last executing test programs: 46.385184393s ago: executing program 0 (id=648): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x5, "f93970f6a34846be49909e1b95402fbd4d32980af8da481a70f524c739f19d3f62904e211a31c69511c83f8983d8beaacc7ea747238c24638037c4c8405cfb62"}) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002100)=0x0) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002140), 0x220000, 0x0) kcmp(r2, r3, 0x0, r0, r4) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) close_range(r5, 0xffffffffffffffff, 0x2) timer_create(0x4, &(0x7f0000002180)={0x0, 0x34, 0x4, @tid=r2}, &(0x7f00000021c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000002200), &(0x7f0000002240)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x38, 0x3, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xfff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x7, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24004001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000023c0)={{0xa, 0x3, 0x5, 0x4, 'syz0\x00', 0x3}, 0x5, 0x20, 0x5, r3, 0x4, 0x8, 'syz1\x00', &(0x7f0000002380)=['\x00', '/dev/ocfs2_control\x00', '/dev/pmem0\x00', 'E-\x00'], 0x22}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x5c, 0x1, 0xa, 0x301, 0x0, 0x0, {0x1600905c57620a66, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x2d, 0x6, "79a1fb7b63d7889031560ee8ad5d81f2367e39bd538bffab6b99e6ebdc8bff85ac6102bd5bc4234b25"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c010}, 0x4004) writev(r0, &(0x7f0000003980)=[{&(0x7f0000002640)="f9245af6cc58b3a1b976b2626b66cd996dc3a5ff99e333849e37e84f0e89800d8cb6da3c115a46b6f531724624f728f944f77889f55ab21284a04050bb334f5aaf9ce179168cd39f82775bdb98ea7f066af96ca2155d3db0e916dab8f6972257d4bfb18299ef3cece67c1755f0875dead70bde2bf1580fcc254e056abe2e6d65d575aa2a5e10b0db7cba659dec948aada359d9da452105d51e6031899677c89cb89557f4e9bddba12ee1fb3f7c90578754cf0084d4dc9b43bc89876a3209a565fc4fb8c3628a7c8ec2a7e0618fc805620321e7b4ea6793676244aa4af999c5514af7b6e6025f", 0xe6}, {&(0x7f0000002740)="e064772104fd25dd7f9e979228432bde604f7d63dbedcbb58063b3cac556f7cfcff3ba70a984d85ccaadee0e269483cd33986a7f7f6c58d0fa731f7eebe5ee5adb76e393919bf09a9a53825dc6c7dcabd17396d8e6109fc8613915a36e946280a529171f354172b86139c2a29253534e73036b719d6337ed03928596460b1981fc057cbc48241ef5469442f16e79f59be3ed1830febfbbcdce31ddb60aa43f16d2c1f1fccf4c6c2ab94c073fb0608f2d5f78", 0xb2}, {&(0x7f0000002800)="085e520c7d99d8947acd8dbc240316dc8448c4b75687860924af7260455e3ae5309d9c3f645d303f8473ce28daa60b4f4ae0aa1bee362adf3dd47cec77187a7681b47f8779716de43672034f8392038d9f6320dadf1206b1a5d7c8a4a005523961289e7e7a1afb6ab1d45d356e382bc15de00133b9200656c5016268b6df97fca90984bdcd6b4ad24adfa823e46686da483cf6111eb0d1fc7f06c919ce74265d40a92984b420bbdc3fda80b96ad19190fed791b455ab9268173eb8b9c7c88e7f1c3b971257051a56340cca00d66fd13f37d0fa92032c68c9cbaa506a4b13063d56b0d4cf83a69c38256e270e2a111059f704b346582738681d28e056237c244c2afc080c336394134fe307883a10f181897257beaf92f6154464e467751a9b383359077639f076c2f50b2b8ab536e597cf07a97a6a56b63f0caac2d39398d479b4205655454c46dabbb98ee18a63ac0423250d5961bf9372b954d334d8190acb2a58f877cec9cfe152d3b9c4e41c96a9c0b5f79f024ff696ad6d5de59fa041d126592fbaf71cab82e488a843ca45a79c5ead2a6b71b8d2dd39ad24536edeff4c2b9233acf720104b4132e62e90f07823831d28c71b4649fe071d3bd037ceac7f5cb358f4671f71e860e70dac733872125778064401652baed90140636b55ef3e9807cb6eb181174db72585c64edfa4a22df14a2851e06c6414d0409ba403f821f8c065ec5bfb96cccb9ecd096e43b266bee25d42ced5f5e8669e570bf3acae54b97676ea4445d8022fc661e9e43263bf5729a09bb82b5ff0b891ee19a3e634a5529dd5db5821615a7f227c83c48f6821e5dfd9a25d84fda76ae81907e98ce6b46375318af239530e404711f838eff68e13ee0f4fff55d2f491c534ff231e02c6475df55cfd338e7b0a7c96378babf08cb2d1751df121fbe8576174205b45bc2951dd34a3ddde9c09503dfca8e5716b9eaf4b6c13befed2b6230ad78733e229d94c229ca3e116b0fad26453a908628f0a5f5ee711156e7536eac24fc48b0a341c1bdc35d3af4b38768e812424c9f230377a8f19e91e827e9654813f543a743de44b5675ff480dbdac3f958aaa6c3694f6f98a74ba97ed64ad0a845795d2fcc2cea255f5b447e82b29f4319f2e7ac5ece525b3087916ad0fa4ac7f30acfceb6fba6f2cf823425463845edf9f192ab33f2caa05e32e02918a7e835f79a000e9db931eeeec0d06f1984d8b71705318da0e6f27bb34e11de94f987224af8712d3282ae81b6449407518c8ffbd4fe93509b6d1cdf0d860b3b3739b25cc4f29d06024a5ac0826ba6a37fcb6a2e643ff830849df4e5f3695637151565d2372d5c2ef3d95f6a8c33bdc8ee0248addcfbba3ca8cea8f44c19ff3d8ad5e68304af2494a34b5648e18de2ec1f05abe93051a0a33a792ca4647a78b82297223b3d59202c93e5bcaad3b100a2fcebfc93bafcf44b398c102741e9146910cc4ca7a66c17919b5f0aa517fdcda09d6c4941830cbcd450f1947a89af71a7397042b34940a846a0384edf022b9fa2efbc6c932467f8ca18d9dabba544a04aeb878559f7a441c23d438ec10f23f29985d551d5169e8e3b3509a767b30bae3fbd9feebe37d6400c62fc7e59da57926f6ec7e5ed30e94b976927f5388b71d75a065d05aeed6f2cf6aae096fa3cb3181140ef2bea25014b939820a8586ab833f67df669ebbee2c8c69bdac5580ea29cfb77f919e6f1baac4b87e518406f8c291af8271eabedcf2daa690d44884a0bed38254b8dafe68d69d3ad6e686d9ab090029a948bc33b3615fc65cf870feea2585288b7aaf205bba046e68eea736c0fa0fdce5f1caa0c2e3b26e8ce5e39e1700a8f78bdf291d236f240823154e9163954a503fc186e4dcbcd601612af67d7c4a4252e926864f585efcb4a27e1406da413c78c55048088681f4ca85d8f421b99c58c15bf70edf4ae77bb019cdc261ca8a2d8e4668d975e63be4a582f2f06b3078a30e25ce308a11f72aecac547bed16bc27359a98fe8f800a80293101ab4cacf972d824c4b0fa0701a50f96590f53d1cec20c939252374251fd95cca0f97193b175d7b56bd80f0f06079ad8e4678a6107131f4ff2b64df62e7dece2676ce9503938a977822e39a711fb91785ec520e55372461d79852a283937c2df82eead931641fce04b2fff323769a9a6aa58a7944d96d67fe99d21f51daa42035f976b729c88ef0170cf995b66ad3f591c29a53e0ad95655f40f73106db958bd87a3667091563aabfe548cffe7ef7d942c713e2407cc6cc40dd95be25b283b106c2b4f17e4700a388e8bf8d8cb348c8b884c12b3ff2d6486257274a0c30031a0c41f413da5930452db810a40b481f3bfca9a8a634aeb3b135002c59595622e719a459da611ea22fc63cb440e0dab0dc6dcbb0096b1a82a517a632b3f23247a4783690192fb672061b0e3bb1f26054d2f421c292b76ac4fd5a04e55740fcd3762bd820d0387fdff9eadc6c4e2b0a50f6c36ef2306c5d99e7ad270042b777caa9ae702905267688139db1cd63ee173b9cd64089a30d27e20627f071d2cbfa02755fb2a42d1640415681d58b9cbbad6299388658f2d034c0b60eb2eab8c360c3e13a1a0ca64118c2d0f30f27849aea7903e44604f6f70bbff83683208ee5fad4b76042b5b63aa3057e6742d3516e7c99029b8a3ec4a26c056fc032e4edb8a39c1726f2764135cf6b943af4395e3c5cb2346ef5583d787f6d3c5d9c05ec716b6e31eb54716d4a59dd5619a9f5b23924904ac85a01fdfe38aaf72446c52c502d731e6bafe759cef7203225f59ad12bad43e4809e4348bc089ae893b26caf704cc873f20ae4ca1ce85d11d062b5f4d9ffb7a8cddab98c92abd97989c3d46cf62dad61118829c1d789efd622acc7706d1861204a93ad35f1573fc148b135f283c76405ac6d59c4ba5a9338b3b8f16233459790