last executing test programs: 4.575636923s ago: executing program 3 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x1c}}, 0x800) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x8d}}]}, &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0) 4.574998561s ago: executing program 3 (id=1314): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x4) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async, rerun: 64) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0xfffffffa, 0x4, 0x5, 0x3, 0x0, 0x6}) (async, rerun: 64) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0xc8, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xb4, 0x6, "fc698804e4ba796c6cbb40838ddde86bb1d683f5febe38cd5e75db81af31fb72068b4300bb49b07237564e349713b43f4292ff69f183c4b4b00bf6ca0465864fa6e2639f2589679ffe3eee5e152ff212c935eb11d4b5a7554763302a2bbf4c7cf94ba731403c300c4b77b0cd798661e6da18fabe838044a694faee1a7828d44d217d9aa05223cec0308c30125dd2721b8dc05ec1447c7019150e155fe6ad3daaf9ab200f72cb11917b3ef39506aac55f"}]}, @NFT_MSG_DELSETELEM={0x8bc, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x88c, 0x3, 0x0, 0x1, [{0x4e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x238, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "a8ae519d3b5cce9d8ff1a04e72d410cf3caca1f68d430bf2cd430530c1d92e4d6c306007a55f33abf6f4cb8c1924328bb599375cb046849b5474b80e5d31a7b529ae3824297b43a4b0202a04de56944dc7b0dc1ed37f801546d20b1e1e224aff9d6b023ac645b92f9dba3b862d6f69e31d4fdb89ff567dbfed36c4b86a94558ac1e5146f8794b6018e36abf3a2330d83a6bd7584310a2d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xea, 0x1, "4fe7b61ac9ef91bb38ae67c196f5b87a6720b521a58187074f9c62c5d7f88366f964501f7961fffa579407dd0e756723bb09802317dc2048a39a8b98178883ad36706f12a4c96c860828315c24bf33b59db4e8e706829f56c554e21b9d0a6a9a950810604f562aceb5ac59864a60b121b3f0202fb6ebd23b843302408b2c10d30808a6b77b873e45dbd41d29d782a080665f768d6ab6ebc4e02c4d8327eceddb3fc4e2ee81d0a8bafb3c85e30bacaa377975067e083ba55fc9be9bbdebbcf602ab4ddcd5971fa30276aa7a43d5de850d76ac7bc2c93dc595b090aa638445717fc523b0a8bd0b"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "d25b277cd2fd8c6ff3f1db45b48f49f965473b5cc3bb4212840164bf0e08bd652df997a1e0b5e6720259d90edd911612a7be"}, @NFTA_DATA_VALUE={0xdf, 0x1, "635206e8e94eee591183367fd8c9402ae424324202812bf2922a723dc43ac0e6e5eaa35e27a9efa47d907ec7b5a2cb5d4c06862262503de6b6f4308e721a39d641aa07ee92621c9bf9b28a48248efe8ee45127d5161e7d3179fe8f5ab05e9b89a13f0368c10cda99508d2b87082a55aa15989ab6e5fa8f74015751627e803aa2f0a101c20051bd01cd47a3012ef6a9d4e47741454df5d5fc83fa21ea5b25da1ffb2965d5ee9c62f0ac6f32ae6a3310ce5cc1ea495df4c624e63c9d05b752f525829835dac839b12e7ebc674fed6aa71a9fe2bb547dd96f381a70f7"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "220109f8dadd61f3e298cafb815298316c4b38779a501be797465a66aa8b0efeb49e9389ef3e8eaa8aa79d00b393f0e2e29e0c3f26737f2f09ec126dac08a96aa0d9497c"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "f55ccc181543b250f058eccf076a5b549204b34faa99f5132d2d17897908ffc3864dfa2e2ee2c5b2a4ed143378"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x17, 0x1, "10191e016e932375d887ab677706ee57edb93f"}, @NFTA_DATA_VALUE={0x20, 0x1, "e59db692b1de8eeb1ce8434b94baf2078f1e36ac96b7d022c91a65f9"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_KEY={0x194, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "4b92a6705a5ba5f9f68003f443ddc3a4de22b28db52f28a7be75fd1696f43a11f74568c98585ea967eaf9e00d94947edce561827c277f849c3397ecff02c1e122043d21bfe214f67d216ddffe19d8f32ad3a2f74c6cdbbc285407298c27b8c307e72727fe23e23281e42ce2971806137cc94d6cc586a3ac0e5de326ede84dd46e27aa92f03ed5862f8d1babcf49797722d81bd21c86b0f6d6cf1a4b0bd408ba515b811212d1073ba0dd7dde54dfedcb8ec965420dea20dac77041ea7fc9441a2b0840695efad0ef198757825170da7ae27aba7fdf64d5aa8edf33f1f99fa2070e7d34b6120e95f"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xa, 0x1, "7fb4d22ef555"}, @NFTA_DATA_VALUE={0x44, 0x1, "3afbd33093cdc1a268ce60f81aaf602725ea400e75584ce9fc2bb9d4efddf37a1efb40a262cf7e373b7719d8ec6f014035e8b16254a6b4c4e568af41ecefe43a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "bf40caa86b8971d081749ea7979fe9785ea113ce1c29545fc6c6f37feec72443270bc304dc0f7b57e06908e6ee529ed97695507a6e2551ddf5516d8d32afdff40f0dd4cfe3691206e32e2cc797140bf2d8b683571050bd664db282341bb2b49eeb9679674a933d4d425d18c32d08c75500963d0ab3b5e74177538f8da0ecf1668175b79b95a1cc2614d0b5e5469205d63d61eddc5513e8cdea56637ff066cacc3446bc00a3e5d720116e7e1084bf06a642872803ade0fa258e24"}, @NFTA_DATA_VALUE={0x66, 0x1, "2fc200398c1b18087fd89b935e758de7dde78dc413764a6d9778bf15a8e686747608c1e55cfc331581be109ef70f763d9fbafb392adfc0d9402115327ed6e1bc36427d9aff651691723f9ede774910563c7c6192147af6ddc226255ce82244fe3070"}]}, @NFTA_SET_ELEM_USERDATA={0x8, 0x6, 0x1, 0x0, "7eca8011"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0x60, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x4c, 0x8, "36f19fd4aa365d938b140b748ec8e5ff51b4a69ad8e5f31f9a3fbd5c17c5393787f85d9cbbb50fb125791afd15b92a43ed2867733ac7befde264a58064cafe40771dc116d1554f15"}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xabb}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x87, 0x6, "1e9ccc3e4d2922c3941d476a5f76548e0d947498cae565ab30e394d9f134cd96cfc163b096fc609e1416ae3db10302a4074d803ed78d27480fd428db8e7999e0a6db50be42d949b7da032c6e0fa0c62acb1c65b3bff5b1c6a8e868a8d12b4ed21f78f66f5c8326ee66a9945cccef14a117409e8fe0ef1f98ab4fabff04529bc6f5d702"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x160, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x7b, 0x8, "fcfed693656a6a75c52afc6638519ce30218eb997feb50925903116af72d741f3af567b062748dcbafe376e0811021cf198f8f9c095190dc6a1dc5733319d099a9fc74f14b6cd0ba99f4b208aaa96154571ad0c4b1f807650ff215c7e0b0ee92d9df58edbe97634c904352bd1c976c51541bb5f7b0cbfa"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x8a, 0x8, "55bb4ff59f81b84e323d648a257c2c3664b674931b80c6468ca921239fb9d02d38c3bd2457d6106bbb141dc23c0baa5346b833f71cb631dbfe61913a2e10972c6f4fa45695a13d978d34289bd397d337380c4dc2502395ab7fa4e979467b33cc63919bb6f81249086e2932abb78a02e0d0bd7403f77f0924eaebb1f9793c9cb98e0abe3deaf7"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x26}, [@NFTA_RULE_USERDATA={0x24, 0x7, 0x1, 0x0, "ddef567760fc880a5cc61771c44872e50d18a7902e85e994e2f366a69284416b"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd3c}, 0x1, 0x0, 0x0, 0x4040085}, 0x4800) (rerun: 32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000005a00069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/44, 0x2c, 0x0, &(0x7f0000000280)=""/89, 0x59}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x9203, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r5, 0x0, 0x5}, 0x18) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r6, &(0x7f0000000140)={0x50}, 0xffd3) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) write(r7, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async, rerun: 64) read$FUSE(r6, 0x0, 0x0) (rerun: 64) 4.512360754s ago: executing program 3 (id=1316): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800]}) 4.426647772s ago: executing program 3 (id=1317): r0 = socket$packet(0x11, 0x3, 0x300) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="b702000004000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd000071d3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def6132e4f8acf03438b1d01ccbe27e5be5b46304c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1eaf8deff211a307626d8b27f4356755a8b3a8103e73bb2c7114e85ab2f2ee3f2ea8a4188a7d5917e790629887c1c51f56d10a8400fb4193dd79dd657ec190acfbd00e5b3a37b6205b6b5c438ebaaea9d47acc662e5ef3c51cc2add70aa9a6420abb168651d78e3a61b3007e5c86b03ffdaaebc7545061274f1b7bfefecea707423af2601bd1608abc6f7dc4bc1ab8933d11c825efb1308d2fc80d2c19d6e083bed16f8063497f59174a8e2d0500d4c1f5f0384fd8b54faa13ecde3080a17bd3b60191a8bc1cdc985d70c539e53c1b99a8e07"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) fchdir(r3) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) 3.431873261s ago: executing program 3 (id=1332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x3, r4, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x21, 0x0, 0x5b) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r8 = syz_open_pts(r6, 0x0) r9 = dup3(r8, r6, 0x0) read$FUSE(r9, &(0x7f0000003f80)={0x2020}, 0x2020) read$usbmon(r9, &(0x7f0000000340)=""/126, 0x7e) ioctl$FS_IOC_GETFSSYSFSPATH(r9, 0x80811501, &(0x7f0000000200)={0x80}) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000000000007000000948a010044003643ac1414bb00000006ffffffff000004010a01010200000002ac1414bbffffffff0a010101d180000064010100000000036401010200000002ac1414bb00000008"], 0x28}, 0x80) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000180)=0xe3b) 2.394717177s ago: executing program 3 (id=1348): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7, 0x80, 0xffff, 0x74, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x68, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@ssrr={0x89, 0x7, 0x40, [@rand_addr=0x64010102]}, @noop, @timestamp_prespec={0x44, 0x44, 0x6e, 0x3, 0x6, [{@broadcast, 0xfffffffd}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x2}, {@rand_addr=0x64010102, 0x4}, {@empty}, {@empty, 0x5}, {@loopback, 0x8504}]}]}}}}}) (async) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0xffffffd8, 0x10, 0x80404, 0xffffffff, 0x6, "00eaff00", 0x9, 0x3}) (async) read(r3, &(0x7f0000000100)=""/146, 0x92) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0x8) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) (async) r6 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000040)=0x20868, 0x4) 1.497174875s ago: executing program 1 (id=1367): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x24) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000840)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 1.433543394s ago: executing program 1 (id=1368): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setns(r0, 0x8000000) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) recvmmsg$unix(r1, &(0x7f0000002380), 0x0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async, rerun: 32) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 32) r9 = syz_open_dev$swradio(&(0x7f0000000a80), 0x0, 0x2) (async, rerun: 32) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r12, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x353}], 0x1, 0x0, 0x0) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) sendto$inet6(r12, 0x0, 0x0, 0x80, 0x0, 0x0) (async) dup3(r10, r11, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x15, 0x0, &(0x7f0000000280)) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_UNLINK(r9, 0x4161, 0x0) (rerun: 32) ioctl$VIDIOC_G_TUNER(r9, 0xc054561d, &(0x7f0000000ac0)={0x1, "1269db01000000f769d66b3d1d002f31d46a1a4ce5ae2ae3ea00", 0x0, 0x20, 0xff, 0x0, 0x0, 0x0, 0xffffbf94, 0x5}) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000002000004ab4a8df059d43130b1899b02ebebea79d0c00000000000000969ffacb6ce84abca0af0619014f7ca7519b851d98360abb0f0f5d42742ecf799536c89a921e32e4645b4d6a7149d1fa5a8d87bd7d4cae644194b9ca0565ed78e2515c94a9d4e4fef4d282b0d462ddcf208578a258ef9034824b676f8a6c9442655609b8db39b5b959238df249046ec18dc01c297f2776d237768da5235ac7c079188e5fa28e098a1b874191a99f00"/202, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ppoll(&(0x7f0000000080)=[{r4, 0x10000}, {r4, 0x421}, {r4, 0x142c}, {r4, 0x1402}, {r4, 0x40}, {r4, 0xc002}, {r4, 0x401}, {r6, 0x93}], 0x8, &(0x7f0000000140)={r7, r8+60000000}, &(0x7f0000000180)={[0xf91]}, 0x8) 1.283996573s ago: executing program 1 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x80000001, 0x0, 0x9, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0xc}, {}, {0x0, 0x9}, {}, {0x10001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xf}, {}, {0x0, 0x0, 0x0, 0x0, 0xfff}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x2, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x690}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x100}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10004}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x619}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}, {0x4000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x3}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7fffffff}, {}, {0x0, 0x0, 0x1000, 0x0, 0x4bf7ca16}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x20000, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x80, 0x3}], [{}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 1.283791693s ago: executing program 1 (id=1370): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x200cc18, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r2, r1, 0x0, 0x80000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') write$FUSE_INIT(r4, 0x0, 0x0) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000002240)={'veth1_to_team\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40814) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002280)=0x7) 1.282728045s ago: executing program 1 (id=1371): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf020000000000004000000083c10000030300000007000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r4, &(0x7f0000000080)=""/35, 0x23, 0x10020, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @private0, 0x6}, 0x1c) 482.031406ms ago: executing program 2 (id=1376): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000400)={@none, 0x0, 0x9, 0x1, 0x400, 0x2, "c0c7038e819bafd4fe063f563cbd8a0860218fc03198c72402ea62cce5d28330d297881b1b4897d4ecfd319a24f514ef86cd41ce7b39a423f904812d577dafbdf52f5116ba0a36c2adc3eacabfb1b8ab4c72b7458fc00c9b8bfd880039a6efaf3769553fe32d8f76a3d71fcfc3bafcff57b6bff3c0dd58ffe65f8cb85a483f0c"}) 481.370793ms ago: executing program 2 (id=1377): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000245000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0xb, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 479.379621ms ago: executing program 2 (id=1378): socket$netlink(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x8a00, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x50, r0, 0xd0f32000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000003c0)={0x2, 0x1000, 0x4400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 320.609114ms ago: executing program 2 (id=1381): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) write$nbd(0xffffffffffffffff, &(0x7f0000000080)={0x67446698, 0x1, 0x0, 0x4, 0x4, "2226bfc38143c9075f2b53676173ec9b5113f45d2a2c54070497d343711d05f3feeb815d1b045219bd97df254b2bdec0acb0de079411b2ad587bbcd8f0ebd0643e42e5d696e289"}, 0x57) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000140)=0x2, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000180)='veth0_vlan\x00') shutdown(r0, 0x1) r4 = fsmount(r2, 0x0, 0x79) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r5, 0xe02, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000340)=0x800) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x18180, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000003c0)) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x42, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_virt_wifi\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f00000004c0)) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000500)={0x1fe, 0x0, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x11, "3f672f8d8b1012b9fa3487dc18b95f8df6"}, &(0x7f0000000580)=0x19) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r6, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}, &(0x7f0000000680)=0x84) lstat(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000002a80)=[0x0, 0x0, 0xee01, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002b40)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000002c40)=0xe8) fstat(r1, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000002e40)=0x0) statx(r4, &(0x7f0000002e80)='./file0\x00', 0x0, 0x4, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000006c0)="7e05c10aef378eda807568dbe020d8024439d4b9ec1663855539d0cf16c98ea92f54b93a1effbe262577c87c13ce77f19c94b5a773901def9ea655d92d39e5bf2bdf2b78083c2be4321dfeafab00e28122fe40d48eaf405cffd1afb975d8155615018dcf6af0a0d1085c4beee03fcd4ee2ffc887aad36c883c89482445cf0651348e4d91a36e577e7859a0b2433c8b9a953352d5615cc4b0bc5637949be48ce9de6a6d029113044c641bee163256f5b5299a15845d53820750c6f022cdd5d686a9ec853526e25e141832af9f4ecb1148bea1b6863b7a6d2c4bd4cf25c0ec07328f9e5148685f70ff6352a9d32609755bf65e2487f1b9b46ac25e11cefe6eb5f68e704905f49113fa00d5af10f1e52ad0828e0ac9f13bd819e5b1ebd39074250e149cc19063e2c90fc8269f3a35b23766b3e288c128c1ad969a3ecd062ac14c9f7fa9254ac96eea7aad589af39cfba205d5fb6175fc8f15550ec92c2bdfb286bfe77836ee2c84bfc7b96c5bacb268b622ed2a60ca0c4e4d103a591cb1045eefc6b2777ffc7a6e1d0bda7ee33e98e7f4f27ec1152da1824e5bbf90257b499980c92fb9e3fa81aca9e908fa0e37b9062929396cef880c8093786332bf8b010ccd484b30b2f5c06b3dd318301491f2cfd2bb925cad28e49aa21cb332a5852ed679795bba63ad67a6a779bee638d807605f429ed05ce7311139fe1be2b5748436c305119bac2597a1acb31d086ebc3be7f075c67c22736bbaea853983e3e2c58b143c0feabe9754024e92141939c7ec4ad4b204c2cdc593dc879157b114193d83c5f21cd4e1c8ae34fc4f2bad65faafc135aa4235d11b9b072c23febd290d885541210b960651ad8b6995cb77a40c4bb7b4caf9bb31220490091500893c71754011e676a7657ec9ca75728803d62f7f7c508b5b681ef38c975dbcb22f5710787ea71fd2a9391d69cd678178be40d17b2c1aa2c86f8e71a9c108a9bbb7b4830fcf5d3f2bc63b5979ac519bd5ae20a0cbcf5baf4713b75dc82df4795d60545960f921064ae0ee51973c191b7654e5e8c2b9710facad8fc40a2c5763d0f57bd4bc944a3eac0cd3edfa365e9d190af9e8cb79ebeca0261f0a791aa8fd7a0e2b3c92116e99624cb24855cacf02b8e92332aed7d3d3dec670f912c12e9967e43ef9b4f47c6450560a362404dceae401843a23b3debb51415cd282639fbead3d7c646964b7c31a8b3ac6adae012cf8adcd1af2b326c3b01560f88c86a44e47b64a358171c5c966ba4c9404cda0d23ba0c47223ada6c5c8fe688d3f77610fb0550a01f1cb1ccf3481b3e86177120b154c23f40c1a847d1b331f36ac7e23754ba5e91f8402ec011afe5dbbf56888c216166366ebc6f24b6a8b9047a7c6bd8cf5f16025ffba960e27c71031cbe639cef7409fed4155eba0c85f0d8fd4e697d8ab9ccf2f814282a0c98fa81070b3155f5ede2d35dbe6be83aa9b94df6d8eaec1d0d995fbf598c1361d521be076b7eec02d8e9f1d0c64cd00f6107496e2f8e782355d6f510827502e8d4173d7a0b93bed80a0bc465a13361b34ac3d3c475d02f8cd9a760870e7b9f056fe67f4732f16bdc71cfab74b59da7e403dffa68097343bb0dc9092a607ef35ad6eadb4fadb19b968807e367f5523ca8c337fdf718c5ff8834fb902f5e8a0c399aac717c23cc78dbd1650b9c227765e04069d4ef08d9a10c83e59ac494d3c8f132285ccc11513eeedefb135d639cce5bd4b21624cfe7d894b5287d9a7fdac68f2cf0a5a121c384590cc21dfa24f45f27645ba9cc928a2ecfe4f51176be975be49017d775d3b671097eb6d4a5c9be44b10570151d2795dd01713623d053825e94ae5f50d8cbf298370f17960cb5048094ad4afe40d6a314c2182e8ff162e6b18e0e4610cd2fc135ed61b46310b7a36fddc1d057d04f81d0ce3fb7478daa451e227079a3872a5fb1b02c78242825cd459167609e10e1b2d90cbf3588cc9b9f23dcaf2855571509aed25d40e3e6a79dacefb1d67bf762975809da67a332afcb97421966aa4e44e7743fa088addb5d4a4f205f67c4a7a62fa75ca397aba1e7aeb91ea3fcc4afcf2ba93be96594c5f6f11eca5731b115366635aa5372533a69c02339f09e0262fecd1b9290fc5ab874ec375675b5c4ad1742ce99b9acd13abbe1f7a73292e1b14db34b73921435d32ef6690f2693729f580b1b2b5800af24c489dff496e13f6ba5a3b74e67b7a4e03f7838f75da2d9cd3494b1f75d017791b615e6fd05a067aca4739288cc06f295402ce3378ee7435f26ad4befaa64ac7738e1aff8d842e76311a587bea10314f5e9928fc7dbce708c72167cbf498c277da4493f1ab32567f98fddc5b1f6a1065f197bae94d3f88684d58d2d04a94261766baa8680f6ff50879b217f5205aedd4466017ee215fd2b102e64644de7111fbc56ec4fbf06ceaf07a9120c291c5f1c613f9f82bcee9e54de2312e6b6f4e29ff534fa5be5a532815ed6c20