disconnect device [ 68.478464][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.225'. [ 68.666313][ T6840] pim6reg: entered allmulticast mode [ 68.689652][ T6844] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.692521][ T6846] pim6reg: left allmulticast mode [ 68.883082][ T6868] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 68.924045][ T6870] overlay: Bad value for 'redirect_dir' [ 68.924165][ T6871] overlay: Bad value for 'redirect_dir' [ 68.970723][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 68.978838][ T6873] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 69.005259][ T6873] wg2: entered promiscuous mode [ 69.007244][ T6873] wg2: entered allmulticast mode [ 69.127180][ T6880] overlay: Bad value for 'workdir' [ 69.130835][ T6880] hpfs: Unknown parameter 'overlay' [ 69.141120][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.310800][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.314284][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.323520][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.326358][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.330394][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.333091][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.341440][ T9] usb 5-1: config 0 descriptor?? [ 69.676470][ T6896] program syz.3.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.761597][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 69.960504][ T6911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.251'. [ 69.963232][ T6911] netlink: 'syz.2.251': attribute type 6 has an invalid length. [ 69.965523][ T6911] netlink: 'syz.2.251': attribute type 5 has an invalid length. [ 69.968652][ T6911] netlink: 'syz.2.251': attribute type 4 has an invalid length. [ 70.317786][ T6089] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 70.373228][ T6915] usb 5-1: language id specifier not provided by device, defaulting to English [ 70.467782][ T6089] usb 7-1: device descriptor read/64, error -71 [ 70.707785][ T6089] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 70.824922][ T6933] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 70.839633][ T6089] usb 7-1: device descriptor read/64, error -71 [ 70.948935][ T6089] usb usb7-port1: attempt power cycle [ 71.142848][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.297857][ T6089] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 71.319276][ T6089] usb 7-1: device descriptor read/8, error -71 [ 71.487832][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 71.568002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.581572][ T6089] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 71.602196][ T6089] usb 7-1: device descriptor read/8, error -71 [ 71.636961][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 71.642438][ T24] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 71.645904][ T24] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 71.649928][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 71.652680][ T24] usb 8-1: config 1 has no interface number 0 [ 71.654599][ T24] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 71.658057][ T24] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 71.663054][ T24] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 71.666919][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.673741][ T6971] loop6: detected capacity change from 0 to 524287999 [ 71.677316][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.678739][ T24] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 71.680234][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.685646][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.688931][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.691572][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.694102][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.696568][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.699693][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.702259][ T6158] ldm_validate_partition_table(): Disk read failed. [ 71.704306][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.706822][ T6158] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.707858][ T6089] usb usb7-port1: unable to enumerate USB device [ 71.711957][ T6158] Dev loop6: unable to read RDB block 0 [ 71.714019][ T6158] loop6: unable to read partition table [ 71.718983][ T6971] ldm_validate_partition_table(): Disk read failed. [ 71.721792][ T6971] Dev loop6: unable to read RDB block 0 [ 71.723774][ T6971] loop6: unable to read partition table [ 71.726022][ T6971] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 71.751912][ T5985] usb 5-1: USB disconnect, device number 3 [ 72.146990][ T6987] tmpfs: Unknown parameter 'usrquota¹›ÿÿH' [ 72.206816][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 72.206831][ T40] audit: type=1400 audit(1753019656.901:598): avc: denied { watch } for pid=6990 comm="syz.0.277" path="/55/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.219000][ T40] audit: type=1400 audit(1753019656.901:599): avc: denied { watch_sb watch_reads } for pid=6990 comm="syz.0.277" path="/55/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.230070][ T24] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 72.428421][ T40] audit: type=1400 audit(1753019657.131:600): avc: denied { map } for pid=6945 comm="syz.3.262" path="socket:[13706]" dev="sockfs" ino=13706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.435312][ T40] audit: type=1400 audit(1753019657.131:601): avc: denied { read accept } for pid=6945 comm="syz.3.262" path="socket:[13706]" dev="sockfs" ino=13706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.445492][ T24] usb 8-1: USB disconnect, device number 3 [ 72.448889][ T24] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 73.102801][ T7002] 9pnet_virtio: no channels available for device syz [ 73.103306][ T7001] 9p: Unknown uid 00000000004294967295 [ 73.202020][ T40] audit: type=1400 audit(1753019657.901:602): avc: denied { block_suspend } for pid=7008 comm="syz.0.284" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.215906][ T7010] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 73.218353][ T7010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.221535][ T7010] vhci_hcd vhci_hcd.0: Device attached [ 73.225602][ T7010] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 73.228173][ T7010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.231532][ T7010] vhci_hcd vhci_hcd.0: Device attached [ 73.235168][ T7010] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 73.238038][ T7010] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.241244][ T7010] vhci_hcd vhci_hcd.0: Device attached [ 73.245055][ T7010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.248475][ T7010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.251497][ T7010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.256756][ T7014] vhci_hcd: connection closed [ 73.256908][ T7016] vhci_hcd: connection closed [ 73.256975][ T76] vhci_hcd: stop threads [ 73.266507][ T7012] vhci_hcd: connection closed [ 73.268785][ T76] vhci_hcd: release socket [ 73.271744][ T76] vhci_hcd: disconnect device [ 73.273403][ T76] vhci_hcd: stop threads [ 73.274753][ T76] vhci_hcd: release socket [ 73.276159][ T76] vhci_hcd: disconnect device [ 73.278303][ T76] vhci_hcd: stop threads [ 73.280027][ T76] vhci_hcd: release socket [ 73.281796][ T76] vhci_hcd: disconnect device [ 73.298091][ T7021] vlan2: entered promiscuous mode [ 73.299716][ T7021] bridge0: entered promiscuous mode [ 73.430308][ T40] audit: type=1400 audit(1753019658.131:603): avc: denied { name_connect } for pid=7035 