bbd868b4ae48353081f6a4fe849a7b8900071b6c866adc38d8f24d6bd88c7849dd8c2861ed757aaa7945b1bb1807087122df1f366b06c9b4bb268653f580853f6ceabbfa8fa81af4083952352c129cdefc0231589d316c1c6cc9d8ab489c992dd9b14656fecb24cad532353039d1d88abe955c5142dc2a1d11a66c045b6944b0f8ff36b1ea01162e33bf682b74bcd5a70d8d5b8044feec23dfe3c451df98f63b933cdb175ca54f92994d4fa7013eb7402684b22da1ec4dc890b46667f79f78b51daaa11978d09992220cbc1f5afcd6d14d17b51a9b34db9fb63e04b547b6fa1b3cc18194dc5a3ef78c6560b9b2a4cce966daacccfc635d4adf74733852d8aa68276f00113f8f47fd3da900325f16bbb378dca891347e42101cee34c008d5814ef8024787ba1042795fd94504d3932616b9f6914ed86599185c46b99fd253a3eeb1bc822c6e4d1cf1a52d09424e07f5e4f20117c24ad10e9cc993d61dd28eabd5555505119d5de77acf47729c0c1c8dd347e657976fc1ac17da0cc6c01ab2d5ccd0b39c536cf2d460a0422541ff3020b4f3aea57164ef8f7d711700c6a81dcf61213c41fdfc4a6ebc66b4c18d057ba01d2e197e00d6c8498a86c2ab7bf3c37316358eb22a9d0f189b54a6a0d7d355c164199f07fb735626b33c17cef533eb47af2b5f15a353463c0fe68b6a64e2cad565cb142b508c0c9c64fd17469c56f6894d87aa1368c5974bf10d3c23f3751b5cac631c391d099ca1285ff3adda2216bf799e22693b4d0df7cbe3e15b3afda64692c711c41f0199f675262759a22d44c360ba673c82960826d1d982393d573659504c1b813c76f175d0aaa69f4c97d5a8b1bd5ac5b61a801180837e925ab85e17abdc70b18b7c6996c07d1ca34b1874565b5f6048350cea6c156d8bb7ded7232408abfff9f76a26b78f9726962ac2847f8dafbfa935197fe397b6d34c2cd934eccb736294ef2f5866cb763f601a299e9979ce74607cdc0b831ebccc02e54dcc5e21bb91eff506c72c3a41b0ab0c312806ba535040f20c99745a62a44333b20992452c86df6aa23f7a0be3badd39fdd8f67892962b7805db9f25b23cce57db1e46bfd239d7c555035feca563941b92fdd07a471435a1fda32ec3250c02f8d708f7fc91434d047018adae09e8a692e1e7c1736458b6a079409172da86d11c56ea2e2a4b572428f5f35306565cba9c1601ae80bf4c2cb0cbcefeb379aad8fe534399119e65fbfa245c902e6ec84e9b20399d1fbe13f86babcee2f699b21186ee4e9b1041f0bf10aa95f2c85c172b8a328b01e5c52e1c583477186cbc9068e432b869619eb781e406180cad3b9ce12ebb750a42107874323d06d33612e8cb6c26a771e160260bd03e88136d2b839c1d9823992ee557e54cf7db27cc7c76f2aa3c61dd0a5908d1b5d18c16f571636aeb41717ab3817e74dba500ebd0c0a537d2b5ade6148210a702304f5625f86db8b21b4e348c3e846464c47daea493564b77715451fa095f0fb90824566aeae3f146e41ea8234bb6f6904aac288429644d895db74d8c879fb942bd05b59e9a21233812d037a5d46ecff9c041f460327a503fb762ae119cf869364d7cf74eb717850b1502cd2733f7a139082c28741fba033c4176dc542172330a05a234091df3644edba1bf45778e835528d177cc4a955482c08bdb5df1466a8359ba57c3035bdcf0b9db7a26cc646dac641798902bcde7997cd320e6b2c203f0abc3c74042c633e3d08cf2d141a86b08ba9a9d80f8e3526340bc2c351eef4f5f73af6abee31291c52eabff7cba023deb25c523ddc8bd9044203e3cee16265d94241bcc520020cf51715f27b488e28d830dc36e02e20b43068e797ff02e1e797b3bf0a7e0554e528c9f780eb55a5a410c428c7eb90f3e27a3507663c4aa2b1198cfb4b80c4f06ae4b62543fe022b307cf1e4c3b67cb5878fe56598009efac24150d103e99d3d695e32d97dce525d2aa56d97c401c5aba006c140d0f6e7a70fc2151a5ca226cc65ce52402ea40bce822ac4aa7250e9fff0fbb2909cbfaacabb779587bd7ce2905216a847f0c9aaa2e073652486dd17dec4a304452fd088cb85e91f9044607687a5917d309e2df0aab3dafbf8eba60f2644d22227bad44c200b915aebd52f998147d94ee4291e1632b4783d69c0c174f5bf6d48d981d8e344be6440332725f6aa9ec5bc92a704d669a689aab0741ef4adb9ce608e33087ea94b2bc0b213099967e28db2a17985548136b714653bd245757e88eee7c8267be2c0022985971f02c6a196924cb29f5431ef6c6a9ab9588b186d953f95868b1f0c9b5481e647233c5841a944c8ae5be8e5400f882bbb4c1f01f4e17378f81e634258ba27b2fd72b005c00f48abc205b15611146cd7a39f396ba4fbaac718f71d0762adfa1f035bf3fb327228b50bfa0596ca577cb4cdc0a487944d8dd2280a983135454a3499714f8f2f75f43117a30f03df166be218865c16ba69a8ebf6e14513db54351e387d86456a328c3d1b114c34565d1e71689ad9efc974e10c9a09337cdbe913e2e5f0f632c5cb0bff7bed9e2a1e85a6babc29e1d4243692eea11231f6a9b045e724794a58ebf6d72fbb48220559d7d56a8a2297cf8e16987565cb7449762df10a112a046f91d173addf94c69fc1725e7bc273aadbcae399751b9401b90b32ad2760d95a970e85aa3111cf1948e5cb31b7c77543f188a990dbc8b03dd07cf4ce93a9c1a00429bed8f4634ec307531ce2ef9e8d669380f516aee80ca8636f9d10b8586890a3505b20eec51a224e835392bdd680117b8b18d7c1b5a9f4c8", 0x1000}, {&(0x7f0000003800)="7f9e6bfd0ee5c6260ba17a67c2d7a2dc0e365f1def96f0b6c427fe4b1fc5f531c8843f53c1e50caa", 0x28}, {&(0x7f0000003840)="afc8", 0x2}, {&(0x7f0000003880)="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", 0xff}], 0x6) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000003a00)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, &(0x7f0000003a40)) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000003a80)=0x1, &(0x7f0000003ac0)=0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000003b00)={0x28, 0x0, r1, {{0x4, 0x7, 0x1, r8}}}, 0x28) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000003b40)={0x88, ""/136}) recvmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000003c00)=@x25, 0x80, &(0x7f0000005240)=[{&(0x7f0000003c80)=""/177, 0xb1}, {&(0x7f0000003d40)=""/102, 0x66}, {&(0x7f0000003dc0)=""/120, 0x78}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/200, 0xc8}, {&(0x7f0000004f40)=""/197, 0xc5}, {&(0x7f0000005040)=""/225, 0xe1}, {&(0x7f0000005140)=""/246, 0xf6}], 0x8, &(0x7f00000052c0)=""/236, 0xec}, 0x80}, {{&(0x7f00000053c0)=@tipc=@id, 0x80, &(0x7f0000005500)=[{&(0x7f0000005440)=""/152, 0x98}], 0x1}, 0x9}], 0x2, 0x10000, &(0x7f00000055c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000005600), 0x400, 0x0) r9 = syz_usb_connect(0x1, 0x49e, &(0x7f0000005640)={{0x12, 0x1, 0x250, 0x81, 0xf4, 0xf0, 0x20, 0x572, 0x58a2, 0x4fed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48c, 0x1, 0xf, 0x1, 0x10, 0x5, [{{0x9, 0x4, 0x1e, 0x8, 0xa, 0xb7, 0x29, 0x8a, 0x6, [@generic={0x23, 0x7, "3830789be61e60c12ae23839ad34042b8cbb2883e049ff7f59e8aa72901475719f"}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x9, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1a}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x1, 0x4, 0x3, [@generic={0x58, 0x21, "9a1e0a031da66204034e5bf739ffada046ed297fe1fd97c2fb91eff9a2b308187d612c49839b47bf0cc569cef59e82af5adfdd8b4eae566967819e71168d80d9fe94bcefa3f814dedac1c40a0c9f320dfa09bef69b8a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xc, 0x8, 0x4, [@generic={0x41, 0xd, "0fc9926c06fd018a6158fb7c8533fe5c41b06317bdf4c14c5eb4cc69d4a01bf83cb09722da7525fb51044c5b26b8104a252da7473019ac25f2372c4f583322"}, @generic={0xba, 0xb, "aaca00873134847f554e084de0cafb02734477f44eaacdbf11e3693fb548df8ecb6271f4144e18e0ad2a3b1e40798a6032cca60a25ad10fef2b2cd2ca939bf247bc0d6713304712cb0fe9c1dab4d83511c7a58b036034fc19bb53cd59a9b891e9c66e85826c235ecc3117fd59198859a4af895e22b116f6e3aede3c53ea67b4d73da9e49ff90677e85e5c5b711dbdb6780713c2ab80ed589a0cbb065854d797f4b44fb8cad1239744ca131fbaebb63b823517fa494137647"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xf, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x400}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x4, 