cbdb246ea489c9668e671fe852b28fe55508e312ba9427115d1f2e721f869802e9ffeb54903b221c248010771fa9afebfcf693ce8cab6e7f7ab37736f93e096e9ea267b5e12b192d5a4a6bd05ff538e487c66e54214bb060765f7f3540b90c8fdbeb97b0b9c96153d4b58bf7cfa36d333778ded8da13c9c01835f565d170597b6caa68f1a66358d92a578ed600ef8feb6f8e4d4d3687848272e172c973c7f1a4d7bd6ef98dc8234eddc65b1664eac949fddd076a27935daf9bcdae4b5b6460b6a9eb90c531919db7858514edf90096befaf194d3c87998433ef6bb974557fe02480b61b3935799c7db71f94df80ca721ebb5ea51ba800636c21d543f569d7d1e533f7e8d93782e1da1dcc2139e3f62edbd72555799a0433e8725d1c4cda029d3df5d93c1c78e381916539c79ed81810dcd237aa5730a26b406634d5a74126343aa924fdf2dfcbc5a25eece89895fa26414d6c79b5c7d2d4dcc632b91004cc6f10d978b19db6f0e25c7d1bbca06b4e5f52a76b9ab5c77e8dbc6fee4a70cabd7256c59bb3c0aca795ab2816d1f5b51210c31ecb45a3eee015723996a85915b2a03d2ea089b502e0b14f74d0f0f9dbd13101aa8d4e814ef26931f38ccd6e1ac23f2d6be4d31be2a6191288941e33dc6391fb14f365839bfac9d4509b38a1e145811a90a22e43261a194c0faddc35e66bec9f7e1ced88ed8ea8b730dc879e6f6e8034056c64f43523aef8301a6bc8daf6f4d69e76595f44d21962c10d1ca8c5156580d18602a9efab8325fe6f783c6b3e66db1516f8e863553330a833d8cf37ea1439f921440b96c025182f0489a3da540ceb2f8bb4e327ca27bb47816e476f57f6e3f39446c2426e3bcb4ec4c7d438f321cfaf0a946ad03816b45f643db509fb7cff516ca49e67e940c5cd7750450bb97d41bff2748e7784af30e2ab7665e64c0c0af98a29685571c5ca28e69ca7ac93fb2ca403f2ae6018e817377824fc8aa4ceffcb1588db17543fb49aa309c7a4ee05b6ab496284488eb79c61eee13549741a5c91940ddbc9198d7f4d3e0b47aadffc8a0f658596bb7e4137633c4518b4f0a968665da5ca1b126c851cf232d63b03fe6e147c0eee2a101d5bd314c0120ed661939faad97279105a61b41fdcbcb220f5049a2eb28a3373df6281b7e3cdac4b52f79120402e620fd2ea504d136999b9f8df98ae4cfc0c0a3c56ed62f9f37bac4930e30864fc7609a4357778bb523d9e33de19590dd0d68646be186b0191e6c6212798db170d5e61d98bfe16f305cd2ad84f270bc3d530c329b6fa931ea16b3fe41676bdf5545a4d36fe2dcb340c600c9d5967734ff13b3a4e9c0cd1f6a1741bb4c49565a1b99f52756522f418804aea07765b55cb40599510af92d513c4751744cb526f0a1f3bee39dfa343d496476a472927e747eccbde9bc705f59710fa5b1d1b3a891a88776cbdc608643620e9e60243e5b4dee4bc74545011da504d987a215a52e797f1843322a5eff158ac7590d17697052e656d32f4bb0cfcc1cdf2433b85b6c861e8945cbfef106dfdda3988eac1047eb92dad0ab713b6d7eb72c819ee0e3bfd92721fab027c61593bc4fa7082d7b74c67a9ce8f7c754284217067a31f05641bf2fd8c59ac452d90977cd05da1463e81c38a6281a281bfc6e63aefe154c1606b075aa565db58cb8446f905682b13a23b911d2e71f88e7f8c02936466f080edae45925f77059d50d4b63fa495db53df29c081e1b616c4c960a9227bc7d968d2fff42339aa5ade16f31a1f8de268f4cdd6ed8193db2f1c8b29a9bae2536530b3514fad6e81a8b4bd92ad33b4e577b12f2d378aa16f83f53e2d60c0d5b8d5dd696e8fe648ec38eef31ba1f53b9e20dc93c56bd0703bdf8484d12692109fed631a94d0f78efaa231e908346cadfecd4afb3c6f2d56e584232b6576b2dad2e1512eaa38c440199fc405f9ae1676b687f28a4aebcc823d06d591316b3aab5c14127280bed0ca28e130851f40d3916ca7a934169636615bcc2e0d016e33c8334542767eb0258a456bf2dec3207fe4e8b0ed7fad570354d1bcc8cbb587c2954ea91e2c07281726c2a77ff72aee4021984509e9fb8f1c1896252df86276ad05c5bd743ef6371ee3cb3204ebcc76764d5406f06496c534e6535155713594855f61f8dfb2c33b37decac94cd7bf3619c77facccb3f3427ae7bd1da596a434115f69ba0d16c0d6c6ed16c4b6f956bdbbaadd2f213324bed98b598bdbc406d0171c7069834badd4a7beba1b82d859677e0c67c9155a62819cd61ac1a83780293eb7bb09f7d405c4e69a14ab9c9751966098ed26d7060d9ef5489469b1ae66474680a810daea123c600fb4d2f6d6e9dde0db7cd2ab17a0f61c03bed3ee2d46ed3326dcf26e71960f3a93214aec9c0aeb97ccb30459b12fac6d30415922daba45e899d2f6eceb022f66be575e1e11f78a72331826505a83b0f6969347ea0418ab45e340ada925ece90b75b4eb42be8fdf46fab71bec05f270a9a0964cf1dbd1f76657a215776b6be17a9ac1bc1cd9c82ea9ed8a859b0b53d059b9d74948c8ea52aa80b8008a7af98591e1ed4a7e7a5ce3d8b73acd9936d752c88cf3eb8e17a27939738435f2212757e883d637a2cede265e097575375a393f7872ddc696ac821449c161987c669a0ff02e7edf7f3ae4b3de242f6c39250b9066461e19d9c9f8126c297eba803595f3d7e181835ccd506b72d4b184b4a055e2bcabdf4967c80d8bfe80c8efed4ff8a87516a5f0ccf661b38b31e417ed9ad0c356102754665202bdb67abe042303f9f3ec76c0056f2c88c0bcaf11d57137c6deb1a3c53cef5f8d3235ce473aa8e109547b1f87c3cd0944fc4ca29af9e1cfcc235a6731e2e8541cb3977a3ff9825ac6180aef1c891bc50c51ec4f089f8524c27f464c479a87d2618ac3e89698a1a2236b072c51474073a73a8442c5c1ea860a05ae38170b32d0e0f9e9ae64aefc9f6df64683bf08d75a9e28c68d8a849a98f65c4e4bd53ba8d8635385cff24527fa95710e434c1aae55d29bdbb97e3e5c7fa914e7ad4c1476237f061337ee3c730a0bd27d8d0ac5132077a3cd3948afedb4e47f7f217d5d4763ad6777e34e44c05274fda166b75211b12f7b886649de3a5fd1957e9fd84e384d1f907b364bebfbe35fc75d6abbb3ebc7e8735693a1851a3092ff4c80d081b3c563cf5164bffcbf836436de6676bc03d93d7e0db2a0f25259d7255839f375f113f6881319a4f96b87cef6b67bb22e7ef33fb4805a8e89bab20723484c483f63c60ae4ebcf45f57a9744392dadaa65ac7f6cd3bdec1ee6e325531a019a644b4b592efd2dc4e06ef7d77f158b531369b9c2a027e490ca40a4ff000796dcd0b0e4a951f4706892f1f0067a60f70ff7f21570f70d4100559d507bcaef2ad59c94e398a87d1c93ca08b946053b06c4e7ba8ed30757bd4e0577635a5cc45f616898ecb5a9a127517f4ac1150cccf35569102c259a0b60fd6875af0981fd607f3d5e0e93d5794cf9fec634d45fc1c3ed7f47891d00fdc49a927510f773c60d6b74957dd3ea549cc55e21bab0247ad0ce043d5f0420d6a412e9649d057620d2bdafde7411653bfed6929e325af25c3c0e3ac06c52c771b9f73182944c4b1516ddc0187081a0f62f3e6eb18da4a5e3aa1851a75bfc96c7940d94b72d417605dce2ea89b539b1a2a20516b7c7ec89de39896e315490456bafb8bec23eb3fac98ccd360bbdd67647a2248a4cab6b171af6a365ec75e0fb4e4388f82816b275c0bd3eaa7fd476fbbaf5e798f74f73d6d21b8c1cdd089ac32cbfe265b48eb35ba3631dd02a8b6fcce10611ed0206d15093580e7a4ff37aee602ea1d619d3b7715b18d89111e88f891fdb63428060347a8040bc99dba3d13fa132bb284b35dde9476f0001f56b08231435a2d7158f1cc9e143183087c5f587a79de5753be6af2fa3ac4e1b4b910c7ba8c9e257b9c711f327879a1fc19f938ced9238a4dcee03e070ec045c630d8bf332a7f5e33d75e403988fd291abe05904f799c0b378e22093e2748a9a156cbfcbf82c43fa444a9178447c439efe62e2a7cf5543077901af11e2183cff5f454b28588544b22a49fdaaa1353eebb4fefd9af69230ae450ea29e5f573ee2c9b270c5d70d898e62cf6aeba37e579446ff315ab99704ce8c2c929de86c8fd768362797e0f1a0415d8bfdd8d706868799ed2b97b181c06291f116e8f76028cf5ee9456f5ec8c1a3c6105e28685b00caa682ef9cca102100930c3b13a565dd418d745c5e4c44fcc3d1914b18e01c56ba80c8626fd0623b2a4a7fdbe11952bbb12d4d6f96bef90d303640f37c1309056e37712b07ec962267f6c3491f6396c4f81e55651cd9d7910ee9a14dd5a45e6b4bd5801e79b7dd4a7b0424f9ba110404681f8fcabd91cce7f26e29169b74b078b7f9199d96600b15b89749c0b25b022c22130fc81e9695f7d139c403fb4de042fd6bb21cbcd25fb6c746669512c18ef5575c36aff3ba34f0e23bf9a4963877a8e64ec6593869e49230bbb43560b88658d14970a0d40ccebdcc9678a670d761dab12bf87b9337a9a072700176b755944c823560637349d61c1d1e0d0821dfaad615353fd483b2e7c0f9ba78862ed596f5809f1d7eaa82a1b9284016e30d3f2172ba5a1847891e2eaaa15294ecfe8c0dec8135f0855365f25f3d211bc07f3927dcfba4982bdfc550df1703fdb24e84eb9a1746c6fa4ae34fd8b2c82b3dd9501030a0abff85164f950fec44c79a8544a46050b6eda332af5ab45ffa10feeb0d29348c2e0517624b873223e91d58ca47b2cbc458f59536505252df7fb94ce849e511edb1b69ca5b0df3ac4cf4db474e7423ca60ae7b54f64d842f44d3a7a2d929410a137b54ba78d8ae879c45c9d970ac311be530e824154adeed68b5d2c89dd0c2557343c2860394fc636de458a9889046129f67710d4188c5bcacc7dbc27fc848ff18132fb6a157a74511bb09b67891e9d9fd7a605bb913c7623b92564299d2d2b4c7fd078284197703554e2a4cb79bef8eae081a0287ace7ff82d406db3f50285766e619836e53654f12e47f4b7ef61e72be4ea078aa886f4952762161aa985b6309a3653b45b14506bbf034ed34f2d51be14f85dd15b3c58e17d8fd08aa19b6ee119294d8394ea74fedfd602183db8da61d99d9bc66b48b77874dc896bc34d110335840d71cc82ba4992b8d8a08f0eed304326c3668d41ee24760d1368d3429e123619516d2caf53471936e48b2196fc3020f262dd74757d46a2eaf80247837b0ad7e0a4f24c7a5686204c0f879bf92e38570c5acef621210ffad230c878cbf1ccec0333f333df53a23151807db6f1dbec382126b59f065cb04ac056d3df21f4dc5620ee6fa0236d31e7fe862cbff60e74cd10b474e6ff5416be0b538c2d446024d36c14e7d21b30f009a407b3583194cae6d1d4d20cf14372fe3679d462b5772c5bc97dba726970bf1dbd80ebb1af16555e18d0e666144c9072a2007e04b1d7bbd65c716c0005edab865a7e5c988e2c94e19e8cb375f417a60a90453b400ab48ef9f57d51173a6fcb76372b1e576d6467ca3fcee0c195458274d09228b0bfaf893fd84d02fb9d2e22ec1092681d3393550fd94c00c7d10f4d680811f1b466232a353864ae64b6996663fba53fc51357d3f07d1705549f49c64f6d34597cade6effee3a20b9e30f5f04dbf57181ab571fcb4915298db86c390dcab8f1301c79313a173d8b4307780211cd85751a6f0e057eae862430d8ef9f88f14886328d54d42a0e580fdb4ad26225c3893ec809e7e66abf4402d742de60d6db5cbf447e83315fde23bea5c81526f23999df2e2f0554ec261850ee6e89d39d471d71e18eceb8635c631127de6599173276d8a2cfdacc83d7684ec3a8ffe1afbe41e636f1e048af679d561e9dae545fdff58349d37369979018015e81bcf872d9c51c4a41dae0e9e2de42a0512010485b3a3d156127db4818da9984f548e9ba2bc9b33f37c24ac7e4d6ce0fb4cdfdf236a204faa9ec7fcc7d10ecff71c2f1e32ed67788ce6169d67fdeed3981ee8ec8f180db35859ee2a16b24a3f4d7c557bfd61283a5ab8d7a81615fe8f482ecddcc7c136b0b9fe07c40614514d29bdce231c14eaaee5120bb8388fdaaebd64052a449e9c146c571da44f0ba4871ee5ad21049d011cb8825b5a79dff773fcc7d0175eee2382f623c46b4724a7caf0b9319d2f8a7d7d24e7dcbb6fa0c12532542a75286a9e87141751b8a6ea3b2811d20d079cd6a39ade9d228024426e57076b7007bf03a776a4f3e8fb5cdb5be2533d4dd38c67d3cafa14538262e6cbf28f58daed44ae880363ba62fc177f045a4e41b283a69621a8933dde441102f9b99e3cf004f6211923c21001164afaf0d2d502f2da7f78a5605a6f1dc1f2353215fa56e7a5455e0bced5e15de0cd36eeb078dd915dbd2140ce7307e31df253c545dc6baf318c9fc9357dfe0dd7816216c660577c35e4d9b2eb26dd283d0c6ab2c5f3c314221eb144afb24cf5fc254f952f4e073a448778e808c243470c87f10742b814e5fae06ba51bd22a8f0febcc78c2fab068acc2ee01355a893765ef2fd8e84270ea5e7586ec147e053fb793d1e3dea43c5ca989b0cdc76c515a02ae27d7ffc547f4594020b334294cf3ce74647fe284ed78edbd8b07ff5ed819e6ed98c5b863a59c717d2a6ab6bb4f5315e3e7f5b2eb1c82af5f1bcc90e05f3098c24891824097d325bb14205ea630060bcaa5ff24399c47fbf904947841d6ab0780205ceabdba58e0d9d7ad3297810886d3725b1a31c9ee0531a722afdc83effc0eb150e3c289d227116102a6e0e0cc649babfc049a5b0741fe17c3ccb1a2aa7c24ee43020330369f9005296d89fec9e00e0b3ab9d222d1571f8639d185d8da5dfa14232d3e36e3c95c952c4062a07d5dced22054cf1d80d36c08960fc4a9c2a515ea5bc0f1c89d307e099ebb33525d4d7a406d02960093f6635025c13679cd68477e70a142a956914815c53a1e89f5a90e52aef6e5727908e6413d6bc684976dae7be86caa6504c7dbe10dfe131343610b8553b671a542bc0bea978fae880ac2c6b50d28070591bb19fda2e0a84207d782fd60a3544d9f600c6eaefefbd8c02a5e390cf69fb994070fa08b396c2ac207e2ec02b0180b9dd558ad929756eb136b7d9f74da730ca722b3b9aa865a3f70076b031b9f25850d88cd4319a5e4bf24dd7795559a319a6ffd73074b85ecc2b8f57725c12814f60ab608356583cc97b0cc1540213510c9d826b51b451fc2e3b99794e8c4abfadf8490eaad639f4845ce6fa18427fcb06e5f0d63354e13fdd28154073ca0bc186dfe821a20f4b5985b8f69a83d0660d5ba32b2b7b80fe80e3c75f2b7dc9dcea87cfdde0a202e977d55968d9a15a5670bcb7d59649b6d1f865594833a274ed32d1301c7b5dd2658874a892280e47d96375c03c832e80f1594ee3fae94ba83a16463bf1b6bd7b51f420244a60f6afd35fb48a6ef90bf92d83befa7448ece1b91e408975182079fda118601bf90a8947665a48d0affb3645de6ba01074373425ff705bc064e805a9ad59ad8425ffc855c3708bab89cfd91bfe5eacaff8366b99f3689965902078f8d6c97ca4915c4007ee27de6e49db5780d14d51e943e606a62fefecf09cdd7cb1193a2dfb858e5cc9725dcf6a5f1ed44447004ba6a1bad98b257c7b05d253701ffb6a85ea6325a4eb3fc5efd8e87438e7ea4623b9d64e2f6e883a7014248e18995c0e89a6016db09dbf58c365a7326708137faa3556fca6a64849caee951faab31b958faba6d85e8309bca437fd1449859aad487f362fdf713a6db52671868b9358f6256871d155bc65abaf4f7313111c39937ab5308ae51e2b864419d20de1b696cd35d45b0773ab5f6e8d063429ff5b2fd64e71d44f46f062ba86088f5974302d5e17cd7bc40ab596588b0d5f3e16102dced626b4fb0afe9a9d668b7174bec9d98a6051928805d4958ca8096099d40fba82e9fbd252884187a80533f82304ccee828308c23b34add7fa62172c3785e155113ba3acb6484f22c3365c3e90b933903a4e221ff7137da5cb7c5336460ccfeb27f9dc5cbf37263ba070505c3fcc75b06652e50dd961807a26bddc66d8e014c797a802f48eb76f4ab8a1d20f7d6c5b8d7066a54d987b72ad2d3aa121ea01ea9044abd01f71e42009e9a4c6da0c5fa20a53a3e3030695ecccdd99e0a2f2850c761f5550e63bae404434898ff276fc88f292fc54568ae156dae25cdb6288deda1cf0166877cff4a67d8f8b0864068f88d0d76877801b28a96623f60a360f4ace7f1158011824ff20fbd14942cadb8f0a305219371c63cf69b2240b60966ba24288d3fea93e734123151e02c129d99676271b9ee3055c9aee9ccf79b42f2f68e2378f93f83ff761331d32bac60032e0333b039560a3750c0cbfad6fbf2b17acb7913ce946598b9106e53e310c74ae3ee29968cb8b399cc7264d190eb92bb3bf9dc2024f96cc147f9070661759b9e28af94ff4932d9151572acd1a2201f1e4c2b45cd91607602724a1ee29330cf49209fc54152e0ef5c35c23e5f9c18c3a12f34ae82e0c7a3132741e273df2bd6fba8be11affc656be96d86d98079930c2597f10089cc85250fd3129a0a4d0f2fb0c3cfa70ac9bbc41d552fe6222c7881cad8b293618579fa65f8c63171b496891c1a3a3c4a479cad36ee164cbaa21bd56dbf7c99eab0749c10281faf0f73dde6d78223810bda859b0b21fa092a22536ea2935c54c758d72324b4cfda923d7080ea46095414f5c0fbd4aacf78ba93f1a0516420e011229495cae73a6a92638e034eae18541f28e7bce5f6026938d4891a548bdf96583639ddec1de4ece524d07dd307fae20460a11d100c1568bd27e43913ec4e00a8b983fe4daa07aed03766091aa1752efabfc36ff73a4c96d6b7c69530062f4244ef28bcd2dea97c3564a1dcc0688a3b03b141a5392b2ef44e41959954fcf5279c201bbe4760622263adaa8ad2eb50c816e4216ebcb6fdf57da46f2dcfcf7cc3e1b7cbb2d26f6", 0x2000, &(0x7f00000056c0)={&(0x7f00000026c0)={0x50, 0x0, 0x1, {0x7, 0x2b, 0xfffffffa, 0x6210002, 0x7fff, 0x1, 0x1, 0x800, 0x0, 0x0, 0x4, 0x1}}, &(0x7f0000002740)={0x18, 0xfffffffffffffffe, 0x8, {0x7}}, &(0x7f0000002780)={0x18, 0x0, 0x4, {0xf646}}, &(0x7f00000027c0)={0x18, 0xfffffffffffffffe, 0x8000000000000000, {0x3402}}, &(0x7f0000002800)={0x18, 0xfffffffffffffff5, 0x7fffffff, {0x9}}, &(0x7f0000002840)={0x28, 0xfffffffffffffff5, 0x2000000000000, {{0x5, 0x1ff}}}, &(0x7f0000002880)={0x60, 0x0, 0x3, {{0x7, 0x7, 0x2, 0xbee, 0x10001, 0x2, 0x6, 0x800}}}, &(0x7f0000002900)={0x18, 0x0, 0x6b1f, {0x80000001}}, &(0x7f0000002940)={0x14, 0x0, 0x6, {'eth\x00'}}, &(0x7f0000002980)={0x20, 0xfffffffffffffff5, 0x81, {0x0, 0x3c}}, &(0x7f0000002ac0)={0x78, 0x0, 0x0, {0xe922, 0x7, 0x0, {0x1, 0x6, 0x5, 0x5, 0xd8a, 0x6, 0x80, 0xb09, 0x8, 0x4000, 0x80000001, r7, r8, 0xa, 0x4}}}, &(0x7f0000002d00)={0x90, 0x0, 0x4, {0x1, 0x2, 0xae15, 0x7, 0x8, 0x80000000, {0x1, 0x6, 0x3e, 0xa, 0x6, 0x6, 0xfffffffc, 0x9, 0x800, 0xa000, 0x4, r9, r10, 0x9, 0x1}}}, &(0x7f0000002dc0)={0x48, 0x0, 0x9, [{0x3, 0x8, 0x1, 0xd, '.'}, {0x0, 0x6161, 0x0, 0x7}]}, &(0x7f0000005180)={0x200, 0x0, 0x8, [{{0x1, 0x2, 0x8, 0xd3b1, 0x2, 0x4, {0x1, 0x1, 0x8, 0x100, 0x1, 0xffff, 0x1, 0x2, 0x200, 0x4000, 0x5, r11, r12, 0x0, 0xffff}}, {0x6, 0x4, 0x5, 0x0, ',-&)\''}}, {{0x3, 0x3, 0xff, 0x8, 0xe, 0x1b58, {0x6, 0x3, 0xd, 0xffffffffffffabaa, 0x1, 0x2, 0x3, 0x81, 0x7, 0x6000, 0x9, r13, 0x0, 0x2}}, {0x2, 0x10000, 0xb, 0x2, 'veth0_vlan\x00'}}, {{0x3, 0x0, 0x4, 0x3, 0x101, 0x7, {0x2, 0xffff, 0x6, 0x0, 0x4, 0x5, 0x100, 0x7, 0x8, 0xa000, 0x12a, 0x0, 0x0, 0x4, 0x6}}, {0x5, 0x7f, 0xb, 0x9, '^!+#\xfb[%^$(*'}}]}, &(0x7f0000005440)={0xa0, 0x0, 0x6, {{0x2, 0x1, 0xfffffffffffffffc, 0xe, 0x6, 0x7, {0x4, 0x5b3c, 0x619, 0x7d, 0x2df, 0x800, 0x6c30, 0x2, 0x1, 0x2000, 0x8bdc, 0x0, 0x0, 0x8000, 0x38f8}}, {0x0, 0x18}}}, &(0x7f0000005500)={0x20, 0x0, 0x1, {0x3, 0x4, 0x9, 0x87}}, &(0x7f0000005580)={0x130, 0x0, 0xffffffffffffffff, {0x4, 0x8000, 0x0, '\x00', {0x100, 0x9, 0xad1a, 0x10000, 0x0, 0x0, 0x1000, '\x00', 0x7, 0x4, 0x40, 0xffffffffffffff01, {0x7f}, {0x301, 0x7bf4}, {0x0, 0x9}, {0x81, 0x5}, 0xfffffff9, 0x2, 0x6, 0x6}}}}) 320.396714ms ago: executing program 1 (id=1382): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 320.05279ms ago: executing program 2 (id=1383): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)={0x80040, 0x158, 0x4}, 0x18) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 257.689492ms ago: executing program 2 (id=1384): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000400000002000000000000910000000000000000000061"], 0x0, 0x2c, 0x0, 0x7}, 0x20) mlockall(0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x1, 0x7ff, 0x4, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x1, 0x5000003a, r5, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000f40)={0x2020}, 0x2020) r7 = syz_open_dev$video4linux(&(0x7f0000000300), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x8, 0x7, 0x201b, 0x6, 0x10, 0x8, 0x1, 0x5}}) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 253.968742ms ago: executing program 0 (id=1386): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000fcf000/0x4000)=nil, 0x4000}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0xfffffffffffffea3, 0x7, r3, 0x0, 0x10000, 0x0, 0x4, 0x12fbab, 0x390b12}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f0000000000)=0x2000000) r6 = socket(0x22, 0x2, 0x2) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f0000000580)={0x0, 0x4, [0x10000, 0xb, 0xf, 0x10000, 0x6, 0xfffffffffffffffe]}) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000202, r8, &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000400)={0x0, 0xfb, 0x4a, 0x1, 0x5, "6aa5285174ae4d05c73c7cc29b52321a", "e563bd1467a551bda73d3c6d4cfd697476e61b2106910dfd4b7e18559fa3b95e25de212ed78f4269b658817836d2eac379081f8e35"}, 0x4a, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a0101000000000000000002000000091f010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) 97.142845ms ago: executing program 0 (id=1387): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) setresuid(0xee00, 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) creat(&(0x7f0000000500)='./file0\x00', 0x0) 90.448169ms ago: executing program 0 (id=1388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x2, 0x0, {0x37}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r10, r11, 0x3, 0x300, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) setsockopt(r6, 0x84, 0x82, &(0x7f00000000c0)='n\x00\x00\x00\x00\x00\x00\x00', 0x8) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r4, 0x5, 0x4000, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.288268ms ago: executing program 0 (id=1389): getrlimit(0x6, &(0x7f0000000240)) 137.828µs ago: executing program 0 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "dea050756fda26cde464ba6b86753019"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10008010) 0s ago: executing program 0 (id=1391): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x2, 0x8}) kernel console output (not intermixed with test programs): lmsg_type=0 sclass=netlink_audit_socket pid=7096 comm=syz.2.300 [ 70.228096][ T7098] __nla_validate_parse: 3 callbacks suppressed [ 70.228111][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 70.242517][ T6062] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 70.608082][ T7114] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 70.611919][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.305'. [ 70.616472][ T7114] dummy0: entered promiscuous mode [ 70.619799][ T7114] bridge0: port 3(dummy0) entered blocking state [ 70.622636][ T7114] bridge0: port 3(dummy0) entered disabled state [ 70.625497][ T7114] dummy0: entered allmulticast mode [ 70.629838][ T7114] bridge0: port 3(dummy0) entered blocking state [ 70.632754][ T7114] bridge0: port 3(dummy0) entered forwarding state [ 70.638828][ T7114] 8021q: VLANs not supported on ip6_vti0 [ 70.658785][ T7122] comedi comedi1: fl512: a I/O base address must be specified [ 70.661453][ T7122] comedi comedi1: fl512: a I/O base address must be specified [ 70.664540][ T7122] comedi comedi1: fl512: a I/O base address must be specified [ 70.734826][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 70.744859][ T10] usb 5-1: USB disconnect, device number 6 [ 70.751970][ T34] usb 6-1: USB disconnect, device number 5 [ 70.753907][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 70.818868][ T7147] Bluetooth: hci0: invalid len left 7, exp >= 131 [ 70.971902][ T7156] netlink: 200 bytes leftover after parsing attributes in process `syz.2.319'. [ 71.062707][ T7163] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.320'. [ 71.093923][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 71.149524][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.151584][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.243853][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 71.247980][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.252575][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 71.256447][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.261760][ T10] usb 5-1: config 0 descriptor?? [ 71.373822][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 71.390678][ T7171] netlink: 'syz.1.326': attribute type 1 has an invalid length. [ 71.412104][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 71.469631][ T7177] syz.2.329 uses obsolete (PF_INET,SOCK_PACKET) [ 71.503944][ T9] usb 8-1: device descriptor read/64, error -71 [ 71.512306][ T7177] kAFS: No cell specified [ 71.517440][ T7184] netlink: ct family unspecified [ 71.520429][ T7184] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.523458][ T7184] netlink: ct family unspecified [ 71.526767][ T7184] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.528106][ T7184] netlink: ct family unspecified [ 71.531903][ T7184] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.532020][ T7184] netlink: ct family unspecified [ 71.532030][ T7184] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.532128][ T7184] netlink: ct family unspecified [ 71.532138][ T7184] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.556452][ T7187] program syz.2.