comm="syz.2.290" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 73.441135][ T7043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.543907][ T40] audit: type=1400 audit(1753019658.241:604): avc: denied { getattr } for pid=7044 comm="syz.0.291" name="/" dev="9p" ino=35913860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.554110][ T7045] overlayfs: workdir and upperdir must reside under the same mount [ 73.734215][ T7051] x_tables: duplicate underflow at hook 3 [ 73.818448][ T40] audit: type=1400 audit(1753019658.521:605): avc: denied { shutdown } for pid=7053 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.832065][ T40] audit: type=1400 audit(1753019658.531:606): avc: denied { setopt } for pid=7056 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.865695][ T40] audit: type=1804 audit(1753019658.561:607): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.268" name="/newroot/70/file0" dev="tmpfs" ino=393 res=1 errno=0 [ 74.087181][ T7077] dlm: non-version read from control device 0 [ 74.159228][ T76] batadv1: left promiscuous mode [ 74.213486][ T7082] cgroup: fork rejected by pids controller in /syz1 [ 74.354162][ T7195] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 74.416774][ T7200] kvm: MWAIT instruction emulated as NOP! [ 74.424266][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'. [ 74.441521][ T7212] netlink: 'syz.3.312': attribute type 7 has an invalid length. [ 74.444716][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 74.640197][ T7228] netlink: 'syz.0.315': attribute type 21 has an invalid length. [ 74.643959][ T7228] netlink: 'syz.0.315': attribute type 6 has an invalid length. [ 74.647162][ T7228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.315'. [ 74.651736][ T7228] netlink: 'syz.0.315': attribute type 21 has an invalid length. [ 74.654253][ T7228] netlink: 'syz.0.315': attribute type 6 has an invalid length. [ 74.656602][ T7228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.315'. [ 74.659960][ T7228] netlink: 'syz.0.315': attribute type 21 has an invalid length. [ 74.662580][ T7228] netlink: 'syz.0.315': attribute type 6 has an invalid length. [ 74.664980][ T7228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.315'. [ 74.734924][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.739381][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.742858][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.750406][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.753371][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.843198][ T7245] xt_hashlimit: size too large, truncated to 1048576 [ 74.887006][ T7237] chnl_net:caif_netlink_parms(): no params data found [ 74.971466][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.973751][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.975987][ T7237] bridge_slave_0: entered allmulticast mode [ 74.978853][ T7237] bridge_slave_0: entered promiscuous mode [ 74.990165][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.992561][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.994893][ T7237] bridge_slave_1: entered allmulticast mode [ 74.997557][ T7237] bridge_slave_1: entered promiscuous mode [ 75.040043][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.044507][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.080928][ T7256] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.091153][ T7237] team0: Port device team_slave_0 added [ 75.094882][ T7237] team0: Port device team_slave_1 added [ 75.143240][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.145472][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.157801][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.162033][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.164320][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.172327][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.209809][ T7237] hsr_slave_0: entered promiscuous mode [ 75.212028][ T7237] hsr_slave_1: entered promiscuous mode [ 75.214191][ T7237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.216524][ T7237] Cannot create hsr debugfs directory [ 75.329580][ T7237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.345058][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 75.349991][ T7271] IPv6: sit1: Disabled Multicast RS [ 75.352050][ T7271] sit1: entered allmulticast mode [ 75.355977][ T7271] netlink: 36 bytes leftover after parsing attributes in process `syz.2.326'. [ 75.398974][ T7237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.501760][ T7237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.608892][ T7237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.744290][ T7237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.748940][ T7237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.754293][ T7237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.759864][ T7237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.800842][ T7316] ptrace attach of "/syz-executor exec"[5951] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 75.811550][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.845942][ C2] vkms_vblank_simulate: vblank timer overrun [ 75.860223][ T7237] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.865572][ T215] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.868032][ T215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.884410][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.886684][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.005488][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.025268][ T7237] veth0_vlan: entered promiscuous mode [ 76.033984][ T7237] veth1_vlan: entered promiscuous mode [ 76.051647][ T7237] veth0_macvtap: entered promiscuous mode [ 76.056116][ T7237] veth1_macvtap: entered promiscuous mode [ 76.065753][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.073205][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.078006][ T7237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.080768][ T7237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.083457][ T7237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.086149][ T7237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.138611][ T7353] tmpfs: Cannot change global quota limit on remount [ 76.147146][ T215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.155567][ T215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.184738][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.187413][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.205395][ T7360] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.237646][ T7365] syz.0.351: attempt to access beyond end of device [ 76.237646][ T7365] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 76.243309][ T7365] exFAT-fs (nbd0): unable to read boot sector [ 76.245618][ T7365] exFAT-fs (nbd0): failed to read boot sector [ 76.248400][ T7365] exFAT-fs (nbd0): failed to recognize exfat type [ 76.275931][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 76.393409][ T7380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 76.552851][ T7391] random: crng reseeded on system resumption [ 76.643926][ T7399] __nla_validate_parse: 1 callbacks suppressed [ 76.643936][ T7399] netlink: 104 bytes leftover after parsing attributes in process `syz.3.359'. [ 76.818074][ T62] Bluetooth: hci2: command tx timeout [ 77.127787][ T6037] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 77.257792][ T6037] usb 8-1: device descriptor read/64, error -71 [ 77.497813][ T6037] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.627796][ T6037] usb 8-1: device descriptor read/64, error -71 [ 77.738013][ T6037] usb usb8-port1: attempt power cycle [ 78.039205][ T40] kauditd_printk_skb: 