0x4, 0x6, [@generic={0xe6, 0x23, "cdf12986fec2f0c8fabbcd85104396e891a4391f31e2066d45e794cc7070626f1562f14dfcf88a71c2a0acbe5a5998bcf0a61de50dc8316d482b3fab38e8604624ea71ba333991c28794fb279f3269b6ae246a42ee50507cc7f079f3711bb2ed3f3e78e3514935e16e3e8a0d68e0bd748e2569e0536da698a3de37f47a481642c021acb08185036c2003d0bb2f823e6c84bf9821f10d8329e6b8dae5674a104247d5ea8550c6428dca035e453156ab772f16e8738ab2f9f7e4d7ef6c0ace94c1c4e8cc260eb862e6386133a0b049eef169d1acd544e1b185e38c3d9f619d545538664254"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0x7c, 0x6, [@generic={0xa9, 0x24, "ce3caa6229e8fa3fc96eaeb9fd1e32785dd28a7ad28ff49d5d0d0dc04dda421edc096f41956bb47461be17050d42af9e69e7ddd7067f8bf31df676192f58fbe9ae30ae5c90932a47ac1ba53fb38edfcad575c622a2a6ae2da372140fae6234e507a5c1d2ffe7155e3352c6fb31f75f1c8c7f0497c912891a994b16f052605966d08870b39ec4d6183155b021ad3502083daf1e3e809fb8c534f59b70b2a93866bc53756e85e677"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0x1, 0x20, [@generic={0x3d, 0x0, "d37bbde4e6d5912f679bfe3e3fe3e002afe8be0d3fef94306ae4a8c7ee9862182282eee5db8e8375b8f7e20a01b02d31e6a1b12123e59b4c127631"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x8, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfffe}]}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x64, 0x2a, 0x8, [@generic={0xb4, 0x5, "c94ad95e30860330387e58df22bfa984a57cc15913e5e9c089eb88eab36fbd9604644f51a8364edd2f77e4ecc12f7029dfafc491217326b6a3834df7f01df79197acfdd7874030c976f19667899190c5119e91defe9a02910cbd68e291f95e4b7daba291b9844e1fc5b57ac82ff86835102e78d52a23306e3b4a641bd06b9d7f1b29172c3ca796b2e6b1c995d9f994bfae7a4abe28f22ecc74edfc50c4fe5ae321868cd7716722c88fe04692deb6ca2deec1"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfff9}]}}]}}]}}]}}, &(0x7f0000005bc0)={0xa, &(0x7f0000005b00)={0xa, 0x6, 0x201, 0x3a, 0x0, 0x7f, 0xff, 0x81}, 0x12, &(0x7f0000005b40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000005b80)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000005d40)={0x14, &(0x7f0000005c00)={0x0, 0x31, 0xcc, {0xcc, 0x31, "934ff51577cea082c47837d25908697f7eee503a84119c44c7e9115bc9148de2e8c7e2f8614e825230a3d5b234e6bddf161794019cfa9bea2230724a831561262d72685e2488869dfebca14ed06ae905a0a424783d1411f4e3cde0b4a8f4e094c182c0d33ed64462a30197523cb4d17b8a8f0cab4b563002a4a1d194b6514a8c14145bed143f79da656d88f210f0c8266e5d9cb32c88f0a2f97ff5f6bfd830db3624d9b0008db252ba5ef5b32a70e0529c9c8ae8b43e97bae939ebd2c12b3b4c1efd2814160a53be226a"}}, &(0x7f0000005d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005f00)={0x1c, &(0x7f0000005d80)={0x40, 0x14, 0xef, "8d918d6774d88468cc22cc29a9d5cd3bb3316997e99ab9011922ccea36690c60cec94d5a9cc8f6965bb8012ed1ee91d3417c2ea9cbb5f43b9eaef7118f4ae3d2b83375ae22da57280521a85003cfeafa744ded4293476d6c05a870679ddd0fdc66158c953c1f6fa79385d52a060149ec92597e507afbfa4ee75ce2913ed44c17bf72e257f154b8e0f5be9cb610ea12e87b24feaa2a9a8b481d531285e5dc6723613e04295ff91db30c83ee5729f7f8c2bc29eff15a6bcb13bb0d7c90fd42b84e04889ef72d5a54e4f7dafb1cce56a01ddea016a8dc71a2c6b52fb9985e7bd8717aac8dc228186d31179bf66d0a3aca"}, &(0x7f0000005e80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000005ec0)={0x0, 0x8, 0x1}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000005f40)={0x18, 0x1, 0x0, {0x400000}}, 0x18) timerfd_gettime(r0, &(0x7f0000005f80)) sendmsg$NFT_BATCH(r7, &(0x7f00000060c0)={&(0x7f0000005fc0), 0xc, &(0x7f0000006080)={&(0x7f0000006000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000006100), 0x2000, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000006140), 0xffffffffffffffff) 43.365852002s ago: executing program 0 (id=714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff020000000000febcd31500003d9460be632d1bc829e4e0fa77a114ca647b77df344254d76b7d3f930b23b6ef9fcaf38f657640f7dc5edf856bfcf2705868ef4e66d9f7cc6ebbf7a44e406b6f0cdda5ef7f87c83ed63b0b38786e1f0c79283562727afa742991c67b2772c51fb6a4e9bd7acdf49f"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000180)={0x8, 0x2}) read$FUSE(r7, 0x0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r8, 0x80083314, 0x0) r9 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) fstat(r6, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005002100030000001400350064756d6d7930"], 0x3c}}, 0x0) 42.402405621s ago: executing program 0 (id=724): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x800000) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x24) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {}, [], {0x10, 0x7}}, 0x2c, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0xffff7738}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="30000000000000002900000002000000000200000000000005020000071000000000020000"], 0x30}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000380)={0x40000000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xfd, 0xd0, &(0x7f0000000040)="028f5c60a522053c96e318740b315b854edf67d3d29c8a7387a0f2cca5d857fcd1f2a43fe4b0e507d12d0a6af8c3007561d361e83c1a8cc5c8580972b95f82bdc9f85b0eb8c1d20a9669dcf00985e344b4fbc060cb302b8923b3dc48d20dc86a96c504979dd4d27abb587cb8c8fbaf376024c6285110362c6ba328c6e6f09f5ab8677b7f5a3f6d1d283617c84676692d23f37be681af885f88d0d4591494610bc9c81f6fab548089b8fe12174ff0ee9803d5dd2c9744dbc733d9f08d4db7376a0db32306a444288201b8e2746536a43bd87409d2545c02bffd2e8e6daf91a1b9e7f9e3f6416a337d92f4d71f8006f36f5452bbad4f2baa8cde325eacf6", &(0x7f0000000140)=""/208, 0x4, 0x0, 0x1000, 0x92, &(0x7f0000001080)="3da0a655ddc35ffdec9f86bf70e38bc4947ba1775a85de9baaa019261ed6dfb64a01c0481360530b4977a629e05db9ae3e11b05d559511b59ad2c69d46cd2011235bed2d9e51a7f17f616dd69c0dc3de2a2e7915243d8c7db9bf1629c9beade813b3e62ff985e3cbb62bd6337ee7792a6fdf998a10c9711ea1c87afb95ce6459bbe9c5ea3a985266a9c7d0c89cf6ac55a3a16be6bead35e26df170d4b7296fed152e81d1d408d2057f0e7f0d92f5ca1956fa13a1f876cd7539c4920f779d6b9763a2f03efcfeac1453094159716beabc96a31b38c9d8b83f2bd927625cad979b768e85f50276160de9e37cb843b1c3cb167cdc2cc2cd27f23ec1a9f46947f363d936d80114e815f798c3d7614f80a0d403fec33ebe65a6b9f5a44fef00c0920555bbd9ed58b8463a9600a8f8fcc625eae4e99029d89eaacef035bbd0f8eeb0f44d22c2278f80c013a3571a4e5d2f217cd3a84396723d75a5f30ebdcd7cbf13ff750e47ee21559911cb9926eafb6548216fb4a6b2d4d2dcdf9da8d015172ecc80fc9de90382d3cae68075296238af5a292214f237a39a1b0f2fa222de815ec9b7eb0d7e5cf04491799769b2d19fe755f911c90acaa3e1d03d9b441317ab67c844d4ae77cb69f42605d55d8abb6087d4970207cab625ec9e06ccbb85c1b3b0d808e4cdbbe47f4042e6621e540ee40c36f6244