last executing test programs: 1m7.584944298s ago: executing program 2 (id=87): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000280)=r1}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr, 0xe}}, @sadb_lifetime={0x4, 0x4, 0xc84a}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000003}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0xb0}}, 0x84) 1m7.58457356s ago: executing program 2 (id=88): openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x20000) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x81) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x4}]}) close(0x3) 1m7.514473974s ago: executing program 2 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0x0, 0x0, 0x0}) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x65, 0x403, 0x20}, 0x20, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="6c646bff8a4d96d8dc20d6e01c15e62e5e3a912b2979cd2aecd2b92ed736b5b71ba35520a30e8915f9c736b79b86adadcc3750c5df948e530256cc822f282863fc898fd39da9498597dc4912db4c984b"}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x3, {0x0, 0x1e3, 0x2}, 0xfe}, 0x18) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a01, 0x0) ioctl$CDROMPLAYMSF(r8, 0x5303, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x3c, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xfff3}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xcac}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m6.464796361s ago: executing program 2 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) open(0x0, 0x501401, 0xc2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$FBIOGET_CON2FBMAP(r6, 0x460f, &(0x7f0000000100)={0x3f, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r7, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x2}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x201f00) 1m6.464159499s ago: executing program 2 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = dup(r3) read(r4, &(0x7f0000000040), 0x0) (async) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) (async) futimesat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {0x0, 0xea60}}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="67450f2047b9f10b0000b8a6000000ba000000000f3066b8eb000f00d066baf80cb86c4fe785ef66bafc0ced48b81c670000000000000f23c00f21f835020002000f23f82e450f00dc66baf80cb8e4a64980ef66bafc0cedc9d8e8c744240070000000c7442402bd802b9ec7442406000000000f011424", 0x77}], 0x1, 0x16, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m6.224755915s ago: executing program 2 (id=110): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = accept4$llc(r0, &(0x7f0000000140), &(0x7f0000000200)=0x10, 0x400) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000240)={0x6, 'lo\x00', {0xfffffff9}, 0x5}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000240)={0x6, 'lo\x00', {0xfffffff9}, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000003060101000000000000c10f050000060900020073017a320000000005000100070000000900020073797a32000000000900020073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000280)=0x10) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000280)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1m6.217928747s ago: executing program 32 (id=110): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = accept4$llc(r0, &(0x7f0000000140), &(0x7f0000000200)=0x10, 0x400) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000240)={0x6, 'lo\x00', {0xfffffff9}, 0x5}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000240)={0x6, 'lo\x00', {0xfffffff9}, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000003060101000000000000c10f050000060900020073017a320000000005000100070000000900020073797a32000000000900020073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000280)=0x10) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000280)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 19.863754372s ago: executing program 1 (id=1130): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002140)={r0, 0x0, 0xa3, 0x1000, &(0x7f0000000080)="09f6968ceee437961ab299a3ed0b2a8857b8d60540c87ffe364ea08c2f2ba93e4b1d73843dff2c89741e5657a8b9749cc25a7894459ea7e0c38ef49155d4aa880b4323348d86fe34dcda9397a9f1fd38320b744fbfcb117c7d23c642a1dd214733568d9dfcd6832ad56557d9619f2c3c03f136bbf5711fde078608a148efb8bf87dec3aee2da906cef01ccd6f057054942b8f47847bfe001392d81eda289d2d484a839", &(0x7f0000000140)=""/4096, 0x1, 0x0, 0x1000, 0x0, &(0x7f0000001140)="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", 0xfffffffffffffffc, 0xe31f12cea2f58c85, 0x0, 0x7}, 0x50) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000021c0)=@ccm_128={{0x304}, "0f7f7ef42d04c28f", "7793f1e571817fea140d91f8561b2511", "80eae9d9", "31490aacb7251cb4"}, 0x28) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000002200)=@name, &(0x7f0000002240)=0x10, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000002280), &(0x7f00000022c0)=0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000002300), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000002340)=0x101) open_by_handle_at(r1, &(0x7f0000002380)=@ocfs2={0xc, 0x1, {0xedd0, 0x2, 0xa9f}}, 0x80240) r4 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002400)={0x8, &(0x7f00000023c0)=[{0xfff8, 0x0, 0x4, 0x4}, {0x8, 0x7, 0x2, 0x15}, {0x6a, 0x7, 0x7, 0x5}, {0x0, 0x2, 0xfa, 0x9}, {0x7ff, 0x7f, 0xd8, 0xffffffff}, {0xe510, 0x8, 0xe, 0x2}, {0x4, 0x9, 0x6, 0x400}, {0x0, 0x6, 0x3, 0x8}]}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000002440)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002480)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r2, r2, 0x80000) ppoll(&(0x7f00000024c0)=[{r2, 0x40}, {r3, 0x5400}, {r2, 0x19502}, {r5, 0x2038}, {r0, 0x1400}, {r1, 0x400}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x10}, {r4, 0xa0}, {r6, 0x4040}], 0xa, &(0x7f0000002540), &(0x7f0000002580)={[0x7f]}, 0x8) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f00000025c0)="064696", 0x3) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000002600)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f00000026c0)={0xd, 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000002700), 0x54000, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x9) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000002780)={&(0x7f0000002740)=""/35, 0x23}) syz_open_dev$sndpcmp(&(0x7f00000027c0), 0x7, 0x400000) sendmmsg(r4, &(0x7f0000003e80)=[{{&(0x7f0000002800)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002880)="a2602cff2afe801a7121437274c848e0d2c9f486a166c04c317713c462334528e19b05ded1c8f8a1cac9f2f644ca41f3b87221965a178582c9737c1e", 0x3c}, {&(0x7f00000028c0)="2e58c3e44dbf86090547a8db7a71d7d2dae72421b7db4ec3a52fd3ab397d773ea94425de74643b69d2c0f3276c8cf216c7d013c9ecf5f659da0f378c017e08aa99fc3856573d989b06793e00db1f08afd04ee9151ca2", 0x56}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="70995b6d95a6fac8dab7e579ebff98aeac7461fcc272fea157b2b31bc5dc33a2db56ffb27bab8bf3e0a914ec104a267cfd5e2bbd5be271f7ee6f41a3562d3736eeb6c39e9d8a52ed7a67e0024f7defb04159438b6f3a11484fe35ebdae682d3e91e9b10b59142e5a2466c3732f967317e994d6a508d376a0a19211d85b648ae6b60f8be4b3674d344bc4f45a861170c58c79155325e30cd747275501ea61473973deeec1077f95b73814", 0xaa}, {&(0x7f0000003a00)="f7d2c5da8cc1d50a5f120c7e3b051418d98300b4a269e80715a92f30c497d0e10bb23cf05b21c2142fc66eb9cf19a993b305ca7d06a51c3a64703e3986742c0858cabbc7517d382d41b0b8d66f85b887e111d968f71ed8010ba89190bc8b668f9c1ae5640e20f6015eab6684326738bc960a911cbd0c48ec34ee661836c60247135315f36e1a648dc465b0dd9bef87f3973d474806cb93869cb8fd370957c2fe2142bbbd48795496de7585", 0xab}, {&(0x7f0000003ac0)="7f24af5dede4a96042efed44694315d5a974528998048511b7ed4a571b62cd1a8ce166ede2185d5f38afc536a4b14d65daa6094d12221813e20ee84f79334126ed08db65d227ceb8c872a30d5f59b6b5c2bd2e60483a7cbab02431057bb98158f412f3fa936f42063b2c4f8fae58f40d4f0403603503d9fa4c4d815ab5045169538306a9bb0ba8edc20414c25c443576801d7ddd8fd052ec2014f75ad0aeac5538ede967a0392645ca089546e60c434903c3d4", 0xb3}, {&(0x7f0000003b80)="3101d4053ba10028a97d882c9b0f95703ca9f07da994ffcde2188184679bfde26793d484e2bbad0ab9ccb81af7b90688b3261440be5a76f4b35baab54282b5ebf46b7fcec65674e9b572f0451bccb25518b60ffa90a7503d6f2b9f7fbd5e096246a522b5ee8f9c1bf6319a86a8f564ef03378d63793d37c576ba2ad707e3eb40441bba1b20bd2413f2f0bc07dd403cc9e6b6b06d61d5c9", 0x97}], 0x7, &(0x7f0000003cc0)=[{0x18, 0x109, 0x5, "83eb"}, {0x98, 0x111, 0x2, "14c5538c29e27df4878a860be32845e70f0fa2f0314169cc68b38ee917448fbeaeb39bb5a67af8acf065f4cc363520fb12a611ec0a84993761e264b7516dbe13f4a0aaae92e56301012fbfae412cfafc50291ba1c422115761dc47d51018011a08eaae6ad2c4bf7a5e94dfd7fff192ffbd1f44184dcfe68cab348a3219048783cd38f420f4337fe5"}, {0xf8, 0x115, 0x9dbb, "796ce28bc61beaac09cc6d8b7757e630751c028c600130c1750fb76da5f72b82a5a8e735894e7ac76e8f9156a455a7d3e2f878aed9bde8d30967c551c8291bd2b5fdadc2154f2bf10cd8a157d41df42e6ab4efdd4a99fd84433a4d8fe2e7607b94936925c7e571508cad491447ec2e721761e7b6b483707743a4755e1c6feff7fc0ad6ee77682441877e97d44547a17ea643727201a10c2f5772cd960315e9e7a0e6b4cccbc6f304ede86db5b47045c1395bf58f43adf2ce286e3825a52567143e5813f429531d843236289fb9c9f9b92f605c653c7cd9ea134d688a45646f242e13fd653e"}], 0x1a8}}], 0x1, 0x20000001) syz_open_dev$sndpcmp(&(0x7f0000003ec0), 0xffffffffffffffff, 0x40840) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001) getsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f0000003f00), &(0x7f0000003f40)=0x4) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 19.802868081s ago: executing program 1 (id=1133): r0 = socket(0x40000000015, 0x5, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000780)={r0}) 19.802394189s ago: executing program 1 (id=1134): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x3, 0x0, 0x2, 0x12f0a8a8aa6c20b0, 0x10, 0x301, 0x38, 0xffffffff, 0xf, 0x0, 0x20, 0x2, 0x4, 0x0, 0x4}, [{0x6, 0x8, 0x2, 0xc, 0x10000003, 0x8, 0x4, 0x10da}, {0x60000000, 0x90000, 0x9, 0x2, 0x1, 0xb, 0xffff6d9f, 0x8767}]}, 0x78) close(r0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 19.801991781s ago: executing program 1 (id=1136): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'memory'}]}, 0x8) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 19.724572077s ago: executing program 1 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 19.384375162s ago: executing program 1 (id=1138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25230000000a000100040ffa7770616e31"], 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x400) 19.34688044s ago: executing program 33 (id=1138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25230000000a000100040ffa7770616e31"], 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x400) 3.894909715s ago: executing program 4 (id=1491): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x39b, 0x9, 0x6, 0x200, r2, 0x1082, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r3 = socket(0x10, 0x3, 0x0) splice(r3, &(0x7f0000000000)=0x8001, r3, &(0x7f0000000040)=0x3, 0x8, 0xa) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) 3.894416018s ago: executing program 4 (id=1492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x701, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffc0000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xa, 0x1, 0x0, "6040a7190200002000004f597cdc90d22b6000000006ff00", 0x38415262}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x200000000000006c, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x13, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x16) 3.82447071s ago: executing program 4 (id=1493): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002"], 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) (async, rerun: 32) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) 3.821487575s ago: executing program 4 (id=1494): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419890400050037359750570061e297ad6ccb5abdbe676f787ae10ecb79ad4eb7578eebec5e051014ee5582416bc0b78ae19e4ff9c6814091258e497c6d8047972643ec7657e36a1cb665fe7b7004dc023b754eb0f0eae5c0416fda2906f92414f7f619ddc724f2c1259a3587258b7a0a3be267b19ce8a269121e4e8458941b51cdc3a663d27de92fe784ccd542a72793d0c264d5e990ba97c83af4858f9e6abb7fece7"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), r0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) r7 = userfaultfd(0x801) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002680)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002640)={&(0x7f0000002140)=@newtfilter={0x4e4, 0x2c, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xc}, {0x8, 0xffe0}, {0xfff0, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4ac, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x42}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xfff3}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x5a}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x10000000, 0xb8, 0x6, 0xb, {0xdb, 0x1, 0x791, 0xc1, 0x6, 0x2}, {0x6, 0x1, 0x1, 0x3, 0xfffc, 0x800}, 0x730cde2e, 0x80000001, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}]}, @TCA_ROUTE4_POLICE={0x434, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff001}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8000, 0x5, 0x29b9, 0x10, 0x5, 0x8, 0x6, 0x200, 0x2, 0x0, 0x2, 0x6, 0x7, 0x8, 0x9, 0x10, 0x20001794, 0x6, 0x3, 0x7, 0xd, 0x2, 0x4, 0x8, 0x100, 0xfa, 0x2, 0x5, 0x101, 0x7fffffff, 0x5, 0x700, 0x533c, 0x40, 0x20000000, 0x7, 0xd, 0x7, 0x1, 0x1, 0x3ff, 0xa, 0x1, 0x3, 0x8, 0x65f, 0xa1, 0x7, 0x80000000, 0x4, 0x6, 0x8, 0x8, 0x27de, 0x3, 0x0, 0xfffffffd, 0x80000000, 0x5, 0x5, 0xffff01dc, 0x80000001, 0x6, 0x4, 0x401, 0x2, 0xff, 0x0, 0x2, 0x6, 0x72, 0x18f4, 0x8, 0x1, 0x5, 0x3, 0x4, 0x8, 0x0, 0x7, 0xda50, 0x6, 0x7f, 0x2, 0xff, 0x8, 0x1, 0x4, 0x2, 0xffff, 0xa0, 0xe36, 0x8, 0x5, 0x8, 0x96c, 0xc, 0xffffffff, 0x7, 0x7, 0x2, 0x2, 0xffffff80, 0x42b7, 0x9, 0x3, 0xf3a5, 0x8, 0x9, 0x80000000, 0xfffffc00, 0x2, 0x8, 0x100, 0xd, 0x5, 0x1, 0x4, 0x7, 0x6, 0x0, 0x7fffffff, 0x3ff, 0x45, 0x3, 0x10, 0xad, 0x7ec, 0x9, 0x8001, 0x1, 0xfffffffe, 0x9, 0x101, 0x8001, 0xea67, 0x6, 0x9, 0x70bb, 0x7, 0x1, 0x3, 0x8, 0xd, 0x4ca, 0xe, 0xe, 0x3, 0x4, 0x10001, 0xfff, 0x58d, 0x7fffffff, 0xffff8000, 0x9, 0x2, 0x3, 0x0, 0x7, 0xe00000, 0xeb, 0x6, 0x81, 0x2002, 0x3ff, 0x0, 0x2, 0x80, 0x10, 0x9, 0x2, 0x401, 0x4, 0x9, 0x8, 0x7, 0x5, 0x8, 0xfffffff7, 0x1, 0x2, 0xe48, 0xfffffbff, 0x4, 0x31, 0x7f, 0x4, 0xfffffff8, 0x2, 0x7ff, 0x36, 0xfffffff7, 0x9, 0x5, 0xfffffffc, 0x4, 0x4, 0x8f, 0xe, 0x400, 0x4, 0x4, 0xc47, 0xaa, 0x23d, 0x96000000, 0x9, 0x4, 0x6, 0x1, 0x30043277, 0x4, 0x6c39, 0x40, 0x101, 0x5, 0x101, 0x6f07, 0x5, 0x29f1, 0x800, 0xb, 0x4, 0x4, 0x2, 0x7, 0x7, 0x80000000, 0xdafe, 0x8000, 0x1, 0x400, 0x7a05, 0x80000001, 0x9, 0x3, 0x8000, 0x10000, 0x80, 0xdc, 0x10000, 0x6, 0x7f, 0x9, 0x80000000, 0xffff1910, 0x923, 0x5, 0x20, 0x8, 0x2, 0x527, 0x4, 0x0, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400000000000}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x401}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001200000000000000000000000008003100ac1414aa"], 0x28}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r11, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3.76413111s ago: executing program 4 (id=1495): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x90000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000840)={0x101ff, 0x2, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x8, r0}) pipe2$watch_queue(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route_sched(r1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r3 = gettid() r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000007000009210101000122050009058103ff0800"/39], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x22, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x14b180, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000000) syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) (async) socket$netlink(0x10, 0x3, 0x400000000000004) (async) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000080)) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r7], 0x3c}}, 0x10) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_disconnect(r4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x3, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x3ff, 0x8000009, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x91, 0x82, 0xc, 0x4, 0x80000000, 0x242, 0x7, 0xe, 0x0, 0x8000806d, 0x407, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x10001, 0x4, 0x2, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0xc, 0x4, 0x10001, 0x40], [0x10000009, 0x800009, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x10001, 0xc8, 0xf9, 0xe, 0x8e, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x8, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x10001, 0x5f31, 0xd, 0x4dd, 0x2, 0x4, 0xb, 0x0, 0xb, 0x9, 0xa, 0x4, 0x47, 0x8000, 0x6, 0xfe000000, 0x9, 0x2, 0x4, 0x9, 0x80000001, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x4, 0x8007, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x4, 0x303c, 0x1, 0xb, 0x5, 0x4, 0x2, 0x1, 0x20000008, 0x4, 0x2, 0xd74, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x6, 0x0, 0x805, 0x6, 0xac8, 0xc3, 0xb, 0x400803, 0x2007ff, 0x12b, 0x4, 0x2, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb31, 0x7fff, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xffffffef, 0x6bd8490e, 0x100, 0x10000, 0x5, 0x7fff, 0x40, 0xa61e, 0x6, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x8, 0x100, 0x9602, 0x200007, 0xaf, 0xb, 0x6, 0x229, 0x4, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x200008c0, &(0x7f000072e000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) 1.503156636s ago: executing program 3 (id=1538): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) poll(&(0x7f00000005c0)=[{r0, 0x2000}], 0x1, 0xfffffbff) 1.362670268s ago: executing program 5 (id=1540): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1b, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96}}, 0x1c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x1ffffffffffffed8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.36189166s ago: executing program 5 (id=1541): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) mkdir(&(0x7f0000000080)='./file0\x00', 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r1 = socket$kcm(0x29, 0x7, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0)=0xff, 0x4) 1.293416163s ago: executing program 5 (id=1543): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000080)={0xff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r2, 0x0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000040)) 1.214479368s ago: executing program 5 (id=1546): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 1.128891764s ago: executing program 0 (id=1548): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)={'wlan1\x00'}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x1bebb025d6d72e81, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r0, &(0x7f0000000040)="03", 0x1, 0xb0a}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3eb, r0, 0x0}]) 914.178515ms ago: executing program 0 (id=1549): sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\bxJzp4/\xf90\xa4\xadAr\xc6\x05\x1f\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\x1ddC\xd4KL\x93J\xd4\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|', 0x3) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRESDEC=r3], 0x34}}, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0x0, 0x5}]}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r8], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x2}) 754.658221ms ago: executing program 4 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) 623.817571ms ago: executing program 3 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x2c, 0x66, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x9, 0x10}, {0x2, 0xd}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x24000800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140)={0x9, 'UJ?'