150 callbacks suppressed [ 78.039227][ T40] audit: type=1400 audit(1753019662.741:758): avc: denied { create } for pid=7420 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.069138][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 78.072931][ T40] audit: type=1400 audit(1753019662.771:759): avc: denied { create } for pid=7422 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.080467][ T40] audit: type=1400 audit(1753019662.771:760): avc: denied { bind } for pid=7422 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.088406][ T6037] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.111827][ T6037] usb 8-1: device descriptor read/8, error -71 [ 78.146967][ T40] audit: type=1400 audit(1753019662.841:761): avc: denied { write } for pid=7427 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.154755][ T40] audit: type=1400 audit(1753019662.841:762): avc: denied { mount } for pid=7427 comm="syz.2.366" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 78.187193][ T7430] overlayfs: failed to resolve './file1': -2 [ 78.193386][ T40] audit: type=1400 audit(1753019662.891:763): avc: denied { execmem } for pid=7429 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.232006][ T40] audit: type=1400 audit(1753019662.931:764): avc: denied { name_bind } for pid=7431 comm="syz.1.368" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.240653][ T40] audit: type=1400 audit(1753019662.931:765): avc: denied { node_bind } for pid=7431 comm="syz.1.368" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.247857][ T40] audit: type=1400 audit(1753019662.931:766): avc: denied { read write } for pid=7431 comm="syz.1.368" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 78.255197][ T40] audit: type=1400 audit(1753019662.931:767): avc: denied { open } for pid=7431 comm="syz.1.368" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 78.367757][ T6037] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 78.398206][ T6037] usb 8-1: device descriptor read/8, error -71 [ 78.443132][ T7439] netlink: 37 bytes leftover after parsing attributes in process `syz.1.370'. [ 78.491554][ T7449] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.514345][ T6037] usb usb8-port1: unable to enumerate USB device [ 78.562228][ T7452] fuse: Bad value for 'fd' [ 78.578302][ T7387] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 78.737859][ T6089] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 78.898305][ T62] Bluetooth: hci2: command tx timeout [ 78.908605][ T6089] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 78.915434][ T6089] usb 7-1: config 0 has no interfaces? [ 78.926112][ T6089] usb 7-1: config 0 has no interfaces? [ 78.930700][ T6089] usb 7-1: config 0 has no interfaces? [ 78.933854][ T6089] usb 7-1: config 0 has no interfaces? [ 78.937056][ T6089] usb 7-1: config 0 has no interfaces? [ 78.940515][ T6089] usb 7-1: config 0 has no interfaces? [ 78.943220][ T6089] usb 7-1: config 0 has no interfaces? [ 78.945920][ T6089] usb 7-1: config 0 has no interfaces? [ 78.949384][ T6089] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.952429][ T6089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.955216][ T6089] usb 7-1: Product: syz [ 78.956607][ T6089] usb 7-1: Manufacturer: syz [ 78.958284][ T6089] usb 7-1: SerialNumber: syz [ 78.969609][ T6089] usb 7-1: config 0 descriptor?? [ 79.179179][ T53] usb 7-1: USB disconnect, device number 7 [ 79.370872][ T6089] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 79.379481][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 79.382645][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 79.425554][ T7481] trusted_key: syz.0.383 sent an empty control message without MSG_MORE. [ 79.519249][ T6089] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 79.521667][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.524907][ T6089] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.528619][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.532035][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.536082][ T6089] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 79.538515][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.541753][ T6089] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.545328][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.548909][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.553310][ T6089] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 79.555644][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.558923][ T6089] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.562517][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.565979][ T6089] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.571743][ T6089] usb 6-1: string descriptor 0 read error: -22 [ 79.573731][ T6089] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 79.576547][ T6089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.589469][ T6089] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 79.814616][ T7488] tls_set_device_offload_rx: netdev not found [ 79.823192][ T7473] netlink: 666 bytes leftover after parsing attributes in process `syz.1.380'. [ 79.837779][ T53] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 79.912873][ T7497] team0: Mode "loat" not found [ 80.000298][ T53] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 80.003629][ T53] usb 7-1: config 0 has no interface number 0 [ 80.006161][ T53] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 80.011059][ T53] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 80.016158][ T53] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 80.019934][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.022755][ T53] usb 7-1: Product: syz [ 80.024061][ T53] usb 7-1: Manufacturer: syz [ 80.025573][ T53] usb 7-1: SerialNumber: syz [ 80.029251][ T53] usb 7-1: config 0 descriptor?? [ 80.032047][ T7450] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 80.036451][ T53] yurex 7-1:0.50: USB YUREX device now attached to Yurex #1 [ 80.288168][ T6037] usb 7-1: USB disconnect, device number 8 [ 80.594605][ T7522] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 80.597310][ T7522] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 80.723120][ T7525] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.390'. [ 80.726344][ T7525] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.390'. [ 80.730062][ T7525] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.390'. [ 80.733153][ T7525] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.390'. [ 80.761969][ T7528] netlink: 'syz.3.391': attribute type 6 has an invalid length. [ 80.987806][ T62] Bluetooth: hci2: command tx timeout [ 81.101302][ T59] cfg80211: failed to load regulatory.db [ 81.118319][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.252798][ T53] hid-generic 3730:1B2E:07FF.0003: unknown main item tag 0x6 [ 81.255136][ T53] hid-generic 3730:1B2E:07FF.0003: item fetching failed at offset 3/4 [ 81.262706][ T53] hid-generic 3730:1B2E:07FF.0003: probe with driver hid-generic failed with error -22 [ 81.289010][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.292020][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.294986][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.300825][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 81.303544][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.305909][ T24] usb 5-1: Product: syz [ 81.307197][ T24] usb 5-1: Manufacturer: syz [ 81.308682][ T24] usb 5-1: SerialNumber: syz [ 81.312783][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 81.314619][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 81.314789][ T7567] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 