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.667567][ T7196] syz_tun: entered promiscuous mode [ 71.670084][ T7196] macvtap1: entered promiscuous mode [ 71.675319][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 71.677259][ T7196] syz_tun: left promiscuous mode [ 71.678922][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 71.683043][ T10] usb 5-1: USB disconnect, device number 7 [ 71.743823][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 71.778369][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 71.778381][ T40] audit: type=1400 audit(1756788191.265:494): avc: denied { bind } for pid=7201 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.813505][ T40] audit: type=1400 audit(1756788191.295:495): avc: denied { accept } for pid=7203 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.873865][ T9] usb 8-1: device descriptor read/64, error -71 [ 71.897954][ T7210] dlm: Unknown command passed to DLM device : 255 [ 71.897954][ T7210] [ 71.983625][ T7202] kvm: kvm [7201]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 71.986775][ T9] usb usb8-port1: attempt power cycle [ 71.989879][ T7202] kvm: kvm [7201]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 72.015165][ T7202] kvm: kvm [7201]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 72.040375][ T7202] kvm: kvm [7201]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 72.044763][ T7202] kvm: kvm [7201]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 72.116471][ T40] audit: type=1400 audit(1756788191.605:496): avc: denied { setopt } for pid=7215 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.122777][ T40] audit: type=1400 audit(1756788191.605:497): avc: denied { read } for pid=7215 comm="syz.2.342" path="socket:[14168]" dev="sockfs" ino=14168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.234756][ T40] audit: type=1400 audit(1756788191.725:498): avc: denied { bind } for pid=7219 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.234879][ T7220] Unsupported ieee802154 address type: 0 [ 72.333949][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 72.362950][ T9] usb 8-1: device descriptor read/8, error -71 [ 72.496292][ T7243] netlink: 'syz.2.351': attribute type 11 has an invalid length. [ 72.499353][ T7243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.351'. [ 72.501786][ T40] audit: type=1400 audit(1756788191.985:499): avc: denied { execute_no_trans } for pid=7242 comm="syz.0.352" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="hugetlbfs" ino=15847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 72.538329][ T7246] netlink: 256 bytes leftover after parsing attributes in process `syz.1.350'. [ 72.607502][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 72.624777][ T9] usb 8-1: device descriptor read/8, error -71 [ 72.734329][ T9] usb usb8-port1: unable to enumerate USB device [ 72.743905][ T6062] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 72.873864][ T6062] usb 5-1: device descriptor read/64, error -71 [ 73.113886][ T6062] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 73.243881][ T6062] usb 5-1: device descriptor read/64, error -71 [ 73.354134][ T6062] usb usb5-port1: attempt power cycle [ 73.386095][ T7255] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 73.420122][ T7257] syz_tun: entered promiscuous mode [ 73.422387][ T7257] macvtap1: entered promiscuous mode [ 73.427777][ T7257] syz_tun: left promiscuous mode [ 73.594160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.597341][ T40] audit: type=1400 audit(1756788193.085:500): avc: denied { read } for pid=7260 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.647500][ T40] audit: type=1400 audit(1756788193.135:501): avc: denied { ioctl } for pid=7260 comm="syz.2.358" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.704206][ T6062] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 73.724942][ T6062] usb 5-1: device descriptor read/8, error -71 [ 73.963860][ T6062] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 73.985534][ T6062] usb 5-1: device descriptor read/8, error -71 [ 74.095076][ T6062] usb usb5-port1: unable to enumerate USB device [ 74.169046][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 74.176938][ T7282] IPv6: sit1: Disabled Multicast RS [ 74.179986][ T7282] sit1: entered allmulticast mode [ 74.214239][ T40] audit: type=1400 audit(1756788193.705:502): avc: denied { read write } for pid=7283 comm="syz.3.365" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.217316][ T68] hid (null): global environment stack underflow [ 74.222211][ T40] audit: type=1400 audit(1756788193.705:503): avc: denied { open } for pid=7283 comm="syz.3.365" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.228922][ T68] hid-generic 0CB4:0046:0005.0004: reserved main item tag 0xe [ 74.236126][ T68] hid-generic 0CB4:0046:0005.0004: global environment stack underflow [ 74.239427][ T68] hid-generic 0CB4:0046:0005.0004: item 0 4 1 11 parsing failed [ 74.242859][ T68] hid-generic 0CB4:0046:0005.0004: probe with driver hid-generic failed with error -22 [ 74.462632][ T7298] /dev/sg0: Can't lookup blockdev [ 74.465576][ T7298] /dev/sg0: Can't lookup blockdev [ 74.657208][ T7317] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 74.659276][ T7317] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 74.663035][ T7317] vhci_hcd vhci_hcd.0: Device attached [ 74.671498][ T7320] vhci_hcd: connection closed [ 74.672248][ T87] vhci_hcd: stop threads [ 74.676838][ T87] vhci_hcd: release socket [ 74.678292][ T87] vhci_hcd: disconnect device [ 74.785670][ T7325] input: syz0 as /devices/virtual/input/input9 [ 75.272497][ T7339] __nla_validate_parse: 3 callbacks suppressed [ 75.272509][ T7339] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.381'. [ 75.628845][ T7347] sd 0:0:0:0: PR command failed: 1026 [ 75.630664][ T7347] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 75.632804][ T7347] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 75.931771][ T5384] pmem0: [POWERTEC] [ 76.090860][ T7366] cgroup: name respecified [ 76.186892][ T7377] bridge0: port 4(vxlan0) entered blocking state [ 76.190664][ T7377] bridge0: port 4(vxlan0) entered disabled state [ 76.193047][ T7377] vxlan0: entered allmulticast mode [ 76.196457][ T7377] vxlan0: entered promiscuous mode [ 76.251383][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 76.305786][ T7386] tmpfs: Invalid gid '0x00000000ffffffff' [ 76.308697][ T7387] tmpfs: Invalid gid '0x00000000ffffffff' [ 76.398817][ T7400] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 76.402518][ T7400] overlayfs: missing 'lowerdir' [ 76.440973][ T7405] syz.3.402 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.806125][ T5976] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 76.814877][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 76.814891][ T40] audit: type=1400 audit(1756788196.305:520): avc: denied { getopt } for pid=7423 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 76.887304][ T7428] could not allocate digest TFM handle blake2s-128-arm [ 76.901503][ T40] audit: type=1400 audit(1756788196.385:521): avc: denied { create } for pid=7431 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.918453][ T7434] usb usb8: usbfs: process 7434 (syz.3.413) did not claim interface 0 before use [ 76.930373][ T7436] input: syz0 as /devices/virtual/input/input10 [ 76.973678][ T7440] netlink: 'syz.1.416': attribute type 5 has an invalid length. [ 76.979270][ T7440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=7440 comm=syz.1.416 [ 76.987680][ T7440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7440 comm=syz.1.416 [ 77.077168][ T40] audit: type=1400 audit(1756788196.565:522): avc: denied { mounton } for pid=7453 comm="syz.3.420" path="/114/bus" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 77.078186][ T7454] Mount JFS Failure: -22 [ 77.097982][ T7462] net_ratelimit: 120 callbacks suppressed [ 77.097994][ T7462] openvswitch: netlink: Unknown key attributes 2 [ 77.129541][ T7467] netlink: 360 bytes leftover after parsing attributes in process `syz.2.424'. [ 77.137145][ T7467] netlink: 360 bytes leftover after parsing attributes in process `syz.2.424'. [ 77.205502][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 77.256085][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.432'. [ 77.258946][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 77.478640][ T7501] netlink: 830 bytes leftover after parsing attributes in process `syz.2.433'. [ 77.596762][ T40] audit: type=1400 audit(1756788197.085:523): avc: denied { setattr } for pid=7507 comm="syz.1.435" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.739105][ T5976] block nbd1: Receive control failed (result -32) [ 77.801294][ T40] audit: type=1800 audit(1756788197.285:524): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.442" name="bus" dev="tmpfs" ino=486 res=0 errno=0 [ 77.811315][ T7528] overlay: Unknown parameter 'measure' [ 77.969672][ T7540] netlink: 76 bytes leftover after parsing attributes in process `syz.0.447'. [ 78.038692][ T53] cfg80211: failed to load regulatory.db [ 78.127702][ T40] audit: type=1400 audit(1756788197.615:525): avc: denied { connect } for pid=7549 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.132019][ T7550] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 78.135828][ T40] audit: type=1400 audit(1756788197.615:526): avc: denied { connect } for pid=7549 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.135920][ T40] audit: type=1400 audit(1756788197.615:527): avc: denied { getopt } for pid=7549 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.152849][ T7550] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 78.186907][ T40] audit: type=1400 audit(1756788197.675:528): avc: denied { create } for pid=7555 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.195138][ T40] audit: type=1400 audit(1756788197.685:529): avc: denied { bind } for pid=7555 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.197380][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 78.304665][ T6062] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 78.412324][ T7571] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 78.414476][ T7571] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.418376][ T7571] vhci_hcd vhci_hcd.0: Device attached [ 78.422247][ T7572] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 78.425387][ T216] vhci_hcd: stop threads [ 78.426905][ T216] vhci_hcd: release socket [ 78.428327][ T216] vhci_hcd: disconnect device [ 78.468540][ T7571] kvm: pic: non byte write [ 78.475591][ T6062] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.479402][ T6062] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.486802][ T6062] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.489553][ T6062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.495813][ T7543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.501188][ T6062] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.695069][ T7596] netlink: 'syz.3.465': attribute type 12 has an invalid length. [ 78.709209][ T6062] usb 5-1: USB disconnect, device number 12 [ 78.977664][ T7598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.564197][ T7653] xt_limit: Overflow, try lower: 271964/0 [ 79.573033][ T7657] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.576532][ T7657] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 79.579359][ T7657] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.582375][ T7657] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 79.585847][ T7659] SELinux: truncated policydb string identifier [ 79.588533][ T7659] SELinux: failed to load policy [ 79.712713][ T5976] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 79.965153][ T7695] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 79.967543][ T7695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.019175][ T7701] 9pnet_virtio: no channels available for device syz [ 80.021468][ T7701] 9pnet_virtio: no channels available for device syz [ 80.023646][ T7701] 9pnet_virtio: no channels available for device syz [ 80.026313][ T7701] 9pnet_virtio: no channels available for device syz [ 80.028572][ T7701] 9pnet_virtio: no channels available for device syz [ 80.030786][ T7701] 9pnet_virtio: no channels available for device syz [ 80.033406][ T7701] 9pnet_virtio: no channels available for device syz [ 80.035692][ T7701] 9pnet_virtio: no channels available for device syz [ 80.038287][ T7701] 9pnet_virtio: no channels available for device syz [ 80.040516][ T7701] 9pnet_virtio: no channels available for device syz [ 80.042721][ T7701] 9pnet_virtio: no channels available for device syz [ 80.045542][ T7701] 9pnet_virtio: no channels available for device syz [ 80.047782][ T7701] 9pnet_virtio: no channels available for device syz [ 80.049992][ T7701] 9pnet_virtio: no channels available for device syz [ 80.052201][ T7701] 9pnet_virtio: no channels available for device syz [ 80.054635][ T7701] 9pnet_virtio: no channels available for device syz [ 80.056862][ T7701] 9pnet_virtio: no channels available for device syz [ 80.059073][ T7701] 9pnet_virtio: no channels available for device syz [ 80.061284][ T7701] 9pnet_virtio: no channels available for device syz [ 80.063525][ T7701] 9pnet_virtio: no channels available for device syz [ 80.066103][ T7701] 9pnet_virtio: no channels available for device syz [ 80.068901][ T7701] 9pnet_virtio: no channels available for device syz [ 80.071842][ T7701] 9pnet_virtio: no channels available for device syz [ 80.076852][ T7701] 9pnet_virtio: no channels available for device syz [ 80.079634][ T7701] 9pnet_virtio: no channels available for device syz [ 80.082526][ T7701] 9pnet_virtio: no channels available for device syz [ 80.085457][ T7701] 9pnet_virtio: no channels available for device syz [ 80.088256][ T7701] 9pnet_virtio: no channels available for device syz [ 80.091027][ T7701] 9pnet_virtio: no channels available for device syz [ 80.093984][ T7701] 9pnet_virtio: no channels available for device syz [ 80.096226][ T7701] 9pnet_virtio: no channels available for device syz [ 80.098462][ T7701] 9pnet_virtio: no channels available for device syz [ 80.100945][ T7701] 9pnet_virtio: no channels available for device syz [ 80.103203][ T7701] 9pnet_virtio: no channels available for device syz [ 80.105773][ T7701] 9pnet_virtio: no channels available for device syz [ 80.108014][ T7701] 9pnet_virtio: no channels available for device syz [ 80.110211][ T7701] 9pnet_virtio: no channels available for device syz [ 80.112449][ T7701] 9pnet_virtio: no channels available for device syz [ 80.114922][ T7701] 9pnet_virtio: no channels available for device syz [ 80.117185][ T7701] 9pnet_virtio: no channels available for device syz [ 80.119396][ T7701] 9pnet_virtio: no channels available for device syz [ 80.121653][ T7701] 9pnet_virtio: no channels available for device syz [ 80.123945][ T7701] 9pnet_virtio: no channels available for device syz [ 80.126172][ T7701] 9pnet_virtio: no channels available for device syz [ 80.128436][ T7701] 9pnet_virtio: no channels available for device syz [ 80.130673][ T7701] 9pnet_virtio: no channels available for device syz [ 80.132941][ T7701] 9pnet_virtio: no channels available for device syz [ 80.135821][ T7701] 9pnet_virtio: no channels available for device syz [ 80.138184][ T7701] 9pnet_virtio: no channels available for device syz [ 80.140539][ T7701] 9pnet_virtio: no channels available for device syz [ 80.143526][ T7701] 9pnet_virtio: no channels available for device syz [ 80.146625][ T7701] 9pnet_virtio: no channels available for device syz [ 80.148954][ T7701] 9pnet_virtio: no channels available for device syz [ 80.151297][ T7701] 9pnet_virtio: no channels available for device syz [ 80.153582][ T7701] 9pnet_virtio: no channels available for device syz [ 80.155900][ T7701] 9pnet_virtio: no channels available for device syz [ 80.158224][ T7701] 9pnet_virtio: no channels available for device syz [ 80.160546][ T7701] 9pnet_virtio: no channels available for device syz [ 80.163367][ T7701] 9pnet_virtio: no channels available for device syz [ 80.165788][ T7701] 9pnet_virtio: no channels available for device syz [ 80.168571][ T7701] 9pnet_virtio: no channels available for device syz [ 80.170870][ T7701] 9pnet_virtio: no channels available for device syz [ 80.203890][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 80.274672][ T7705] overlayfs: missing 'lowerdir' [ 80.281545][ T7707] netlink: 'syz.0.500': attribute type 9 has an invalid length. [ 80.375893][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.380614][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8346, setting to 1024 [ 80.382859][ T7715] trusted_key: encrypted_key: insufficient parameters specified [ 80.385538][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.391125][ T7715] 9pnet_fd: Insufficient options for proto=fd [ 80.393909][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.400132][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.405691][ T34] usb 6-1: config 0 descriptor?? [ 80.441373][ T7717] program syz.0.