}, 0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000005c0)={0x0, 0x1, 0x14, 0x1, 0x126, &(0x7f00000001c0)="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"}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000600)=0xcc5) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x6000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@dellink={0x30, 0x11, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0xa0, 0x40a00}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0xa5d1c000) ioctl$FIOCLEX(r2, 0x5451) write$selinux_load(r4, &(0x7f0000000780)={0xf97cff8c, 0x8, 'SE Linux', "1717c1470502731143039ed682c63275e19556ec40107e84716d44ec4705e3dd50f967c473c1c6842d3debb7ca48bb41ad699cec3796474aae051409b83688790a7094c4dbacf2ac9e2d1a8988e9bf970d4c90fe21dd28bed6635d0d00def65bd4616f5d8933c400286774129c4b62c5bbfa6b7aef30d467"}, 0x88) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040800}, 0x8005) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000980)=0x1, 0x4) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000009c0)=0x5, 0x2) write$P9_RREADLINK(r4, &(0x7f0000000a00)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) getsockname$packet(r4, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x150, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xb}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfe01}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}]}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x401}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x150}}, 0x40080) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000001d00)={&(0x7f0000000d00)=[0x8, 0x1ff, 0x6, 0x4, 0xffffffff, 0xfffffffe, 0x6, 0xe, 0x8, 0x6, 0x4, 0x3218, 0x74d, 0x6, 0x2, 0xc19e, 0x0, 0x7, 0x100, 0xffffffff, 0x5, 0xcb, 0xda, 0x6, 0x8, 0x8, 0x7, 0x6, 0xffff7fff, 0x0, 0x9, 0xa4, 0x6, 0x0, 0x3, 0x5951, 0x3, 0x7, 0x9, 0x47fb, 0x401, 0xfffffff9, 0xfffffffd, 0xd2f7, 0x1, 0x4, 0x8, 0xaa84, 0x6, 0x7, 0x5, 0x1, 0xef8, 0x2, 0x2, 0x2, 0x5, 0x0, 0x6df, 0x6, 0x3, 0x4, 0x6, 0x1ff, 0x6, 0x8001, 0xc92c815, 0x101, 0x7fff, 0x7fff, 0x1a380000, 0x80, 0x4, 0x10001, 0x9, 0x800, 0x0, 0x7e, 0x7ff, 0x1, 0x7, 0x37e, 0x3, 0x800, 0x3, 0x7, 0x8, 0xd, 0x3, 0x80000001, 0x4cea, 0x1, 0x1, 0x8, 0x0, 0x80, 0x8e, 0x9, 0x3, 0x8, 0x2, 0x3, 0x6, 0xfffffff7, 0x3, 0x8, 0x4, 0x8, 0x9, 0xfffffffd, 0x7, 0x0, 0x7, 0x7d, 0x4, 0xffffff1c, 0x0, 0xffff54fe, 0x40a, 0x7f, 0x7fffffff, 0x0, 0x7fff, 0xfff, 0x8, 0x4, 0x5, 0xffffffff, 0xbfb, 0x6, 0x400, 0x0, 0x400, 0x6, 0x6, 0x0, 0x100, 0x7, 0x0, 0x6, 0xfd37, 0x3, 0x8001, 0x8, 0x8, 0x19f, 0x3ff, 0x48, 0x5, 0xc00000, 0x7, 0x81, 0x0, 0x80000000, 0x1000, 0x6fef, 0x7fff, 0xffff, 0xfff, 0x7, 0x6, 0xc, 0x1, 0xfffffa8c, 0x7f, 0x6, 0x23, 0x2, 0x3, 0x5, 0x4, 0x4, 0x7ff, 0x9c4, 0x9, 0x1, 0xd, 0x4, 0xa557, 0xf9, 0x10001, 0x2ae, 0x8e, 0x2, 0x5, 0x7, 0x0, 0x0, 0x2a65, 0x4, 0xfffffffa, 0x9, 0x1, 0x4, 0x337, 0x2, 0x18b, 0x3ff, 0x10, 0x80000001, 0x8, 0xce9, 0x8, 0x8, 0x80000001, 0x80, 0x4, 0x0, 0x7f, 0x8001, 0x7, 0x6, 0x7, 0xb, 0x6, 0x401, 0x0, 0x100, 0x0, 0x4, 0x6000, 0x8001, 0xba, 0x4, 0x7f, 0x4, 0x6, 0x3cf, 0x2, 0xffffffd0, 0x2, 0x2, 0x81, 0x3, 0x4, 0xeb40, 0x2, 0xb7, 0x8, 0x40, 0x5, 0xc, 0xb, 0x8, 0x7, 0x5, 0x6, 0x3, 0x4, 0x3, 0x800, 0x8001, 0x1, 0x1000, 0x3, 0xe5, 0x800, 0x6, 0x0, 0x36b2e065, 0x2, 0x1, 0x401, 0x4, 0x80000001, 0x0, 0x1, 0x7, 0x7, 0xe, 0x8, 0xffffffeb, 0x5, 0x3, 0x4, 0x7, 0x7f, 0x23cc91d2, 0x5, 0x2, 0x0, 0x40, 0xf8, 0x0, 0x100, 0x0, 0x5, 0x9, 0x1, 0x7, 0x2, 0x7f, 0x7f, 0x7, 0x6, 0x0, 0x2, 0xa76, 0x7, 0x0, 0xfffff1dd, 0x8, 0x1, 0x1e, 0xfffffffb, 0x6, 0x8, 0x276, 0x4, 0x8, 0x10, 0x3, 0x8, 0x3, 0xd, 0xff, 0x10000, 0x8000, 0x3, 0x0, 0x2af, 0x8, 0x4, 0x10001, 0x1, 0xf00, 0x1, 0xffff0000, 0x10001, 0x7, 0x7, 0x7, 0x3, 0x47a, 0x1, 0x10001, 0x80000000, 0x8, 0x0, 0x3, 0x8, 0x6, 0x7fff, 0x2, 0x25f5, 0x4, 0x438, 0x2, 0x1, 0x5e95, 0xfffffffa, 0x2000, 0x5, 0xa, 0xdc8, 0x3ff, 0x3, 0xe, 0x9, 0x8, 0x7, 0x400, 0x1, 0x2f, 0x8, 0x5, 0xf, 0x6, 0xfffffffe, 0x9, 0x2, 0x7fffffff, 0x5d0, 0x8, 0xfd, 0xfffffffd, 0xbdee, 0x8, 0xffffaefb, 0x2, 0x1, 0x3a7, 0x1000, 0x8, 0xa, 0x56, 0x4, 0x28, 0x1, 0x6, 0x9, 0xfffffffc, 0x6b2, 0x6, 0xffff250e, 0x0, 0x8, 0xf, 0x8, 0xed4a, 0x1, 0x5, 0x1, 0x7, 0x1, 0xff, 0xffffff21, 0x80, 0x3ff, 0x40, 0x9, 0xfffffffe, 0x7ef, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0xfffffffb, 0x5, 0x1, 0x6ee7, 0xfffffff9, 0x5, 0x8, 0x5, 0x1, 0x101, 0xbf79, 0x7, 0xa, 0x3, 0xd, 0x585a, 0x9, 0x80000000, 0x5c, 0x6f, 0x2, 0x26, 0x6, 0x4, 0x8, 0x3, 0x0, 0x5, 0x3, 0x4, 0xffff8001, 0x3, 0x16, 0x5, 0x0, 0x0, 0x81, 0x10, 0x9, 0x7, 0xffff, 0x6, 0xffffffff, 0x1, 0x3, 0xffff7fff, 0x8, 0x4, 0xb699, 0x0, 0x3, 0x1000, 0x401, 0x1, 0x7, 0xe, 0x7, 0xce, 0x4, 0x3e9d254b, 0x6, 0x1000, 0x80000000, 0x5, 0x2, 0xde, 0xfffffff9, 0x8, 0x7000000, 0x9, 0x6, 0x13d, 0x1000, 0x2, 0x1, 0x400, 0x0, 0x4, 0x4, 0x40, 0x7, 0x1, 0x0, 0x6, 0x26, 0x1000, 0x3, 0x7, 0xa26, 0x1, 0xa90, 0x6, 0x272, 0x4, 0x0, 0x5, 0x4, 0x2, 0x5, 0x0, 0x7, 0x4, 0x7, 0x8, 0x0, 0x3ca, 0x7, 0x6, 0xd, 0x1, 0x1ff, 0x4, 0x3, 0x40, 0x80000000, 0x5, 0x4ad, 0x6, 0x4, 0x5, 0x9, 0x832a, 0x2, 0x88a7, 0x2, 0x5, 0x44e4, 0x6880, 0xb, 0x5f, 0x5, 0x6, 0x783c, 0x8001, 0xa44, 0x4, 0x2, 0x8, 0xa02, 0x1, 0x10000, 0x6, 0x1, 0x8, 0x0, 0x6, 0x2, 0x9, 0xc4, 0xffffb67b, 0x7, 0x2, 0x6, 0x9, 0x3, 0x8000, 0x1000, 0x1, 0x8, 0x400, 0x5, 0x4, 0x1, 0x8, 0x4, 0x7, 0x401, 0x7, 0x9a07, 0x0, 0x7, 0xfc, 0x9, 0xd8c9, 0x7f, 0x3, 0x1, 0x8, 0x10, 0x9, 0x8, 0x1, 0x2, 0x6, 0x2, 0x9, 0x5, 0x2, 0x2, 0xffff, 0x1fd2, 0x41, 0x5920, 0x1e0, 0x2, 0x9, 0x2, 0x3, 0xfffffffa, 0x2, 0x36a4, 0x9, 0x8, 0xfffffffc, 0x1ff, 0x6, 0x6, 0xc74, 0xf2f, 0x80000001, 0xe9, 0x9, 0x6, 0x2, 0x9, 0x1, 0x4, 0x65f, 0x7, 0x5, 0x583, 0x3, 0x101, 0x0, 0x8f4b, 0x6, 0x5, 0x8, 0x9, 0x9, 0xe26a, 0xfffffff7, 0x3, 0x3, 0x6, 0x80, 0x4, 0x1, 0x9, 0x4, 0x61bcf048, 0x7f, 0x80000001, 0xfff, 0x5, 0xa35, 0x2, 0x8, 0x6, 0x520000, 0x5, 0xfc6, 0x10, 0xffff, 0x0, 0x9, 0xf, 0x9, 0x7fffffff, 0x0, 0x10001, 0xffffffff, 0x2, 0xfff, 0x7ff, 0x2, 0x7ff, 0x401, 0xbb8d, 0xf, 0x9, 0x3, 0xe2, 0x6, 0x400, 0x80000001, 0xfffffff9, 0x1, 0x3, 0x3, 0x7, 0x80000000, 0x8, 0x3, 0x3d24, 0x7, 0x7fffffff, 0x6, 0x5c56, 0x8, 0x3, 0x8, 0x91f9, 0x1, 0x80, 0x8dd0, 0x7fff, 0x4, 0x1, 0x0, 0x9, 0x800, 0x5, 0x8, 0x401, 0xbb7, 0x6, 0x7, 0x5, 0x3, 0xe, 0xffffffe7, 0x9, 0xf2, 0x80000000, 0x7, 0x2e8eef2d, 0x81, 0xfffffffd, 0x7, 0x7, 0x8000, 0x200, 0xffffffff, 0x4, 0x4e2, 0x6, 0x7, 0x22f2, 0xae86, 0xcfb, 0xa, 0x6, 0xc, 0x3, 0x79, 0xec12, 0x5, 0x3, 0x1000, 0x0, 0x1ff, 0xbd, 0x79d, 0x3, 0x4, 0xa2e, 0xff000000, 0x4, 0x3ff, 0x6, 0x4, 0xda05, 0x7fff, 0x603, 0x400, 0x8, 0xaa2, 0xd2, 0x0, 0x2, 0x1, 0x5, 0xfffffffd, 0x1, 0x6, 0x1, 0x0, 0x0, 0x7, 0x9, 0x6, 0xffffff2e, 0x200, 0x9, 0xfffffff9, 0x0, 0x9b, 0x9, 0x8, 0xfffffc01, 0x3, 0xc77, 0x4, 0x5, 0x580, 0x8001, 0x7, 0x6, 0xda79, 0x9, 0x5, 0x2, 0x9, 0xf, 0x5a, 0x400, 0x8, 0x4, 0x1, 0x7fff, 0x6, 0x2, 0x8, 0x0, 0x3, 0xffff, 0x7, 0x76a, 0x6, 0x200, 0x0, 0x401, 0xfffffffb, 0x7, 0x5, 0xffffff00, 0xc, 0x0, 0x7, 0x3, 0x0, 0x7, 0xe85, 0x7, 0xffff, 0x8, 0x4, 0x3, 0xc4, 0x7fffffff, 0x5, 0xb6e, 0x2, 0x0, 0x1000, 0x4, 0x46, 0x5, 0x7, 0x4028000, 0x8001, 0xffff697a, 0x9, 0x4, 0x1, 0xfffffffb, 0x9, 0x8000, 0x2, 0x5, 0x9, 0x10001, 0x5, 0xec1, 0xffffffff, 0x2e, 0x4, 0xbc91, 0x3ff, 0x3ff, 0xfffffffe, 0x7, 0x67ce, 0xf, 0x2, 0x5, 0xfffffffb, 0x4, 0xff, 0x39, 0x0, 0xbf, 0x2, 0x5, 0x40000, 0x5, 0x1000, 0x40000000, 0x4a, 0x0, 0xced, 0x9, 0x1, 0x1000, 0x1, 0x9, 0x9, 0x1, 0x10001, 0x1, 0xffffffff, 0x4, 0x5, 0x6, 0xd656, 0x401, 0x6, 0x5, 0x8, 0x8001, 0x3ff, 0x5f, 0x7, 0x7, 0x5, 0x1, 0x7, 0x100, 0x5, 0x2a8, 0x1, 0x2b, 0x8, 0xf3c, 0x462, 0x7, 0xfffffffa, 0x7f, 0xfffffdf8, 0x6, 0x0, 0x4, 0x5, 0xab, 0x2c, 0x7f, 0x5, 0x200, 0x1, 0x48, 0x8, 0xf, 0xffff16ed, 0x5ae, 0x5, 0x3, 0x2, 0x6, 0x0, 0x8, 0x6, 0x6, 0x1, 0xe9d, 0x10000, 0x0, 0x9d46, 0x0, 0xd, 0x7fffffff, 0x2, 0x2, 0x4, 0x1, 0x6, 0x3, 0xffffff81, 0x7, 0x8, 0xfffffff9, 0x3, 0x1, 0x6, 0x5116, 0x2, 0x2, 0xc19, 0x7b, 0x6a86, 0x5d, 0xb6, 0x2, 0x4, 0x4af, 0x0, 0x7ff, 0x3, 0x4, 0x0, 0x3ef4, 0x25daa58e, 0x3, 0x80000000, 0x9, 0x1, 0x9, 0x7, 0x3, 0xa, 0x3ff, 0x6, 0xda5, 0xffffcb85, 0x8, 0xffff1c20, 0x20ed, 0x5, 0x3, 0x5, 0x40f, 0x3400, 0xb, 0x9d, 0x5, 0x2e], 0x1, 0x400, 0x8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001d80)={0x1d0, 0x6, 0x4, 0x201, 0x70bd2b, 0x6, {0x7, 0x0, 0x4}, [@generic="078f7ebc94d592046a54d8054e3ccca15208487ba6531a465627960eb99c58040d3f4546a4c98f108f1926dc", @nested={0xef, 0x4c, 0x0, 0x1, [@nested={0x4, 0x20}, @generic="029398f6b872fdfa7b1098f04e3f7939b00c3d992d1076b4a5c48f37a7c34182593387c328d9555e8d52457b210a24dff27c2c24bc26bb043de8d626dd8274ac54e93ba169ea11e535f7a9becce9c030591d519ed57877b4d26f76de4dbf6730c5e68003d3832377a4a16578b376918dd53c8ab4adb9bf0d26b063a736003f3c6a63fd4cae4d0890e99649780a16731d09e4cca1226aa12917f2355182d19181d7f936acb6e5c80c08e4318360949bca992f4cc34ef865a6a77d1dfce597c2c5762e311c09831337dd41c024aed74b4a468a6954af7410f82b5fdc8428921dd975a617c5eacb30"]}, @generic="6ec9183a5be7d9f31994379cfaf6274690a210275cf6ba3eeb023336b3d7dd8e3216a12e99790230a192aa64f290470e2ae26eaf717cea4424c311", @nested={0x61, 0x66, 0x0, 0x1, [@generic="1ad9e4bffd5e4edca2a378b93d67bfd0d816e8c13d279f8b3121e0ecd9541595832db781e2890243f796dc688c1a21866ef31cd2c9", @generic="81f67067eec69783af26137eb7613782275632bfd0504d7e0b4b0aaf06585de5c02a7d31", @nested={0x4, 0xf}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40801}, 0x0) read$alg(r4, &(0x7f0000002000)=""/75, 0x4b) sendmsg$NFT_BATCH(r4, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x827314fd287ad995}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x48080) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0x1, @none, 0x9, 0x1}, 0xe) clock_gettime(0x0, &(0x7f0000002200)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000002240)={0x7, 0xb, 0x4, 0x2, 0x5, {r5, r6/1000+60000}, {0x2, 0x2, 0xb, 0x0, 0x1, 0x3, "4df62bb1"}, 0x23a, 0x4, {}, 0x7, 0x0, r4}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000002300)={0x1, &(0x7f00000022c0)=[{}]}) r7 = accept4$x25(r2, 0x0, &(0x7f00000023c0), 0x800) mount$9p_fd(0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380), 0x2004000, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}, {@version_L}, {@version_u}, {@cache_none}, {@cache_mmap}], [{@appraise}]}}) 623.3584ms ago: executing program 3 (id=1552): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x7f, 0x8, 0x301}}) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x68f2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$RTC_WIE_ON(r3, 0x700f) 573.921381ms ago: executing program 3 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20000004) (async) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000140)="4e60becdaf78a4b6bf3e64ddf5e535cefdf5689b2d", 0x15}, {&(0x7f0000000180)="bedee6b57a5d435a52de42a418313bdd1e08908d4acedfe53289b5188f9f9c03c09bbc488c85cf96c54304fab0afb5d3909de8f4c0dcdfa779ed3d0c102eb05c4271e4d32f27d0b1629639036efafbce2f70094a8276ccf0582630c512d041a2696f30ff254d7866d51fbbff24", 0x6d}, {&(0x7f0000000200)="dc7d1d3a7b26a62d1082994f20222561706b4e2d43d65438048f4cf68099f99d66e526407f74db61bf3174d155838f20fa582dce746b640951a44e348cde7273b948b3dbcba01c8a82583343d759bc554b8be3bc6e2852702b6de2", 0x5b}, {&(0x7f0000000280)="aab7bd47e9d396b0396f3cd09f4b1f7288a6cace99cded2379138d982cf38419b11431e924510ba8a53d45894bb815ea44f20aa021ee71e21d9412ba7d775fbc54cc75bd6af565d3f36c6a33b3c5a0516c7b64de11f7bf46a8efda3154acea567ccf94211aa8cf144b12600662ed0c6e0b1854b09883f2b2e86c08915036938c72639676fe89126f99d5a2ea5b39b7125579742e96dd63ecf9229960314a02b3c6b123e9126ddfca11c3", 0xaa}, {&(0x7f0000000340)="3d1ead6bd38a7e6bd4eb4d722666a8d6383bf3555324947b7c937225d665bde9bb37b10ee25e039d7189fc8445cefe069e769692118538c8a50318cf53a43d8947af0bf849a46344e0f316f41945e6bcd3afb932e760584a62cc9e2b0cebdff89dff20a5e9c1f426a3d9eee8bc6b68af1921505c299f1f83eb96f213c405f51a17a527956a999cbc8378e88fb46fa1c9e98a7c414c59ae1791ade0d10207", 0x9e}, {&(0x7f0000000400)="a29e597dac0872fa8e1639b6755c0f2e9f34b7bb044eff969cef07f720ecd9660554455f601afe85e4772a99721ed31266b125ca56b98e8e692880e561712c7d6769f931417d2b78e656c9ecb3e58e746af2f0738205bbe0ac43d22cac4f78c1ea9fb7874ce0319ff2af60d60729094fedd380fc7072732cb0cbf5eb14a4b5e666ec4f97c40867aaa36323876d9ec058b533803d53674d1fe756eddc6cfec4196fb739fc81b638edf27c7ea472603caeb03a67d5c7c19dc0079a43059cdf36ddf5d51aa353af858d3921d6309c38d57837f8bd0ccee735a618b44fa7eddf3a049cb0715682cdedf857", 0xe9}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="07a68a517c8bbf497eb1b157e0a5279ce4481a2a25d5ce56b7760ec96dc07f3ad9a342e50177c234009e380468fdcfdb3634c31d4f2460ebb8418cc10be3e051dcfcfbb2d3eb7e342888ce48d38ef31a2c8f46210ada800c9620551d7737d4bb40d3349e1ee24a1e3eeb0787299b2eefd5bf2d1eea819e2f35ed8acf9ed55b9917cc788bd7d3209470e10bd61e69813869cc60894cd648932c91a28be0a155faba7a5dd52e7b5eb793b4ce902d06be30f6f5955d614ac32212f9b75069401fb99e340f29f9545bc81c", 0xc9}, {&(0x7f0000001600)="d7f4fae7904fa0a72e3eaf9a19af0a3e7e27937f6b2b8bd3661d20340ea9a93a1b8ee4810684126572a63da9f912d79ab188c4e5510b08e53bea2d26a4a5763790901cae0991594d69001266ebde74fc384c16ba10f2b97ed442918f12167a775ebf0a32183ee257721309f4b1e33c", 0x6f}], 0x9) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000001740)=0x3666) (async) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000001780), 0x121000, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000017c0)=@req3={0xff, 0x9, 0x1000, 0x10, 0x401, 0xffffffff, 0x6a}, 0x1c) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x81) (async) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000001900)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x7ff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000001940), r2) socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000001980)) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000019c0)) (async) sendmmsg$inet6(r2, &(0x7f0000001d40)=[{{&(0x7f0000001a00)={0xa, 0x4e21, 0xe4f, @dev={0xfe, 0x80, '\x00', 0x41}, 0x1}, 0x1c, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=[@rthdr={{0x48, 0x29, 0x39, {0x6, 0x6, 0x1, 0x0, 0x0, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x1d, 0xe, 0x0, 0x8, 0x0, [@empty, @rand_addr=' \x01\x00', @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xff, 0xe, 0x0, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x12}, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @dev={0xfe, 0x80, '\x00', 0x15}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hopopts={{0x148, 0x29, 0x36, {0x2, 0x25, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @generic={0x4, 0xfc, "7d42b8b469ff7f4837b0c2212674590da0b8c203198ec4182965e4928d87d6ac64476d42510023797c61928f9027452dd98ec8c3f4feedf9ddef067357d018389d54127ad2db430bf12a7f0b9290ed93098bb2f2eb3b56c46597d635b63a7eb0303747f221605029f80b9462432305aa36dfa9b45093b6140d64470c14ddee36bdb7c67dae244253947e7a1c94367e1ee504128024678188937aad54cb6c62038ac6a1cf76add9d74aba0b9933f029fbe6615f43e9c74fc7d096420b3b53c7dcef5acb36bca7d31a970f4914b0c785ac377e276ecab5908b604c07bba0d161b6fe227f1f4ea4b50b26432cda04d1f997ed90b886ebe95f432ade8c0e"}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x3}]}}}], 0x2b8}}], 0x1, 0x10) (async) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r2, 0xb1458000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001d80)='./file0\x00', 0x800, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001e00), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x14) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000001f40), &(0x7f0000001f80)=0x4) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2, 0x0) ioctl$FITHAW(r5, 0xc0045878) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) open_by_handle_at(r6, &(0x7f0000002000)=@OVL_FILEID_V0={0x58, 0xfb, {0x0, 0xfb, 0x58, 0x2, 0x6f, "7d6fc1994aca4067f01d2d4886ba9f83", "bc47053d9b3bcd3b211ae415e4f16c9a5b1343edca6be4d8615fb34616fd3918b954937bec9fcfe9c5fcffd3aa8ef9abeac0ccbd13e3f9dca2fa3faf908666afbd04d5"}}, 0x80000) (async) bind$inet6(r3, &(0x7f0000002080)={0xa, 0x4e23, 0x5, @private2, 0x100}, 0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002240)={'syztnl1\x00', &(0x7f00000021c0)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x4, 0xc, 0x2, @empty, @private1, 0x10, 0x20, 0x8, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1c, 0xd, &(0x7f00000020c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @exit, @exit]}, &(0x7f0000002140)='GPL\x00', 0x8000000, 0x19, &(0x7f0000002180)=""/25, 0x41000, 0x21, '\x00', r7, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000002280)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000022c0)={0x5, 0x0, 0x6, 0x401}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000002300)=[r2], &(0x7f0000002340)=[{0x1, 0x5, 0x1, 0x3}, {0x5, 0x4, 0x1}], 0x10, 0x8000}, 0x94) (async) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x45045) 573.341236ms ago: executing program 3 (id=1554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18ffff000000000000001000000100000095000000000000001800000020646c2500000000002020207b1af8ff005f2259dea100000000000007010000f8ffffffb702000008000000b703000000000000850000001a0000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) (async) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="baa00066ed0f21dd66b80500000066b90f0000000f01d966b9250300000f32f30f001d66b8010000000f01c1b839018ed0b86a008ec8660f672c0f01c2", 0x3d}], 0x1, 0x2, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x400}) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$qrtrtun(r4, &(0x7f00000014c0)="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", 0x1000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f0000000280)=[{r5, 0x540}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000000c0)=@userptr={0x0, 0x1, 0x4, 0x0, 0x2, {0x0, 0xea60}, {0x3, 0xc, 0x5, 0x3, 0x7c, 0xe7, "3c36f64c"}, 0x5, 0x2, {0x0}, 0xf}) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x4, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x80a0000, 0x0, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x47, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0xf000, 0xeeee8000, 0x0, 0x7, 0x3, 0x6f, 0x1, 0x7, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x9, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x4, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x209}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x4, 0xc5]}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="850000009c0000009500000000000000d8aca557a6da575789639cb728f622e9d7f66d38b2c615a29e65290aadc725ac5a94070c02b80964aebf6a39fda9f8e124be87a86e4ef472956b9f3efb28eabf0f231ac805e4a0493c1bf43e54b456b09a6df567c99d575ee789ad371298edc6a56503ca76c55480f9c8fed3b41d4237722901d144dfbbf5f5e1dfefd5001e121cafd6fa6f1ee566f1106b1e4bc461495c030341233c636dec8626ed8ae8fc6bb53d934cc998d1b89b1edefdd7294577cf89fcdd5fc631c7ea6d066e000000000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000340)) (async) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000840)={0x1, &(0x7f0000000380)=[{}]}) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003e08"]) (async) r7 = eventfd(0x9) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000880)={0x8000, 0x5000, 0x4, r7, 0x2}) 524.142738ms ago: executing program 3 (id=1555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000380)={0x0, 0x54df, 0x0, 0x800000, 0x354}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r0, r0, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0xdc6, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x1fc}, &(0x7f0000000100), &(0x7f00000000c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1cf881, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = eventfd2(0x5, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r5, 0x4, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4) io_uring_enter(r3, 0x567, 0x1000a387, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') read$FUSE(r8, &(0x7f0000002a80)={0x2020}, 0x2020) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000140)=0xffffffff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r9, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r9, 0x30, 0x1, @ib={0x1b, 0x0, 0x1, {"00000000000000405c5b29d14c100680"}, 0x7, 0x100000000005, 0x2}}}, 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r8, 0x0, 0x7, &(0x7f00000001c0)='cgroUp\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 54.367549ms ago: executing program 0 (id=1556): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x26, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x47504a4d}) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000000c0)='io\x00') pread64(r2, &(0x7f00000001c0)=""/204, 0xcc, 0x0) 51.943305ms ago: executing program 5 (id=1557): prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000005c0)={0x0}, &(0x7f0000000300)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe00, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}]}, &(0x7f0000000100)=0x10) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r9, &(0x7f0000001480)=[{&(0x7f0000000600)="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", 0x24f}, {&(0x7f0000000440)='0', 0x1}], 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r6, {}, {0x2}, {0x0, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 51.668158ms ago: executing program 0 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000800000000000f9ffc00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpid() r3 = getpid() pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{}, {0x20, '\xc7!