81.560055][ T7575] IPVS: Scheduler module ip_vs_ not found [ 81.718171][ T6037] yurex 7-1:0.50: USB YUREX #1 now disconnected [ 81.724221][ T24] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 81.749325][ T24] usb 5-1: USB disconnect, device number 4 [ 81.754531][ T24] usblp1: removed [ 81.858191][ T59] usb 6-1: USB disconnect, device number 3 [ 82.107829][ T6037] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 82.201566][ T7606] __nla_validate_parse: 65 callbacks suppressed [ 82.201583][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 82.215360][ T7608] SELinux: Context system_u:object_r:dpkg_var_lib_t:s0 is not valid (left unmapped). [ 82.238317][ T6037] usb 7-1: device descriptor read/64, error -71 [ 82.487791][ T6037] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 82.527813][ T59] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 82.617752][ T6037] usb 7-1: device descriptor read/64, error -71 [ 82.679295][ T59] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 82.682435][ T59] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 82.685424][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 82.689233][ T59] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 82.693220][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 82.697255][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 82.701298][ T59] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 82.709069][ T59] usb 8-1: string descriptor 0 read error: -22 [ 82.711315][ T59] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 82.714644][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.719381][ T59] usb 8-1: config 0 descriptor?? [ 82.721820][ T7621] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.725436][ T59] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.727886][ T59] hub 8-1:0.0: probe with driver hub failed with error -5 [ 82.732816][ T59] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8 [ 82.737252][ T6037] usb usb7-port1: attempt power cycle [ 83.015370][ T7621] netlink: 'syz.3.417': attribute type 7 has an invalid length. [ 83.023903][ T7621] : entered promiscuous mode [ 83.028174][ T6089] usb 8-1: USB disconnect, device number 8 [ 83.057845][ T62] Bluetooth: hci2: command tx timeout [ 83.087866][ T6037] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 83.110182][ T6037] usb 7-1: device descriptor read/8, error -71 [ 83.348280][ T6037] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 83.383548][ T6037] usb 7-1: device descriptor read/8, error -71 [ 83.393282][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 83.393292][ T40] audit: type=1400 audit(1753019668.091:831): avc: denied { read } for pid=7639 comm="syz.0.423" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.402425][ T40] audit: type=1400 audit(1753019668.091:832): avc: denied { open } for pid=7639 comm="syz.0.423" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.433526][ T40] audit: type=1400 audit(1753019668.131:833): avc: denied { setopt } for pid=7641 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.487761][ T40] audit: type=1400 audit(1753019668.181:834): avc: denied { bind } for pid=7641 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.489240][ T6037] usb usb7-port1: unable to enumerate USB device [ 83.510854][ T40] audit: type=1400 audit(1753019668.211:835): avc: denied { read } for pid=5665 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 83.545503][ T40] audit: type=1400 audit(1753019668.241:836): avc: denied { search } for pid=7644 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.552505][ T40] audit: type=1400 audit(1753019668.241:837): avc: denied { search } for pid=7644 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.559451][ T40] audit: type=1400 audit(1753019668.241:838): avc: denied { search } for pid=7644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.566178][ T40] audit: type=1400 audit(1753019668.241:839): avc: denied { search } for pid=7644 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.573409][ T40] audit: type=1400 audit(1753019668.271:840): avc: denied { read open } for pid=7645 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.583443][ T9] IPVS: starting estimator thread 0... [ 83.677882][ T7649] IPVS: using max 41 ests per chain, 98400 per kthread [ 83.787502][ T7665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.428'. [ 83.954722][ T7671] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 83.963918][ T7671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.967389][ T7671] team0: Port device bond0 added [ 84.022756][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 84.492580][ T7684] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.495401][ T7684] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.498514][ T7684] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.501808][ T7684] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.524402][ T7684] netfs: Couldn't get user pages (rc=-14) [ 84.534188][ T7684] overlay: ./file0 is not a directory [ 84.756681][ T7695] 9pnet_virtio: no channels available for device syz [ 84.782691][ T7698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1056 sclass=netlink_route_socket pid=7698 comm=syz.1.437 [ 84.850579][ T7705] hpfs: Bad magic ... probably not HPFS [ 84.856053][ T7704] hpfs: Bad magic ... probably not HPFS [ 85.321879][ T7741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7741 comm=syz.0.451 [ 85.328225][ T7741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.451'. [ 85.348445][ T6037] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 85.488311][ T6037] usb 8-1: device descriptor read/64, error -71 [ 85.699712][ T7753] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 85.737995][ T6037] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 85.889347][ T6037] usb 8-1: device descriptor read/64, error -71 [ 85.998129][ T6037] usb usb8-port1: attempt power cycle [ 86.125011][ T7795] 8021q: VLANs not supported on ip6_vti0 [ 86.210459][ T7798] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 86.225161][ T7805] netlink: 72 bytes leftover after parsing attributes in process `syz.2.468'. [ 86.258366][ T7810] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.261786][ T7810] overlayfs: failed to set xattr on upper [ 86.264046][ T7810] overlayfs: ...falling back to redirect_dir=nofollow. [ 86.266524][ T7810] overlayfs: ...falling back to index=off. [ 86.269285][ T7810] overlayfs: ...falling back to uuid=null. [ 86.280305][ T7810] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.283041][ T7810] overlayfs: failed to set xattr on upper [ 86.285704][ T7810] overlayfs: ...falling back to redirect_dir=nofollow. [ 86.288346][ T7810] overlayfs: ...falling back to index=off. [ 86.290497][ T7810] overlayfs: ...falling back to uuid=null. [ 86.347802][ T6037] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 86.368416][ T6037] usb 8-1: device descriptor read/8, error -71 [ 86.469146][ T7838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'. [ 86.496577][ T7838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.475'. [ 86.516731][ T7842] ip6t_srh: unknown srh invflags 7863 [ 86.556280][ T7849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.479'. [ 86.605008][ T7851] mkiss: ax0: crc mode is auto. [ 86.627985][ T6037] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 86.648571][ T6037] usb 8-1: device descriptor read/8, error -71 [ 86.708216][ T7858] cgroup: Name too long [ 86.736973][ T7860] netlink: 180 bytes leftover after parsing attributes in process `syz.2.484'. [ 86.740062][ T7860] netlink: 180 bytes leftover after parsing attributes in process `syz.2.484'. [ 86.768777][ T6037] usb