663de0a96d822d7b202ec6397324d83158ff37cb3bcbff5149fd68cae22bb96b327664fcb207f054ce7de0693a923d6bce037a4f509e19169ae22445cc35202834a479dea5aff2190e49f3a66f9a27cd8c0afa9df921a2243f0692023993dd27f816f1e7fe590936d60ad76523e5f1d7afd215ad23a614479ce2db10784a77b1786a17400f143b2e5bf45c1db1b932230fcb91228de265644d2b072d1dd0b92acfb3e99948864b84712703058c17e850f4190894b8c9a709c79beec443cf4e66523a3997cc14a39ae927b904ccf68acf7f8044f86ad8768727892fe259237246e398795db13c7cd50591f89c5e19081c8f1054f775348cd9c8421b85f057caa50b47991b423b0d8d3f30c3754f94c24a51737e6dd9b573157c095e12db1884797b6876a4929f58388231673f745855e87f12465fcdf738947a55849f04f3fc6f2f4aa105d3435bbb9cc0acfdbf739e187794dbeb3f743e29e482751fe31101f5905837cd0d2d1dccc375ab113877273ab81965833777d546acfaf2d1726415ee1b9bc86018b2f069369ceee440dd9635504df5aba3a87445bddbb0be7c5007cb359d558bdf6ce5c1214cb9f23c52a2e55d48abf59a82cbcd39570a052d59526c8a6b4cefef07fa82e6af57dff44b2022d5345f9328e8de45f988ee0d96e3f1d53aaccd62c664b2f398790c0cba58ed50e72bb5b5fc1933cf6b391cfe3ef03a474ff95a06a8783eaf07b057f8117f18a28aca4be232eba198aa492f38c4d0a152f70bb19b71a379c446e6bfcaa728637be62207c904efe530e43839e488f478d283e16110403ab2e0e09580922f9340d81d673ea524396540fc8b01706d21c80446583e496d6cef6e58aacbf844cb525ae4d82373990c8e57ba2c308d3cf1d269b12d16178b37cc93b49d543d73afdfe3f195db190e21d99b4b5ae2ab1970f5cae9ca2c9b4b95c1828fa1821058a42d83d6203b5ead819114c7b34ef396097aaafc4f209a5e93b991c800cc2deb2f31024e90186096034f9765b1bfd01a7bfc989cfc845ea764072a3a45a69fc6c906f1a0cbdf4b552bc8f02e9fa619ed6383bd04d0b50e4c479da4f67e4ea91617413e60489e02c04f82063ae674abc75fd56aecb45217f6e6768ac0535dfc3f5fa020d33bf42c63e82aa14d66d908ee297f47045f8fb8f581c4fac2ecc4980d8100f7e2e8d8e644cd148b330c1b80f9fa384c1fb68280d021b69471cff041052f6c1977c4c607fed0726b67a6cd9700d934cdc36b7cc602e1450089216bb4d592da518bf78ce41ec3dc46f9493c6921601f0f3e929bae6c69dd765bf858a22ea7897d6fb5a55c1f89cfb604f4c175316a99bdec1dfd387bbb4e549a72d4876acd4432c451d2680233ea669ccae24e92010d4c9e17002123966c863454a5f0adb0a14ce6829828072ba9b505fb0412efce944c9ef647aeb83afcea4cd891e26c9048e0f5b0d64f810804d70bf0836bf26883dba9ad388d0acac268a592c668e6e782aaaf3c578af0c52c6003ae60e4d03124dacda0aeca8116ebb31a59738361db7a5662ca057bd229413023efeaf38837d840f13cff715e737c1c3b8b043cf002acb3066b98b57c81ba50eda0f8c511b6826325295037bb78a4c942276164cf64452affcb2481a5f8223938c315f4a95e655e32ed07cd1ed1b4ccdc79eb5bfc62483c667d47cfd7d1bad9f15d68c5c3e6abdfd59dff12b90ee81860c0fd163083b57e860f819644fa130880cb0001794d26f55fea795d9fdec79ef3f0f855ee61e4fee269301e530d21b7e1170fbf61a38b8b17032dd3cdd8ae3966881b5cb70d526a7cca44f530495fb4ad8bdc37fbe73b4530265b24e34a99dcd7c82e6e9b237ac26bb21dce804a52382a5562e0d4e3802f97239afeff07ff56b5ba4e37ade722c5969cfbf3f65a170a52c06360e6f5888f2717c841c37fde47ae6288f11ad97638998f3fbfb0e079b6f2a036cb9cc57d897768739f9be30c7ab43b9d3824b1d7559f2955b42fd619e2201b205f8e3ebb498a7f841a037af2e515fd5b1385ba5658470bd35c9a236ce7c8f80ae55634be57e2e8fe27e19e662ca9f19e7de5200023949ba5fdf33b6a5fbf2e67fdef754178ea02c5948789fa9c39fc7fd5a4439ea2fcdcce98217c15c0e8305a29c60d6123917e179c7830837da049b92e66fb10eb30cc6f3d5d8d8eb33e380d4cb750cb4e887a02c0b08eadea37721336f5301a0fa7028e6d58cda13697ba06b07f987008d97be33164fcd0868cd0561091763066b23f4b921aa8ccf541b9dd3e063223b1cbee4ba43ee33453e2f4a2dff13fd68e300d675959d846da3821de7b699ea51fd5d20c4a8a83592f49b9191db32f701cb5cef37464b853102925106d69599ca5064de3d6db0b99343ba39e922b08951e139ffb564344ab16c500f0e35b5e0b4785368d31d0063f9872cd24faf7f2e7b4c38bae6aa9abef53dd92c6b0246783355ce4d3516697f4ac7720933762249031440e847b9ca9b3235f4ff1193419a1d19004a9dd69d638f23ad38c568c0e39d790e94def6e231a84db190f7d1512daf6893fdf283c45a5ef742b4e3dc07cdf515e1a0047bac3873ea537838c841c3579ea10602e3c206ca527900ff52264975262098a464e86a4b1ad9c9fc7b41d015779d003096ab8d2238d5d16844b68ac908c10e37bfd8ea7e1efbf2c9eb72c7516a48b224aa3f3a51ea2569069aed46110d1e3909c94eccb7374aca9ee01334f174040cde28c541f08ca675cce449c2f3341f241da20f215fbf4af048587b397cc35ebe1bec6119c49894e020bbcd18694d6c4f63e1249bd3248a988c1c0657c6f1d471b3a5db626a39f6adafb720bcd225ea2a8f337807a24c7a77021761d7e1ab0d82897e68f8ed920aa6376d38a61e8dd63513400c6cdf1ea35b8e28b3a562cc09f112f8dd45fb4767986f4ad25466f822f2dc253a695551dec292da311f5b96413ae87d1a56fb13b251d27d012cf3256a8a891aa51e154d571b9d602938828d089a60286c204550b56baf6b2d4f84213d91d6096e96c005b8aa9dde506a7250a8ed1a3fa9b78df6402f611ded12c1c2932e88b18552a4cd8b91700021eed3a8cc524f59965635853dabd3b6441a9f1468be2d88b494960c297a55300785deb218da680cd6545f8f0977ef5c56e31d7c99d453b971cfbc47b67c97baa51e16c66e30f70c16b7906fb51c74be14082323e00bb7ff2b0c64fc8bfc844450eb0c370428983fed0b4b5c86639ab3a0b3b91baac3e7bec81a653ea219dbec4ded1f72f5aa5314a406f30bf1f30a0d572ff29a86f09cadb7d382d574d29bb6c305aa3545580946a48431c85a1238b52335349b7f89f3b2184d8bf012c4e414171f46f3700861267d3442c2861d845d43c6b19121e791435a146df6e0ad3d0198dcb7171f2f159a63cd8e03ba9b87a5ab467f53f0ac69c7781da1e06e78f7a3e145b163c896124ab750a41dce8be396499615f44171b738c4e2710e4e3927158759923d159955d916d6cc6bde92be0bbbd18da0c0509941f655735b82d3636224a74e662ebe7e92f3c2bae2b0bc168500b72c350078fa46d8ceefdb3953fc88f3057c282fbf337c401b990b7257e1cd06431f2c5c21cba7614ccb954dcfbc15ec1c7617d9c6b049d78db2fa1ec3d4a805b63a8bc2598b78b0772a7da47d0f10641d21c60c3a95770f210c79832489bc72962a9460d58c814d47d1ab3f5d299a8d05e0421e08085cab06e0969649311dba36ac1c2984496e935c53e51d14463803a592ba8234df6e88565cd58e4ff80f56ffd4da0afc554f04b91e6dc54c76b9c406dcc18ed929841d7430543141f6f9d0d46a1bee51b0b869cc9efb396beb0ccecc241d8ea199235809322779fda554650b7bd0cfeba3c470d7dc84167b700e762d21358ddb9043f8834bb38ae3f15074e669e295b66f03e49890457320bd3873d45ff98850d1909c0d532c860d0a41a2931ae5e65d48e811d628c285c788e952e5f63706c42ea2fcc0dcd50d3c2b12f9099810eb2d7f211893d46876b57d7ac71b7da8bcba65a12f40e7df99193c2419884002d1c339c083741e98760768daa77fcd2ebdf8157a8d99a3570fda10c94d46218b0505c6d076114482af72357e0ad9a9a2c77c98ed74866844d928229d67f54019ab1ee196420b2bd1a72a05bb1400351a331342fad43581787ffe0199eef9a25b4a828c42d2a965421816550e1816c8db244f782eedab8f2519bdc82ed3805d45041fe4f438c60012d4b7ff3e301c239affe4860691ffda96209d201c55f58112e2f7a208609a63ba2c8287d29625493279a701265488b65ed057b706cf88c8a16a3f8895730e1ba166ae22919a35d0307e3c365ebfdd42065543d343bae085b6889f0624f76f1c5ea8709e50ba476fc7ce69bf73e4d27684258d3b7d31f4517d20b6003e701e1b203396a12f2a95b070c105407adc1c7f90f057d46f1ec7ab2a5088a076c7582ff126cbeffce5c35dfb51b54e9d5e280b6346841b3a3545656bfc52f449659e040dc2e93987bb88bb4c544095f1b74e85aff531e678513e9595efc0959041a5e1c1d6a8988e9fcf3bc06352de3749b23ffc8b49331044c533f25f6dbd0c8a4091ac395ff5cbd4663be079e38e6d4a959b8e62cdc6553d05f72d9655348bc0af6ca0e39656e52231b60fec0c7bc07d90ee95fc227b57a7014137842a5f6af3f284efc9bc6386d3f3a557430463e19fa535959f0b02879d15059f1c2100a7359b625881c6524971db16139218e2fea74323a7429ac11336232a047d3d6da40c7418eaa5e3c6ae5191edd9cef2479d4bc34aa22d3ed744c2447a97cd09ee515104df04577840275514feb1ef7e2b9c37a32d3c2d52dde8067ed34828d1d7673132918219c3fee356b2ed222562f4248a4c7e9e26ff0d520ffc8a8d108e011965d6e6fbb65e0b8ef71f6d528e043a2329e5fdf09be672e5d5c15b40c62a2354488e35ef6ec1c73eeaed68fa6ff75b3292f3856ad55cfd5cc1157fe6ff5b7ad079766643b96888da55731f2b40d94f09c14228ec9ee53045dec5", &(0x7f0000000240)="784f4d69e2d306ab5231946d70dc6687fd584c1682179eac92eb36063138a97727f89ba89fb80a4c9e4a32a4c0b00584a22892a60f3282f6a2e2a73ff2eef90b342042990bfe5029c96d57398056a3ac7f64c12dc2d2e9415cea95361a3257185687baab6665b15150d072799375f9d40467ad2f930b35482bbbfa08dbcb8650f5a3220c5301d6adcca297307645a1b2e844", 