-\xcc$-'}], 0xa, "f8d4a49af6e0d545e8e7999096f448d314c0519abfd0dd834124d7a2b7706ad4eebf52aa8d8a57104e4c303dd67ba98460bab4b1b9589db0db30b548af1d747e1bdb3e47bacf34e21257c8b9f22140d134eb19b323263784566199fe36e769f39e45e378c9812850baded9126de1a70f87d3d4ad3449615dad7615eb94f3eb16ec7eb0d2215c94dd7b080ba228949bb77fe90a114543e154c782f20a1b6cd13fd207c4af103084cc652496792edcde383bfe760ca4787c06c37a4d080d5d7e85788d32cc692a3f3a885458509238f06f37eb0615affd01ac830b6bb2cfe091c130f786b8fe6a59a50154"}, 0xfd) r6 = syz_open_dev$mouse(&(0x7f0000000240), 0x7, 0x210542) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x0, 0x0) r8 = getpgid(0x0) ptrace$pokeuser(0x6, r3, 0x8, 0x3) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@RTM_NEWNSID={0x5c, 0x58, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x5c}}, 0x24004000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r9 = fsopen(&(0x7f0000000340)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x8, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008000100000401"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES16=r9], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) 4.045717ms ago: executing program 0 (id=1559): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x1412, 0x8, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c5}, 0x4000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000b40)={0xf8, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x807fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x566}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf65f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff070004000000010000000400000014000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000006c0)={0x7, 0x8, [0x8, 0xab86]}) 897.518µs ago: executing program 5 (id=1560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000100)={0x7f0, 0x2, [{0x1, 0x1}, {0x1, 0x1}]}) close_range(r3, 0xffffffffffffffff, 0x41aa67c0612a395d) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) r7 = open(&(0x7f0000000000)='./file0\x00', 0xc0002, 0x184) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7}}], 0x18}, 0x0) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=1561): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x3) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bda", 0x7) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) (async) r4 = dup(r0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x4000008, 0xff}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) (async, rerun: 32) connect$802154_dgram(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) (rerun: 32) write$FUSE_BMAP(r1, &(0x7f0000000180)={0x50, 0xffffffffffffffda, 0x0, {0x8}}, 0x18) 0s ago: executing program 4 (id=1564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)=ANY=[@ANYBLOB="1000"/11], 0x10}], 0x1}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="040000000000000000010000050000000000000000000000010400000300000000000000000000000000000000000000000000e5c700000004000000010000000100000000000000000000000200000000000000000000000000000000000000000000000000000006000000050000000000000000000000000400000000000001000000000000009d05000000000000feff9fa0cd81e1e4a29d5a860a2c37ffff06000000080000000300000000000000000000000600000070030000000000000000000000000000000000000000000000000000ff6b9c1b92d0125a0d35f85d9ce492068aaef7fd7f8677e9bcdb7a18bd39fb890db8303effffb6627b40e3d69aab3eaa1dfbc0f6b7669b261e2a5f8b95de9bc855ea487b106000000000638bf0355d391556514739b04c1105a8fb5b75098fe791cd984b2a6371c996bc10167c441d8209346493b941f0c19becd91b12ad832bf9b703d81334daae896a4cd02bd2885ff233a7a634513d2f6f8efa714080c2b8256ef778d7058aeddad337e56691653102d8308c0b5f5926e2476a1f1b9e4a2f39dde0a3a15c58dd9dd5bc68ae6283be70d3377ca8e1"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl726\x00', [0x4f27, 0x80, 0x2, 0xfffffffc, 0x400067, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x2, 0x1, 0x1, 0x4, 0x7137e116, 0x4, 0x1a449, 0x100003, 0x40000005, 0x8b, 0x1, 0xc, 0x20001e58, 0x8, 0x6, 0x43c, 0xa, 0x7, 0x10002, 0x101]}) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x82c20, 0x0) ioctl$CDROMMULTISESSION(r4, 0x5310, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000004c0)={0x1, 0xffffffffffffffff, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80000, 0x410002) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc4c85512, 0x0) socket(0x2, 0x80805, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) pipe2(&(0x7f0000000100), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000340)="2ad72ca8de11415ae8ffaa52652369a9d0e27933e99ee699a2549018db4867a62a6fc0b53206d6636888c3f460a84e9fae04cbb85d2ece6c1f8051c46ab3b32bc34abc60fa9bf923f9265faf89c800497d579304ce40124f32b0592cc36b9d2daedd2513d34f23c2555a5c7fda4bbc172c8ffd6add793ffc46a6baf0a87b89cb2d", 0x81}, {&(0x7f0000000440)="fc0616bba8e157998c324db8d7df6b737bed4c68b25de980435fae83c188372f1f4d8b33236f8c5cf006db9df2d800114b10631091a304de4d8695f060225e76f3e8b7b22530993c42387523bce697a357e3a3", 0x53}, {&(0x7f00000006c0)="2daed2eaa10f2762f8e72cf3b3b361ed08b5d4b93e18c23dec5132847aab6a392ee8f88994fe856cf69c7804534d6f3ea9be540bdd3561fe637bd8749e553754ad0795af386703084bc063ac16342047e6385b4ec83cf65adf01254fc56374cdbd2925a0f0d50d116477ff55c8313f7c6e748be8057722927a453708b3cefbc32c90e58bf1", 0x85}, {&(0x7f0000000780)="9b0bda3773d7e5d94b20d0b2719df6eb38255f4aded84e6553726848f6e7b258e2cbdf23b678e3eaf5ce58a406f6a7ea52aff54263675eefbcbe16173fd2155f05cba05fabb9ca42e7912182442070bd21c881118cb9034c0fcf1e39c82e67e05766952e02046272495e45df7130b39acdf5be", 0x73}, {&(0x7f0000000800)="55bde6d7c22374dc819299e279ef7996dc9aa5902eb70a5cc5759ea3d4058f191386135876497dd952cda451ab2233e4f3fc889af57fbd41bd114c0f148e1c7da1241e2d4503adedfd477bea277d13bb51a682dfa45104a097d4f54e4d6107d9ad0b5d43765f24ca24793292af527c9b6eca4f73978944cc15bd6585ff33277da8be5c888f0b69304e4e", 0x8a}, {&(0x7f00000008c0)="78639ccda51591b34f35c290eba685aac0d1152b76f1276937599b0cb7a06a2b35ad4761115ab31ab6e7a4eb7d103ffaae90d6f834ae60810ccfc940644a4d4bee665d8dbe9e45871660bd29a864d30cb2aede69236eab", 0x57}], 0x6, &(0x7f00000009c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @dstopts={{0x68, 0x29, 0x37, {0x11, 0x9, '\x00', [@pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x3, 0x63e, [0xfffffffffffffffb]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x10, 0x9, [0x8000, 0xbe, 0x6, 0x4, 0x7]}}, @padn={0x1, 0x1, [0x0]}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0xe8}}], 0x2, 0x0) kernel console output (not intermixed with test programs): [ T40] audit: type=1400 audit(1755589712.303:403): avc: denied { ioctl } for pid=7162 comm="syz.3.320" path="socket:[12210]" dev="sockfs" ino=12210 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.960756][ T40] audit: type=1326 audit(1755589712.333:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.321" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x0 [ 63.010621][ T7166] cgroup: name respecified [ 63.080734][ T40] audit: type=1400 audit(1755589712.453:405): avc: denied { read } for pid=7173 comm="syz.3.323" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.393529][ T40] audit: type=1400 audit(1755589712.763:406): avc: denied { add_name } for pid=7178 comm="syz.4.324" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.404899][ T40] audit: type=1400 audit(1755589712.763:407): avc: denied { create } for pid=7178 comm="syz.4.324" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.407001][ T7179] 9pnet_virtio: no channels available for device syz [ 63.414415][ T40] audit: type=1400 audit(1755589712.763:408): avc: denied { associate } for pid=7178 comm="syz.4.324" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.425100][ T40] audit: type=1400 audit(1755589712.773:409): avc: denied { mounton } for pid=7178 comm="syz.4.324" path="/49/file0/file0" dev="9p" ino=35913871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.557565][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.558064][ T5332] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.581801][ T7187] __nla_validate_parse: 7 callbacks suppressed [ 63.581819][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 63.586841][ T7187] program syz.4.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.595240][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 63.605563][ T7194] 9pnet_fd: Insufficient options for proto=fd [ 63.609634][ T7194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 63.720622][ T40] audit: type=1400 audit(1755589713.093:410): avc: denied { connect } for pid=7199 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 63.981247][ T7234] fuse: Unknown parameter 'fuse' [ 64.057599][ T6383] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 64.088175][ T7237] sd 0:0:0:0: PR command failed: 1026 [ 64.089953][ T7237] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 64.092288][ T7237] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 64.124813][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 64.135151][ T7240] vlan2: entered allmulticast mode [ 64.136868][ T7240] bridge0: entered allmulticast mode [ 64.138831][ T7240] bridge1: port 1(vlan2) entered blocking state [ 64.141184][ T7240] bridge1: port 1(vlan2) entered disabled state [ 64.143743][ T7240] vlan2: entered promiscuous mode [ 64.145413][ T7240] bridge0: entered promiscuous mode [ 64.151350][ T7240] gretap1: entered promiscuous mode [ 64.153326][ T7240] bridge1: port 2(gretap1) entered blocking state [ 64.155431][ T7240] bridge1: port 2(gretap1) entered disabled state [ 64.157655][ T7240] gretap1: entered allmulticast mode [ 64.197326][ T7242] /dev/sg0: Can't lookup blockdev [ 64.200477][ T7241] delete_channel: no stack [ 64.217664][ T6383] usb 9-1: Using ep0 maxpacket: 8 [ 64.222409][ T6383] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 64.226699][ T6383] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.229836][ T7244] netlink: 10 bytes leftover after parsing attributes in process `syz.1.340'. [ 64.230743][ T6383] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.238605][ T6383] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.242396][ T6383] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.246862][ T6383] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 64.250956][ T6383] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.461590][ T6383] usb 9-1: usb_control_msg returned -32 [ 64.464954][ T6383] usbtmc 9-1:16.0: can't read capabilities [ 64.473890][ T6383] usb 9-1: USB disconnect, device number 4 [ 64.711249][ T7276] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.347'. [ 64.779971][ T7281] overlayfs: failed to resolve './file0': -2 [ 64.820997][ T7288] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 65.095281][ T7317] kvm: user requested TSC rate below hardware speed [ 65.100953][ T7317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer. [ 65.107550][ T6053] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 65.180240][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 65.195364][ T7325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.363'. [ 65.277603][ T6053] usb 6-1: Using ep0 maxpacket: 8 [ 65.284730][ T6053] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 65.288522][ T6053] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.292580][ T6053] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.296591][ T6053] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.302306][ T6053] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.308802][ T6053] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.312770][ T6053] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.462539][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.366'. [ 65.518973][ T6053] usb 6-1: usb_control_msg returned -32 [ 65.522039][ T6053] usbtmc 6-1:16.0: can't read capabilities [ 65.592555][ T7341] overlayfs: failed to clone upperpath [ 65.612314][ T7343] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 65.634430][ T7345] tipc: Started in network mode [ 65.636428][ T7345] tipc: Node identity , cluster identity 4711 [ 65.637534][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.638743][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.640852][ T7345] tipc: Failed to obtain node identity [ 65.645519][ T7345] tipc: Enabling of bearer rejected, failed to enable media [ 65.671268][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.372'. [ 65.721090][ T7351] overlayfs: upper fs does not support file handles, falling back to index=off. [ 65.819537][ T7360] overlayfs: failed to clone upperpath [ 65.875737][ T7366] .: renamed from bond0 (while UP) [ 65.931372][ T7370] block device autoloading is deprecated and will be removed. [ 65.937890][ T5978] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 65.940767][ T5978] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 65.961825][ T7373] nfs: Unknown parameter '<' [ 66.225176][ T7393] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 66.234996][ T6053] usb 6-1: USB disconnect, device number 14 [ 66.248735][ T7396] program syz.1.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.617558][ T6053] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 66.768833][ T6053] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 66.773025][ T6053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.778145][ T6053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.782130][ T6053] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 66.789057][ T6053] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 66.792803][ T6053] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 66.795961][ T6053] usb 6-1: Manufacturer: syz [ 66.799330][ T6053] usb 6-1: config 0 descriptor?? [ 67.084793][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 67.084807][ T40] audit: type=1400 audit(1755589716.453:440): avc: denied { write } for pid=7420 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.085524][ T7421] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 67.099678][ T7421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.102711][ T7421] IPv6: NLM_F_CREATE should be set when creating new route [ 67.105773][ T7421] IPv6: NLM_F_CREATE should be set when creating new route [ 67.206333][ T6053] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 67.210834][ T6053] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 67.237533][ T5332] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.237665][ T5978] Bluetooth: hci4: command 0x1003 tx timeout [ 67.431087][ T7444] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 67.431822][ T5332] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 67.515450][ T7462] hpfs: Bad magic ... probably not HPFS [ 67.617406][ T40] audit: type=1400 audit(1755589716.983:441): avc: denied { mount } for pid=7481 comm="syz.4.419" name="/" dev="hugetlbfs" ino=15233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.626797][ T40] audit: type=1400 audit(1755589716.983:442): avc: denied { name_bind } for pid=7481 comm="syz.4.419" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.631851][ T7486] netlink: 'syz.0.418': attribute type 9 has an invalid length. [ 67.634378][ T40] audit: type=1400 audit(1755589716.993:443): avc: denied { name_connect } for pid=7481 comm="syz.4.419" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.646206][ T40] audit: type=1400 audit(1755589717.003:444): avc: denied { shutdown } for pid=7481 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.655021][ T40] audit: type=1400 audit(1755589717.003:445): avc: denied { kexec_image_load } for pid=7484 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 67.787545][ T7500] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 67.795175][ T40] audit: type=1400 audit(1755589717.163:446): avc: denied { create } for pid=7511 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.799082][ T7512] bridge0: entered allmulticast mode [ 67.805168][ T40] audit: type=1400 audit(1755589717.173:447): avc: denied { ioctl } for pid=7511 comm="syz.3.424" path="socket:[17868]" dev="sockfs" ino=17868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.977309][ T40] audit: type=1400 audit(1755589717.343:448): avc: denied { ioctl } for pid=7522 comm="syz.0.429" path="socket:[15911]" dev="sockfs" ino=15911 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.022238][ T6037] usb 6-1: USB disconnect, device number 15 [ 68.042644][ T40] audit: type=1400 audit(1755589717.413:449): avc: denied { read } for pid=7546 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.116373][ T7563] devpts: Unknown parameter 'inode32' [ 68.119606][ T7563] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 68.121874][ T7563] PKCS7: Only support pkcs7_signedData type [ 68.220584][ T7585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 68.263570][ T7589] nftables ruleset with unbound chain [ 68.282577][ T7591] overlayfs: failed to clone lowerpath [ 68.350540][ T5332] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 68.443806][ T7614] netlink: 'syz.0.456': attribute type 21 has an invalid length. [ 68.533001][ T7629] netlink: 'syz.3.462': attribute type 4 has an invalid length. [ 68.616823][ T7645] netlink: 'syz.4.468': attribute type 15 has an invalid length. [ 68.636485][ T7650] __nla_validate_parse: 10 callbacks suppressed [ 68.636506][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 68.684840][ T7652] macsec0: entered promiscuous mode [ 68.687074][ T7652] macsec0: entered allmulticast mode [ 68.689737][ T7652] veth1_macvtap: entered allmulticast mode [ 68.728097][ T7663] overlayfs: conflicting lowerdir path [ 68.826808][ T7676] netlink: 'syz.4.477': attribute type 13 has an invalid length. [ 68.837041][ T7676] gretap0: refused to change device tx_queue_len [ 68.839503][ T7676] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 68.890267][ T7682] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 68.993074][ T7684] syz.4.480: attempt to access beyond end of device [ 68.993074][ T7684] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 68.996853][ T7684] befs: (nbd4): unable to read superblock [ 69.353618][ T7689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.482'. [ 69.360898][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 69.365965][ T7689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.482'. [ 69.519441][ T7700] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 69.522918][ T7700] netlink: 'syz.3.486': attribute type 2 has an invalid length. [ 69.526707][ T7700] netlink: 244 bytes leftover after parsing attributes in process `syz.3.486'. [ 69.606559][ T7703] overlayfs: failed to resolve './file0': -2 [ 69.754893][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.491'. [ 69.876511][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 69.880097][ T7728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.497'. [ 69.883917][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 69.887267][ T7728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.497'. [ 70.220507][ T7753] tipc: Enabling of bearer rejected, failed to enable media [ 70.281990][ T7761] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 70.284316][ T7761] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 70.287150][ T7761] vhci_hcd vhci_hcd.0: Device attached [ 70.297388][ T7762] vhci_hcd: connection closed [ 70.298540][ T6653] vhci_hcd: stop threads [ 70.303091][ T6653] vhci_hcd: release socket [ 70.305579][ T6653] vhci_hcd: disconnect device [ 70.421199][ T7781] batman_adv: batadv0: Adding interface: gretap2 [ 70.423226][ T7781] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.431728][ T7781] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 70.475411][ T7786] binder: binder_mmap: 7785 200000000000-200000400000 bad vm_flags failed -1 [ 70.834277][ T7809] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 70.978190][ T7825] netlink: zone id is out of range [ 70.978279][ T7824] netlink: zone id is out of range [ 70.983431][ T7824] netlink: zone id is out of range [ 70.985935][ T7824] netlink: zone id is out of range [ 70.989032][ T7825] netlink: zone id is out of range [ 70.993026][ T7825] netlink: zone id is out of range [ 71.001135][ T7824] netlink: set zone limit has 4 unknown bytes [ 71.002829][ T7825] netlink: set zone limit has 4 unknown bytes [ 71.105074][ T7840] Can't find a SQUASHFS superblock on nullb0 [ 71.387130][ T7865] dvmrp1: entered allmulticast mode [ 71.391751][ T7865] netlink: 'syz.0.541': attribute type 15 has an invalid length. [ 71.426496][ T7867] gfs2: not a GFS2 filesystem [ 71.445080][ T7867] block nbd0: Unsupported socket: shutdown callout must be supported. [ 71.568961][ T7873] input: syz1 as /devices/virtual/input/input8 [ 71.636536][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.675138][ T7884] loop6: detected capacity change from 0 to 524287999 [ 71.678566][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.682035][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.685611][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.689357][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.692826][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.696102][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.700193][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.703517][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.706693][ T7884] ldm_validate_partition_table(): Disk read failed. [ 71.709633][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.713291][ T7884] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.717168][ T7884] Dev loop6: unable to read RDB block 0 [ 71.720620][ T7884] loop6: unable to read partition table [ 71.723308][ T7884] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 71.751192][ T7887] Failed to get privilege flags for destination (handle=0x2:0x9000) [ 71.755298][ T7887] comedi comedi1: pcl812: I/O port conflict (0x4f27,16) [ 71.978240][ T7896] tmpfs: Unknown parameter 'usrquota0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 71.978240][ T7896] 0 [ 72.104957][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 72.104973][ T40] audit: type=1400 audit(1755589721.453:488): avc: denied { ioctl } for pid=7892 comm="syz.3.549" path="socket:[18795]" dev="sockfs" ino=18795 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.222121][ T7929] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.234230][ T7929] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.240057][ T7929] . (unregistering): Released all slaves [ 72.280425][ T7931] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 72.574030][ T40] audit: type=1400 audit(1755589721.943:489): avc: denied { map } for pid=7972 comm="syz.0.575" path="socket:[18939]" dev="sockfs" ino=18939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.603308][ T40] audit: type=1400 audit(1755589721.973:490): avc: denied { read } for pid=7978 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.610665][ T7979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7979 comm=syz.3.577 [ 72.680988][ T7989] libceph: resolve '40' (ret=-3): failed [ 72.740397][ T40] audit: type=1400 audit(1755589722.113:491): avc: denied { mount } for pid=7995 comm="syz.1.584" name="/" dev="autofs" ino=18967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.758159][ T40] audit: type=1400 audit(1755589722.133:492): avc: denied { unmount } for pid=5981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.907981][ T40] audit: type=1400 audit(1755589722.283:493): avc: denied { setopt } for pid=7999 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.915790][ T40] audit: type=1400 audit(1755589722.283:494): avc: denied { connect } for pid=7999 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.308149][ T40] audit: type=1400 audit(1755589722.673:495): avc: denied { load_policy } for pid=8011 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 73.309295][ T8012] SELinux: ebitmap start bit (132096) is beyond the end of the bitmap (1472) [ 73.321724][ T8012] SELinux: failed to load policy [ 73.390807][ T40] audit: type=1400 audit(1755589722.763:496): avc: denied { setopt } for pid=8016 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.473383][ T40] audit: type=1400 audit(1755589722.843:497): avc: denied { write } for pid=8018 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.687763][ T8033] __nla_validate_parse: 12 callbacks suppressed [ 73.687774][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 74.020354][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.600'. [ 74.650726][ T8067] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.854000][ T8053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.898059][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'. [ 74.978749][ T8072] netlink: 21 bytes leftover after parsing attributes in process `syz.0.604'. [ 75.127294][ T8094] trusted_key: syz.0.609 sent an empty control message without MSG_MORE. [ 75.266989][ T8107] program syz.1.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.338915][ T5332] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 75.389542][ T8113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.614'. [ 75.418092][ T8113] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 75.533152][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 75.540960][ T8121] bridge0: entered promiscuous mode [ 75.543450][ T8121] bridge0: port 3(macvlan2) entered blocking state [ 75.548557][ T8121] bridge0: port 3(macvlan2) entered disabled state [ 75.551328][ T8121] macvlan2: entered allmulticast mode [ 75.553375][ T8121] bridge0: entered allmulticast mode [ 75.556814][ T8121] macvlan2: left allmulticast mode [ 75.561333][ T8121] bridge0: left allmulticast mode [ 75.568896][ T8121] bridge0: left promiscuous mode [ 75.678044][ T8125] netlink: 92 bytes leftover after parsing attributes in process `syz.0.618'. [ 75.740955][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'. [ 75.744798][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'. [ 75.751787][ T8129] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=8129 comm=syz.0.619 [ 76.119737][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 76.147066][ T5332] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 76.356696][ T8154] only policy match revision 0 supported [ 76.356708][ T8154] unable to load match [ 76.370781][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.374582][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.429254][ T8160] netlink: 'syz.0.629': attribute type 3 has an invalid length. [ 76.510312][ T8164] @: renamed from vlan0 (while UP) [ 76.547753][ T8168] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 76.581773][ T6053] IPVS: starting estimator thread 0... [ 76.667619][ T5332] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 76.671774][ T8175] IPVS: using max 54 ests per chain, 129600 per kthread [ 76.715656][ T5332] Bluetooth: hci2: unknown advertising packet type: 0x23 [ 76.715682][ T5332] Bluetooth: hci2: Dropping invalid advertising data [ 76.720872][ T5332] Bluetooth: hci2: Malformed LE Event: 0x02 [ 76.724439][ T5332] Bluetooth: hci2: unknown advertising packet type: 0x23 [ 76.724475][ T5332] Bluetooth: hci2: Dropping invalid advertising data [ 76.730385][ T5332] Bluetooth: hci2: Malformed LE Event: 0x02 [ 77.196357][ T8211] macvlan3: entered promiscuous mode [ 77.198940][ T8211] macvlan3: entered allmulticast mode [ 77.202778][ T8212] macvlan4: entered promiscuous mode [ 77.204410][ T8212] macvlan4: entered allmulticast mode [ 77.240097][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 77.240113][ T40] audit: type=1400 audit(1755589726.613:507): avc: denied { unmount } for pid=5981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.391339][ T40] audit: type=1400 audit(1755589726.763:508): avc: denied { setopt } for pid=8232 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.791084][ T8253] dvmrp1: entered allmulticast mode [ 77.869683][ T8266] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 77.934001][ T40] audit: type=1400 audit(1755589727.303:509): avc: denied { ioctl } for pid=8269 comm="syz.4.665" path="/102/file0/file0" dev="9p" ino=35913871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.936998][ T8275] geneve2: entered promiscuous mode [ 77.944602][ T8275] geneve2: entered allmulticast mode [ 78.049481][ T8282] tmpfs: Group quota inode hardlimit too large. [ 78.052932][ T8282] 9p: Unknown uid 00000000004294967295 [ 78.295134][ T8318] program syz.4.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.303605][ T8317] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 78.310444][ T40] audit: type=1400 audit(1755589727.683:510): avc: denied { lock } for pid=8315 comm="syz.0.678" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.323404][ T8314] kvm: pic: non byte read [ 78.327636][ T8314] kvm: pic: level sensitive irq not supported [ 78.328486][ T8314] kvm: pic: non byte read [ 78.335434][ T8314] kvm: pic: level sensitive irq not supported [ 78.335884][ T8314] kvm: pic: non byte read [ 78.342428][ T8314] kvm: pic: level sensitive irq not supported [ 78.342677][ T8314] kvm: pic: non byte read [ 78.347375][ T8314] kvm: pic: level sensitive irq not supported [ 78.348227][ T8314] kvm: pic: non byte read [ 78.353053][ T8314] kvm: pic: level sensitive irq not supported [ 78.353315][ T8314] kvm: pic: non byte read [ 78.359030][ T8314] kvm: pic: level sensitive irq not supported [ 78.359485][ T8314] kvm: pic: non byte read [ 78.366331][ T8314] kvm: pic: level sensitive irq not supported [ 78.366765][ T8314] kvm: pic: non byte read [ 78.374147][ T8314] kvm: pic: level sensitive irq not supported [ 78.374475][ T8314] kvm: pic: non byte read [ 78.392421][ T8318] program syz.4.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.430980][ T8324] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 78.854107][ T8335] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 78.857991][ T8335] exFAT-fs (nullb0): invalid boot record signature [ 78.860050][ T8335] exFAT-fs (nullb0): failed to read boot sector [ 78.861992][ T8335] exFAT-fs (nullb0): failed to recognize exfat type [ 78.891106][ T40] audit: type=1800 audit(1755589728.263:511): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.684" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 78.936133][ T8344] input: syz0 as /devices/virtual/input/input9 [ 79.146450][ T40] audit: type=1400 audit(1755589728.513:512): avc: denied { create } for pid=8362 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 79.173428][ T8367] overlay: Unknown parameter 'fowner' [ 79.203007][ T8369] __nla_validate_parse: 5 callbacks suppressed [ 79.203023][ T8369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.695'. [ 79.215332][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 79.219415][ T8371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.696'. [ 79.222389][ T8371] netem: change failed [ 79.275161][ T8382] delete_channel: no stack [ 79.275361][ T40] audit: type=1400 audit(1755589728.643:513): avc: denied { bind } for pid=8382 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 79.277708][ T8383] fuse: Unknown parameter 'fd0x0000000000000003' [ 79.336910][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 79.350918][ T5332] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 79.376304][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 79.436518][ T40] audit: type=1400 audit(1755589728.803:514): avc: denied { map } for pid=8405 comm="syz.1.708" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.471739][ T40] audit: type=1400 audit(1755589728.843:515): avc: denied { listen } for pid=8412 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.492785][ T40] audit: type=1400 audit(1755589728.863:516): avc: denied { setopt } for pid=8414 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.536511][ T8419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3096 sclass=netlink_route_socket pid=8419 comm=syz.4.712 [ 79.625137][ T8435] netlink: 'syz.0.716': attribute type 4 has an invalid length. [ 79.637735][ T5332] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.123199][ T8475] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 80.128613][ T8475] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 80.184238][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 80.188687][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.191842][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.222982][ T8484] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 80.226820][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 80.229891][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.730'. [ 80.232634][ T8484] netlink: 'syz.3.730': attribute type 18 has an invalid length. [ 80.280464][ T8488] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 80.283639][ T8489] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 80.306166][ T8491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=186 sclass=netlink_route_socket pid=8491 comm=syz.3.733 [ 80.515201][ T8502] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.737'. [ 80.617397][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'. [ 80.655678][ T8523] GUP no longer grows the stack in syz.3.743 (8523): 200000007000-20000000a000 (200000004000) [ 80.659973][ T8523] CPU: 1 UID: 0 PID: 8523 Comm: syz.3.743 Not tainted syzkaller #0 PREEMPT(full) [ 80.660001][ T8523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.660013][ T8523] Call Trace: [ 80.660019][ T8523] [ 80.660026][ T8523] dump_stack_lvl+0x16c/0x1f0 [ 80.660097][ T8523] gup_vma_lookup+0x1d2/0x220 [ 80.660119][ T8523] __get_user_pages+0x243/0x34a0 [ 80.660136][ T8523] ? xsk_setsockopt+0x6db/0x9a0 [ 80.660154][ T8523] ? do_sock_setsockopt+0xf3/0x1d0 [ 80.660170][ T8523] ? __sys_setsockopt+0x1a0/0x230 [ 80.660181][ T8523] ? __x64_sys_setsockopt+0xbd/0x160 [ 80.660192][ T8523] ? __pfx___get_user_pages+0x10/0x10 [ 80.660211][ T8523] __gup_longterm_locked+0x2dd/0x17e0 [ 80.660229][ T8523] ? __pfx___gup_longterm_locked+0x10/0x10 [ 80.660247][ T8523] ? rcu_is_watching+0x12/0xc0 [ 80.660263][ T8523] ? lock_acquire+0x2cd/0x350 [ 80.660282][ T8523] pin_user_pages+0x13c/0x160 [ 80.660298][ T8523] ? __pfx_pin_user_pages+0x10/0x10 [ 80.660314][ T8523] ? xdp_umem_create+0x652/0x1270 [ 80.660332][ T8523] xdp_umem_create+0x73c/0x1270 [ 80.660351][ T8523] xsk_setsockopt+0x6db/0x9a0 [ 80.660367][ T8523] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.660384][ T8523] ? __fget_files+0x204/0x3c0 [ 80.660397][ T8523] ? selinux_socket_setsockopt+0x6a/0x80 [ 80.660413][ T8523] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.660429][ T8523] do_sock_setsockopt+0xf3/0x1d0 [ 80.660444][ T8523] __sys_setsockopt+0x1a0/0x230 [ 80.660458][ T8523] __x64_sys_setsockopt+0xbd/0x160 [ 80.660473][ T8523] ? syscall_trace_enter+0x89/0x240 [ 80.660493][ T8523] do_syscall_64+0xcd/0x4c0 [ 80.660514][ T8523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.660532][ T8523] RIP: 0033:0x7fe69118ebe9 [ 80.660547][ T8523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.660566][ T8523] RSP: 002b:00007fe692068038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.660590][ T8523] RAX: ffffffffffffffda RBX: 00007fe6913b5fa0 RCX: 00007fe69118ebe9 [ 80.660598][ T8523] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000001 [ 80.660605][ T8523] RBP: 00007fe691211e19 R08: 0000000000000020 R09: 0000000000000000 [ 80.660613][ T8523] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 80.660620][ T8523] R13: 00007fe6913b6038 R14: 00007fe6913b5fa0 R15: 00007ffda27482e8 [ 80.660632][ T8523] [ 80.782294][ T8529] macvlan0: entered promiscuous mode [ 80.784503][ T8529] batadv_slave_1: entered promiscuous mode [ 80.893627][ T8537] SELinux: policydb magic number 0x363a3020 does not match expected magic number 0xf97cff8c [ 80.898939][ T8537] SELinux: failed to load policy [ 80.930592][ T8547] program syz.4.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.935345][ T8548] trusted_key: encrypted_key: insufficient parameters specified [ 80.982246][ T8550] ipvlan2: entered promiscuous mode [ 80.985122][ T8550] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 80.992438][ T8550] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 81.379905][ T8511] ceph: No mds server is up or the cluster is laggy [ 81.382407][ T8524] ceph: No mds server is up or the cluster is laggy [ 81.405158][ T8572] overlay: filesystem on ./bus not supported as upperdir [ 81.410725][ T8574] evm: overlay not supported [ 81.413958][ T8572] 9pnet_fd: p9_fd_create_tcp (8572): problem connecting socket to 127.0.0.1 [ 81.479918][ T1333] cfg80211: failed to load regulatory.db [ 81.575139][ T8598] dvmrp1: left allmulticast mode [ 81.699511][ T8615] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 81.799452][ T6383] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 81.928588][ T8632] nvme_fabrics: missing parameter 'transport=%s' [ 81.931209][ T8632] nvme_fabrics: missing parameter 'nqn=%s' [ 81.947607][ T6383] usb 6-1: Using ep0 maxpacket: 8 [ 81.951361][ T6383] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 81.955533][ T6383] usb 6-1: config 0 has no interface number 0 [ 81.959232][ T6383] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.964680][ T6383] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 81.970765][ T6383] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.976002][ T6383] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 1400, setting to 1024 [ 81.982205][ T6383] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.988552][ T6383] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 81.992725][ T6383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.999848][ T6383] usb 6-1: config 0 descriptor?? [ 82.006073][ T8591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.012495][ T8635] team0: Port device team_slave_0 removed [ 82.012538][ T6383] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 82.110175][ T8640] lo speed is unknown, defaulting to 1000 [ 82.113199][ T8640] lo speed is unknown, defaulting to 1000 [ 82.115315][ T8640] lo speed is unknown, defaulting to 1000 [ 82.152782][ T8640] infiniband syz2: set down [ 82.154664][ T6053] lo speed is unknown, defaulting to 1000 [ 82.156689][ T8640] infiniband syz2: added lo [ 82.173614][ T8640] RDS/IB: syz2: added [ 82.175046][ T8640] smc: adding ib device syz2 with port count 1 [ 82.177205][ T8644] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 82.177229][ T8644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.183555][ T8640] smc: ib device syz2 port 1 has pnetid [ 82.185393][ T6052] lo speed is unknown, defaulting to 1000 [ 82.187737][ T8640] lo speed is unknown, defaulting to 1000 [ 82.211909][ T6053] usb 6-1: USB disconnect, device number 16 [ 82.220857][ T6053] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 82.258598][ T8640] lo speed is unknown, defaulting to 1000 [ 82.328974][ T8640] lo speed is unknown, defaulting to 1000 [ 82.393868][ T8640] lo speed is unknown, defaulting to 1000 [ 82.702137][ T8662] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 82.795711][ T8670] pimreg: entered allmulticast mode [ 82.827782][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 82.828011][ T40] audit: type=1400 audit(1755589732.203:624): avc: denied { create } for pid=8673 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.828443][ T8675] overlayfs: conflicting options: userxattr,redirect_dir=on [ 82.831034][ T40] audit: type=1400 audit(1755589732.203:625): avc: denied { setopt } for pid=8673 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.879216][ T40] audit: type=1400 audit(1755589732.253:626): avc: denied { create } for pid=8685 comm="syz.3.789" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.890808][ T40] audit: type=1400 audit(1755589732.253:627): avc: denied { unlink } for pid=8685 