usb8-port1: unable to enumerate USB device [ 87.075221][ T7882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.076447][ T62] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 87.080969][ T7882] bond0: (slave bond2): Enslaving as an active interface with an up link [ 87.350830][ T7904] No control pipe specified [ 87.354036][ T7904] netlink: 'syz.1.496': attribute type 3 has an invalid length. [ 87.356514][ T7904] __nla_validate_parse: 2 callbacks suppressed [ 87.356521][ T7904] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.496'. [ 87.773533][ T7919] 9pnet_virtio: no channels available for device syz [ 87.805825][ T7922] mmap: syz.1.502 (7922) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.862042][ T7924] 9pnet: Could not find request transport: sZÈ{uŠgÔ0x0000000000000005 [ 88.080224][ T7939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=7939 comm=syz.1.507 [ 88.086596][ T7939] caif0: Master is either lo or non-ether device [ 88.092094][ T7942] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 88.123420][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.509'. [ 88.192421][ T7954] kvm: Disabled LAPIC found during irq injection [ 88.305389][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.517'. [ 88.309522][ T7966] tmpfs: Unknown parameter 'mpoL' [ 88.472634][ T7982] macvlan2: entered promiscuous mode [ 88.486314][ T7978] usb usb1: usbfs: process 7978 (syz.1.522) did not claim interface 0 before use [ 88.499332][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 88.499344][ T40] audit: type=1400 audit(1753019673.201:933): avc: denied { write } for pid=7977 comm="syz.1.522" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.513933][ T40] audit: type=1400 audit(1753019673.201:934): avc: denied { ioctl } for pid=7977 comm="syz.1.522" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.564171][ T7993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.645116][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.529'. [ 88.667406][ T8011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.531'. [ 88.670776][ T8010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.531'. [ 88.703059][ T8007] batadv_slave_1 (unregistering): left promiscuous mode [ 88.760389][ T8018] netlink: 'syz.1.533': attribute type 3 has an invalid length. [ 88.765501][ T8018] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 88.769707][ T8018] netlink: 216 bytes leftover after parsing attributes in process `syz.1.533'. [ 88.772423][ T8018] NCSI netlink: No device for ifindex 33022 [ 88.787993][ T40] audit: type=1400 audit(1753019673.481:935): avc: denied { connect } for pid=8019 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.820009][ T40] audit: type=1400 audit(1753019673.481:936): avc: denied { setopt } for pid=8019 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.007824][ T8034] nbd1: detected capacity change from 0 to 8589934592 [ 89.013431][ T6354] block nbd1: Send control failed (result -89) [ 89.015580][ T6354] block nbd1: Request send failed, requeueing [ 89.018793][ T62] block nbd1: Receive control failed (result -32) [ 89.020371][ T67] block nbd1: Dead connection, failed to find a fallback [ 89.025749][ T67] block nbd1: shutting down sockets [ 89.025845][ T40] audit: type=1400 audit(1753019673.721:937): avc: denied { getopt } for pid=8037 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.035712][ T67] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.040023][ T67] buffer_io_error: 23 callbacks suppressed [ 89.040035][ T67] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.048143][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.051732][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.054997][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.061237][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.064434][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.068363][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.071051][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.074391][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.077590][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.080938][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.083713][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.087169][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.091189][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.094905][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.098212][ T6354] ldm_validate_partition_table(): Disk read failed. [ 89.100785][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.104146][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.107109][ T6354] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.110655][ T6354] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.113695][ T6354] Dev nbd1: unable to read RDB block 0 [ 89.117024][ T6354] nbd1: unable to read partition table [ 89.124479][ T6354] ldm_validate_partition_table(): Disk read failed. [ 89.127187][ T6354] Dev nbd1: unable to read RDB block 0 [ 89.129498][ T6354] nbd1: unable to read partition table [ 89.377815][ T837] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.547857][ T837] usb 5-1: Using ep0 maxpacket: 8 [ 89.551634][ T837] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 89.555971][ T837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 89.560010][ T837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.563814][ T837] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.568977][ T837] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.572371][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.736887][ T40] audit: type=1400 audit(1753019674.431:938): avc: denied { ioctl } for pid=8046 comm="syz.3.540" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.746004][ T8047] input: syz0 as /devices/virtual/input/input9 [ 89.763492][ T8047] 9pnet_virtio: no channels available for device syz [ 89.776149][ T40] audit: type=1400 audit(1753019674.471:939): avc: denied { unlink } for pid=8046 comm="syz.3.540" name="#7" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.860488][ T8059] netlink: 'syz.3.544': attribute type 2 has an invalid length. [ 89.863502][ T8059] netlink: 46 bytes leftover after parsing attributes in process `syz.3.544'. [ 89.878251][ T40] audit: type=1400 audit(1753019674.581:940): avc: denied { connect } for pid=8060 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.879200][ T62] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 89.889091][ T837] usb 5-1: usb_control_msg returned -71 [ 89.889114][ T837] usbtmc 5-1:16.0: can't read capabilities [ 89.893908][ T837] usb 5-1: USB disconnect, device number 5 [ 89.894239][ T62] CPU: 3 UID: 0 PID: 62 Comm: kworker/u33:0 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 89.894256][ T62] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.894264][ T62] Workqueue: hci2 hci_rx_work [ 89.894293][ T62] Call Trace: [ 89.894298][ T62] [ 89.894302][ T62] dump_stack_lvl+0x16c/0x1f0 [ 89.894323][ T62] sysfs_warn_dup+0x7f/0xa0 [ 89.894345][ T62] sysfs_create_dir_ns+0x24b/0x2b0 [ 89.894356][ T62] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 89.894365][ T62] ? find_held_lock+0x2b/0x80 [ 89.894383][ T62] ? do_raw_spin_unlock+0x172/0x230 [ 89.894398][ T62] kobject_add_internal+0x2c4/0x9b0 [ 89.894414][ T62] kobject_add+0x16e/0x240 [ 89.894426][ T62] ? __pfx_kobject_add+0x10/0x10 [ 89.894439][ T62] ? do_raw_spin_unlock+0x172/0x230 [ 89.894451][ T62] ? kobject_put+0xab/0x5a0 [ 89.894467][ T62] device_add+0x288/0x1a70 [ 89.894481][ T62] ? __pfx_dev_set_name+0x10/0x10 [ 89.894495][ T62] ? __pfx_device_add+0x10/0x10 [ 89.894508][ T62] ? mgmt_send_event_skb+0x2fb/0x460 [ 