0x2, 0x0, 0x40}, 0x50) 42.25513971s ago: executing program 0 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x89aa, 0x10100, 0x0, 0xe6}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r0, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = dup(r3) getsockname$l2tp(r4, 0x0, &(0x7f0000000e40)) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000180)={0x0, 0xfb, 0x59, 0x2, 0x9, "8126cea27aaabb5dbb867b69a47f0c01", "b697b8091899e9827e0791533f017365ddb6fc2d31c3af07f9b8a3098db6a20dfbfcf7996555f9148746f5e82770a7823865896ea74a086f91306443dc2e6c0973a0347a"}, 0x59, 0x0) 42.10568039s ago: executing program 0 (id=726): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f00000011c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 41.84405521s ago: executing program 0 (id=729): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 41.785780914s ago: executing program 32 (id=729): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 10.539787211s ago: executing program 2 (id=1051): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB='6\x00'/11, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab381"], 0x20) bind$rose(r0, &(0x7f00000006c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x2, [@null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket$alg(0x26, 0x5, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f00000000a44c9b9228", 0x56, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x3bee4b3ca1ce7025, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r5, &(0x7f0000000780)="72a9aa0490741f008e31e0e66b75411ad5aca5de7218cdd79f408a38ee76c99b0a5819d7d834863dd3b5d062c7e043624f475d1e6e474eb1b26b9d46a7878ba6a7fda03a685d315fed33dd87c8850f506ba8e2e0076b97aee2f7a6fc0106b351558c39688f2880aa54e140231c6a8dfb", 0x0}, 0x20) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000880)=""/97, 0x61}, {&(0x7f0000001ac0)=""/4093, 0xffd}, {&(0x7f0000000900)=""/124, 0x7c}], 0x4}, 0x2002) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="7f454c4603070095028000000000000003003e00016cc27582fafa77e200000040000000000000004d02000000000000f6ffffff00023800030009ff7f0008000300000004000000c0ffffffffffffff13000000000000000500fd000000000007000000000020000300000000000000ffffff7f00000000"], 0x78) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 10.055835515s ago: executing program 2 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd25, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) read(r1, &(0x7f0000000180)=""/223, 0xdf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') landlock_restrict_self(r2, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') lseek(r2, 0x10000000005, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x20000000, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000000c0)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd25, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) (async) read(r1, &(0x7f0000000180)=""/223, 0xdf) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') (async) landlock_restrict_self(r2, 0x2) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') (async) lseek(r2, 0x10000000005, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x20000000, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000000c0)=0x3, 0x4) (async) 9.855286048s ago: executing program 2 (id=1062): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x0) r5 = dup(r0) fallocate(r5, 0x10, 0x0, 0x1062200) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000640)={0xa, 0x8000, 0x0, @mcast1, 0x46}, 0x1c) sendto$inet6(r7, &(0x7f00000005c0)="80003792a88f13ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @local, 0x3d}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x82, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$binfmt_elf64(r8, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x6, 0x1, 0x7, 0x8, 0x2, 0x3e, 0x7, 0x17e, 0x40, 0x39f, 0x6, 0x6, 0x38, 0x2, 0x2, 0x0, 0x1}, [{0x5, 0x80000001, 0xffffffffffffff61, 0x1, 0xfffffffffffffff8, 0x7ff, 0xfffffffffffffff9}, {0x3, 0x7cb, 0x3, 0x10001, 0x1000, 0x3, 0x3641, 0x2}], "78071125ec5e20a48b1f5f859e5bf7f94d4a03758dc5d44efabb01c87c918ad2ada65ee8592ff77680e450463020e03a5ffb29663101498ce14e913b8d1c71d562ab939a6d1df361f5c334bf5a942e1c399e2e6257c328ec8a63702af5a1bedcb09637e628433654952bd32fbd4a7f8599c9be2ee18d9b7719b21c56bda4f9134fb0a665c26b6dcd0cf1a5ced4dcb0ec96bd77bd0afeda00f8b2625fbe99cf5afc2d1595a28b3ca5fcbdf4c8a915f6c360c5194a52f9706f460b2a6834af06d98e094e64e614f89df7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa79) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0xfffffffe}, 0x18}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000140)=0x4) setsockopt$inet6_opts(r9, 0x29, 0x37, &(0x7f0000000000)=@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 9.515419171s ago: executing program 2 (id=1067): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) copy_file_range(r0, &(0x7f0000000000)=0x7, r1, 0x0, 0xffffffffffffd1eb, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000100)=0x4, 0x4) 9.301743782s ago: executing program 2 (id=1071): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000), 0x4) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmsg(r4, &(0x7f0000000440)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1], 0xc0}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [], 0xa, "fb8037eef606be45b567155ce2909137f106a860ddff1bea6f0e0cbe62dce90ef2c3bdb8e51402ead887319583d404"}, 0x33) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x8, 0x7, 0x6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x4a) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r13}, &(0x7f00000003c0), &(0x7f0000000080)=r9}, 