comm="syz.3.789" name="file0" dev="tmpfs" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.904144][ T40] audit: type=1400 audit(1755589732.253:628): avc: denied { create } for pid=8685 comm="syz.3.789" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.913788][ T40] audit: type=1400 audit(1755589732.253:629): avc: denied { read } for pid=8687 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 82.925010][ T40] audit: type=1400 audit(1755589732.293:630): avc: denied { associate } for pid=8691 comm="syz.1.791" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.036779][ T40] audit: type=1400 audit(1755589732.403:631): avc: denied { read write } for pid=8703 comm="syz.4.794" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.044157][ T40] audit: type=1400 audit(1755589732.403:632): avc: denied { open } for pid=8703 comm="syz.4.794" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.108592][ T40] audit: type=1400 audit(1755589732.483:633): avc: denied { getopt } for pid=8705 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.639757][ T8742] IPVS: persistence engine module ip_vs_pe_s not found [ 83.659552][ T8743] IPVS: persistence engine module ip_vs_pe_s not found [ 84.034280][ T8768] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 84.044064][ T8768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.322121][ T8778] tipc: Enabling not permitted [ 84.324290][ T8778] tipc: Enabling of bearer rejected, failed to enable media [ 84.328247][ T8778] unknown channel width for channel at 909000KHz? [ 84.331274][ T8779] unknown channel width for channel at 909000KHz? [ 84.375886][ T8781] tipc: Enabling of bearer rejected, failed to enable media [ 84.381653][ T8781] syzkaller0: entered promiscuous mode [ 84.384011][ T8781] syzkaller0: entered allmulticast mode [ 84.433239][ T8747] syz.1.802 (8747) used greatest stack depth: 20128 bytes left [ 84.702824][ T8800] unknown channel width for channel at 909000KHz? [ 85.324711][ T8813] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 85.340805][ T8813] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 85.349469][ T8813] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 85.353365][ T8813] ref_ctr increment failed for inode: 0x3dd offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88803324a040 [ 85.431185][ T8826] fuse: Bad value for 'fd' [ 85.539248][ T5332] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 85.632698][ T8849] netlink: 'syz.1.835': attribute type 10 has an invalid length. [ 85.669504][ T8854] overlayfs: missing 'workdir' [ 85.675229][ T8858] netlink: 'syz.4.838': attribute type 10 has an invalid length. [ 85.678943][ T8858] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 85.887845][ T8876] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 512, id = 0 [ 85.888444][ T8875] IPVS: stopping backup sync thread 8876 ... [ 86.481644][ T8897] kvm: MWAIT instruction emulated as NOP! [ 86.967876][ T841] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 87.128158][ T841] usb 9-1: Using ep0 maxpacket: 8 [ 87.131778][ T841] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 87.135036][ T841] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.138905][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.142493][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.147344][ T841] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.152164][ T8805] __nla_validate_parse: 8 callbacks suppressed [ 87.152176][ T8805] netlink: 52 bytes leftover after parsing attributes in process `syz.3.821'. [ 87.152689][ T841] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.165863][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.299051][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.302334][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.305479][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.309527][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.312648][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.315504][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.318487][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.321319][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.324100][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 87.369936][ T5332] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 87.372133][ T841] usb 9-1: usb_control_msg returned -32 [ 87.374107][ T841] usbtmc 9-1:16.0: can't read capabilities [ 87.686066][ T8963] netlink: 'syz.0.873': attribute type 3 has an invalid length. [ 87.837488][ T40] kauditd_printk_skb: 7852 callbacks suppressed [ 87.837504][ T40] audit: type=1326 audit(1755589737.255:8486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.850073][ T40] audit: type=1326 audit(1755589737.255:8487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.861155][ T40] audit: type=1326 audit(1755589737.255:8488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.870570][ T40] audit: type=1326 audit(1755589737.255:8489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.881444][ T40] audit: type=1326 audit(1755589737.255:8490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.890824][ T40] audit: type=1326 audit(1755589737.255:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.892563][ T8973] lo speed is unknown, defaulting to 1000 [ 87.900892][ T40] audit: type=1326 audit(1755589737.265:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.911554][ T40] audit: type=1326 audit(1755589737.265:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.921702][ T40] audit: type=1326 audit(1755589737.265:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 87.931854][ T40] audit: type=1326 audit(1755589737.265:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.3.870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69118ebe9 code=0x50000 [ 88.023387][ T8984] ALSA: seq fatal error: cannot create timer (-19) [ 88.087821][ T6037] usb 9-1: USB disconnect, device number 5 [ 88.280183][ T9013] bridge: RTM_NEWNEIGH with invalid ether address [ 88.507535][ T57] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 88.657511][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 88.664480][ T57] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.673296][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.677667][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.681884][ T57] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.687272][ T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.691635][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.902468][ T57] usb 6-1: GET_CAPABILITIES returned 0 [ 88.905189][ T57] usbtmc 6-1:16.0: can't read capabilities [ 89.141037][ T9012] sp0: Synchronizing with TNC [ 89.152845][ T9053] ISOFS: Unable to identify CD-ROM format. [ 89.239373][ T840] usb 6-1: USB disconnect, device number 17 [ 89.368211][ T9070] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 2, id = 0 [ 89.391361][ T9068] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 89.854430][ T9091] fuse: Bad value for 'rootmode' [ 90.459804][ T9150] input: syz1 as /devices/virtual/input/input11 [ 90.570035][ T9170] overlayfs: failed to resolve 'obj_type=overlay': -2 [ 90.601545][ T9176] all: renamed from lo (while UP) [ 90.691178][ T9192] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 90.833486][ T9202] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 90.861097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.864247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 90.868106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.871231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.874017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.876364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.879739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.880336][ T9223] Driver unsupported XDP return value 0 on prog (id 126) dev N/A, expect packet loss! [ 90.882798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.882828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.883045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.953102][ T9225] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 91.187605][ T9257] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.326143][ T9268] overlayfs: failed to clone upperpath [ 91.374241][ T9277] overlayfs: upper fs does not support tmpfile. [ 91.402249][ T9283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.407611][ T5332] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 91.411013][ T5332] Bluetooth: hci2: Injecting HCI hardware error event [ 91.413692][ T5332] Bluetooth: hci2: hardware error 0x00 [ 91.430923][ T5978] Bluetooth: hci1: unexpected event for opcode 0x080e [ 92.172132][ T9298] MPI: mpi too large (16392 bits) [ 92.278331][ T9312] block nbd1: shutting down sockets [ 92.284278][ T9315] dlm: Unknown command passed to DLM device : 255 [ 92.284278][ T9315] [ 92.378115][ T9326] __nla_validate_parse: 74 callbacks suppressed [ 92.378130][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 92.577807][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'. [ 92.600299][ T9342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.603866][ T9342] bond3: (slave bond4): Enslaving as an active interface with an up link [ 92.611687][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 92.616380][ T9349] netlink: 100 bytes leftover after parsing attributes in process `syz.0.986'. [ 92.650022][ T9359] overlayfs: failed to clone upperpath [ 92.821058][ T9373] netlink: 'syz.0.993': attribute type 10 has an invalid length. [ 92.844548][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.992'. [ 92.845786][ T9381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.856213][ T9381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.900021][ T9381] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 92.930509][ T6652] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.934941][ T6652] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.939579][ T6652] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.943802][ T6652] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.113178][ T40] kauditd_printk_skb: 31980 callbacks suppressed [ 93.113196][ T40] audit: type=1400 audit(1755589742.535:40476): avc: denied { setattr } for pid=9403 comm="syz.1.1003" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 93.205009][ T9417] IPVS: set_ctl: invalid protocol: 12078 108.101.48.0:20000 [ 93.242231][ T40] audit: type=1400 audit(1755589742.665:40477): avc: denied { ioctl } for pid=9432 comm="syz.1.1009" path="socket:[26977]" dev="sockfs" ino=26977 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 93.278788][ T9430] No source specified [ 93.323008][ T9444] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1013'. [ 93.477797][ T5332] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 93.510582][ T9459] fuse: blksize only supported for fuseblk [ 93.513384][ T9458] fuse: blksize only supported for fuseblk [ 93.557771][ T6053] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.709038][ T6053] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 93.712423][ T6053] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 93.716641][ T6053] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.721452][ T6053] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.725925][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.731350][ T6053] usb 5-1: Product: syz [ 93.733272][ T6053] usb 5-1: Manufacturer: syz [ 93.735486][ T6053] usb 5-1: SerialNumber: syz [ 93.748675][ T6053] usb 5-1: config 0 descriptor?? [ 93.752838][ T6053] hub 5-1:0.0: bad descriptor, ignoring hub [ 93.755475][ T6053] hub 5-1:0.0: probe with driver hub failed with error -5 [ 93.757038][ T9472] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1021'. [ 93.762317][ T6053] usb 5-1: selecting invalid altsetting 0 [ 93.919437][ T40] audit: type=1400 audit(1755589743.345:40478): avc: denied { checkpoint_restore } for pid=9476 comm="syz.4.1023" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.920217][ T9477] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 93.937195][ T9477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 93.953022][ T9477] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 93.959009][ T9477] vlan2: entered allmulticast mode [ 93.960815][ T9477] veth1: entered allmulticast mode [ 94.048527][ T40] audit: type=1400 audit(1755589743.475:40479): avc: denied { write } for pid=9482 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.224328][ T9490] tmpfs: Too few inodes for current use [ 94.229280][ T9490] tmpfs: Too few inodes for current use [ 94.261583][ T9497] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 94.319683][ T9504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9504 comm=syz.3.1031 [ 94.325363][ T9504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1031'. [ 94.379956][ T9508] tipc: Enabling of bearer rejected, failed to enable media [ 94.479729][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 94.484691][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1038'. [ 94.489500][ T9524] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9524 comm=syz.3.1038 [ 94.495196][ T9524] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9524 comm=syz.3.1038 [ 94.506998][ T9522] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 94.597866][ T40] audit: type=1400 audit(1755589744.015:40480): avc: denied { write } for pid=9542 comm="syz.4.1045" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 94.610582][ T40] audit: type=1400 audit(1755589744.015:40481): avc: denied { open } for pid=9542 comm="syz.4.1045" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 94.648127][ T9446] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 94.651933][ T9446] usb 5-1: device reset changed ep0 maxpacket size! [ 94.655363][ T841] usb 5-1: USB disconnect, device number 3 [ 94.656418][ T9554] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 94.669256][ T40] audit: type=1400 audit(1755589744.095:40482): avc: denied { read } for pid=9553 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.708701][ T9556] overlayfs: conflicting lowerdir path [ 94.818773][ T841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.830627][ T6037] IPVS: starting estimator thread 0... [ 94.832239][ T9550] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 94.917900][ T9561] IPVS: using max 32 ests per chain, 76800 per kthread [ 94.919378][ T9565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.978655][ T841] usb 5-1: Using ep0 maxpacket: 16 [ 94.981100][ T40] audit: type=1400 audit(1755589744.405:40483): avc: denied { getopt } for pid=9572 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.982455][ T40] audit: type=1400 audit(1755589744.405:40484): avc: denied { create } for pid=9572 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 94.994205][ T841] usb 5-1: config 0 has no interfaces? [ 95.003156][ T841] usb 5-1: New USB device found, idVendor=1608, idProduct=0212, bcdDevice=70.17 [ 95.008254][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.011570][ T841] usb 5-1: Product: syz [ 95.013303][ T841] usb 5-1: Manufacturer: syz [ 95.015210][ T841] usb 5-1: SerialNumber: syz [ 95.018382][ T841] usb 5-1: config 0 descriptor?? [ 95.109464][ T40] audit: type=1400 audit(1755589744.535:40485): avc: denied { getattr } for pid=9585 comm="syz.1.1058" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.231616][ T6037] usb 5-1: USB disconnect, device number 4 [ 95.241513][ T9591] kvm: kvm [9590]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 95.245367][ T9591] kvm: kvm [9590]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 95.268731][ T9591] kvm: kvm [9590]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 95.294569][ T9591] kvm: kvm [9590]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 95.299320][ T9591] kvm: kvm [9590]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 95.317414][ T9591] kvm_intel: kvm [9590]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 95.560732][ T9610] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 95.754342][ T9612] trusted_key: encrypted_key: master key parameter is missing [ 96.028511][ T9639] netlink: 'syz.0.1072': attribute type 10 has an invalid length. [ 96.036566][ T9639] team0: Port device geneve0 added [ 96.106005][ T9638] delete_channel: no stack [ 96.155717][ T9646] (syz.0.1074,9646,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 96.245133][ T9658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=361 sclass=netlink_route_socket pid=9658 comm=syz.0.1078 [ 96.402613][ T9673] overlayfs: failed to clone upperpath [ 96.495514][ T9683] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 96.497631][ T9683] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.502509][ T9683] vhci_hcd vhci_hcd.0: Device attached [ 96.515310][ T9687] netlink: 'syz.3.1089': attribute type 8 has an invalid length. [ 96.520251][ T9684] vhci_hcd: connection closed [ 96.520469][ T6644] vhci_hcd: stop threads [ 96.524430][ T6644] vhci_hcd: release socket [ 96.526375][ T6644] vhci_hcd: disconnect device [ 97.096414][ T9744] syz.0.1098: attempt to access beyond end of device [ 97.096414][ T9744] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 97.102875][ T9744] XFS (nbd0): SB validate failed with error -5. [ 97.423629][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.549298][ T9772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.560224][ T9772] bridge_slave_0: left allmulticast mode [ 97.562299][ T9772] bridge_slave_0: left promiscuous mode [ 97.564185][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.569899][ T9772] bridge_slave_1: left allmulticast mode [ 97.572169][ T9772] bridge_slave_1: left promiscuous mode [ 97.573964][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.579789][ T9772] bond0: (slave bond_slave_0): Releasing backup interface [ 97.583933][ T9772] bond0: (slave bond_slave_1): Releasing backup interface [ 97.590183][ T9772] team0: Port device team_slave_0 removed [ 97.594156][ T9772] team0: Port device team_slave_1 removed [ 97.596440][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.599374][ T9772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.603707][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.606882][ T9772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.614258][ T9772] vlan2: left promiscuous mode [ 97.615882][ T9772] bridge0: left promiscuous mode [ 97.618111][ T9772] bridge1: port 1(vlan2) entered disabled state [ 97.620999][ T9772] gretap1: left allmulticast mode [ 97.622748][ T9772] bridge1: port 2(gretap1) entered disabled state [ 97.627776][ T9772] batman_adv: batadv0: Removing interface: gretap2 [ 97.666914][ T9782] __nla_validate_parse: 8 callbacks suppressed [ 97.666929][ T9782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1109'. [ 97.762019][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 97.872046][ T9810] netlink: 'syz.4.1120': attribute type 2 has an invalid length. [ 97.874974][ T9810] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1120'. [ 97.878465][ T9811] loop7: detected capacity change from 0 to 7 [ 97.881952][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.885849][ C0] buffer_io_error: 7 callbacks suppressed [ 97.885860][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.892467][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.896279][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.899409][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.902566][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.905361][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.908471][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.911262][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.914804][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.918380][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.921570][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.924486][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.928789][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.932123][ T6130] ldm_validate_partition_table(): Disk read failed. [ 