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.481807][ T7721] __nla_validate_parse: 7 callbacks suppressed [ 80.481818][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 80.603017][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 80.656378][ T7757] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.517'. [ 80.656766][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 80.661312][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 80.726149][ T7757] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 80.757316][ T7759] openvswitch: netlink: Message has 24 unknown bytes. [ 80.759486][ T7759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.762939][ T7764] autofs: Unknown parameter '£Ÿn´dRi5¬Îáˆ[@8×Î 9I“' [ 80.816685][ T34] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 80.862959][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 80.886465][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.526'. [ 80.985168][ T7795] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 80.987624][ T7795] netlink: 224 bytes leftover after parsing attributes in process `syz.0.529'. [ 80.991746][ T7795] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 80.996279][ T7795] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 81.074449][ T7803] input: syz0 as /devices/virtual/input/input12 [ 81.090039][ T7804] input: syz0 as /devices/virtual/input/input13 [ 81.104873][ T5978] udevd[5978]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 81.572376][ T7839] binder: BC_ACQUIRE_RESULT not supported [ 81.575347][ C2] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 81.575757][ T7820] /dev/sr0: Can't open blockdev [ 81.579302][ C2] sr 2:0:0:0: [sr0] tag#11 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 81.581283][ T7839] binder: 7835:7839 ioctl c0306201 2000000003c0 returned -22 [ 81.617744][ T7843] netlink: 'syz.0.542': attribute type 30 has an invalid length. [ 81.628365][ T7842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.541'. [ 81.638463][ T34] usb 6-1: USB disconnect, device number 6 [ 81.694105][ T68] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.793243][ T7849] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3507366080 (224471429120 ns) > initial count (25249277504 ns). Using initial count to start timer. [ 81.856599][ T68] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.861176][ T68] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.865631][ T68] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.869423][ T68] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.875166][ T7828] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.879060][ T68] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.081358][ T34] usb 7-1: USB disconnect, device number 3 [ 82.111981][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 82.111992][ T40] audit: type=1400 audit(1756788457.597:548): avc: denied { create } for pid=7852 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.120014][ T40] audit: type=1400 audit(1756788457.607:549): avc: denied { setopt } for pid=7852 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.177136][ T7859] program syz.1.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.177285][ T7857] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.182969][ T7857] overlayfs: failed to set xattr on upper [ 82.185351][ T7857] overlayfs: ...falling back to redirect_dir=nofollow. [ 82.188078][ T7857] overlayfs: ...falling back to index=off. [ 82.190401][ T7857] overlayfs: ...falling back to uuid=null. [ 82.210871][ T7857] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.213329][ T7857] overlayfs: failed to set xattr on upper [ 82.216319][ T7857] overlayfs: ...falling back to redirect_dir=nofollow. [ 82.219472][ T7857] overlayfs: ...falling back to index=off. [ 82.221487][ T7857] overlayfs: ...falling back to uuid=null. [ 82.223464][ T7857] overlayfs: conflicting lowerdir path [ 82.250298][ T40] audit: type=1400 audit(1756788457.737:550): avc: denied { listen } for pid=7863 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.261345][ T40] audit: type=1400 audit(1756788457.737:551): avc: denied { accept } for pid=7863 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.270129][ T7866] qnx6: unable to set blocksize [ 82.309981][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 82.312877][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.553'. [ 82.322141][ T40] audit: type=1400 audit(1756788457.807:552): avc: denied { write } for pid=7870 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.326845][ T7872] trusted_key: encrypted_key: insufficient parameters specified [ 82.342011][ T40] audit: type=1400 audit(1756788457.807:553): avc: denied { accept } for pid=7870 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.352818][ T40] audit: type=1400 audit(1756788457.807:554): avc: denied { read } for pid=7870 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.360660][ T40] audit: type=1400 audit(1756788457.827:555): avc: denied { bind } for pid=7870 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.455689][ T7881] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 82.485337][ T7884] ipvlan2: entered promiscuous mode [ 82.580602][ T7890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7890 comm=syz.1.560 [ 82.606022][ T53] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 82.647705][ T40] audit: type=1400 audit(1756788458.137:556): avc: denied { write } for pid=7893 comm="syz.1.562" name="file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.654806][ T40] audit: type=1400 audit(1756788458.137:557): avc: denied { open } for pid=7893 comm="syz.1.562" path="/123/file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.723633][ T7899] netdevsim netdevsim1: Direct firmware load for . [ 82.723633][ T7899] failed with error -2 [ 82.727899][ T7899] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 82.727899][ T7899] [ 82.756868][ T53] usb 7-1: config 0 has an invalid interface number: 221 but max is 1 [ 82.760331][ T53] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.764848][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 82.768512][ T53] usb 7-1: config 0 has no interface number 0 [ 82.771090][ T53] usb 7-1: too many endpoints for config 0 interface 221 altsetting 15: 84, using maximum allowed: 30 [ 82.775626][ T53] usb 7-1: config 0 interface 221 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 82.779723][ T53] usb 7-1: config 0 interface 221 has no altsetting 0 [ 82.781843][ T53] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 82.784975][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.788829][ T53] usb 7-1: config 0 descriptor?? [ 82.992771][ T53] usb 7-1: string descriptor 0 read error: -71 [ 82.997449][ T53] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 82.999780][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 83.005367][ T53] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 83.008433][ T53] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 83.011043][ T53] usb 7-1: media controller created [ 83.014914][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.020956][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 83.022926][ T53] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 83.027768][ T53] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input14 [ 83.035553][ T53] dvb-usb: schedule remote query interval to 150 msecs. [ 83.037816][ T53] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 83.041270][ T53] usb 7-1: USB disconnect, device number 4 [ 83.052649][ T53] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 83.227522][ T7903] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 83.338888][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.342883][ T7908] batadv_slave_0: entered promiscuous mode [ 83.420118][ T7912] tipc: Trying to set illegal importance in message [ 83.464078][ T7912] Invalid logical block size (524545) [ 83.657687][ T7952] netlink: 'syz.2.581': attribute type 2 has an invalid length. [ 83.662520][ T7952] Failed to initialize the IGMP autojoin socket (err -2) [ 83.667988][ T7949] Failed to initialize the IGMP autojoin socket (err -2) [ 83.866450][ T7981] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 83.868510][ T7981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.874984][ T7981] vhci_hcd vhci_hcd.0: Device attached [ 83.886812][ T7983] vhci_hcd: connection closed [ 83.887734][ T1235] vhci_hcd: stop threads [ 83.890718][ T1235] vhci_hcd: release socket [ 83.892216][ T1235] vhci_hcd: disconnect device [ 83.963855][ T53] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.115061][ T53] usb 7-1: config 0 has no interfaces? [ 84.119144][ T53] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 84.122756][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.126450][ T53] usb 7-1: Product: syz [ 84.128427][ T53] usb 7-1: Manufacturer: syz [ 84.130261][ T53] usb 7-1: SerialNumber: syz [ 84.133310][ T53] usb 7-1: config 0 descriptor?? [ 84.162106][ T8018] tmpfs: Cannot change global quota limit on remount [ 84.164716][ T8019] mkiss: ax0: crc mode is auto. [ 84.246961][ T5976] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 84.322729][ T8023] cgroup: noprefix used incorrectly [ 84.336849][ T7952] veth0_vlan: left promiscuous mode [ 84.339076][ T7952] veth0_vlan: entered promiscuous mode [ 84.349170][ T53] usb 7-1: USB disconnect, device number 5 [ 84.371086][ T8025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.374433][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 84.402959][ T8028] block nbd1: Dead connection, failed to find a fallback [ 84.405589][ T8028] block nbd1: shutting down sockets [ 84.407511][ T8028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.410602][ T8028] (syz.1.605,8028,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 84.413074][ T8028] (syz.1.605,8028,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 84.415403][ T8028] (syz.1.605,8028,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 84.418066][ T8028] (syz.1.605,8028,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 84.535271][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.538168][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 84.541315][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.544228][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 84.547573][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 84.553194][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.556131][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.558607][ T10] usb 5-1: Product: syz [ 84.559918][ T10] usb 5-1: Manufacturer: syz [ 84.569804][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 84.571463][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 84.574909][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 84.576800][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 84.599091][ T8037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.826490][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 84.827497][ T29] usb 5-1: USB disconnect, device number 13 [ 84.827696][ T8039] netlink: 'syz.0.600': attribute type 2 has an invalid length. [ 84.828900][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 84.835723][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 84.879035][ T8041] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.915825][ T8041] tipc: Can't bind to reserved service type 1 [ 84.963905][ T8047] netlink: 'syz.3.611': attribute type 8 has an invalid length. [ 85.018130][ T8051] Failed to initialize the IGMP autojoin socket (err -2) [ 85.098904][ T8062] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 85.101320][ T8062] netlink: 'syz.3.617': attribute type 101 has an invalid length. [ 85.141834][ T8070] program syz.2.620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.141849][ T8071] program syz.2.620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.186541][ T8067] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.255475][ T8067] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.303549][ T8083] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.306475][ T8083] overlayfs: failed to set xattr on upper [ 85.308311][ T8083] overlayfs: ...falling back to redirect_dir=nofollow. [ 85.310438][ T8083] overlayfs: ...falling back to index=off. [ 85.312291][ T8083] overlayfs: ...falling back to uuid=null. [ 85.314447][ T8083] overlayfs: ...falling back to xino=off. [ 85.346134][ T8067] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.414603][ T8067] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.521711][ T1243] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.529998][ T1243] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.539172][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.547552][ T1243] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.589465][ T8096] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 85.597010][ T8096] netlink: 'syz.3.630': attribute type 10 has an invalid length. [ 85.599493][ T8096] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 85.659473][ T8102] FAT-fs (nullb0): bogus number of reserved sectors [ 85.661689][ T8102] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 85.686686][ T8104] mmap: syz.2.633 (8104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.792656][ T8122] Failed to initialize the IGMP autojoin socket (err -2) [ 85.914010][ T8126] (syz.2.638,8126,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 85.916948][ T8126] (syz.2.638,8126,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 85.945268][ T8131] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 86.020198][ T8135] netlink: 'syz.3.641': attribute type 11 has an invalid length. [ 86.235222][ T8172] loop6: detected capacity change from 0 to 63 [ 86.239632][ T8172] netlink: 'syz.2.647': attribute type 22 has an invalid length. [ 86.242604][ T8172] __nla_validate_parse: 10 callbacks suppressed [ 86.242615][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 86.255910][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.258947][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.261669][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.265008][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.267812][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.270505][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.273264][ T5978] Buffer I/O error on dev loop6, logical block 3, async page read [ 86.458557][ T8205] Failed to initialize the IGMP autojoin socket (err -2) [ 86.829197][ T8219] Failed to initialize the IGMP autojoin socket (err -2) [ 87.025066][ T8229] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 87.028529][ T8229] ceph: Path missing in source [ 87.030381][ T8229] netlink: 248 bytes leftover after parsing attributes in process `syz.1.666'. [ 87.201734][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 87.227669][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 87.227680][ T40] audit: type=1400 audit(1756788462.717:592): avc: denied { read } for pid=8254 comm="syz.0.673" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.237664][ T40] audit: type=1400 audit(1756788462.717:593): avc: denied { open } for pid=8254 comm="syz.0.673" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.242689][ T8256] kAFS: No cell specified [ 87.245246][ T40] audit: type=1400 audit(1756788462.727:594): avc: denied { write } for pid=8257 comm="syz.1.674" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 87.383963][ T5986] Bluetooth: hci2: command 0x040f tx timeout [ 87.603955][ T6062] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.765082][ T6062] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.768527][ T6062] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 87.771894][ T6062] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 87.775046][ T6062] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.777847][ T6062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.782166][ T8273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.786990][ T6062] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.953839][ T5976] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 87.953857][ T5986] Bluetooth: hci0: command 0x040f tx timeout [ 87.990451][ T6062] usb 6-1: USB disconnect, device number 7 [ 88.032233][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'. [ 88.036686][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'. [ 88.043422][ T40] audit: type=1400 audit(1756788463.527:595): avc: denied { watch } for pid=8283 comm="syz.2.681" path="/199/bus" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.055845][ T40] audit: type=1400 audit(1756788463.527:596): avc: denied { watch_sb watch_reads } for pid=8283 comm="syz.2.681" path="/199/bus" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.063419][ T40] audit: type=1400 audit(1756788463.537:597): avc: denied { write } for pid=8283 comm="syz.2.681" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.109109][ T40] audit: type=1400 audit(1756788463.597:598): avc: denied { map } for pid=8289 comm="syz.2.684" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.109611][ T8290] netlink: 666 bytes leftover after parsing attributes in process `syz.2.684'. [ 88.116906][ T40] audit: type=1400 audit(1756788463.597:599): avc: denied { execute } for pid=8289 comm="syz.2.684" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.242200][ T8297] tmpfs: Unknown parameter '' [ 88.300988][ T40] audit: type=1400 audit(1756788463.787:600): avc: denied { associate } for pid=8298 comm="syz.2.686" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.339347][ T40] audit: type=1400 audit(1756788463.827:601): avc: denied { lock } for pid=8300 comm="syz.2.687" path="socket:[23576]" dev="sockfs" ino=23576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 88.368386][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 88.383562][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.689'. [ 88.386868][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 88.450993][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 88.620098][ T8333] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 89.741290][ T8374] netlink: 'syz.0.712': attribute type 29 has an invalid length. [ 89.745218][ T8374] netlink: 'syz.0.712': attribute type 29 has an invalid length. [ 89.756137][ T8374] uprobe: syz.0.712:8374 failed to unregister, leaking uprobe [ 89.787983][ T8378] tmpfs: Invalid gid '0x00000000ffffffff' [ 89.917427][ T8384] netlink: 'syz.3.716': attribute type 10 has an invalid length. [ 89.921816][ T8384] batman_adv: batadv0: Removing interface: team0 [ 90.112916][ T8407] Failed to initialize the IGMP autojoin socket (err -2) [ 90.172887][ T8408] Failed to initialize the IGMP autojoin socket (err -2) [ 90.471553][ T8426] team0: Device gtp0 is of different type [ 90.776303][ T8389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.779052][ T8389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.781664][ T8389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.818165][ T8432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8432 comm=syz.1.729 [ 90.819239][ T8436] Failed to initialize the IGMP autojoin socket (err -2) [ 90.897189][ T8438] nvme_fabrics: missing parameter 'transport=%s' [ 90.899409][ T8438] nvme_fabrics: missing parameter 'nqn=%s' [ 90.901372][ T8438] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 90.926598][ T8438] nvme_fabrics: missing parameter 'transport=%s' [ 90.929113][ T8438] nvme_fabrics: missing parameter 'nqn=%s' [ 90.950428][ T8454] kernel profiling enabled (shift: 6) [ 90.958082][ T8456] can0: slcan on ttyS3. [ 91.033820][ T61] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 91.036585][ T8463] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 91.163257][ T8476] overlay: filesystem on ./bus is read-only [ 91.187006][ T61] usb 7-1: not running at top speed; connect to a high speed hub [ 91.190046][ T61] usb 7-1: config 1 interface 0 altsetting 220 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.195847][ T61] usb 