89.894529][ T62] hci_conn_add_sysfs+0x17e/0x230 [ 89.894542][ T62] le_conn_complete_evt+0x1075/0x1d70 [ 89.894563][ T62] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 89.894580][ T62] ? hci_event_packet+0x459/0x11c0 [ 89.894602][ T62] hci_le_conn_complete_evt+0x23c/0x370 [ 89.894623][ T62] hci_le_meta_evt+0x354/0x5e0 [ 89.894634][ T62] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 89.894653][ T62] hci_event_packet+0x682/0x11c0 [ 89.894670][ T62] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 89.894682][ T62] ? __pfx_hci_event_packet+0x10/0x10 [ 89.894700][ T62] ? kcov_remote_start+0x3c9/0x6d0 [ 89.894712][ T62] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.894732][ T62] hci_rx_work+0x2c5/0x16b0 [ 89.894744][ T62] ? rcu_is_watching+0x12/0xc0 [ 89.894760][ T62] process_one_work+0x9cf/0x1b70 [ 89.894778][ T62] ? __pfx_process_one_work+0x10/0x10 [ 89.894794][ T62] ? assign_work+0x1a0/0x250 [ 89.894806][ T62] worker_thread+0x6c8/0xf10 [ 89.894824][ T62] ? __pfx_worker_thread+0x10/0x10 [ 89.894836][ T62] kthread+0x3c5/0x780 [ 89.894847][ T62] ? __pfx_kthread+0x10/0x10 [ 89.894859][ T62] ? rcu_is_watching+0x12/0xc0 [ 89.894873][ T62] ? __pfx_kthread+0x10/0x10 [ 89.894884][ T62] ret_from_fork+0x5d4/0x6f0 [ 89.894900][ T62] ? __pfx_kthread+0x10/0x10 [ 89.894910][ T62] ret_from_fork_asm+0x1a/0x30 [ 89.894930][ T62] [ 89.894943][ T62] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.896562][ T40] audit: type=1400 audit(1753019674.591:941): avc: denied { read } for pid=8060 comm="syz.1.545" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 89.900035][ T62] Bluetooth: hci2: failed to register connection device [ 90.056030][ T8061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.061354][ T8061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.068393][ T8061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.075797][ T8061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.078875][ T8061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.082284][ T8061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.084751][ T8061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.105242][ T8066] pim6reg1: entered allmulticast mode [ 90.122331][ T40] audit: type=1400 audit(1753019674.821:942): avc: denied { append } for pid=8067 comm="syz.1.548" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.167517][ T8073] tipc: Started in network mode [ 90.169568][ T8073] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 90.172451][ T8073] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 90.175217][ T8073] tipc: Enabled bearer , priority 10 [ 90.465939][ T8088] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 90.468719][ T8088] netlink: 224 bytes leftover after parsing attributes in process `syz.0.554'. [ 90.966782][ T8095] x_tables: duplicate underflow at hook 1 [ 91.050115][ T8106] xt_hashlimit: size too large, truncated to 1048576 [ 91.050152][ T8102] xt_hashlimit: size too large, truncated to 1048576 [ 91.068291][ T6037] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 91.169465][ T6037] tipc: Node number set to 1 [ 91.210071][ T8116] usb 2-1: USB disconnect, device number 2 [ 91.295982][ T8129] hub 2-0:1.0: USB hub found [ 91.299313][ T8129] hub 2-0:1.0: 6 ports detected [ 91.409035][ T8142] random: crng reseeded on system resumption [ 91.498066][ T6037] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 91.500120][ T24] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 91.649692][ T6037] usb 5-1: config 1 interface 0 has no altsetting 0 [ 91.654356][ T6037] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.658251][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.661401][ T6037] usb 5-1: Product: syz [ 91.663077][ T6037] usb 5-1: Manufacturer: syz [ 91.664957][ T6037] usb 5-1: SerialNumber: syz [ 91.702193][ T24] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 91.705342][ T24] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 91.708187][ T24] usb 2-1: Product: QEMU USB Tablet [ 91.710050][ T24] usb 2-1: Manufacturer: QEMU [ 91.711687][ T24] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 91.734111][ T24] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input10 [ 91.803443][ T24] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 92.071630][ T8152] 9pnet_fd: Insufficient options for proto=fd [ 92.097894][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.100440][ T5963] Bluetooth: hci3: command 0x0405 tx timeout [ 92.162355][ T8171] netlink: 'syz.3.570': attribute type 21 has an invalid length. [ 92.164753][ T8171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.570'. [ 92.212308][ T8177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.276068][ T6037] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 92.549459][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 92.697876][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 92.701092][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.703196][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.705995][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.709980][ T24] usb 6-1: config 0 descriptor?? [ 92.730301][ C3] usblp0: nonzero write bulk status received: -71 [ 92.733091][ T6089] usb 5-1: USB disconnect, device number 6 [ 92.736897][ T6089] usblp0: removed [ 92.798464][ T8195] overlay: Bad value for 'workdir' [ 93.000855][ T8213] bridge1: entered promiscuous mode [ 93.037485][ T8216] input: syz1 as /devices/virtual/input/input12 [ 93.121541][ T24] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 93.333246][ T8232] overlay: Bad value for 'workdir' [ 93.367071][ T8234] mac80211_hwsim hwsim7 `ëÿÿ: renamed from wlan1 [ 93.393462][ T8237] x_tables: duplicate underflow at hook 1 [ 93.432678][ T5963] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 93.569203][ T6089] usb 6-1: USB disconnect, device number 4 [ 93.667799][ T6018] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 93.819397][ T6018] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 93.826555][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.834198][ T6018] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.839155][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.843596][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.850162][ T6018] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 93.853165][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.857391][ T6018] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.862797][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.867192][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.873142][ T6018] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 93.876386][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.881177][ T6018] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.885895][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.890524][ T6018] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.898303][ T6018] usb 7-1: string descriptor 0 read error: -22 [ 93.900902][ T6018] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 93.904485][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.914536][ T6018] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 94.108090][ T8258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 94.110458][ T8258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.114569][ T8258] vhci_hcd vhci_hcd.0: Device attached [ 94.187828][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.279509][ T8195] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 94.357808][ T6018] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 94.368261][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 