97.934667][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.938886][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.944009][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.947923][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.951467][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.955311][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.958939][ T6130] Dev loop7: unable to read RDB block 0 [ 97.962083][ T6130] loop7: unable to read partition table [ 97.964666][ T6130] loop7: partition table beyond EOD, truncated [ 97.970706][ T9811] ldm_validate_partition_table(): Disk read failed. [ 97.974598][ T9811] Dev loop7: unable to read RDB block 0 [ 97.978638][ T9811] loop7: unable to read partition table [ 97.981213][ T9811] loop7: partition table beyond EOD, truncated [ 97.985088][ T9811] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 98.023861][ T9802] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 98.045426][ T9802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.053531][ T9802] bond2: (slave ip6gretap1): making interface the new active one [ 98.057199][ T9802] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 98.124287][ T9845] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.128296][ T9847] trusted_key: encrypted_key: master key parameter is missing [ 98.132506][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 98.132520][ T40] audit: type=1400 audit(1755589747.555:40499): avc: denied { ioctl } for pid=9846 comm="syz.1.1133" path="socket:[27369]" dev="sockfs" ino=27369 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.606012][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.627090][ T40] audit: type=1400 audit(1755589748.045:40500): avc: denied { execute } for pid=9857 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 98.637611][ T40] audit: type=1400 audit(1755589748.045:40501): avc: denied { execute_no_trans } for pid=9857 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 98.667274][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.723046][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.769163][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.772758][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.776089][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.782095][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.784911][ T40] audit: type=1400 audit(1755589748.205:40502): avc: denied { mount } for pid=9867 comm="syz.3.1142" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 98.795118][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.799274][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.819161][ T9865] lo speed is unknown, defaulting to 1000 [ 99.129850][ T9878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.154113][ T45] bond0 (unregistering): Released all slaves [ 99.161227][ T45] bond1 (unregistering): Released all slaves [ 99.218808][ T45] tipc: Disabling bearer [ 99.221151][ T45] tipc: Left network mode [ 99.229898][ T9890] loop6: detected capacity change from 0 to 63 [ 99.249021][ T9865] chnl_net:caif_netlink_parms(): no params data found [ 99.311570][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.314559][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.317753][ T9865] bridge_slave_0: entered allmulticast mode [ 99.321154][ T9865] bridge_slave_0: entered promiscuous mode [ 99.325980][ T9865] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.330535][ T9865] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.333563][ T9865] bridge_slave_1: entered allmulticast mode [ 99.336838][ T9865] bridge_slave_1: entered promiscuous mode [ 99.384458][ T9865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.392384][ T9865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.427974][ T9865] team0: Port device team_slave_0 added [ 99.439326][ T9865] team0: Port device team_slave_1 added [ 99.475040][ T9865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.479400][ T9865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.490575][ T9865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.496302][ T9865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.499817][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 99.501074][ T9865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.515128][ T9865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.580660][ T45] hsr_slave_0: left promiscuous mode [ 99.583830][ T45] hsr_slave_1: left promiscuous mode [ 99.590257][ T45] veth1_macvtap: left promiscuous mode [ 99.592647][ T45] veth0_macvtap: left promiscuous mode [ 99.595027][ T45] veth1_vlan: left promiscuous mode [ 99.597234][ T45] veth0_vlan: left promiscuous mode [ 99.698840][ T9901] overlayfs: failed to clone upperpath [ 99.764567][ T9902] cgroup: Need name or subsystem set [ 99.772628][ T9865] hsr_slave_0: entered promiscuous mode [ 99.776232][ T9865] hsr_slave_1: entered promiscuous mode [ 99.778927][ T9865] debugfs: 'hsr0' already exists in 'hsr' [ 99.781404][ T9865] Cannot create hsr debugfs directory [ 99.847273][ T9907] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 99.862027][ T40] audit: type=1400 audit(1755589749.285:40503): avc: denied { listen } for pid=9906 comm="syz.3.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.933453][ T9865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.939660][ T9865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.945746][ T9865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.952321][ T9865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.975520][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 99.981403][ T9913] netlink: 'syz.3.1154': attribute type 4 has an invalid length. [ 99.988079][ T9913] netlink: 'syz.3.1154': attribute type 4 has an invalid length. [ 99.995800][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 100.011177][ T9865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.024263][ T9865] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.031080][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.033648][ T9725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.041315][ T9709] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.044362][ T9709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.050403][ T9925] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.1155'. [ 100.054259][ T9925] openvswitch: netlink: Message has 5 unknown bytes. [ 100.057909][ T9925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9925 comm=syz.3.1155 [ 100.058292][ T45] IPVS: stop unused estimator thread 0... [ 100.106052][ T9931] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1156'. [ 100.157086][ T9865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.186314][ T9952] overlayfs: missing 'lowerdir' [ 100.230945][ T40] audit: type=1400 audit(1755589749.655:40504): avc: denied { setopt } for pid=9954 comm="syz.4.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.279090][ T9865] veth0_vlan: entered promiscuous mode [ 100.283202][ T9865] veth1_vlan: entered promiscuous mode [ 100.294694][ T9865] veth0_macvtap: entered promiscuous mode [ 100.298365][ T9865] veth1_macvtap: entered promiscuous mode [ 100.309638][ T9865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.319470][ T9865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.326339][ T9725] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.331283][ T9725] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.334234][ T9725] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.340350][ T9725] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.345184][ T40] audit: type=1400 audit(1755589749.765:40505): avc: denied { watch_sb } for pid=9963 comm="syz.3.1166" path="/388/file0" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.376583][ T6660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.384161][ T6660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.394500][ T9709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.398068][ T9709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.407358][ T40] audit: type=1400 audit(1755589749.825:40506): avc: denied { mounton } for pid=9865 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 100.433900][ T9980] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 100.679630][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 100.707512][ T40] audit: type=1400 audit(1755589750.125:40507): avc: denied { bind } for pid=10034 comm="syz.4.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.743001][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1180'. [ 100.745945][T10041] IPVS: Unknown mcast interface: [ 100.755255][T10042] libceph: resolve ' [ 100.755255][T10042] -&fYǝa2i [ 100.755255][T10042] .?&*&' (ret=-3): failed [ 100.837588][ T5332] Bluetooth: hci3: command tx timeout [ 100.987558][ T57] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 101.137560][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 101.141520][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.147256][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.151546][ T57] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.155300][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.160143][ T57] usb 9-1: config 0 descriptor?? [ 101.366357][ T57] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 101.567299][T10045] iowarrior 9-1:0.0: Error -90 while submitting URB [ 101.573284][ T40] audit: type=1400 audit(1755589750.995:40508): avc: denied { listen } for pid=10043 comm="syz.4.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 101.573483][T10045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=10045 comm=syz.4.1182 [ 101.735371][T10074] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 101.742225][T10078] netlink: 'syz.0.1191': attribute type 20 has an invalid length. [ 101.901557][ T5332] Bluetooth: hci1: unknown advertising packet type: 0xff [ 101.901605][ T5332] Bluetooth: hci1: Malformed LE Event: 0x02 [ 102.038282][T10094] /dev/sr0: Can't open blockdev [ 102.092992][T10106] syzkaller0: entered promiscuous mode [ 102.094851][T10106] syzkaller0: entered allmulticast mode [ 102.097027][T10105] tipc: Started in network mode [ 102.100651][T10105] tipc: Node identity 32dc0667a1ea, cluster identity 4711 [ 102.103643][T10105] tipc: Enabled bearer , priority 0 [ 102.119110][T10105] tipc: Resetting bearer [ 102.391727][T10105] tipc: Disabling bearer [ 102.516776][T10126] ALSA: seq fatal error: cannot create timer (-22) [ 102.611323][T10131] netlink: 'syz.5.1209': attribute type 29 has an invalid length. [ 102.616687][T10133] netlink: 'syz.5.1209': attribute type 6 has an invalid length. [ 102.628647][T10133] netlink: 'syz.5.1209': attribute type 5 has an invalid length. [ 102.632634][T10133] netlink: 'syz.5.1209': attribute type 4 has an invalid length. [ 102.695376][T10142] afs: Unknown parameter 'dy\' [ 102.749983][T10146] netlink: 'syz.5.1214': attribute type 1 has an invalid length. [ 102.807096][T10147] veth1_macvtap: left promiscuous mode [ 102.809532][T10147] macsec0: entered promiscuous mode [ 102.917871][ T5332] Bluetooth: hci3: command tx timeout [ 102.985461][T10157] ALSA: seq fatal error: cannot create timer (-16) [ 103.041505][T10168] __nla_validate_parse: 5 callbacks suppressed [ 103.041521][T10168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'. [ 103.049117][T10168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'. [ 103.053495][T10168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'. [ 103.057315][T10168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'. [ 103.126772][T10174] tipc: Cannot configure node identity twice [ 103.244124][T10181] netlink: zone id is out of range [ 103.245905][T10181] netlink: zone id is out of range [ 103.247850][T10181] netlink: zone id is out of range [ 103.249651][T10181] netlink: zone id is out of range [ 103.251543][T10181] netlink: zone id is out of range [ 103.253202][T10181] netlink: zone id is out of range [ 103.254852][T10181] netlink: zone id is out of range [ 103.256513][T10181] netlink: zone id is out of range [ 103.258288][T10181] netlink: zone id is out of range [ 103.259937][T10181] netlink: zone id is out of range [ 103.325316][T10190] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1226'. [ 103.334577][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.337512][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.410511][T10183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.420286][T10183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.501293][T10183] batman_adv: batadv0: Interface deactivated: gretap1 [ 103.579216][ T6660] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.582289][ T6660] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.585556][ T6660] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.585762][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 103.585772][ T40] audit: type=1400 audit(1755589753.005:40513): avc: denied { getopt } for pid=10200 comm="syz.5.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.589524][ T6660] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.592445][ T40] audit: type=1400 audit(1755589753.025:40514): avc: denied { bind } for pid=10200 comm="syz.5.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.707280][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1235'. [ 103.708105][T10216] netlink: 'syz.5.1235': attribute type 1 has an invalid length. [ 103.728330][T10217] veth3: entered promiscuous mode [ 103.774111][ T6032] usb 9-1: USB disconnect, device number 6 [ 103.860873][T10228] 9pnet_fd: Insufficient options for proto=fd [ 103.896029][ T40] audit: type=1326 audit(1755589753.315:40515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.5.1239" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0053d8ebe9 code=0x0 [ 104.106889][T10251] netlink: 'syz.3.1246': attribute type 23 has an invalid length. [ 104.137669][ T40] audit: type=1400 audit(1755589753.555:40516): avc: denied { map } for pid=10252 comm="syz.3.1247" path="socket:[33457]" dev="sockfs" ino=33457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.175199][T10257] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 104.178779][T10257] netlink: 'syz.3.1248': attribute type 4 has an invalid length. [ 104.182279][T10257] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1248'. [ 104.248600][ T6032] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 104.267064][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1251'. [ 104.267099][T10265] netlink: 'syz.3.1251': attribute type 7 has an invalid length. [ 104.267111][T10265] netlink: 'syz.3.1251': attribute type 8 has an invalid length. [ 104.267123][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 104.270464][T10265] erspan0: entered promiscuous mode [ 104.287319][T10265] batadv_slave_1: entered promiscuous mode [ 104.291548][T10265] erspan0: left promiscuous mode [ 104.294725][T10265] batadv_slave_1: left promiscuous mode [ 104.418322][ T6032] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 104.422809][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.427390][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.431641][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.435121][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.438483][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.442395][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.445242][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.448681][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.452385][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.455671][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.459181][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.463061][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.466708][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.470859][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.476478][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.479787][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.482778][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.486329][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.490294][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.493623][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.497107][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.500473][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.504506][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.509195][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.513672][ T6032] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 104.517367][ T6032] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 104.520850][T10271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.526252][ T6032] usb 9-1: Product: syz [ 104.527825][ T6032] usb 9-1: Manufacturer: syz [ 104.529435][ T6032] usb 9-1: SerialNumber: syz [ 104.532462][ T6032] usb 9-1: config 0 descriptor?? [ 104.538426][ T6032] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 104.568495][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 104.605116][ T40] audit: type=1400 audit(1755589754.025:40517): avc: denied { mounton } for pid=10284 comm="syz.0.1256" path="mnt:[4026532872]" dev="nsfs" ino=4026532872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.605269][T10285] netlink: 'syz.0.1256': attribute type 4 has an invalid length. [ 104.619102][T10285] netlink: 'syz.0.1256': attribute type 4 has an invalid length. [ 104.687168][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=10287 comm=syz.0.1257 [ 104.741648][ T6032] usb 9-1: USB disconnect, device number 7 [ 104.745280][ T6032] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 104.997963][ T5332] Bluetooth: hci3: command tx timeout [ 105.579468][ T40] audit: type=1400 audit(1755589755.005:40518): avc: denied { write } for pid=10356 comm="syz.0.