7-1: config 1 interface 0 has no altsetting 0 [ 91.202892][ T61] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 91.205990][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 91.210356][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.212846][ T61] usb 7-1: Product: éœá¨ˆë¤¦àº¾é·¬ã¬ªá© à½á¦äŽ‡èŒ¨í”£í˜»í˜â€¦ï›»ì‚‚í™å â¼¢ë”„å¢žïŠ„ì«¡áª•ê½ªç·•ã‡²ì´©è¯¹ä•ƒã¤§ê¡žå“˜ä‰¶ê™ [ 91.217358][ T61] usb 7-1: Manufacturer: ⇒੣➢қ黩⇉촒í唖枕뾾ꋄҦ춠奯᠖壥噚犷ïºä¨´ì´—뇚䆡谿쾰ì¨ïž¦å…낇ㅰé£á˜°æ•…ãµ¼ê¡«Ô¢â«æ¦™ë±²é¶ºç£–䤡ᯃ月é±è‰£áµ¯ã¶¤é…¢ê£´êœ‘請旒ꦌ텘뵴⺧媡䊔屮⼸ਰᄀ뫟슓븩ᦊ炽쵚焞Í펩緼䟱빬黂䨼떿ﴃ芈ἲáé¿äï»ê´œä‹¾á§ë‡°é”›ä‰¥æ¢ä«µè‰›ã«Ž [ 91.227174][ T61] usb 7-1: SerialNumber: ï“¿ [ 91.374591][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 91.377913][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.380263][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 91.383207][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.387824][ T29] usb 5-1: config 0 descriptor?? [ 91.452693][ T61] usb 7-1: USB disconnect, device number 6 [ 91.648468][ T8493] usb usb7: usbfs: process 8493 (syz.0.735) did not claim interface 0 before use [ 91.684272][ T8456] can0 (unregistered): slcan off ttyS3. [ 91.703870][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 91.706330][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 91.713177][ T29] usb 5-1: USB disconnect, device number 14 [ 92.224330][ T8500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49168 sclass=netlink_route_socket pid=8500 comm=syz.0.744 [ 92.310482][ T8505] SELinux: ebitmap: empty map [ 92.317003][ T8505] SELinux: failed to load policy [ 92.331195][ T8488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.333991][ T8488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.336238][ T8488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.492253][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 92.492269][ T40] audit: type=1400 audit(1756788467.977:619): avc: denied { setattr } for pid=8531 comm="syz.1.755" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.503830][ T8485] comedi comedi0: reset error (fatal) [ 92.601539][ T8549] __nla_validate_parse: 2 callbacks suppressed [ 92.601550][ T8549] netlink: 44 bytes leftover after parsing attributes in process `syz.1.757'. [ 92.755646][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 92.770407][ T8555] geneve2: entered promiscuous mode [ 92.772452][ T8555] geneve2: entered allmulticast mode [ 92.791409][ T40] audit: type=1400 audit(1756788468.277:620): avc: denied { map } for pid=8565 comm="syz.3.763" path="socket:[25090]" dev="sockfs" ino=25090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.799570][ T40] audit: type=1400 audit(1756788468.277:621): avc: denied { accept } for pid=8565 comm="syz.3.763" path="socket:[25090]" dev="sockfs" ino=25090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.503817][ T8487] comedi comedi0: reset error (fatal) [ 93.635409][ T5976] Bluetooth: hci0: command 0x040f tx timeout [ 93.691911][ T8574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.696070][ T8581] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 93.731582][ T40] audit: type=1400 audit(1756788469.217:622): avc: denied { read write } for pid=8603 comm="syz.1.772" name="file0" dev="9p" ino=35913936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.739531][ T40] audit: type=1400 audit(1756788469.217:623): avc: denied { ioctl open } for pid=8603 comm="syz.1.772" path="/169/file0/file0" dev="9p" ino=35913936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.902719][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'. [ 93.937776][ T8625] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 94.130494][ T8645] netlink: 'syz.2.784': attribute type 5 has an invalid length. [ 94.141132][ T40] audit: type=1400 audit(1756788469.627:624): avc: denied { ioctl } for pid=8646 comm="syz.3.785" path="socket:[23892]" dev="sockfs" ino=23892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.162387][ T8650] tmpfs: Bad value for 'mpol' [ 94.195698][ T40] audit: type=1400 audit(1756788469.687:625): avc: denied { map } for pid=8651 comm="syz.1.787" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.203858][ T40] audit: type=1400 audit(1756788469.687:626): avc: denied { create } for pid=8646 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.311544][ T40] audit: type=1400 audit(1756788469.797:627): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.343914][ T5976] Bluetooth: hci2: command 0x040f tx timeout [ 94.343987][ T5986] Bluetooth: hci1: command 0x040f tx timeout [ 95.078959][ T8695] rtc_cmos 00:05: Alarms can be up to one day in the future [ 95.169247][ T8698] random: crng reseeded on system resumption [ 95.174864][ T40] audit: type=1400 audit(1756788470.667:628): avc: denied { ioctl } for pid=8696 comm="syz.2.799" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.193423][ T8698] netlink: 'syz.2.799': attribute type 5 has an invalid length. [ 95.201252][ T8698] ip6erspan0: entered promiscuous mode [ 95.252439][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 95.258221][ T8698] geneve2: entered promiscuous mode [ 95.259901][ T8698] geneve2: entered allmulticast mode [ 95.469963][ T8705] netlink: 432 bytes leftover after parsing attributes in process `syz.3.801'. [ 95.904040][ T6062] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 96.073829][ T6062] usb 7-1: Using ep0 maxpacket: 8 [ 96.076926][ T6062] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.079417][ T6062] usb 7-1: config 0 has no interface number 0 [ 96.081619][ T6062] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.085125][ T6062] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.088601][ T6062] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.094233][ T6062] usb 7-1: config 0 descriptor?? [ 96.101705][ T6062] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 96.310185][ T839] usb 7-1: USB disconnect, device number 7 [ 97.002237][ T8761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8761 comm=syz.0.820 [ 97.006644][ T8761] netlink: 120 bytes leftover after parsing attributes in process `syz.0.820'. [ 97.011024][ T8761] SELinux: Context system_u:object_r:console_device_t:s0 is not valid (left unmapped). [ 97.023958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.026760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.029933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.044574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 97.067419][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.070686][ T8761] batadv_slave_0: entered promiscuous mode [ 97.173739][ T8787] overlay: Bad value for 'workdir' [ 97.177306][ T8787] input: syz0 as /devices/virtual/input/input16 [ 97.298891][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 97.324732][ T8806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8806 comm=syz.0.834 [ 97.329913][ T8806] /dev/sg0: Can't lookup blockdev [ 97.530754][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 97.530765][ T40] audit: type=1400 audit(1756788473.017:644): avc: denied { ioctl } for pid=8812 comm="syz.2.837" path="socket:[24005]" dev="sockfs" ino=24005 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.584391][ T40] audit: type=1400 audit(1756788473.077:645): avc: denied { write } for pid=8830 comm="syz.0.843" path="socket:[25598]" dev="sockfs" ino=25598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.599651][ T8833] overlayfs: empty lowerdir [ 97.604955][ T8831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.605418][ T839] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 97.655848][ T8838] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 97.658096][ T8838] [U] J"—e:ÀÆ" [ 97.666990][ T8831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.686347][ T8840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.756033][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.756355][ T8831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.759872][ T839] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.759889][ T839] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.775866][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 97.777678][ T839] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.782380][ T839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.785931][ T839] usb 6-1: Product: syz [ 97.787691][ T839] usb 6-1: Manufacturer: syz [ 97.789651][ T839] usb 6-1: SerialNumber: syz [ 97.796435][ T839] hub 6-1:1.0: bad descriptor, ignoring hub [ 97.798922][ T839] hub 6-1:1.0: probe with driver hub failed with error -5 [ 97.851631][ T8831] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.962802][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'. [ 97.996138][ T87] syzkaller0: tun_net_xmit 76 [ 97.998085][ T87] syzkaller0: tun_net_xmit 48 [ 97.999298][ T8853] syzkaller0: create flow: hash 1194357448 index 1 [ 98.000685][ T839] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 98.025114][ T10] syzkaller0: tun_net_xmit 76 [ 98.040252][ T8852] syzkaller0: delete flow: hash 1194357448 index 1 [ 98.204107][ T40] audit: type=1400 audit(1756788473.687:646): avc: denied { read write } for pid=8807 comm="syz.1.835" name="lp0" dev="devtmpfs" ino=3160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.213957][ T40] audit: type=1400 audit(1756788473.687:647): avc: denied { open } for pid=8807 comm="syz.1.835" path="/dev/usb/lp0" dev="devtmpfs" ino=3160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.876038][ T216] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.917083][ T1235] syzkaller0: tun_net_xmit 76 [ 98.918709][ T1235] syzkaller0: tun_net_xmit 48 [ 98.920354][ T216] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.932112][ T1235] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.935605][ T8872] netlink: 'syz.3.855': attribute type 7 has an invalid length. [ 98.941541][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.944347][ T8474] syzkaller0: tun_net_xmit 76 [ 99.131324][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 99.274830][ T8906] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 100.050025][ T8904] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 100.080186][ T40] audit: type=1400 audit(1756788475.567:648): avc: denied { map } for pid=8926 comm="syz.2.869" path="socket:[24205]" dev="sockfs" ino=24205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.093707][ T40] audit: type=1400 audit(1756788475.567:649): avc: denied { ioctl } for pid=8926 comm="syz.2.869" path="socket:[24205]" dev="sockfs" ino=24205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.103564][ T40] audit: type=1400 audit(1756788475.567:650): avc: denied { firmware_load } for pid=8925 comm="syz.0.868" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 100.122317][ T8927] syz.0.868 (8927) used greatest stack depth: 18792 bytes left [ 100.157481][ T40] audit: type=1400 audit(1756788475.647:651): avc: denied { write } for pid=8934 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.233299][ T40] audit: type=1400 audit(1756788475.717:652): avc: denied { ioctl } for pid=8946 comm="syz.3.874" path="socket:[24221]" dev="sockfs" ino=24221 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.470891][ T40] audit: type=1400 audit(1756788475.957:653): avc: denied { ioctl } for pid=8951 comm="syz.0.876" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 100.526615][ T8955] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 100.534887][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 101.125640][ T8962] tipc: Enabling of bearer rejected, failed to enable media [ 101.271792][ T8965] netlink: 'syz.0.880': attribute type 25 has an invalid length. [ 101.299874][ T8968] Failed to initialize the IGMP autojoin socket (err -2) [ 101.499692][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 101.516780][ T839] usb 6-1: USB disconnect, device number 8 [ 101.522208][ T839] usblp0: removed [ 101.820555][ T8980] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 101.826524][ T8980] SELinux: failed to load policy [ 101.882269][ T8990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 101.884426][ T8990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.889139][ T8990] vhci_hcd vhci_hcd.0: Device attached [ 101.909905][ T8991] vhci_hcd: connection closed [ 101.910083][ T12] vhci_hcd: stop threads [ 101.913075][ T12] vhci_hcd: release socket [ 101.920884][ T12] vhci_hcd: disconnect device [ 102.232559][ T9011] tracefs: Unknown parameter 'g€d' [ 102.237320][ T9015] Bluetooth: MGMT ver 1.23 [ 102.241256][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 102.275416][ T9017] program syz.0.895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.289952][ T9017] netlink: 80 bytes leftover after parsing attributes in process `syz.0.895'. [ 102.315333][ T9021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.893'. [ 102.318405][ T9012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.893'. [ 102.406028][ T9028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8225 sclass=netlink_route_socket pid=9028 comm=syz.0.897 [ 103.116640][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 103.116650][ T40] audit: type=1400 audit(1756788478.532:662): avc: denied { unmount } for pid=5977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 103.169055][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.902'. [ 103.172175][ T9044] netlink: 264 bytes leftover after parsing attributes in process `syz.3.902'. [ 103.175270][ T9044] netlink: 56 bytes leftover after parsing attributes in process `syz.3.902'. [ 103.241706][ T40] audit: type=1400 audit(1756788478.653:663): avc: denied { map } for pid=9050 comm="syz.3.904" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.452358][ T9060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.906'. [ 103.598705][ T9076] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 103.631071][ T40] audit: type=1400 audit(1756788479.018:664): avc: denied { watch_mount } for pid=9077 comm="syz.2.912" path="/244" dev="tmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.634597][ T9075] tmpfs: Bad value for 'mpol' [ 103.641545][ T9079] misc userio: Begin command sent, but we're already running [ 103.744893][ T40] audit: type=1400 audit(1756788479.121:665): avc: denied { view } for pid=9081 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.899428][ T5986] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 104.008765][ T40] audit: type=1400 audit(1756788479.373:666): avc: denied { ioctl } for pid=9095 comm="syz.2.917" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x2287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 104.013548][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 104.058060][ T9101] Failed to initialize the IGMP autojoin socket (err -2) [ 104.065646][ T9103] overlayfs: upper fs does not support file handles, falling back to index=off. [ 104.093926][ T9106] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 104.118164][ T40] audit: type=1400 audit(1756788479.476:667): avc: denied { read } for pid=9110 comm="syz.0.922" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.126042][ T40] audit: type=1400 audit(1756788479.476:668): avc: denied { open } for pid=9110 comm="syz.0.922" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.133727][ T40] audit: type=1400 audit(1756788479.476:669): avc: denied { ioctl } for pid=9110 comm="syz.0.922" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x4c04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.414155][ T839] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 104.575690][ T839] usb 7-1: config 178 has an invalid descriptor of length 0, skipping remainder of the config [ 104.579138][ T839] usb 7-1: config 178 has 0 interfaces, different from the descriptor's value: 1 [ 104.582234][ T839] usb 7-1: New USB device found, idVendor=256c, idProduct=007d, bcdDevice= 0.00 [ 104.585540][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.841997][ T40] audit: type=1400 audit(1756788480.150:670): avc: denied { read } for pid=9138 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.887479][ T9145] befs: (nullb0): No write support. Marking filesystem read-only [ 104.892258][ T9145] befs: (nullb0): invalid magic header [ 104.945133][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 104.950960][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'. [ 104.956722][ T9150] geneve2: entered promiscuous mode [ 105.077764][ T9152] loop7: detected capacity change from 0 to 16384 [ 105.168418][ T40] audit: type=1400 audit(1756788480.458:671): avc: denied { bind } for pid=9159 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.377902][ T9173] can0: slcan on ttyS3. [ 105.457089][ T9175] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 105.484625][ T9173] can0 (unregistered): slcan off ttyS3. [ 105.630316][ T9191] netlink: 84 bytes leftover after parsing attributes in process `syz.0.944'. [ 105.634998][ T9191] netlink: 84 bytes leftover after parsing attributes in process `syz.0.944'. [ 105.644327][ T9194] netlink: 100 bytes leftover after parsing attributes in process `syz.1.945'. [ 105.653196][ T9194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.732983][ T9203] netlink: 'syz.1.948': attribute type 2 has an invalid length. [ 105.736002][ T9203] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 105.777882][ T9206] input: syz0 as /devices/virtual/input/input18 [ 106.007625][ T9221] SELinux: security policydb version 18 (MLS) not backwards compatible [ 106.010314][ T9221] SELinux: failed to load policy [ 106.015915][ T9221] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.027975][ T9221] kvm: pic: non byte read [ 106.032324][ T9221] kvm: pic: level sensitive irq not supported [ 106.032712][ T9221] kvm: pic: non byte read [ 106.037989][ T9221] kvm: pic: level sensitive irq not supported [ 106.038275][ T9221] kvm: pic: non byte read [ 106.048901][ T9221] kvm: pic: level sensitive irq not supported [ 106.049207][ T9221] kvm: pic: non byte read [ 106.053919][ T9221] kvm: pic: level sensitive irq not supported [ 106.054250][ T9221] kvm: pic: non byte read [ 106.058892][ T9221] kvm: pic: level sensitive irq not supported [ 106.059158][ T9221] kvm: pic: non byte read [ 106.063846][ T9221] kvm: pic: level sensitive irq not supported [ 106.064137][ T9221] kvm: pic: non byte read [ 106.068547][ T9221] kvm: pic: level sensitive irq not supported [ 106.068833][ T9221] kvm: pic: non byte read [ 106.073238][ T9221] kvm: pic: level sensitive irq not supported [ 106.073528][ T9221] kvm: pic: non byte read [ 106.253111][ T9232] overlayfs: upper fs does not support file handles, falling back to index=off. [ 106.414767][ T9257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.428859][ T9257] bond0: (slave rose0): Enslaving as an active interface with an up link [ 106.443495][ T9262] tmpfs: Unknown parameter 'gˆGn4l?-Â7$[ZH¤fEgCÒ‹üâù_úƒ)!