94.517753][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 94.520839][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.523912][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.526643][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.529795][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.533466][ T9] usb 6-1: config 0 descriptor?? [ 94.597854][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.736078][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 94.736094][ T40] audit: type=1400 audit(1753019679.431:967): avc: denied { write } for pid=8257 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.737993][ T8259] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1 [ 94.739182][ T8258] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 94.745709][ T215] vhci_hcd: stop threads [ 94.753118][ T215] vhci_hcd: release socket [ 94.756582][ T215] vhci_hcd: disconnect device [ 94.769414][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.773056][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.775991][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.780108][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.782961][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.787206][ T24] usb 5-1: config 0 descriptor?? [ 94.812257][ T9] usb 6-1: USB disconnect, device number 5 [ 94.837465][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.600'. [ 94.840187][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 94.938477][ T8275] efs: device does not support 512 byte blocks [ 94.941114][ T8275] device does not support 512 byte blocks [ 94.941114][ T8275] [ 94.991061][ T40] audit: type=1400 audit(1753019679.691:968): avc: denied { setopt } for pid=8276 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.999055][ T40] audit: type=1400 audit(1753019679.691:969): avc: denied { write } for pid=8277 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.006548][ T40] audit: type=1400 audit(1753019679.691:970): avc: denied { write } for pid=8276 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.158453][ T8289] syz_tun: entered allmulticast mode [ 95.162161][ T8288] syz_tun: left allmulticast mode [ 95.199186][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.201990][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.204839][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.208169][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.212301][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.215277][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.219794][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.222989][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.225933][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.230223][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.233329][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.236333][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.239632][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.242542][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.245590][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.254747][ T24] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 95.277749][ T40] audit: type=1400 audit(1753019679.971:971): avc: denied { getopt } for pid=8293 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.302481][ T40] audit: type=1400 audit(1753019680.001:972): avc: denied { bind } for pid=8302 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.439093][ T24] usb 5-1: USB disconnect, device number 7 [ 95.567861][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 95.748066][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 95.751314][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.754662][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.757984][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.761353][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.765782][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.768905][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.975693][ T9] usb 6-1: usb_control_msg returned -32 [ 95.981344][ T9] usbtmc 6-1:16.0: can't read capabilities [ 95.983984][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.996152][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.071203][ T9] usb 6-1: USB disconnect, device number 6 [ 96.257842][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.263058][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 96.435552][ T9] usb 7-1: USB disconnect, device number 13 [ 96.445453][ T40] audit: type=1400 audit(1753019681.141:973): avc: denied { getopt } for pid=8326 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.547179][ T8347] ip6t_srh: unknown srh match flags B153 [ 96.585086][ T8349] sp0: Synchronizing with TNC [ 96.598416][ T8349] sp0: Found TNC [ 96.920303][ T8377] netlink: 'syz.2.629': attribute type 1 has an invalid length. [ 96.923219][ T8377] x_tables: duplicate underflow at hook 1 [ 97.160671][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 97.163779][ T8390] ip_vti0: entered promiscuous mode [ 97.335954][ T8401] netlink: 'syz.0.634': attribute type 29 has an invalid length. [ 97.339605][ T8401] netlink: 'syz.0.634': attribute type 29 has an invalid length. [ 97.342455][ T8401] netlink: 500 bytes leftover after parsing attributes in process `syz.0.634'. [ 97.452957][ T8413] MTD: Couldn't look up './cgroup': -15 [ 97.576279][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 97.579511][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 97.582888][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 97.586156][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 97.586469][ T8425] 9pnet_virtio: no channels available for device syz [ 97.659273][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 97.691554][ T8431] bridge2: entered promiscuous mode [ 97.694915][ T40] audit: type=1400 audit(1753019682.391:974): avc: denied { watch } for pid=8432 comm="syz.3.644" path="/169/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 97.739869][ T40] audit: type=1400 audit(1753019682.441:975): avc: denied { nlmsg_read } for pid=8443 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.872713][ T40] audit: type=1400 audit(1753019682.571:976): avc: denied { ioctl } for pid=8449 comm="syz.3.651" path="socket:[22995]" dev="sockfs" ino=22995 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.019280][ T8464] ------------[ cut here ]------------ [ 98.021726][ T8464] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 98.025219][ T8464] shift exponent 21133 is too large for 32-bit type 'int' [ 98.031547][ T8464] CPU: 2 UID: 0 PID: 8464 Comm: syz.1.655 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 98.031574][ T8464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.031587][ T8464] Call Trace: [ 98.031594][ T8464] [ 98.031602][ T8464] dump_stack_lvl+0x16c/0x1f0 [ 98.031659][ T8464] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 98.031702][ T8464] pcl812_attach.cold+0x1a/0x1f [ 98.031731][ T8464] comedi_device_attach+0x3b3/0x900 [ 98.031767][ T8464] do_devconfig_ioctl+0x1a7/0x580 [ 98.031793][ T8464] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 98.031832][ T8464] ? find_held_lock+0x2b/0x80 [ 98.031863][ T8464] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 98.031891][ T8464] ? do_raw_spin_unlock+0xb4/0x230 [ 98.031916][ T8464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.031939][ T8464] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 98.031964][ T8464] ? do_vfs_ioctl+0x523/0x1a60 [ 98.031997][ T8464] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.032028][ T8464] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 98.032051][ T8464] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 98.032074][ T8464] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.032104][ T8464] ? hook_file_ioctl_common+0x145/0x410 [ 98.032133][ T8464] ? selinux_file_ioctl+0x180/0x270 [ 98.032151][ T8464] ? selinux_file_ioctl+0xb4/0x270 [ 98.032171][ T8464] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 98.032199][ T8464] __x64_sys_ioctl+0x18e/0x210 [ 98.032226][ T8464] do_syscall_64+0xcd/0x4c0 [ 98.032248][ T8464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.032269][ T8464] RIP: 0033:0x7f2c90d8e9a9 [ 98.032284][ T8464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.032304][ T8464] RSP: 002b:00007f2c91b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.032324][ T8464] RAX: ffffffffffffffda RBX: 00007f2c90fb5fa0 RCX: 00007f2c90d8e9a9 [ 98.032337][ T8464] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006 [ 98.032347][ T8464] RBP: 00007f2c90e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 98.032359][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.032372][ T8464] R13: 0000000000000000 R14: 00007f2c90fb5fa0 R15: 00007ffede813fd8 [ 98.032397][ T8464] [ 98.032406][ T8464] ---[ end trace ]--- [ 98.033867][ T8466] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.037232][ T8464] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 98.037248][ T8464] CPU: 2 UID: 0 PID: 8464 Comm: syz.1.655 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 98.037274][ T8464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.037287][ T8464] Call Trace: [ 98.037295][ T8464] [ 98.037304][ T8464] dump_stack_lvl+0x3d/0x1f0 [ 98.037339][ T8464] panic+0x71c/0x800 [ 98.037370][ T8464] ? __pfx_panic+0x10/0x10 [ 98.037405][ T8464] ? __pfx__printk+0x10/0x10 [ 98.037435][ T8464] check_panic_on_warn+0xab/0xb0 [ 98.037457][ T8464] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 98.037494][ T8464] pcl812_attach.cold+0x1a/0x1f [ 98.037523][ T8464] comedi_device_attach+0x3b3/0x900 [ 98.037558][ T8464] do_devconfig_ioctl+0x1a7/0x580 [ 98.037582][ T8464] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 98.037621][ T8464] ? find_held_lock+0x2b/0x80 [ 98.037651][ T8464] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 98.037695][ T8464] ? do_raw_spin_unlock+0xb4/0x230 [ 98.037721][ T8464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.037745][ T8464] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 98.037773][ T8464] ? do_vfs_ioctl+0x523/0x1a60 [ 98.037802][ T8464] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.037835][ T8464] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 98.037855][ T8464] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 98.037875][ T8464] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.037904][ T8464] ? hook_file_ioctl_common+0x145/0x410 [ 98.037935][ T8464] ? selinux_file_ioctl+0x180/0x270 [ 98.037954][ T8464] ? selinux_file_ioctl+0xb4/0x270 [ 98.037980][ T8464] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 98.038007][ T8464] __x64_sys_ioctl+0x18e/0x210 [ 98.038038][ T8464] do_syscall_64+0xcd/0x4c0 [ 98.038062][ T8464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.038084][ T8464] RIP: 0033:0x7f2c90d8e9a9 [ 98.038101][ T8464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.038120][ T8464] RSP: 002b:00007f2c91b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.038141][ T8464] RAX: ffffffffffffffda RBX: 00007f2c90fb5fa0 RCX: 00007f2c90d8e9a9 [ 98.038155][ T8464] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006 [ 98.038169][ T8464] RBP: 00007f2c90e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 98.038181][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.038194][ T8464] R13: 0000000000000000 R14: 00007f2c90fb5fa0 R15: 00007ffede813fd8 [ 98.038220][ T8464] [ 98.041012][ T8464] Kernel Offset: disabled VM DIAGNOSIS: 13:54:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000113e23 RBX=0000000000000000 RCX=ffffffff8b867c99 RDX=0000000000000000 RSI=ffffffff8de2ffee RDI=ffffffff8c157460 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a94550 R15=0000000000000000 RIP=ffffffff8b8667ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000054c0 CR3=000000006366f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800000007 00000000000020bf 0000000000501361 00000000004c1261 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000254c4c757 c8a033b7ab2f7201 0000000000070095 0000000000000005 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c12c3b2d9f0c03c 23fd3504e02d7c26 c730a07bbaa2a17f 18fc1f4da03dd2a2 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d51d7ffd50deefc7 4aa627f65de24d80 98e0ea26d758c24d ee098d3908f4b046 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be461baf3d04e5b0 fa3d9894de3290d2 7c1a5438ea66ae8b 59063bc364d77eb1 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f60000cc87e98eda 7a8edb59a485a370 c574d447792991e2 8b1271013300c488 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8435ab54b2ec5fbd 91ca6e72abdf5d3a c1ec5c15e6b6a4f8 072b6562eeb2f48e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d84357525de6db7b 37655c13f5be461b af3d04e5b0fa3d98 94de3290d27c1a54 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38ea66ae8b59063b c364d77eb1d51d7f fd50deefc74aa627 f65de24d8098e0ea ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff9b016678 RCX=ffffffff8198d7a3 RDX=1ffffffff3602cd1 RSI=0000000000000004 RDI=ffffffff9b016678 RBP=ffffffff9b016680 RSP=ffffc90000677a98 R8 =0000000000000000 R9 =fffffbfff3602ccf R10=ffffffff9b01667b R11=0000000000000001 R12=ffffffff9b016688 R13=0000000000000000 R14=0000000000000000 R15=ffff8880341ea380 RIP=ffffffff8198d852 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006040 CR3=000000006366f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa356e11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000366f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000154c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffff888056af8c60 RCX=1ffffffff2152ee8 RDX=1ffff1100b3f2fa5 RSI=ffffffff8c1573e0 RDI=ffff888059f97d28 RBP=ffffc90000648d50 RSP=ffffc90000648c20 R8 =0000000000000001 R9 =fffff520000c9172 R10=0000000000000003 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000001 R14=0000000000000001 R15=ffff888056af8c40 RIP=ffffffff84e0a5d0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2c91b786c0 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c390760 CR3=0000000057943000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe47a48a20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5abf211d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5abf211d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5abf211d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5abf211d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5abf211de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5abf211ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000a31a5 RBX=0000000000000003 RCX=ffffffff8b867c99 RDX=0000000000000000 RSI=ffffffff8de2ffee RDI=ffffffff8c157460 RBP=ffffed1003bd9000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801dec8000 R14=ffffffff90a94550 R15=0000000000000000 RIP=ffffffff8b8667ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2c90fb7bac CR3=0000000024420000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000558cf2d6cb50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629e1f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a5548b4200a48 2a2a7fa6d8f53e5e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a15d5 2a2a2a2a2a415943 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632f6573756f6d2d 302e303a313a302d 6273752d332e6463 685f796d00360032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000