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 105.604415][T10358] gfs2: not a GFS2 filesystem [ 105.615786][T10360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.717185][ T40] audit: type=1400 audit(1755589755.135:40519): avc: denied { setattr } for pid=10365 comm="syz.5.1281" name="SCTPv6" dev="sockfs" ino=35331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.731109][ T40] audit: type=1400 audit(1755589755.145:40520): avc: denied { append } for pid=10365 comm="syz.5.1281" name="video9" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 106.177558][ T1333] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 106.359980][ T1333] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 106.364046][ T1333] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.369388][ T1333] usb 10-1: config 0 interface 0 has no altsetting 0 [ 106.374055][ T1333] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.379214][ T1333] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.383091][ T1333] usb 10-1: Product: syz [ 106.385089][ T1333] usb 10-1: Manufacturer: syz [ 106.387212][ T1333] usb 10-1: SerialNumber: syz [ 106.391031][ T1333] usb 10-1: config 0 descriptor?? [ 106.394399][ T1333] hub 10-1:0.0: bad descriptor, ignoring hub [ 106.396943][ T1333] hub 10-1:0.0: probe with driver hub failed with error -5 [ 106.401768][ T1333] usb 10-1: selecting invalid altsetting 0 [ 106.597915][ T841] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 106.615817][ T40] audit: type=1400 audit(1755589756.035:40521): avc: denied { getopt } for pid=10408 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.704033][T10417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10417 comm=syz.0.1297 [ 106.705604][T10418] netlink: 'syz.0.1297': attribute type 1 has an invalid length. [ 106.731545][T10417] bond3: (slave bridge3): making interface the new active one [ 106.735323][T10417] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 106.747690][ T841] usb 9-1: Using ep0 maxpacket: 8 [ 106.751459][ T841] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 106.755336][ T841] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.760665][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.764571][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.768885][ T841] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.774735][ T841] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.778855][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.810975][T10431] netlink: 'syz.0.1303': attribute type 3 has an invalid length. [ 106.848304][T10435] binder: BINDER_SET_CONTEXT_MGR already set [ 106.851006][T10435] binder: 10434:10435 ioctl 4018620d 200000000100 returned -16 [ 106.855327][T10435] binder_alloc: binder_alloc_mmap_handler: 10434 200000ffd000-200001000000 already mapped failed -16 [ 106.855357][T10436] binder: BINDER_SET_CONTEXT_MGR already set [ 106.862310][T10436] binder: 10434:10436 ioctl 4018620d 2000000002c0 returned -16 [ 106.893037][ T40] audit: type=1400 audit(1755589756.315:40522): avc: denied { setattr } for pid=10439 comm="syz.3.1307" name="NETLINK" dev="sockfs" ino=36008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.990337][ T841] usb 9-1: usb_control_msg returned -32 [ 106.992432][ T841] usbtmc 9-1:16.0: can't read capabilities [ 107.080624][T10457] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 107.307646][T10373] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 107.337766][T10491] vcan1: entered allmulticast mode [ 107.346248][T10492] usbtmc 9-1:16.0: control status returned 0 [ 107.378160][T10495] overlayfs: failed to clone upperpath [ 107.457597][ T6383] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.457666][T10373] usb 10-1: device descriptor read/64, error -71 [ 107.547149][ T6042] usb 9-1: USB disconnect, device number 8 [ 107.610253][ T6383] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.614920][ T6383] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 107.620907][ T6383] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.624550][ T6383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.627992][ T6383] usb 5-1: Product: syz [ 107.630050][ T6383] usb 5-1: Manufacturer: syz [ 107.632382][ T6383] usb 5-1: SerialNumber: syz [ 107.638100][ T6383] cdc_mbim 5-1:1.0: skipping garbage [ 107.707534][T10373] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 107.837647][T10373] usb 10-1: device descriptor read/64, error -71 [ 107.839078][T10477] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 108.077600][T10373] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 108.098120][T10373] usb 10-1: device descriptor read/8, error -71 [ 108.144905][T10501] cgroup: fork rejected by pids controller in /syz4 [ 108.348180][T10373] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 108.368853][T10373] usb 10-1: device descriptor read/8, error -71 [ 108.447188][T10477] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 108.449901][ T6383] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 108.452158][ T6383] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 108.478510][ T1333] usb 10-1: USB disconnect, device number 2 [ 108.598410][ T6032] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 108.617936][ T1333] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 108.654393][ T6383] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 108.656852][ T6383] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 108.659878][ T6383] wwan wwan0: port wwan0mbim0 attached [ 108.663248][ T6383] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, c6:74:16:96:82:f2 [ 108.686729][T10615] __nla_validate_parse: 10 callbacks suppressed [ 108.686741][T10615] netlink: 75 bytes leftover after parsing attributes in process `syz.3.1334'. [ 108.747597][ T1333] usb 10-1: device descriptor read/64, error -71 [ 108.747921][ T6032] usb 9-1: Using ep0 maxpacket: 16 [ 108.754326][ T6032] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 108.758670][ T6032] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 108.763904][ T6032] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 108.768813][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 108.775174][ T6032] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 108.779396][ T6032] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.782723][ T6032] usb 9-1: Product: syz [ 108.784635][ T6032] usb 9-1: Manufacturer: syz [ 108.787402][ T6032] usb 9-1: SerialNumber: syz [ 108.791041][ T6032] usb 9-1: config 0 descriptor?? [ 108.855019][ T40] audit: type=1400 audit(1755589758.275:40523): avc: denied { read write } for pid=10476 comm="syz.0.1316" name="cdc-wdm0" dev="devtmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 108.855419][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.866926][ T40] audit: type=1400 audit(1755589758.275:40524): avc: denied { open } for pid=10476 comm="syz.0.1316" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 108.868735][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.869302][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.884462][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.886913][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.889028][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.891355][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.893603][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.896473][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.899482][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.902293][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.904956][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.907396][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.910038][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.912747][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.915339][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.918019][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.920654][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.923359][ C3] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 108.926127][ C3] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 108.970550][ T40] audit: type=1400 audit(1755589758.395:40525): avc: denied { read } for pid=10617 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.991383][T10620] random: crng reseeded on system resumption [ 108.993963][ T40] audit: type=1400 audit(1755589758.415:40526): avc: denied { write } for pid=10476 comm="syz.0.1316" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.020756][ T40] audit: type=1400 audit(1755589758.415:40527): avc: denied { ioctl } for pid=10476 comm="syz.0.1316" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.030478][T10620] loop7: detected capacity change from 0 to 7 [ 109.032635][ T6032] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input13 [ 109.036592][ T5366] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.040656][T10620] Dev loop7: unable to read RDB block 7 [ 109.042751][T10620] loop7: AHDI p1 p2 [ 109.044072][T10620] loop7: partition table partially beyond EOD, truncated [ 109.051447][ T5366] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.054636][ T5366] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.054993][T10620] loop7: p1 start 1702000233 is beyond EOD, [ 109.058163][ T5366] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.060740][T10620] truncated [ 109.094774][ T5979] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.104220][ T840] usb 5-1: USB disconnect, device number 5 [ 109.110243][ T5366] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.113817][ T840] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 109.117080][ T5366] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.122889][ T5366] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.198543][ T840] wwan wwan0: port wwan0mbim0 disconnected [ 109.230356][T10587] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 109.257246][T10632] SELinux: Context system_u:object_r:dbusd_exec_t:s0 is not valid (left unmapped). [ 109.261381][ T40] audit: type=1400 audit(1755589758.685:40528): avc: denied { relabelto } for pid=10631 comm="syz.5.1338" name="vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dbusd_exec_t:s0" [ 109.271783][ T40] audit: type=1400 audit(1755589758.685:40529): avc: denied { associate } for pid=10631 comm="syz.5.1338" name="vcs" dev="devtmpfs" ino=14 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dbusd_exec_t:s0" [ 109.286843][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.291226][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.617269][T10652] overlayfs: failed to resolve './file1': -2 [ 109.730310][T10669] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 109.736894][T10669] bond0: (slave batadv0): Releasing backup interface [ 109.740171][T10669] batadv0: left promiscuous mode [ 109.745217][T10669] bridge_slave_0: left allmulticast mode [ 109.747367][T10669] bridge_slave_0: left promiscuous mode [ 109.749269][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.754390][T10669] bridge_slave_1: left allmulticast mode [ 109.756548][T10669] bridge_slave_1: left promiscuous mode [ 109.758854][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.762816][T10669] bond0: (slave bond_slave_0): Releasing backup interface [ 109.765609][T10669] bond_slave_0: left promiscuous mode [ 109.770893][T10669] bond0: (slave bond_slave_1): Releasing backup interface [ 109.774365][T10669] bond_slave_1: left promiscuous mode [ 109.780086][T10669] team0: Port device team_slave_0 removed [ 109.783677][T10669] team0: Port device team_slave_1 removed [ 109.786259][T10669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.789062][T10669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.792236][T10669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.794697][T10669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.806720][T10669] bond2: (slave ip6gretap1): Releasing active interface [ 109.866181][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1354'. [ 110.015161][T10686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4880 sclass=netlink_route_socket pid=10686 comm=syz.3.1356 [ 110.032665][ T40] audit: type=1400 audit(1755589759.455:40530): avc: denied { ioctl } for pid=10690 comm="syz.5.1357" path="socket:[33618]" dev="sockfs" ino=33618 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.054596][T10695] overlayfs: failed to resolve './file1': -2 [ 110.094677][T10700] xfrm1: entered allmulticast mode [ 110.098548][T10700] overlayfs: failed to resolve './bus': -2 [ 110.127937][ T40] audit: type=1400 audit(1755589759.555:40531): avc: denied { connect } for pid=10703 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.135752][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1362'. [ 110.140830][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 110.145871][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 110.180735][T10709] tipc: Enabling of bearer rejected, failed to enable media [ 110.245011][T10718] validate_nla: 1 callbacks suppressed [ 110.245021][T10718] netlink: 'syz.3.1366': attribute type 10 has an invalid length. [ 110.250713][T10718] hsr_slave_0: left promiscuous mode [ 110.253082][T10718] hsr_slave_1: left promiscuous mode [ 110.371752][T10725] netlink: 'syz.3.1368': attribute type 17 has an invalid length. [ 110.374815][T10725] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1368'. [ 110.378593][T10725] macvtap0: entered allmulticast mode [ 110.380867][T10725] veth0_macvtap: entered allmulticast mode [ 110.383603][T10725] net_ratelimit: 11 callbacks suppressed [ 110.383611][T10725] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 110.438427][T10728] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 110.462045][ T40] audit: type=1400 audit(1755589759.885:40532): avc: denied { listen } for pid=10727 comm="syz.0.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.615447][T10735] ipvlan2: entered promiscuous mode [ 110.619907][T10735] bridge0: port 3(ipvlan2) entered blocking state [ 110.622967][T10735] bridge0: port 3(ipvlan2) entered disabled state [ 110.625801][T10735] ipvlan2: entered allmulticast mode [ 110.628338][T10735] bridge0: entered allmulticast mode [ 110.631438][T10735] ipvlan2: left allmulticast mode [ 110.633580][T10735] bridge0: left allmulticast mode [ 110.802306][T10747] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.833397][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1376'. [ 110.866138][T10753] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1377'. [ 111.222003][T10794] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1391'. [ 111.225146][T10794] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1391'. [ 111.229675][ T6649] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 111.389510][ T6032] usb 9-1: USB disconnect, device number 9 [ 111.429341][T10823] comedi: valid board names for 8255 driver are: [ 111.432167][T10823] 8255 [ 111.433520][T10823] comedi: valid board names for vmk80xx driver are: [ 111.436351][T10823] vmk80xx [ 111.438540][T10823] comedi: valid board names for usbduxsigma driver are: [ 111.440802][T10823] usbduxsigma [ 111.440808][T10823] comedi: valid board names for usbduxfast driver are: [ 111.440812][T10823] usbduxfast [ 111.440816][T10823] comedi: valid board names for usbdux driver are: [ 111.440821][T10823] usbdux [ 111.440824][T10823] comedi: valid board names for ni6501 driver are: [ 111.440829][T10823] ni6501 [ 111.440832][T10823] comedi: valid board names for dt9812 driver are: [ 111.440836][T10823] dt9812 [ 111.440840][T10823] comedi: valid board names for ni_labpc_cs driver are: [ 111.440844][T10823] ni_labpc_cs [ 111.440848][T10823] comedi: valid board names for ni_daq_700 driver are: [ 111.462553][T10823] ni_daq_700 [ 111.463746][T10823] comedi: valid board names for labpc_pci driver are: [ 111.466233][T10823] labpc_pci [ 111.467759][T10823] comedi: valid board names for adl_pci9118 driver are: [ 111.467770][T10823] pci9118dg [ 111.467776][T10823] pci9118hg [ 111.467781][T10823] pci9118hr [ 111.467786][T10823] comedi: valid board names for 8255_pci driver are: [ 111.467793][T10823] 8255_pci [ 111.467798][T10823] comedi: valid board names for s526 driver are: [ 111.467805][T10823] s526 [ 111.467810][T10823] comedi: valid board names for multiq3 driver are: [ 111.467817][T10823] multiq3 [ 111.467823][T10823] comedi: valid board names for pcmuio driver are: [ 111.467830][T10823] pcmuio48 [ 111.467835][T10823] pcmuio96 [ 111.467841][T10823] comedi: valid board names for pcmmio driver are: [ 111.467848][T10823] pcmmio [ 111.467853][T10823] comedi: valid board names for pcmda12 driver are: [ 111.467860][T10823] pcmda12 [ 111.467865][T10823] comedi: valid board names for pcmad driver are: [ 111.467872][T10823] pcmad12 [ 111.467878][T10823] pcmad16 [ 111.467884][T10823] comedi: valid board names for ni_labpc driver are: [ 111.467891][T10823] lab-pc-1200 [ 111.467896][T10823] lab-pc-1200ai [ 111.467902][T10823] lab-pc+ [ 111.467908][T10823] comedi: valid board names for atmio16 driver are: [ 111.467915][T10823] atmio16 [ 111.467921][T10823] atmio16d [ 111.467927][T10823] comedi: valid board names for ni_at_ao driver are: [ 111.467934][T10823] at-ao-6 [ 111.467939][T10823] at-ao-10 [ 111.467945][T10823] comedi: valid board names for ni_at_a2150 driver are: [ 111.527717][T10823] ni_at_a2150 [ 111.529197][T10823] comedi: valid board names for adq12b driver are: [ 111.531946][T10823] adq12b [ 111.533315][T10823] comedi: valid board names for mpc624 driver are: [ 111.536260][T10823] mpc624 [ 111.538170][T10823] comedi: valid board names for c6xdigio driver are: [ 111.540874][T10823] c6xdigio [ 111.543381][T10823] comedi: valid board names for aio_iiro_16 driver are: [ 111.546238][T10823] aio_iiro_16 [ 111.548090][T10823] comedi: valid board names for aio_aio12_8 driver are: [ 111.551137][T10823] aio_aio12_8 [ 111.552583][T10823] aio_ai12_8 [ 111.553990][T10823] aio_ao12_4 [ 111.555440][T10823] comedi: valid board names for fl512 driver are: [ 111.558533][T10823] fl512 [ 111.559807][T10823] comedi: valid board names for dmm32at driver are: [ 111.562718][T10823] dmm32at [ 111.564200][T10823] comedi: valid board names for dt282x driver are: [ 111.566852][T10823] dt2821 [ 111.567938][T10823] dt2821-f [ 111.568960][T10823] dt2821-g [ 111.569975][T10823] dt2823 [ 111.570980][T10823] dt2824-pgh [ 111.572055][T10823] dt2824-pgl [ 111.573161][T10823] dt2825 [ 111.574095][T10823] dt2827 [ 111.575053][T10823] dt2828 [ 111.576259][T10823] dt2829 [ 111.577578][T10823] dt21-ez [ 111.579039][T10823] dt23-ez [ 111.580455][T10823] dt24-ez [ 111.581811][T10823] dt24-ez-pgl [ 111.583355][T10823] comedi: valid board names for dt2817 driver are: [ 111.586039][T10823] dt2817 [ 111.587380][T10823] comedi: valid board names for dt2815 driver are: [ 111.590441][T10823] dt2815 [ 111.591753][T10823] comedi: valid board names for dt2814 driver are: [ 111.594427][T10823] dt2814 [ 111.595683][T10823] comedi: valid board names for dt2811 driver are: [ 111.598492][T10823] dt2811-pgh [ 111.599897][T10823] dt2811-pgl [ 111.601384][T10823] comedi: valid board names for dt2801 driver are: [ 111.604050][T10823] dt2801 [ 111.605325][T10823] comedi: valid board names for das6402 driver are: [ 111.608121][T10823] das6402-12 [ 111.609545][T10823] das6402-16 [ 111.610955][T10823] comedi: valid board names for das1800 driver are: [ 111.613218][T10823] das-1701st [ 111.614248][T10823] das-1701st-da [ 111.615562][T10823] das-1702st [ 111.616974][T10823] das-1702st-da [ 111.618596][T10823] das-1702hr [ 111.619806][T10823] das-1702hr-da [ 111.620938][T10823] das-1701ao [ 111.621997][T10823] das-1702ao [ 111.623052][T10823] das-1801st [ 111.624234][T10823] das-1801st-da [ 111.625528][T10823] das-1802st [ 111.626886][T10823] das-1802st-da [ 111.628676][T10823] das-1802hr [ 111.630122][T10823] das-1802hr-da [ 111.631495][T10823] das-1801hc [ 111.632652][T10823] das-1802hc [ 111.633855][T10823] das-1801ao [ 111.635017][T10823] das-1802ao [ 111.636412][T10823] comedi: valid board names for das800 driver are: [ 111.639229][T10823] das-800 [ 111.640731][T10823] cio-das800 [ 111.642248][T10823] das-801 [ 111.643867][T10823] cio-das801 [ 111.645360][T10823] das-802 [ 111.646685][T10823] cio-das802 [ 111.648369][T10823] cio-das802/16 [ 111.649998][T10823] comedi: valid board names for isa-das08 driver are: [ 111.652166][T10823] isa-das08 [ 111.653329][T10823] das08-pgm [ 111.654825][T10823] das08-pgh [ 111.656242][T10823] das08-pgl [ 111.657623][T10823] das08-aoh [ 111.658903][T10823] das08-aol [ 111.660035][T10823] das08-aom [ 111.661103][T10823] das08/jr-ao [ 111.662222][T10823] das08jr-16-ao [ 111.663373][T10823] pc104-das08 [ 111.664487][T10823] das08jr/16 [ 111.665550][T10823] comedi: valid board names for das16m1 driver are: [ 111.667849][T10823] das16m1 [ 111.668867][T10823] comedi: valid board names for dac02 driver are: [ 111.670864][T10823] dac02 [ 111.671813][T10823] comedi: valid board names for rti802 driver are: [ 111.673842][T10823] rti802 [ 111.674812][T10823] comedi: valid board names for rti800 driver are: [ 111.676866][T10823] rti800 [ 111.678030][T10823] rti815 [ 111.678995][T10823] comedi: valid board names for pcm3724 driver are: [ 111.681157][T10823] pcm3724 [ 111.682213][T10823] comedi: valid board names for pcl818 driver are: [ 111.684454][T10823] pcl818l [ 111.685544][T10823] pcl818h [ 111.686714][T10823] pcl818hd [ 111.688089][T10823] pcl818hg [ 111.689431][T10823] pcl818 [ 111.690580][T10823] pcl718 [ 111.691786][T10823] pcm3718 [ 111.692824][T10823] comedi: valid board names for pcl816 driver are: [ 111.694863][T10823] pcl816 [ 111.695820][T10823] pcl814b [ 111.696816][T10823] comedi: valid board names for pcl812 driver are: [ 111.699057][T10823] pcl812 [ 111.700203][T10823] pcl812pg [ 111.701398][T10823] acl8112pg [ 111.702641][T10823] acl8112dg [ 111.703884][T10823] acl8112hg [ 111.704989][T10823] a821pgl [ 111.705980][T10823] a821pglnda [ 111.707099][T10823] a821pgh [ 111.708150][T10823] a822pgl [ 111.709123][T10823] a822pgh [ 111.710072][T10823] a823pgl [ 111.711051][T10823] a823pgh [ 111.711992][T10823] pcl813 [ 111.712887][T10823] pcl813b [ 111.713835][T10823] acl8113 [ 111.714775][T10823] iso813 [ 111.715714][T10823] acl8216 [ 111.716706][T10823] a826pg [ 111.717825][T10823] comedi: valid board names for pcl730 driver are: [ 111.720160][T10823] pcl730 [ 111.721183][T10823] iso730 [ 111.722204][T10823] acl7130 [ 111.723253][T10823] pcm3730 [ 111.724277][T10823] pcl725 [ 111.725220][T10823] p8r8dio [ 111.726213][T10823] acl7225b [ 111.727308][T10823] p16r16dio [ 111.728522][T10823] pcl733 [ 111.729738][T10823] pcl734 [ 111.730753][T10823] opmm-1616-xt [ 111.731943][T10823] pearl-mm-p [ 111.733027][T10823] ir104-pbf [ 111.734065][T10823] comedi: valid board names for pcl726 driver are: [ 111.736145][T10823] pcl726 [ 111.737133][T10823] pcl727 [ 111.738193][T10823] pcl728 [ 111.739177][T10823] acl6126 [ 111.740256][T10823] acl6128 [ 111.741788][T10823] comedi: valid board names for pcl724 driver are: [ 111.744047][T10823] pcl724 [ 111.745015][T10823] pcl722 [ 111.746217][T10823] pcl731 [ 111.747281][T10823] acl7122 [ 111.748566][T10823] acl7124 [ 111.749796][T10823] pet48dio [ 111.751029][T10823] pcmio48 [ 111.752265][T10823] onyx-mm-dio [ 111.753624][T10823] comedi: valid board names for pcl711 driver are: [ 111.755797][T10823] pcl711 [ 111.756736][T10823] pcl711b [ 111.757894][T10823] acl8112hg [ 111.758935][T10823] acl8112dg [ 111.760006][T10823] comedi: valid board names for amplc_pc263 driver are: [ 111.762195][T10823] pc263 [ 111.763124][T10823] comedi: valid board names for amplc_pc236 driver are: [ 111.765286][T10823] pc36at [ 111.766242][T10823] comedi: valid board names for amplc_dio200 driver are: [ 111.768492][T10823] pc212e [ 111.769470][T10823] pc214e [ 111.770431][T10823] pc215e [ 111.771398][T10823] pc218e [ 111.772355][T10823] pc272e [ 111.773304][T10823] comedi: valid board names for comedi_parport driver are: [ 111.775564][T10823] comedi_parport [ 111.776733][T10823] comedi: valid board names for comedi_test driver are: [ 111.779004][T10823] comedi_test [ 111.780133][T10823] comedi: valid board names for comedi_bond driver are: [ 111.782297][T10823] comedi_bond [ 112.056899][T10883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.066241][T10883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.103968][T10896] loop7: detected capacity change from 0 to 524287999 [ 112.170982][T10902] f2fs: Unknown parameter 'norecoveryJA쑁d~1_וz*wXJ$mtST)&#%]G Xjzdf>2(yti6xp(5.