0x20) recvmsg$unix(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40020000) sendmsg$inet(r11, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x6, 0x4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup3(r6, r5, 0x0) 8.951324166s ago: executing program 2 (id=1075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0xe, 0x6, 0x8, 0x33, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @private=0xa010100}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x40, 0x78, 0x2}, @sadb_key={0x14, 0x8, 0x4b8, 0x0, "572d8ed295ec671dd3176d8f7fa63865e9b67270da92d558af9c2ea64040e6788715444e5bd54266cf0bccf5f81aef2b6ddc4900375356a3f74c875c324df7a1118eb137afce1f0e3ee28d5efc0e1c269460a63cb2aa3d302c1920ba069dfc5e90d302b788faf0bcaa3ee636aa6e3ad1465beea7b58fed24944e6072830eaa8b22ad733551939fb235fdd65cb2b173712513239fd5fded"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_lifetime={0x4, 0x4, 0x1, 0x80000001, 0x2, 0x25d}, @sadb_x_sec_ctx={0x9, 0x18, 0x0, 0x6, 0x3c, "f552972976f9863480b4b3d64a22562b90f300343d191bb0e8736133f1a05746fd81f55c64ef56b92581bc1677cfd5a6b0eb24ad9aefa81f116f4ee1"}, @sadb_x_filter={0x5, 0x1a, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x1, 0x0, 0x10}, @sadb_x_sec_ctx={0x3, 0x18, 0x68, 0x9, 0xe, "d64ca24b53655ef16c4c3d2be40d"}]}, 0x198}}, 0x4040) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032", 0x26}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x401, 0xfc, 0x7f, 0x2}, {0xbf, 0x8, 0x9, 0x1ff}, {0x4, 0x8, 0x5f, 0x80000001}, {0x6, 0x2f, 0x7, 0x9}, {0x7, 0x0, 0x8, 0x6}, {0xd, 0xc9, 0x4, 0x398}, {0x8, 0xff, 0x7, 0x5dbf}]}, 0x10) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x68ed) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1}, 0x40) 8.896255537s ago: executing program 33 (id=1075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0xe, 0x6, 0x8, 0x33, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @private=0xa010100}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x40, 0x78, 0x2}, @sadb_key={0x14, 0x8, 0x4b8, 0x0, "572d8ed295ec671dd3176d8f7fa63865e9b67270da92d558af9c2ea64040e6788715444e5bd54266cf0bccf5f81aef2b6ddc4900375356a3f74c875c324df7a1118eb137afce1f0e3ee28d5efc0e1c269460a63cb2aa3d302c1920ba069dfc5e90d302b788faf0bcaa3ee636aa6e3ad1465beea7b58fed24944e6072830eaa8b22ad733551939fb235fdd65cb2b173712513239fd5fded"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_lifetime={0x4, 0x4, 0x1, 0x80000001, 0x2, 0x25d}, @sadb_x_sec_ctx={0x9, 0x18, 0x0, 0x6, 0x3c, "f552972976f9863480b4b3d64a22562b90f300343d191bb0e8736133f1a05746fd81f55c64ef56b92581bc1677cfd5a6b0eb24ad9aefa81f116f4ee1"}, @sadb_x_filter={0x5, 0x1a, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x1, 0x0, 0x10}, @sadb_x_sec_ctx={0x3, 0x18, 0x68, 0x9, 0xe, "d64ca24b53655ef16c4c3d2be40d"}]}, 0x198}}, 0x4040) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032", 0x26}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x401, 0xfc, 0x7f, 0x2}, {0xbf, 0x8, 0x9, 0x1ff}, {0x4, 0x8, 0x5f, 0x80000001}, {0x6, 0x2f, 0x7, 0x9}, {0x7, 0x0, 0x8, 0x6}, {0xd, 0xc9, 0x4, 0x398}, {0x8, 0xff, 0x7, 0x5dbf}]}, 0x10) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x68ed) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1}, 0x40) 4.800451539s ago: executing program 4 (id=1104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) 4.264429077s ago: executing program 4 (id=1112): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x30}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.63109947s ago: executing program 4 (id=1116): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f00000011c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3.500823673s ago: executing program 4 (id=1118): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x85, &(0x7f0000000300)={[{@gid}]}) 3.40927974s ago: executing program 4 (id=1120): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="2500000000000000000000000000000018110000", @ANYBLOB="9224b1bf813257875ebd88b726edfdbcfb73a0eb41fe7ef2deb1b4c0834131c90d69b523af6d1e5a69f1572fbb4d159ab8ebe9be54ab28a9a92a28ff7d92ac147f7300878649edcd061ca90159dbfe1980e2096f69bc89ae5c21c0e6dd08dea61838829506f2bc4fa653b0b64ad11815e02a2ced1295a8f3db1242e7b170e95dabfdb68604745482939f7edcde244b01666a6cb1a68eee4d1843d01415f4cf37c8bf0fa88411eaa16275e2bf0dd1bddda9c199186290ec4208378ceb91e3fb66f24918dd8647621180345980330700fbc75c657240219f5aaf88cf16c0798ccbd711da235afc7bc965a7c723de8de8f690d8", @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x94, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 3.11021763s ago: executing program 4 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) (async) mlockall(0x5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x3}, [@nested={0x4, 0x12c}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xb9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.987376591s ago: executing program 34 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) (async) mlockall(0x5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x3}, [@nested={0x4, 0x12c}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xb9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.608342427s ago: executing program 3 (id=1132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4, 0x7300}, 0x28) (async) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="975c4063b40a89", 0x7}], 0x1}}], 0x1, 0x0) 1.709461386s ago: executing program 3 (id=1136): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xcc00) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) (async) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x8, 0x2}}, 0x14) (async) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0xa) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7}, @in6={0xa, 0x4e23, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, @in6={0xa, 0x4e24, 0x9, @mcast1, 0xe8}], 0x70) (async) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xf582ab88144f81c7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) (async) syz_open_dev$sg(&(0x7f0000000300), 0x543, 0x302601) r3 = getuid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (async) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f0000002480)='./file0\x00', 0x100, 0x400, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000002680)={{}, {0x1, 0x4}, [{0x2, 0x4, r3}, {0x2, 0x4, 0xee01}], {}, [{0x8, 0x2, r4}, {0x8, 0x6, r5}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r6}, {0x8, 0x0, r7}, {0x8, 0x0, r8}], {}, {0x20, 0x5}}, 0x64, 0x5) (async) write$binfmt_aout(r1, &(0x7f0000002700)={{0x107, 0x7, 0x6, 0x1bc, 0x1f8, 0x7, 0x1c2, 0x1ff}, "61fe41e4633dde0e9e68", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82a) write$P9_RCREATE(r2, &(0x7f0000002f40)={0x18, 