€P0x0000000000000000' [ 106.531553][ T9283] pim6reg1: entered allmulticast mode [ 106.682500][ T9310] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 106.820111][ T9322] Failed to initialize the IGMP autojoin socket (err -2) [ 106.903238][ T5986] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 107.281712][ T839] usb 7-1: string descriptor 0 read error: -71 [ 107.284724][ T839] usb 7-1: USB disconnect, device number 8 [ 107.313922][ T9377] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 107.337864][ T9381] qnx6: unable to set blocksize [ 107.351341][ T9384] syz.0.1003: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.358830][ T9384] CPU: 3 UID: 0 PID: 9384 Comm: syz.0.1003 Not tainted syzkaller #0 PREEMPT(full) [ 107.358846][ T9384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.358852][ T9384] Call Trace: [ 107.358856][ T9384] [ 107.358860][ T9384] dump_stack_lvl+0x16c/0x1f0 [ 107.358877][ T9384] warn_alloc+0x248/0x3a0 [ 107.358896][ T9384] ? __pfx_warn_alloc+0x10/0x10 [ 107.358906][ T9384] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.358925][ T9384] ? kasan_save_stack+0x42/0x60 [ 107.358936][ T9384] ? kasan_save_stack+0x33/0x60 [ 107.358946][ T9384] ? kasan_save_track+0x14/0x30 [ 107.358956][ T9384] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 107.358970][ T9384] ? __vb2_queue_alloc+0x8c9/0x1280 [ 107.358984][ T9384] ? vb2_core_create_bufs+0x559/0xab0 [ 107.358998][ T9384] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 107.359014][ T9384] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 107.359035][ T9384] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 107.359053][ T9384] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.359074][ T9384] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 107.359089][ T9384] vmalloc_user_noprof+0x9e/0xe0 [ 107.359104][ T9384] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 107.359120][ T9384] vb2_vmalloc_alloc+0x135/0x3f0 [ 107.359135][ T9384] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 107.359150][ T9384] __vb2_queue_alloc+0x8c9/0x1280 [ 107.359172][ T9384] vb2_core_create_bufs+0x559/0xab0 [ 107.359188][ T9384] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 107.359207][ T9384] ? __mutex_trylock_common+0xe9/0x250 [ 107.359227][ T9384] vb2_create_bufs+0x5e8/0x840 [ 107.359242][ T9384] ? __pfx_vb2_create_bufs+0x10/0x10 [ 107.359255][ T9384] ? v4l_sanitize_colorspace+0x213/0x400 [ 107.359271][ T9384] vb2_ioctl_create_bufs+0x244/0x3e0 [ 107.359284][ T9384] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.359299][ T9384] vidioc_create_bufs+0x7d/0xf0 [ 107.359312][ T9384] v4l_create_bufs+0x156/0x270 [ 107.359329][ T9384] __video_do_ioctl+0xb40/0xfc0 [ 107.359342][ T9384] ? __might_fault+0xe3/0x190 [ 107.359353][ T9384] ? __pfx___video_do_ioctl+0x10/0x10 [ 107.359369][ T9384] video_usercopy+0x4d0/0x1720 [ 107.359381][ T9384] ? __pfx___video_do_ioctl+0x10/0x10 [ 107.359392][ T9384] ? selinux_kernel_read_file+0x130/0x130 [ 107.359408][ T9384] ? __pfx_video_usercopy+0x10/0x10 [ 107.359429][ T9384] v4l2_ioctl+0x1bd/0x250 [ 107.359439][ T9384] ? __pfx_v4l2_ioctl+0x10/0x10 [ 107.359450][ T9384] __x64_sys_ioctl+0x18b/0x210 [ 107.359468][ T9384] do_syscall_64+0xcd/0x4c0 [ 107.359481][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.359492][ T9384] RIP: 0033:0x7f538e18ebe9 [ 107.359501][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.359512][ T9384] RSP: 002b:00007f538ef32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.359522][ T9384] RAX: ffffffffffffffda RBX: 00007f538e3c5fa0 RCX: 00007f538e18ebe9 [ 107.359529][ T9384] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000008 [ 107.359536][ T9384] RBP: 00007f538e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 107.359542][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.359548][ T9384] R13: 00007f538e3c6038 R14: 00007f538e3c5fa0 R15: 00007ffe4c862f08 [ 107.359562][ T9384] [ 107.359565][ T9384] Mem-Info: [ 107.486451][ T9384] active_anon:30199 inactive_anon:0 isolated_anon:0 [ 107.486451][ T9384] active_file:6323 inactive_file:50956 isolated_file:0 [ 107.486451][ T9384] unevictable:1768 dirty:84 writeback:0 [ 107.486451][ T9384] slab_reclaimable:7793 slab_unreclaimable:71678 [ 107.486451][ T9384] mapped:26525 shmem:22441 pagetables:1426 [ 107.486451][ T9384] sec_pagetables:307 bounce:0 [ 107.486451][ T9384] kernel_misc_reclaimable:0 [ 107.486451][ T9384] free:423353 free_pcp:21030 free_cma:0 [ 107.501590][ T9384] Node 0 active_anon:120796kB inactive_anon:0kB active_file:25292kB inactive_file:203532kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101948kB dirty:304kB writeback:0kB shmem:84988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13040kB pagetables:5488kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 107.514470][ T9384] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:32kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.524398][ T9384] Node 0 DMA free:7168kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.534631][ T9384] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 107.538025][ T9384] Node 0 DMA32 free:97728kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:115464kB inactive_anon:0kB active_file:25292kB inactive_file:203532kB unevictable:3536kB writepending:304kB present:2080628kB managed:1263472kB mlocked:0kB bounce:0kB free_pcp:69076kB local_pcp:24044kB free_cma:0kB [ 107.551450][ T9384] lowmem_reserve[]: 0 0 0 0 0 [ 107.553533][ T9384] Node 1 Normal free:1593972kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:3536kB writepending:32kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16708kB local_pcp:3680kB free_cma:0kB [ 107.566412][ T9384] lowmem_reserve[]: 0 0 0 0 0 [ 107.568674][ T9384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 7168kB [ 107.572465][ T9384] Node 0 DMA32: 1198*4kB (UME) 399*8kB (UME) 88*16kB (UME) 68*32kB (UME) 162*64kB (UME) 38*128kB (UME) 71*256kB (UME) 43*512kB (UME) 18*1024kB (M) 6*2048kB (UM) 0*4096kB = 97712kB [ 107.578041][ T9384] Node 1 Normal: 8*4kB (UE) 32*8kB (UE) 33*16kB (UME) 60*32kB (UME) 25*64kB (UE) 13*128kB (UME) 5*256kB (UE) 3*512kB (M) 0*1024kB 2*2048kB (UM) 386*4096kB (UM) = 1593968kB [ 107.585482][ T9384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.588523][ T9384] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.592935][ T9384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.595300][ T9398] kvm: pic: non byte read [ 107.595945][ T9384] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.600583][ T9384] 78073 total pagecache pages [ 107.602089][ T9384] 0 pages in swap cache [ 107.603405][ T9384] Free swap = 124996kB [ 107.604740][ T9384] Total swap = 124996kB [ 107.606069][ T9384] 1048443 pages RAM [ 107.607289][ T9384] 0 pages HighMem/MovableOnly [ 107.608761][ T9384] 283262 pages reserved [ 107.610120][ T9384] 0 pages cma reserved [ 107.636205][ T9402] usb usb9: usbfs: process 9402 (syz.3.1007) did not claim interface 0 before use [ 107.636382][ T9406] input: syz0 as /devices/virtual/input/input19 [ 107.639137][ T9401] usb usb9: usbfs: process 9401 (syz.3.1007) did not claim interface 0 before use [ 107.663938][ T5976] Bluetooth: hci0: command 0x040f tx timeout [ 107.807715][ T9428] autofs: Unknown parameter './file1' [ 107.843303][ T9432] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 107.846091][ T9432] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 108.074583][ T9452] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.127815][ T9454] program syz.3.1024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.177278][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 108.180119][ T1113] ata1.00: irq_stat 0x40000000 [ 108.183808][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 108.185466][ T9452] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.190249][ T1113] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 6 [ 108.190249][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 108.196850][ T1113] ata1.00: status: { DRDY ERR } [ 108.200427][ T1113] ata1.00: error: { ABRT } [ 108.202539][ T1113] ata1.00: device reported invalid CHS sector 0 [ 108.247804][ T9452] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.250573][ T9464] bpf: Bad value for 'uid' [ 108.294244][ T9471] tmpfs: Unknown parameter '00000000000007231064537' [ 108.325645][ T9452] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.333148][ T9476] loop2: detected capacity change from 0 to 7 [ 108.338443][ T9476] Dev loop2: unable to read RDB block 7 [ 108.340265][ T9476] loop2: unable to read partition table [ 108.342092][ T9476] loop2: partition table beyond EOD, truncated [ 108.344248][ T9476] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.419902][ T87] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.435223][ T87] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.441695][ T87] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.448966][ T87] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.487290][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 108.487306][ T40] audit: type=1400 audit(1756788483.567:686): avc: denied { setopt } for pid=9489 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 108.488689][ T9489] delete_channel: no stack [ 108.544534][ T9498] __nla_validate_parse: 19 callbacks suppressed [ 108.544625][ T9498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1040'. [ 108.552104][ T9498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1040'. [ 108.799633][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1048'. [ 108.828489][ T40] audit: type=1400 audit(1756788483.876:687): avc: denied { execute } for pid=9521 comm="syz.0.1049" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.859542][ T9526] tmpfs: Unknown parameter '-pol' [ 108.893319][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 109.081525][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.086350][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.090898][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.101873][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 109.105634][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 109.110287][ T24] usb 6-1: Product: syz [ 109.112023][ T24] usb 6-1: Manufacturer: syz [ 109.113980][ T24] usb 6-1: SerialNumber: syz [ 109.178101][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 109.180990][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 109.184303][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 109.187097][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 109.220430][ T9549] syzkaller0: entered promiscuous mode [ 109.222620][ T9549] syzkaller0: entered allmulticast mode [ 109.339230][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 109.514860][ T61] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 109.556545][ T34] usb 6-1: USB disconnect, device number 9 [ 109.562179][ T34] usblp0: removed [ 109.664965][ T61] usb 5-1: device descriptor read/64, error -71 [ 109.780337][ T9505] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 109.780785][ T9505] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1043'. [ 109.790814][ T9505] autofs: Unknown parameter './file1' [ 109.794104][ T9505] Invalid source name [ 109.795795][ T9505] UBIFS error (pid: 9505): cannot open "ubifs", error -22 [ 109.919640][ T61] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 110.059235][ T61] usb 5-1: device descriptor read/64, error -71 [ 110.061493][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 110.112920][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 110.115326][ T1113] ata1: failed to read log page 10h (errno=-5) [ 110.117262][ T1113] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 110.119590][ T1113] ata1.00: irq_stat 0x40000000 [ 110.121143][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 110.123284][ T1113] ata1.00: cmd 61/18:70:f6:06:10/00:00:00:00:00/40 tag 14 ncq dma 12288 out [ 110.123284][ T1113] res 50/00:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 110.128691][ T1113] ata1.00: status: { DRDY } [ 110.132837][ T1113] ata1.00: configured for UDMA/100 [ 110.134936][ T1113] ata1: EH complete [ 110.176970][ T61] usb usb5-port1: attempt power cycle [ 110.231421][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 110.234792][ T24] usb 6-1: config 3 has an invalid interface number: 72 but max is 0 [ 110.237255][ T24] usb 6-1: config 3 has no interface number 0 [ 110.239154][ T24] usb 6-1: config 3 interface 72 has no altsetting 0 [ 110.242893][ T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=3610, bcdDevice=e0.ba [ 110.245672][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.248133][ T24] usb 6-1: Product: syz [ 110.249441][ T24] usb 6-1: Manufacturer: syz [ 110.250915][ T24] usb 6-1: SerialNumber: syz [ 110.443455][ T10] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 110.471624][ T24] ax88179_178a 6-1:3.72: probe with driver ax88179_178a failed with error -22 [ 110.476640][ T24] usb 6-1: USB disconnect, device number 10 [ 110.540893][ T61] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 110.561752][ T61] usb 5-1: device descriptor read/8, error -71 [ 110.593136][ T10] usb 7-1: device descriptor read/64, error -71 [ 110.686982][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'. [ 110.839092][ T61] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 110.871151][ T10] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 110.871520][ T61] usb 5-1: device descriptor read/8, error -71 [ 110.999489][ T61] usb usb5-port1: unable to enumerate USB device [ 111.010108][ T10] usb 7-1: device descriptor read/64, error -71 [ 111.138645][ T10] usb usb7-port1: attempt power cycle [ 111.256699][ T5976] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 111.256970][ T5986] Bluetooth: hci0: command 0x040f tx timeout [ 111.537288][ T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 111.547018][ T9561] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.551659][ T9561] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.555741][ T10] usb 7-1: device descriptor read/8, error -71 [ 111.822563][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 111.854964][ T6056] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 111.858203][ T10] usb 7-1: device descriptor read/8, error -71 [ 111.983030][ T10] usb usb7-port1: unable to enumerate USB device [ 112.037188][ T6056] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 112.039614][ T9568] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 112.040894][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.044374][ T9568] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 112.046757][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.046773][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.058624][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.064207][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.068504][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.072533][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.075953][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.080260][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.083658][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.087072][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.091300][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.094651][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.098093][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.102431][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.106097][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.109645][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.113545][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.117423][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.120874][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.125283][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.128584][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.132072][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.136477][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.140647][ T6056] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 112.144264][ T6056] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 112.147468][ T6056] usb 6-1: Product: syz [ 112.149117][ T6056] usb 6-1: Manufacturer: syz [ 112.150950][ T6056] usb 6-1: SerialNumber: syz [ 112.154207][ T6056] usb 6-1: config 0 descriptor?? [ 112.161957][ T6056] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 112.435206][ T40] audit: type=1400 audit(1756788487.253:688): avc: denied { mount } for pid=9563 comm="syz.1.1064" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 112.437084][ T9580] overlayfs: missing 'lowerdir' [ 112.450359][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 112.450638][ T29] usb 6-1: USB disconnect, device number 11 [ 112.459263][ T29] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 112.482918][ T9583] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1071'. [ 112.487351][ T9583] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 112.496999][ T5986] block nbd3: Receive control failed (result -32) [ 112.502722][ T9583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.514518][ T9583] bond2: (slave geneve3): making interface the new active one [ 112.517937][ T9583] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 112.552707][ T9581] block nbd3: shutting down sockets [ 112.557983][ T9589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.562342][ T9589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.565433][ T9589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.875368][ T9604] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 112.886929][ T40] audit: type=1326 audit(1756788487.674:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.3.1077" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d2018ebe9 code=0x0 [ 113.004099][ T9612] sp0: Synchronizing with TNC [ 113.005214][ T40] audit: type=1400 audit(1756788487.786:690): avc: denied { create } for pid=9610 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 113.032729][ T40] audit: type=1400 audit(1756788487.814:691): avc: denied { execute } for pid=9610 comm="syz.0.1079" path="/proc/776/fdinfo/3" dev="proc" ino=31035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 113.224549][ T40] audit: type=1400 audit(1756788487.992:692): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 113.302226][ T9624] tmpfs: Too few inodes for current use [ 113.463675][ T40] audit: type=1400 audit(1756788488.216:693): avc: denied { execmod } for pid=9630 comm="syz.2.1085" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 113.471970][ T40] audit: type=1400 audit(1756788488.216:694): avc: denied { ioctl } for pid=9630 comm="syz.2.1085" path="socket:[31941]" dev="sockfs" ino=31941 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 113.522036][ T9633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.576900][ T6062] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 113.612968][ T9633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.737785][ T6062] usb 5-1: not running at top speed; connect to a high speed hub [ 113.741232][ T6062] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 113.744704][ T6062] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.749113][ T6062] usb 5-1: config 1 interface 0 has no altsetting 0 [ 113.758730][ T6062] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.760093][ T9633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.762331][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.762345][ T6062] usb 5-1: Product: â  [ 113.762353][ T6062] usb 5-1: Manufacturer: ï”語⪼ﶂ漋徘ꡰæ’ì’„ë¢íš¥î‡•ᅒ燚წ妮롎êḤ﷖스ﯷà¬ç´“ä®·æ¿î¿«ìšè†žã–Šë¤‘ä§±ê£¯áº‰ì—ˆî® [ 113.762364][ T6062] usb 5-1: SerialNumber: п [ 113.764310][ T9624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.858991][ T9633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.936839][ T216] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.948205][ T1243] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.956589][ T1235] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.966833][ T1235] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.076505][ T9641] __nla_validate_parse: 4 callbacks suppressed [ 114.076521][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 114.083017][ T9641] netlink: 'syz.2.1089': attribute type 30 has an invalid length. [ 114.085782][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 114.165387][ T9645] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 114.216952][ T9647] random: crng reseeded on system resumption [ 114.232800][ T6062] usb 5-1: USB disconnect, device number 19 [ 114.502906][ T40] audit: type=1400 audit(1756788489.189:695): avc: denied { read } for pid=9663 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 114.581496][ T9673] netlink: 'syz.0.1100': attribute type 9 has an invalid length. [ 114.584410][ T40] audit: type=1400 audit(1756788489.264:696): avc: denied { mounton } for pid=9669 comm="syz.1.1099" path="/file0" dev="ramfs" ino=31378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 115.010364][ T40] audit: type=1400 audit(1756788489.666:697): avc: denied { watch } for pid=9702 comm="syz.0.1111" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.017581][ T40] audit: type=1400 audit(1756788489.666:698): avc: denied { watch_sb } for pid=9702 comm="syz.0.1111" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.026489][ T40] audit: type=1400 audit(1756788489.666:699): avc: denied { setopt } for pid=9693 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.119779][ T9722] Failed to initialize the IGMP autojoin socket (err -2) [ 115.133289][ T9713] could not allocate digest TFM handle cryptd(blake2b-160) [ 115.162400][ T40] audit: type=1400 audit(1756788489.806:700): avc: denied { mounton } for pid=9724 comm="syz.1.1115" path="/245/file0/file0" dev="bpf" ino=31415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 115.177209][ T40] audit: type=1400 audit(1756788489.816:701): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 115.512907][ T6062] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 115.685400][ T6062] usb 5-1: config 0 has no interfaces? [ 115.690512][ T6062] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 115.694638][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.698107][ T6062] usb 5-1: Product: syz [ 115.699970][ T6062] usb 5-1: Manufacturer: syz [ 115.702006][ T6062] usb 5-1: SerialNumber: syz [ 115.716760][ T6062] usb 5-1: config 0 descriptor?? [ 115.967243][ T9769] netlink: 'syz.1.1128': attribute type 32 has an invalid length. [ 115.969820][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 115.972963][ T9769] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 116.003272][ T40] audit: type=1400 audit(1756788490.592:702): avc: denied { append } for pid=9766 comm="syz.1.1128" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 116.121651][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 116.124449][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 116.125894][ T9788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1136'. [ 116.127191][ T9786] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1135'. [ 116.128206][ T9786] Attempt to restore checkpoint with obsolete wellknown handles [ 116.131865][ T9788] netlink: 'syz.1.1136': attribute type 6 has an invalid length. [ 116.140473][ T9788] netlink: 'syz.1.1136': attribute type 5 has an invalid length. [ 116.144064][ T9788] netlink: 'syz.1.1136': attribute type 4 has an invalid length. [ 116.226520][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 116.433919][ T9822] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 116.439300][ T9822] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 116.453439][ T5986] Bluetooth: hci0: Malformed HCI Event [ 116.490648][ T6056] usb 5-1: USB disconnect, device number 20 [ 116.559744][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 116.718900][ T59] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 116.868495][ T59] usb 6-1: device descriptor read/64, error -71 [ 117.059840][ T9830] nbd: socks must be embedded in a SOCK_ITEM attr [ 117.107174][ T40] audit: type=1400 audit(1756788491.621:703): avc: denied { getopt } for pid=9833 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.157364][ T59] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 117.175465][ T40] audit: type=1400 audit(1756788491.686:704): avc: denied { map } for pid=9840 comm="syz.2.1152" path="socket:[34080]" dev="sockfs" ino=34080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.233846][ T9847] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1154'. [ 117.296549][ T59] usb 6-1: device descriptor read/64, error -71 [ 117.298544][ T9852] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 117.305789][ T9852] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.310336][ T9852] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.425679][ T59] usb usb6-port1: attempt power cycle [ 117.787939][ T59] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 117.809765][ T59] usb 6-1: device descriptor read/8, error -71 [ 117.998820][ T9899] overlayfs: missing 'lowerdir' [ 118.062030][ T9905] afs: Unknown parameter 'usXquota' [ 118.087279][ T59] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 118.113512][ T59] usb 6-1: device descriptor read/8, error -71 [ 118.237020][ T59] usb usb6-port1: unable to enumerate USB device [ 118.241791][ T9916] syz.3.1177 (9916): /proc/9915/oom_adj is deprecated, please use /proc/9915/oom_score_adj instead. [ 118.288308][ T9921] trusted_key: encrypted_key: master key parameter is missing [ 118.429965][ T61] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 118.534680][ T9944] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 119.428512][ T9946] __nla_validate_parse: 7 callbacks suppressed [ 119.428528][ T9946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1188'. [ 119.430548][ T9949] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1190'. [ 119.438405][ T9949] unsupported nlmsg_type 40 [ 119.543576][ T9969] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 119.570476][ T9969] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 119.580848][ T9969] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 119.621753][ T9973] gretap2: entered promiscuous mode [ 119.624855][ T9973] bond3: (slave gretap2): making interface the new active one [ 119.629753][ T9973] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 119.759153][ T9976] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1198'. [ 119.813594][ T9994] tmpfs: Bad value for 'mpol' [ 119.816189][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 119.821709][ T9994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=9994 comm=syz.0.1201 [ 119.853926][ T9999] Driver unsupported XDP return value 0 on prog (id 135) dev N/A, expect packet loss! [ 119.858789][T10001] tmpfs: Bad value for 'mpol' [ 119.934549][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 119.934561][ T40] audit: type=1400 audit(1756788494.268:711): avc: denied { ioctl } for pid=10002 comm="syz.1.1204" path="socket:[31597]" dev="sockfs" ino=31597 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.945328][ T40] audit: type=1400 audit(1756788494.277:712): avc: denied { execute } for pid=10007 comm="syz.0.1207" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=32720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 120.075745][ T53] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 120.207998][T10035] kvm: pic: non byte write [ 120.214678][ T53] usb 7-1: device descriptor read/64, error -71 [ 120.353722][ T40] audit: type=1400 audit(1756788494.652:713): avc: denied { lock } for pid=10050 comm="syz.1.1219" path="socket:[31639]" dev="sockfs" ino=31639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.437465][T10057] trusted_key: encrypted_key: key user:syz not found [ 120.438315][T10058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.471355][ T53] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 120.488781][T10062] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 120.491501][T10062] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.494983][T10062] vhci_hcd vhci_hcd.0: Device attached [ 120.498114][T10063] vhci_hcd: connection closed [ 120.499392][ T87] vhci_hcd: stop threads [ 120.503204][ T87] vhci_hcd: release socket [ 120.506177][ T87] vhci_hcd: disconnect device [ 120.513327][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'. [ 120.611192][ T53] usb 7-1: device descriptor read/64, error -71 [ 120.729651][ T53] usb usb7-port1: attempt power cycle [ 121.004530][T10080] syz_tun: entered promiscuous mode [ 121.009520][T10080] macvtap1: entered promiscuous mode [ 121.013649][T10080] syz_tun: left promiscuous mode [ 121.055912][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 121.055962][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 121.062196][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 121.103526][ T53] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 121.124016][ T53] usb 7-1: device descriptor read/8, error -71 [ 121.192061][T10093] trusted_key: encrypted_key: keylen parameter is missing [ 121.285283][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 121.297831][T10109] bridge5: entered promiscuous mode [ 121.302433][T10109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33 sclass=netlink_audit_socket pid=10109 comm=syz.0.1236 [ 121.392199][ T53] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 121.413629][ T53] usb 7-1: device descriptor read/8, error -71 [ 121.430573][ T40] audit: type=1400 audit(1756788495.662:714): avc: denied { setattr } for pid=10115 comm="syz.0.1240" name="" dev="pipefs" ino=35883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 121.435726][T10116] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1240'. [ 121.439663][ T40] audit: type=1400 audit(1756788495.671:715): avc: denied { map } for pid=10115 comm="syz.0.1240" path="/300/file0" dev="hugetlbfs" ino=35888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 121.529510][T10118] macvlan3: entered promiscuous mode [ 121.532386][ T53] usb usb7-port1: unable to enumerate USB device [ 121.534591][T10118] macvlan3: entered allmulticast mode [ 121.565207][T10123] xt_policy: neither incoming nor outgoing policy selected [ 121.792128][T10132] 9pnet_fd: p9_fd_create_tcp (10132): problem creating socket [ 121.906551][T10137] 9pnet_virtio: no channels available for device 127.0.0.1 [ 121.948266][T10140] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 121.951758][T10140] syz_tun: entered promiscuous mode [ 121.959510][T10140] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 121.960611][T10144] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 121.966353][T10144] netlink: 'syz.0.1249': attribute type 4 has an invalid length. [ 122.005293][T10148] binder: 10146:10148 ioctl c0306201 200000000640 returned -22 [ 122.019518][ T40] audit: type=1400 audit(1756788496.214:716): avc: denied { audit_write } for pid=10147 comm="syz.1.1250" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 122.066934][T10151] input: syz0 as /devices/virtual/input/input20 [ 122.082021][T10151] Failed to initialize the IGMP autojoin socket (err -2) [ 122.130130][ T40] audit: type=1326 audit(1756788496.326:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.0.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538e18ebe9 code=0x7ffc0000 [ 122.137983][ T40] audit: type=1326 audit(1756788496.326:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.0.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f538e18ebe9 code=0x7ffc0000 [ 122.145201][ T40] audit: type=1326 audit(1756788496.326:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.0.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538e18ebe9 code=0x7ffc0000 [ 122.152341][ T40] audit: type=1326 audit(1756788496.326:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.0.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f538e18ebe9 code=0x7ffc0000 [ 122.454714][T10180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.459180][T10180] block device autoloading is deprecated and will be removed. [ 122.474292][T10177] netlink: 'syz.0.1259': attribute type 29 has an invalid length. [ 122.477627][T10177] netlink: 'syz.0.1259': attribute type 29 has an invalid length. [ 122.483101][T10177] f2fs: Unknown parameter 'discard«š?ãØnª [ 122.483101][T10177] k‡l' [ 123.127005][T10201] tmpfs: Unknown parameter 'œË24Æ%iprefer' [ 123.247842][T10208] netlink: 'syz.3.1269': attribute type 63 has an invalid length. [ 123.293688][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 123.389355][T10216] netlink: 'syz.0.1272': attribute type 8 has an invalid length. [ 123.443539][ T24] usb 7-1: device descriptor read/64, error -71 [ 123.563869][T10221] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 123.610557][T10221] netlink: 'syz.0.1274': attribute type 10 has an invalid length. [ 123.712896][T10221] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.728847][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 123.881546][ T24] usb 7-1: device descriptor read/64, error -71 [ 123.999408][ T24] usb usb7-port1: attempt power cycle [ 124.184345][T10250] netlink: 'syz.3.1282': attribute type 2 has an invalid length. [ 124.362691][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 124.365039][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888052872800: rx timeout, send abort [ 124.369838][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053f2cc00: rx timeout, send abort [ 124.372543][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888052872800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.377608][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888053f2cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.385502][ T24] usb 7-1: device descriptor read/8, error -71 [ 124.456209][T10255] loop3: detected capacity change from 0 to 1 [ 124.461436][T10255] Dev loop3: unable to read RDB block 1 [ 124.463237][T10255] loop3: unable to read partition table [ 124.465155][T10255] loop3: partition table beyond EOD, truncated [ 124.467138][T10255] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.661968][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 124.684052][ T24] usb 7-1: device descriptor read/8, error -71 [ 124.822420][ T24] usb usb7-port1: unable to enumerate USB device [ 124.919706][T10267] random: crng reseeded on system resumption [ 124.940021][ T5976] Bluetooth: hci2: command 0x040f tx timeout [ 125.076138][ T5976] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 125.145981][T10285] __nla_validate_parse: 12 callbacks suppressed [ 125.145993][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 125.309235][ T5384] pmem0: [POWERTEC] [ 125.399092][T10306] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 125.402033][T10306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.405749][T10306] vhci_hcd vhci_hcd.0: Device attached [ 125.409750][T10308] vhci_hcd: connection closed [ 125.413837][ T1235] vhci_hcd: stop threads [ 125.416780][ T1235] vhci_hcd: release socket [ 125.418212][ T1235] vhci_hcd: disconnect device [ 125.444873][T10307] orangefs_devreq_write_iter: failed to copy head. [ 125.447440][T10307] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8921, magic 89 != 6b] [ 125.447474][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 125.447492][ T40] audit: type=1400 audit(1756788499.422:747): avc: denied { ioctl } for pid=10305 comm="syz.1.1301" path="/292/file0/file0" dev="fuse" ino=0 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 125.526400][T10316] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.684878][T10322] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 125.687311][T10322] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1305'. [ 125.718967][T10324] sit0: entered allmulticast mode [ 125.746837][ T40] audit: type=1400 audit(1756788499.703:748): avc: denied { ioctl } for pid=10328 comm="syz.1.1307" path="socket:[38028]" dev="sockfs" ino=38028 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.747875][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 125.851419][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 125.854755][T10331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1308'. [ 125.858466][T10331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1308'. [ 125.979796][T10342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10342 comm=syz.1.1311 [ 125.983869][T10342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10342 comm=syz.1.1311 [ 125.987970][T10342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10342 comm=syz.1.1311 [ 126.066604][T10358] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.070844][T10358] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.075339][T10358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 126.079154][T10358] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.082412][T10358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 126.086975][T10358] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.090026][T10358] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.093800][T10358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 126.097199][T10358] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.100202][T10358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 126.103755][T10358] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.107279][T10358] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.111990][T10358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 126.116187][T10358] I/O error, dev nbd1, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.118986][ T5986] Bluetooth: hci2: Invalid handle: 0xffc9 > 0x0eff [ 126.120081][T10358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 126.123936][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 126.127136][T10358] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 126.133494][T10351] dummy0: entered promiscuous mode [ 126.139145][T10351] dummy0: left promiscuous mode [ 126.227407][ T40] audit: type=1400 audit(1756788500.152:749): avc: denied { mount } for pid=10365 comm="syz.1.1318" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 126.234480][ T40] audit: type=1400 audit(1756788500.152:750): avc: denied { remount } for pid=10365 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 126.241985][ T40] audit: type=1400 audit(1756788500.161:751): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 126.273141][T10371] netlink: 'syz.2.1320': attribute type 16 has an invalid length. [ 126.275687][T10371] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1320'. [ 126.339325][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.342702][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.345263][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.347814][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.350024][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.352494][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.354732][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.357006][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.359248][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.361475][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.363690][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.366252][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.368777][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.370973][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.373660][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.375836][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.377267][T10378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.378074][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.386692][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.389165][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.391617][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.394190][ T1235] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 126.396275][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.401731][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.404013][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.406604][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.408795][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.411122][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.413297][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.415816][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.418233][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.420607][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.422806][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.425028][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.427288][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.429501][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.431958][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.434139][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.436305][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.438524][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.440697][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.442829][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.444998][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.447458][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.449603][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.451743][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.453877][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.456053][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.458595][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.461194][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.463990][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.466117][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.468291][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.470536][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.472686][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.474812][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.477173][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.479788][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.482691][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.485172][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.487679][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.490083][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.492250][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.494384][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.496527][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.498663][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.501119][ T5976] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 126.640963][ T40] audit: type=1400 audit(1756788500.545:752): avc: denied { override_creds } for pid=10383 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 126.654259][ T40] audit: type=1400 audit(1756788500.554:753): avc: denied { accept } for pid=10383 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 126.791005][ T40] audit: type=1400 audit(1756788500.685:754): avc: denied { ioctl } for pid=10396 comm="syz.2.1328" path="socket:[35353]" dev="sockfs" ino=35353 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.169669][T10408] program syz.1.1331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.208123][T10412] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 127.371527][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 127.374458][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 127.432626][T10419] trusted_key: syz.1.1336 sent an empty control message without MSG_MORE. [ 127.486572][T10422] kAFS: unparsable volume name [ 127.556613][T10422] kvm: kvm [10421]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 127.559841][T10422] kvm: kvm [10421]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 127.575917][T10422] kvm: kvm [10421]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 127.594608][T10422] kvm: kvm [10421]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 127.597772][T10422] kvm: kvm [10421]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 127.800489][T10427] syz.2.1339(10427): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 128.054066][T10456] 9p: Unknown access argument 18446744073709551615: -34 [ 128.213520][ T40] audit: type=1400 audit(1756788502.004:755): avc: denied { map } for pid=10458 comm="syz.2.1347" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 128.281588][T10461] Failed to initialize the IGMP autojoin socket (err -2) [ 128.363457][T10477] veth0_vlan: left promiscuous mode [ 128.365194][T10477] vlan0: entered promiscuous mode [ 128.366791][T10477] veth0_vlan: entered promiscuous mode [ 128.374827][T10477] team0: Port device vlan0 added [ 128.626905][T10491] syzkaller1: entered promiscuous mode [ 128.629967][T10491] syzkaller1: entered allmulticast mode [ 128.718375][T10502] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.720519][T10502] overlayfs: failed to set xattr on upper [ 128.723167][T10502] overlayfs: ...falling back to redirect_dir=nofollow. [ 128.726346][T10502] overlayfs: ...falling back to index=off. [ 128.728620][T10502] overlayfs: ...falling back to uuid=null. [ 128.989739][T10512] 9pnet: Could not find request transport: tVp [ 129.185560][T10526] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 129.190467][T10526] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.193474][T10526] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.328856][ T40] audit: type=1400 audit(1756788503.052:756): avc: denied { mount } for pid=10531 comm="syz.1.1370" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 129.371609][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 129.423275][ T6056] libceph: mon0 (1)[c::]:6789 connect error [ 129.645936][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 129.709273][ T6056] libceph: mon0 (1)[c::]:6789 connect error [ 129.942518][T10542] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 129.973575][T10546] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 129.984276][T10546] bond2: entered promiscuous mode [ 129.986511][T10546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.995890][T10546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.998609][T10546] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 130.002686][T10546] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 130.008991][T10546] bond2: (slave ip6gre1): making interface the new active one [ 130.012041][T10546] ip6gre1: entered promiscuous mode [ 130.014866][T10546] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 130.189258][ T68] libceph: mon0 (1)[c::]:6789 connect error [ 130.250080][T10534] ceph: No mds server is up or the cluster is laggy [ 130.250451][T10537] ceph: No mds server is up or the cluster is laggy [ 130.255177][ T6056] libceph: mon0 (1)[c::]:6789 connect error [ 130.315605][T10572] overlay: ./bus is not a directory [ 130.640623][T10593] ================================================================== [ 130.640632][T10593] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 130.640664][T10593] Write of size 8 at addr ffffc90005261000 by task syz.0.1391/10593 [ 130.640675][T10593] [ 130.640681][T10593] CPU: 3 UID: 0 PID: 10593 Comm: syz.0.1391 Not tainted syzkaller #0 PREEMPT(full) [ 130.640695][T10593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.640703][T10593] Call Trace: [ 130.640706][T10593] [ 130.640711][T10593] dump_stack_lvl+0x116/0x1f0 [ 130.640728][T10593] print_report+0xcd/0x630 [ 130.640741][T10593] ? __virt_addr_valid+0x81/0x610 [ 130.640759][T10593] ? sys_imageblit+0x1a6f/0x1e60 [ 130.640774][T10593] kasan_report+0xe0/0x110 [ 130.640787][T10593] ? sys_imageblit+0x1a6f/0x1e60 [ 130.640805][T10593] sys_imageblit+0x1a6f/0x1e60 [ 130.640822][T10593] ? __pfx_sys_imageblit+0x10/0x10 [ 130.640837][T10593] ? lock_acquire+0x179/0x350 [ 130.640854][T10593] ? __page_table_check_ptes_set+0x1ae/0x420 [ 130.640866][T10593] ? find_held_lock+0x2b/0x80 [ 130.640879][T10593] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 130.640891][T10593] ? pfn_valid+0x26a/0x4d0 [ 130.640906][T10593] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 130.640919][T10593] bit_putcs+0x90f/0xde0 [ 130.640934][T10593] ? __pfx_bit_putcs+0x10/0x10 [ 130.640945][T10593] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 130.640962][T10593] ? fb_get_color_depth+0x120/0x250 [ 130.640972][T10593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.640987][T10593] ? __pfx_bit_putcs+0x10/0x10 [ 130.640998][T10593] fbcon_putcs+0x384/0x4a0 [ 130.641017][T10593] do_update_region+0x2e6/0x3f0 [ 130.641033][T10593] invert_screen+0x1e4/0x590 [ 130.641044][T10593] ? __pfx_invert_screen+0x10/0x10 [ 130.641054][T10593] ? __pfx_complement_pos+0x10/0x10 [ 130.641066][T10593] ? vc_do_resize+0x24d/0x10e0 [ 130.641075][T10593] ? __vmalloc_node_noprof+0xad/0xf0 [ 130.641091][T10593] clear_selection+0x59/0x70 [ 130.641107][T10593] vc_do_resize+0xd9b/0x10e0 [ 130.641120][T10593] ? __pfx_vc_do_resize+0x10/0x10 [ 130.641132][T10593] fbcon_set_disp+0x7ad/0xe50 [ 130.641150][T10593] set_con2fb_map+0x703/0x1080 [ 130.641162][T10593] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 130.641174][T10593] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 130.641187][T10593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.641201][T10593] do_fb_ioctl+0x328/0x7e0 [ 130.641215][T10593] ? __pfx_do_fb_ioctl+0x10/0x10 [ 130.641231][T10593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.641255][T10593] ? selinux_file_ioctl+0x180/0x270 [ 130.641272][T10593] fb_ioctl+0xe5/0x150 [ 130.641285][T10593] ? __pfx_fb_ioctl+0x10/0x10 [ 130.641298][T10593] __x64_sys_ioctl+0x18b/0x210 [ 130.641317][T10593] do_syscall_64+0xcd/0x4c0 [ 130.641331][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.641343][T10593] RIP: 0033:0x7f538e18ebe9 [ 130.641352][T10593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.641363][T10593] RSP: 002b:00007f538ef32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.641374][T10593] RAX: ffffffffffffffda RBX: 00007f538e3c5fa0 RCX: 00007f538e18ebe9 [ 130.641381][T10593] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 130.641388][T10593] RBP: 00007f538e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 130.641394][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.641401][T10593] R13: 00007f538e3c6038 R14: 00007f538e3c5fa0 R15: 00007ffe4c862f08 [ 130.641411][T10593] [ 130.641415][T10593] [ 130.641418][T10593] The buggy address belongs to a vmalloc virtual mapping [ 130.641426][T10593] Memory state around the buggy address: [ 130.641432][T10593] ffffc90005260f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.641440][T10593] ffffc90005260f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.641447][T10593] >ffffc90005261000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.641453][T10593] ^ [ 130.641458][T10593] ffffc90005261080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.641466][T10593] ffffc90005261100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.641472][T10593] ================================================================== [ 130.641478][T10593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.641486][T10593] CPU: 3 UID: 0 PID: 10593 Comm: syz.0.1391 Not tainted syzkaller #0 PREEMPT(full) [ 130.641499][T10593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.641507][T10593] Call Trace: [ 130.641510][T10593] [ 130.641514][T10593] dump_stack_lvl+0x3d/0x1f0 [ 130.641526][T10593] vpanic+0x6e8/0x7a0 [ 130.641544][T10593] ? __pfx_vpanic+0x10/0x10 [ 130.641561][T10593] ? __pfx_vprintk_emit+0x10/0x10 [ 130.641577][T10593] ? sys_imageblit+0x1a6f/0x1e60 [ 130.641591][T10593] panic+0xca/0xd0 [ 130.641607][T10593] ? __pfx_panic+0x10/0x10 [ 130.641626][T10593] check_panic_on_warn+0xab/0xb0 [ 130.641636][T10593] end_report+0x107/0x170 [ 130.641648][T10593] kasan_report+0xee/0x110 [ 130.641660][T10593] ? sys_imageblit+0x1a6f/0x1e60 [ 130.641677][T10593] sys_imageblit+0x1a6f/0x1e60 [ 130.641693][T10593] ? __pfx_sys_imageblit+0x10/0x10 [ 130.641709][T10593] ? lock_acquire+0x179/0x350 [ 130.641726][T10593] ? __page_table_check_ptes_set+0x1ae/0x420 [ 130.641738][T10593] ? find_held_lock+0x2b/0x80 [ 130.641751][T10593] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 130.641762][T10593] ? pfn_valid+0x26a/0x4d0 [ 130.641778][T10593] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 130.641790][T10593] bit_putcs+0x90f/0xde0 [ 130.641806][T10593] ? __pfx_bit_putcs+0x10/0x10 [ 130.641817][T10593] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 130.641833][T10593] ? fb_get_color_depth+0x120/0x250 [ 130.641844][T10593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.641857][T10593] ? __pfx_bit_putcs+0x10/0x10 [ 130.641868][T10593] fbcon_putcs+0x384/0x4a0 [ 130.641886][T10593] do_update_region+0x2e6/0x3f0 [ 130.641902][T10593] invert_screen+0x1e4/0x590 [ 130.641913][T10593] ? __pfx_invert_screen+0x10/0x10 [ 130.641923][T10593] ? __pfx_complement_pos+0x10/0x10 [ 130.641934][T10593] ? vc_do_resize+0x24d/0x10e0 [ 130.641944][T10593] ? __vmalloc_node_noprof+0xad/0xf0 [ 130.641960][T10593] clear_selection+0x59/0x70 [ 130.641975][T10593] vc_do_resize+0xd9b/0x10e0 [ 130.641989][T10593] ? __pfx_vc_do_resize+0x10/0x10 [ 130.642001][T10593] fbcon_set_disp+0x7ad/0xe50 [ 130.642019][T10593] set_con2fb_map+0x703/0x1080 [ 130.642031][T10593] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 130.642043][T10593] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 130.642056][T10593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.642069][T10593] do_fb_ioctl+0x328/0x7e0 [ 130.642082][T10593] ? __pfx_do_fb_ioctl+0x10/0x10 [ 130.642098][T10593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.642117][T10593] ? selinux_file_ioctl+0x180/0x270 [ 130.642134][T10593] fb_ioctl+0xe5/0x150 [ 130.642146][T10593] ? __pfx_fb_ioctl+0x10/0x10 [ 130.642160][T10593] __x64_sys_ioctl+0x18b/0x210 [ 130.642177][T10593] do_syscall_64+0xcd/0x4c0 [ 130.642190][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.642201][T10593] RIP: 0033:0x7f538e18ebe9 [ 130.642209][T10593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.642220][T10593] RSP: 002b:00007f538ef32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.642230][T10593] RAX: ffffffffffffffda RBX: 00007f538e3c5fa0 RCX: 00007f538e18ebe9 [ 130.642237][T10593] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 130.642245][T10593] RBP: 00007f538e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 130.642256][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.642263][T10593] R13: 00007f538e3c6038 R14: 00007f538e3c5fa0 R15: 00007ffe4c862f08 [ 130.642275][T10593] [ 130.642944][T10593] Kernel Offset: disabled VM DIAGNOSIS: 04:39:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffffffff8e2977c0 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31e23ffc CR3=0000000028eee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4c863416 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4c863416 00007ffe4c86341c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538e212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538e212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538e212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538e212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538e212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538e212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538e3974a8 00007f538e3974a0 00007f538e397498 00007f538e397470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538eefd100 00007f538e397460 00007f538e397478 00007f538e3974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538e3974b8 00007f538e3974b0 00007f538e3974a8 00007f538e3974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801deba440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f538c3f5f98 CR3=0000000033e05000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd095b0be6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd095b0be6 00007ffd095b0bec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8c412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8c412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8c412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8c412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8c412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8c412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8c5974a8 00007fea8c5974a0 00007fea8c597498 00007fea8c597470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8d0fd100 00007fea8c597460 00007fea8c590004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea8c5974b8 00007fea8c5974b0 00007fea8c5974a8 00007fea8c5974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801debc880 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558196f808 CR3=0000000055a56000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90003dfef30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b112060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f538ef326c0 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f538ef31f98 CR3=0000000028eee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 009c000000000000 056d000000060004 000c000600000000 000c020000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000000140100 0000000000080008 0007000c00080000 0000000000100000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 056d000000200000 0010000400000000 0000000000080016 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000600000000 000c020000000000 000800080007000e 00080000000c0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 002c030000000000 0006000700080006 0000000003e60000 000800040000000a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080000001c0000 0001000000000000 0000000000000000 01540000000000f4 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2400000000180000 00200000000e0014 000c000000080004 0020000e00000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000056f 000000060004000c 000600000000000c 0200000000000008 ZMM25=5748d59e5748d59e 5748d59e5748d59e 5748d59e5748d59e 5748d59e5748d59e 5748d59e5748d59e 5748d59e5748d59e 5748d59e5748d59e 5748d59e5748d59e ZMM26=1e7a772f1e7a772f 1e7a772f1e7a772f 1e7a772f1e7a772f 1e7a772f1e7a772f 1e7a772f1e7a772f 1e7a772f1e7a772f 1e7a772f1e7a772f 1e7a772f1e7a772f ZMM27=47e4a25447e4a254 47e4a25447e4a254 47e4a25447e4a254 47e4a25447e4a254 47e4a25447e4a254 47e4a25447e4a254 47e4a25447e4a254 47e4a25447e4a254 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b0080000b0080000 b0080000b0080000 b0080000b0080000 b0080000b0080000 b0080000b0080000 b0080000b0080000 b0080000b0080000 b0080000b0080000