>b&mUi`3fq~w9l^&WnM$Kȸ7#ɂ?R N`$$N?oxqퟞqUkH' [ 112.183343][T10902] netlink: 'syz.3.1422': attribute type 12 has an invalid length. [ 112.295811][T10930] netlink: 'syz.3.1429': attribute type 11 has an invalid length. [ 112.391987][T10948] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 112.426466][T10954] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 112.525961][T10979] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 112.529910][T10979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.590234][T10983] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20000 [ 113.065206][T11018] sg_read: process 257 (syz.5.1457) changed security contexts after opening file descriptor, this is not allowed. [ 113.132253][T11028] overlayfs: failed to resolve 'verity=require': -2 [ 113.434717][T11063] ip6gre1: entered allmulticast mode [ 113.569740][T11086] CUSE: info not properly terminated [ 113.687161][T11104] netlink: 'syz.4.1483': attribute type 7 has an invalid length. [ 113.691798][T11104] netlink: 'syz.4.1483': attribute type 8 has an invalid length. [ 113.695348][T11104] __nla_validate_parse: 13 callbacks suppressed [ 113.695363][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 113.739592][T11107] netlink: 'syz.4.1483': attribute type 8 has an invalid length. [ 113.742186][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 113.931323][T11121] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1488'. [ 113.962857][T11125] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 113.971157][T11125] netlink: 'syz.5.1489': attribute type 1 has an invalid length. [ 113.975366][T11125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.039378][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 114.039396][ T40] audit: type=1400 audit(1755589763.465:40553): avc: denied { ioctl } for pid=11129 comm="syz.5.1490" path="socket:[39398]" dev="sockfs" ino=39398 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 114.060644][T11132] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 114.138038][T11142] tipc: Started in network mode [ 114.140270][T11142] tipc: Node identity 7f000001, cluster identity 4711 [ 114.143414][T11142] tipc: Enabled bearer , priority 10 [ 114.213370][T11150] 9pnet_virtio: no channels available for device 127.0.0.1 [ 114.397031][ T40] audit: type=1400 audit(1755589763.815:40554): avc: denied { read } for pid=11168 comm="syz.5.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.399594][T11170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1501'. [ 114.409698][T11169] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.427665][ T840] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 114.443983][T11177] netlink: 'syz.5.1502': attribute type 1 has an invalid length. [ 114.453824][T11177] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.557810][ T840] usb 9-1: device descriptor read/64, error -71 [ 114.807610][ T840] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 114.892282][T11192] netlink: 'syz.0.1507': attribute type 10 has an invalid length. [ 114.894989][T11192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1507'. [ 114.899210][T11192] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 114.902197][T11192] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 114.905398][T11192] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 114.937741][ T840] usb 9-1: device descriptor read/64, error -71 [ 114.983908][ T40] audit: type=1400 audit(1755589764.405:40555): avc: denied { listen } for pid=11193 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.991325][ T40] audit: type=1400 audit(1755589764.405:40556): avc: denied { accept } for pid=11193 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.057618][ T840] usb usb9-port1: attempt power cycle [ 115.257956][ T54] tipc: Node number set to 2130706433 [ 115.290835][T11209] gretap0: entered allmulticast mode [ 115.306088][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 115.317863][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 115.359894][T11211] gretap0: left allmulticast mode [ 115.386001][T11217] syz_tun: entered promiscuous mode [ 115.397877][ T840] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 115.399683][T11217] batadv_slave_0: entered promiscuous mode [ 115.401131][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 115.401204][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 115.404178][T11217] debugfs: 'hsr1' already exists in 'hsr' [ 115.414324][T11217] Cannot create hsr debugfs directory [ 115.428275][ T840] usb 9-1: device descriptor read/8, error -71 [ 115.653034][T11239] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1524'. [ 115.656058][ T40] audit: type=1400 audit(1755589765.075:40557): avc: denied { ioctl } for pid=11238 comm="syz.5.1523" path="socket:[40016]" dev="sockfs" ino=40016 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.681295][T11242] overlayfs: failed to clone upperpath [ 115.687509][ T6042] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.687598][ T840] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 115.708188][ T840] usb 9-1: device descriptor read/8, error -71 [ 115.745247][T11253] loop6: detected capacity change from 0 to 524287999 [ 115.817685][ T840] usb usb9-port1: unable to enumerate USB device [ 115.839174][ T6042] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.839276][T11257] Bluetooth: hci0: load_link_keys: too big key_count value 3072 [ 115.842751][ T6042] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.848662][T11257] binder: Unknown parameter '' [ 115.849408][ T6042] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.853699][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.857734][T11222] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 115.861175][ T6042] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.062775][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.067308][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.094139][ T6042] usb 5-1: USB disconnect, device number 6 [ 116.150947][T11260] 9pnet_fd: p9_fd_create_tcp (11260): problem binding to privport [ 116.187385][T11262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=11262 comm=syz.5.1532 [ 116.268862][T11269] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 116.272245][T11269] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 116.278377][T11271] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 116.282336][T11271] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 116.690881][T11295] binder: 11294:11295 ioctl 5395 200000000040 returned -22 [ 116.696051][ T40] audit: type=1400 audit(1755589766.115:40558): avc: denied { setopt } for pid=11301 comm="syz.0.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.977593][ T6042] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 117.127605][ T6042] usb 10-1: Using ep0 maxpacket: 32 [ 117.130541][ T6042] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.133756][ T6042] usb 10-1: config 0 has no interfaces? [ 117.137809][ T6042] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 117.142086][ T6042] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 117.145542][ T6042] usb 10-1: Product: syz [ 117.147355][ T6042] usb 10-1: Manufacturer: syz [ 117.149651][ T6042] usb 10-1: SerialNumber: syz [ 117.152968][ T6042] usb 10-1: config 0 descriptor?? [ 117.356939][T11307] vivid-001: disconnect [ 117.359809][T11306] vivid-001: reconnect [ 117.361769][ T6042] usb 10-1: USB disconnect, device number 5 [ 117.936571][T11358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.948194][ T40] audit: type=1326 audit(1755589767.375:40559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.1560" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0053d8ebe9 code=0x0 [ 117.967048][T11362] ref_ctr_offset mismatch. inode: 0x796 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x46 [ 117.968405][ T40] audit: type=1400 audit(1755589767.395:40560): avc: denied { connect } for pid=11361 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.999819][T11365] usb usb8: usbfs: process 11365 (syz.5.1560) did not claim interface 0 before use [ 118.065928][T11372] ------------[ cut here ]------------ [ 118.069925][T11372] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 118.073131][T11372] shift exponent 128 is too large for 32-bit type 'int' SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 118.076477][T11372] CPU: 2 UID: 0 PID: 11372 Comm: syz.4.1564 Not tainted syzkaller #0 PREEMPT(full) [ 118.076496][T11372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.076505][T11372] Call Trace: [ 118.076510][T11372] [ 118.076515][T11372] dump_stack_lvl+0x16c/0x1f0 [ 118.076552][T11372] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 118.076579][T11372] pcl726_attach.cold+0x19/0x1e [ 118.076596][T11372] ? rcu_is_watching+0x12/0xc0 [ 118.076611][T11372] ? __might_fault+0xe3/0x190 [ 118.076626][T11372] comedi_device_attach+0x3b3/0x900 [ 118.076640][T11372] do_devconfig_ioctl+0x1b1/0x710 [ 118.076655][T11372] ? __mutex_lock+0x1c5/0x1060 [ 118.076674][T11372] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 118.076700][T11372] comedi_unlocked_ioctl+0x165d/0x2f00 [ 118.076718][T11372] ? futex_wake+0x1ad/0x530 [ 118.076731][T11372] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 118.076750][T11372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.076763][T11372] ? do_vfs_ioctl+0x128/0x14f0 [ 118.076781][T11372] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.076803][T11372] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.076828][T11372] ? rcu_is_watching+0x12/0xc0 [ 118.076849][T11372] ? __fget_files+0x204/0x3c0 [ 118.076866][T11372] ? hook_file_ioctl_common+0x145/0x410 [ 118.076885][T11372] ? selinux_file_ioctl+0x180/0x270 [ 118.076908][T11372] ? selinux_file_ioctl+0xb4/0x270 [ 118.076925][T11372] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 118.076942][T11372] __x64_sys_ioctl+0x18e/0x210 [ 118.076959][T11372] do_syscall_64+0xcd/0x4c0 [ 118.076972][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.076983][T11372] RIP: 0033:0x7f328f78ebe9 [ 118.076993][T11372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.077003][T11372] RSP: 002b:00007f32905d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.077016][T11372] RAX: ffffffffffffffda RBX: 00007f328f9b5fa0 RCX: 00007f328f78ebe9 [ 118.077024][T11372] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000005 [ 118.077031][T11372] RBP: 00007f328f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 118.077038][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.077044][T11372] R13: 00007f328f9b6038 R14: 00007f328f9b5fa0 R15: 00007ffd9ace6e08 [ 118.077054][T11372] [ 118.077058][T11372] ---[ end trace ]--- [ 118.171978][T11372] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 118.175821][T11372] CPU: 2 UID: 0 PID: 11372 Comm: syz.4.1564 Not tainted syzkaller #0 PREEMPT(full) [ 118.180145][T11372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.184806][T11372] Call Trace: [ 118.186121][T11372] [ 118.187480][T11372] dump_stack_lvl+0x3d/0x1f0 [ 118.189460][T11372] vpanic+0x6e8/0x7a0 [ 118.191341][T11372] ? __pfx_vpanic+0x10/0x10 [ 118.193288][T11372] ? __pfx_vprintk_emit+0x10/0x10 [ 118.195426][T11372] panic+0xca/0xd0 [ 118.197047][T11372] ? __pfx_panic+0x10/0x10 [ 118.198960][T11372] check_panic_on_warn+0xab/0xb0 [ 118.201205][T11372] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 118.204229][T11372] pcl726_attach.cold+0x19/0x1e [ 118.206483][T11372] ? rcu_is_watching+0x12/0xc0 [ 118.208577][T11372] ? __might_fault+0xe3/0x190 [ 118.210590][T11372] comedi_device_attach+0x3b3/0x900 [ 118.212763][T11372] do_devconfig_ioctl+0x1b1/0x710 [ 118.214947][T11372] ? __mutex_lock+0x1c5/0x1060 [ 118.217024][T11372] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 118.219376][T11372] comedi_unlocked_ioctl+0x165d/0x2f00 [ 118.222033][T11372] ? futex_wake+0x1ad/0x530 [ 118.224264][T11372] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 118.226798][T11372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.229308][T11372] ? do_vfs_ioctl+0x128/0x14f0 [ 118.231395][T11372] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.233600][T11372] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.236589][T11372] ? rcu_is_watching+0x12/0xc0 [ 118.238688][T11372] ? __fget_files+0x204/0x3c0 [ 118.241019][T11372] ? hook_file_ioctl_common+0x145/0x410 [ 118.243374][T11372] ? selinux_file_ioctl+0x180/0x270 [ 118.245607][T11372] ? selinux_file_ioctl+0xb4/0x270 [ 118.247766][T11372] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 118.250299][T11372] __x64_sys_ioctl+0x18e/0x210 [ 118.252384][T11372] do_syscall_64+0xcd/0x4c0 [ 118.254365][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.257216][T11372] RIP: 0033:0x7f328f78ebe9 [ 118.259139][T11372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.267230][T11372] RSP: 002b:00007f32905d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.270757][T11372] RAX: ffffffffffffffda RBX: 00007f328f9b5fa0 RCX: 00007f328f78ebe9 [ 118.274134][T11372] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000005 [ 118.277617][T11372] RBP: 00007f328f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 118.281229][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.284580][T11372] R13: 00007f328f9b6038 R14: 00007f328f9b5fa0 R15: 00007ffd9ace6e08 [ 118.287843][T11372] [ 118.289925][T11372] Kernel Offset: disabled [ 118.291783][T11372] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:49:27 Registers: info registers vcpu 0 CPU#0 RAX=00000000000af6ac RBX=0000000000000000 RCX=ffffffff8b939c29 RDX=ffffed100d486656 RSI=ffffffff8c162800 RDI=ffffffff81913311 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab3f90 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f32905d4f98 CR3=000000004dede000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ace7316 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ace7316 00007ffd9ace731c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f328f812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f328f812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f328f812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f328f812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f328f812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f328f812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f328f9874a8 00007f328f9874a0 00007f328f987498 00007f328f987470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32904ed100 00007f328f987460 00007f328f987478 00007f328f9874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f328f9874b8 00007f328f9874b0 00007f328f9874a8 00007f328f9874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff9b03d438 RCX=ffffffff81981463 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff9b03d438 RBP=ffffffff9b03d440 RSP=ffffc9000714f9e8 R8 =0000000000000000 R9 =fffffbfff3607a87 R10=ffffffff9b03d43b R11=ffffffff9b03d438 R12=ffffffff9b03d448 R13=ffff888038a22240 R14=dffffc0000000000 R15=1ffff92000e29f4a RIP=ffffffff8b964d20 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c392e9f CR3=0000000047833000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff432387d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff432387d6 00007fff432387dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0053e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0053e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0053e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0053e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0053e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0053e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0053f874a8 00007f0053f874a0 00007f0053f87498 00007f0053f87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0054aed100 00007f0053f87460 00007f0053f87478 00007f0053f874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0053f874b8 00007f0053f874b0 00007f0053f874a8 00007f0053f874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643805 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc90004517490 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b10dfe0 R15=ffffffff856437a0 RIP=ffffffff8564382f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f32905d56c0 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d1ffe CR3=000000004dede000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefee0 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2c717550 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2c7176d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2c7176d6 00007ffc2c7176dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f9412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f9412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f9412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f9412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f9412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f9412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff88806a727d00 RBX=dffffc0000000000 RCX=ffffffff81a84e04 RDX=ffff88802c910000 RSI=ffffffff81a84e54 RDI=ffffffff8df5de78 RBP=ffff88806a727c80 RSP=ffffc9000716fbd0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000003 R13=ffffc9000716fd78 R14=0000000000000000 R15=ffff88806a727d00 RIP=ffffffff81a85059 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000555565747500 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d69bc000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004bcb6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003065736f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda27487f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda27487f6 00007ffda27487fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe691212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe691212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe691212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe691212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe691212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe691212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6913874a8 00007fe6913874a0 00007fe691387498 00007fe691387470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe691eed100 00007fe691387460 00007fe691380004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6913874b8 00007fe6913874b0 00007fe6913874a8 00007fe6913874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000