0x73, 0x2, {{0x1, 0x3, 0x7}, 0x5}}, 0x18) connect(r2, &(0x7f0000002f80)=@pppoe={0x18, 0x0, {0x4, @multicast, 'dvmrp0\x00'}}, 0x80) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000003000)={0x7, 0xc6}) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000003040), 0x2000, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000003080)={0x0, 0x9, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f0000003480)={0x0, 0xffffffffffffffff, @start={r10, 0x0, "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", "d63650e1eeb2432f6266c3d25fa73991decd1212eed0b39d3c6f5dea48380757c82c31a685a79456d3d5e26677f187e033cee9fc56eb7dd406c87996f74c42a04ab5c5c147c3e32d021226a1f36b8daf0662a3022972731471742001f3c9af9ec7d6691e6bfeda2b9638e2ff2c4c70f8e5f6e4ed66e81c2da986ffbbeb01a60ea9b1493db9ab9cb29cfd2d7c9bc912083afb2e8b12073d0ffbb7bf82bd8704378d28da5019236e82367a7c785ab149eacce7cefa48c037032f21f8b6a00b2ddfea8f60ebfd8e843a42336100862f4abd817d474718282a8eee3571daaca4281c8e1ccb1c3a10f22c07b97982e9e16228e5b321e19d02ccc5b7f374bde30f4e4959e79fc70413d5d346aa96d5797388b19d45d5902ad4941ddaa1d5c77fd44541cd7439615255d5c844d77837bec36b691717d728cd255bd88f6db0ee6b600ac2525e78f6d4d59924b6548649db1cc053ba57ed46be0bb73264ee256bf76ac4cd158e8cef216e170dab4ed3963f8d24e332ddd1a0c69d6843e4d19a93741a49f4b8727b1b18f7861b09e593d8957362097b52a24604d96b09e92f2b3a3a7b921120a1dbed3ab8dcd26a5a965fada144cb0103416ef815c0cb3788a9839a07bef6971574e8ce3e1eae6d4dfdc433a2ee581afbf68cbff79621042c92c5feacc951020fe6403e086e3df21ba52ef4d06ce503a5d32f03011fa73c4ad8c2b582f24b18c3096b687bf82712e8d3d254988bb3a3b135d7e52056f6fc5a89574c32b9eab6bcfaee6dc4c51da449be21b891e3fc9bd26142f0bc09f96148f2d7ffbc94e9146145a802872e471c45846ac3bbadb288bdf4f7437550f46e71a2cac2cb43978a0b38dbf9013b1a9927c0851230fca39b28a17ac0d50c547d09381ccf46e4ed10638456475bf33b18c6371285fbfb7cc3a26fd10795cb8de4827c8b24d813acbe4113e909e7076e1c0fd11fa5c82a9874c3a40560aecc4d468b5c89295d3f0ca16b22ac6cd34056031988d5cf0bffa3ed7b03dad1ea6cc7356d08e9c6d9b1970a6439af385caa331f32a82e8e11b4034d309bf9477b176af5b19e63b6f908fa0dddf5ec5271835621b8c23374fe6dbe32e6bd512ba07f27480a9e74dd81777643049c33656a5a98295d5b0f8696ef3a68fe0412179752b45216236ac6e0ad721866ef9b53e3e810b3dbcbdcb961e5799d3642e2aacf4ce53b910368791205069a2885f90a1849969f04471c3e4b7de1dd609b62af8e1f15bb6fef40595771ca17d489f3cf959d502bf640f7df3baffc04e78b517ba23383a9c9b5a37290bd4edb3b9843a7a0ba82e16bcc57a8e52bce03ab87d1f5c1196b5d417ac8896a96402701b3c67377bc789c1a219b164d4172ea730be949d51625279eadfcf01800b81668971bd2570676acc9459e5c29e22ceaacaa3d88a46693624b6ce3a92022d4a5"}, [0x1000, 0x1, 0x0, 0x3, 0x5, 0x5, 0x5, 0xfffffffff207af52, 0x1, 0x7fffffff, 0x5, 0x7, 0xe7a2, 0x7, 0x3, 0x8000, 0xfff, 0x548, 0xffffffffffffff7f, 0x5, 0x9, 0x101, 0x40, 0x400, 0x5, 0xfffffffffffffffd, 0xd62, 0xb23, 0x3, 0x80000001, 0xfa, 0xd, 0x9, 0x6, 0x5, 0x3, 0x0, 0x2, 0x3, 0x20, 0xffff, 0xaf, 0xc, 0x1, 0x8001, 0x5d3, 0x4, 0x400000, 0x0, 0x6, 0x4981, 0x7fffffffffffffff, 0x5, 0xc, 0x8, 0x0, 0x7fffffff, 0x3ff, 0xa, 0x9, 0x81, 0x0, 0x8, 0x6]}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003ec0), 0x122102, 0x0) write$P9_RXATTRCREATE(r11, &(0x7f0000003f00)={0x7, 0x21, 0x2}, 0x7) (async) r12 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r12, &(0x7f0000003f40)={{0x18c, 0x8, 0x2b, 0x59, 0x227, 0x9, 0x2c5, 0xb}, "74daa1cd5916759e360ff2459721825e20e56b502505f2bb4b0938d1f72fc2cb162b92f83e3860c046f677c0baf8a00224c2b53970fff3c9e23f6b20c656c480fc4fa23ed94df5ce8c753efc70c41dfcf47b4214e0984b0fa2f640f60daf2fbd2b88eab7f2d98009448fd86791de8162912368f2ec4a17f354f87d73bf4e9f1c8bbf8df44e91a1e9716e1f6891f6fe5093d28e45f95e40bafaaa0cb5b55508bb", ['\x00']}, 0x1c0) (async) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$ARPT_SO_GET_ENTRIES(r13, 0x0, 0x61, &(0x7f0000004100)={'filter\x00', 0x7a, "fa4474d14087b48788179bcb3f85383f9a0db30bee413eb12f6260d2bff4c7a6f43212317ced70e405eb76bffaf71f9a20894f2fc859097eb2dde9bc45ce78e658344f972b689b4c8add53845e35452297b3500cdfae6ffbe29f0349805d89cff06c10d56a31647ec6acbab7a410b22a2f5e3a78ed9e1c6d6b25"}, &(0x7f00000041c0)=0x9e) write$bt_hci(r13, &(0x7f0000004200)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x1, 0x54, 0x8}}}, 0x7) (async) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) 1.610152585s ago: executing program 3 (id=1137): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x28) connect$unix(r3, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) write$P9_RLERRORu(r5, 0x0, 0xd) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x800}]}]}, 0x3c}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f00000004c0)={0x0, 0xc2, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff, 0x1, 0x400000], [0x0, 0x2, 0xfffffffe, 0x5], [0x9]}) ioctl$VFAT_IOCTL_READDIR_SHORT(r9, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x2101, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000020000000f0000000000000002000400720e4d407fdf651478c3f7ca3ea549eac748b2b0a3219138e04b244d0d24df6edc7bbf9b0061fd1a53562e5993c934716b8d33029064c2a0b56821b13458fcc5d750d5dab712253016cedc2b49b2b7f5efe6585959f9cd8672fe481b2f0905a0f8ca8a008d8a7859fa5a257552ff385add5e0182d3fc8904dd1d0ceeb2beef9711a82e8a7b7753d36ea4266865fa48aa2cac2bf3ba83dfecb19fff324f789aa3188b0b21f1430d", @ANYRES32=r7, @ANYBLOB="0100008000"/20, @ANYRES32=r2, @ANYRES32=r10, @ANYBLOB="02000000030000000300"/28], 0x50) 1.500458071s ago: executing program 1 (id=1138): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="834f51d073a9df23990a0bc35ba03d2d383fce35b484f9e9ea28d13342e0260cda1a7af0d4e3c8fdbc5d7201a04a53e2603ad34e8c025a614f145fdf6add9be89f2b8a4f303c1b006c6dc7be041315dcd4692dede7682f6e7b056cf39318ad37bd33d3ba1cc09a7d80a7701cddd08e080b429a31969d59", 0x77}], 0x1}}], 0x1, 0x4004000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe8800000000000000000000000000010000000000000000000000007fffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 1.426020307s ago: executing program 1 (id=1139): pipe2$watch_queue(0x0, 0x80) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) personality(0x8) uname(&(0x7f0000000000)=""/67) r3 = fsmount(r2, 0x1, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r7, 0x900, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x20008800) 1.248672949s ago: executing program 3 (id=1140): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)={'b', ' *:* ', 'rwm\x00'}, 0xa) socketpair(0x22, 0x80000, 0x4, &(0x7f0000000080)) 1.181980669s ago: executing program 3 (id=1141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x1, 0x1, 0x0, 0x2, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6], 0x2000, 0x98302}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 883.336369ms ago: executing program 3 (id=1142): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0xa000}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001380)={'team0\x00', &(0x7f0000001280)=@ethtool_drvinfo={0x3, "8e83cc9e88b009a8ced008a45a9b15655db53c38758b5d267d47b1a109528e05", "94ec533ac1530fb40d6713ad954eedb14180e9936a9d353caa877653bce1b892", "d39af0372b17ec044525bd6635d3fbdebcba911f0bc93222ad196c2097456bcb", "b039149dc172700e784f8e8f3aa3f18ce4081bf171e8077c02deb94d5f29bf66", "64c7a53e3a3b85ee0f3612d286625fe9778737fb81d24f685563b9e6fa32b055", "1f6869027ad2ecb6a95b1575", 0xfffff591, 0x4, 0x3, 0xa92c, 0x3}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002400010026bd7000020000001f0100800c0001"], 0x114}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x6) flock(r5, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x2c, 0x1, 0x2, &(0x7f0000000200)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000040)=0xfffffff8) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, 0x0, 0x0, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @empty, 0xfffffffd}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 405.562081ms ago: executing program 1 (id=1143): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0x29}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r1}, &(0x7f0000000100)=0xc) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x4004510f, &(0x7f0000001b80)) (async) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20) (async) recvmsg$unix(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) (async) r10 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="800000001ed833eb4cc22f97c3b64dbd90a41e8fa2832ec09e6fdc84fced2ab82b922a7d251ca9006199c38067258d422909efb15ca419c8a201a11aa33115e2c7dbb62bd8e9473411d062b4b6892e60be52db317d8cb3edf19b229910c1814f", @ANYRES16=r11, @ANYBLOB="000826bd7000fedbdf250e0000006c000280680003802c000180120002006563622863616d656c6c696129000000120002006563622863616d656c6c69612900000018000180040003000d000200736b636970686572000000001000018008000100060000000400030010000180080001000000000004000300"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r12 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000500)={0x1, 0x2, 0x2, "4449f8e1b0faa9b0071c937f7f57002e0c0000c39b000000000000003200", 0x34324948}) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xff}, &(0x7f0000000380)=0x8) (async) r13 = syz_open_dev$usbfs(&(0x7f0000000600), 0x800000001ff, 0x802) ioctl$USBDEVFS_RESET(r13, 0x5514) (async) r14 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r14, 0x6802, 0x0) 270.88049ms ago: executing program 1 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async, rerun: 64) recvmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x80}], 0x2, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000000000000000020d0000", @ANYRES32=r1, @ANYRES16=r1], 0x28}}, 0x8040) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x10000, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="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", 0x2d4}], 0x1}, 0x0) (async) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000102) 100.878046ms ago: executing program 1 (id=1145): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="834f51d073a9df23990a0bc35ba03d2d383fce35b484f9e9ea28d13342e0260cda1a7af0d4e3c8fdbc5d7201a04a53e2603ad34e8c025a614f145fdf6add9be89f2b8a4f303c1b006c6dc7be041315dcd4692dede7682f6e7b056cf39318ad37bd33d3ba1cc09a7d80a7701cddd08e080b429a31969d59", 0x77}], 0x1}}], 0x1, 0x4004000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe8800000000000000000000000000010000000000000000000000009effffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 0s ago: executing program 1 (id=1146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), 0x4) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r0, &(0x7f0000000240)={@void, @val={0x7, 0x0, 0x200, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8}}}}, 0x36) kernel console output (not intermixed with test programs): 40087][ T6737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.540097][ T6737] Call Trace: [ 61.540102][ T6737] [ 61.540108][ T6737] dump_stack_lvl+0x16c/0x1f0 [ 61.540133][ T6737] should_fail_ex+0x512/0x640 [ 61.540156][ T6737] should_fail_alloc_page+0xe7/0x130 [ 61.540173][ T6737] prepare_alloc_pages+0x3c2/0x610 [ 61.540193][ T6737] ? look_up_lock_class+0x59/0x150 [ 61.540214][ T6737] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 61.540241][ T6737] ? stack_trace_save+0x8e/0xc0 [ 61.540264][ T6737] ? __lock_acquire+0xaa4/0x1ba0 [ 61.540291][ T6737] ? kasan_save_stack+0x42/0x60 [ 61.540316][ T6737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 61.540344][ T6737] ? __mutex_trylock_common+0xe9/0x250 [ 61.540366][ T6737] ? __pfx___mutex_trylock_common+0x10/0x10 [ 61.540390][ T6737] ? rcu_is_watching+0x12/0xc0 [ 61.540410][ T6737] ? find_held_lock+0x2b/0x80 [ 61.540429][ T6737] ? binder_alloc_new_buf+0x1560/0x3270 [ 61.540449][ T6737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.540478][ T6737] ? policy_nodemask+0xea/0x4e0 [ 61.540496][ T6737] alloc_pages_mpol+0x1fb/0x550 [ 61.540510][ T6737] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 61.540521][ T6737] ? rcu_is_watching+0x12/0xc0 [ 61.540535][ T6737] alloc_pages_noprof+0x131/0x390 [ 61.540550][ T6737] binder_alloc_new_buf+0x17c7/0x3270 [ 61.540579][ T6737] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 61.540598][ T6737] ? find_held_lock+0x2b/0x80 [ 61.540616][ T6737] ? binder_transaction+0x10a0/0x9d10 [ 61.540638][ T6737] binder_transaction+0x1445/0x9d10 [ 61.540677][ T6737] ? __lock_acquire+0x5ca/0x1ba0 [ 61.540703][ T6737] ? __pfx_binder_transaction+0x10/0x10 [ 61.540732][ T6737] ? find_held_lock+0x2b/0x80 [ 61.540762][ T6737] ? unwind_get_return_address+0x59/0xa0 [ 61.540787][ T6737] ? find_held_lock+0x2b/0x80 [ 61.540804][ T6737] ? __might_fault+0xe3/0x190 [ 61.540819][ T6737] ? __might_fault+0xe3/0x190 [ 61.540832][ T6737] ? __might_fault+0x13b/0x190 [ 61.540856][ T6737] binder_thread_write+0xaae/0x4df0 [ 61.540884][ T6737] ? __lock_acquire+0xaa4/0x1ba0 [ 61.540914][ T6737] ? __pfx_binder_thread_write+0x10/0x10 [ 61.540934][ T6737] ? binder_debug+0xde/0x1a0 [ 61.540954][ T6737] ? binder_debug+0xde/0x1a0 [ 61.540970][ T6737] ? __pfx_binder_debug+0x10/0x10 [ 61.540987][ T6737] ? find_held_lock+0x2b/0x80 [ 61.541016][ T6737] binder_ioctl+0x26a7/0x7300 [ 61.541042][ T6737] ? tomoyo_path_number_perm+0x18d/0x580 [ 61.541063][ T6737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.541088][ T6737] ? __pfx_binder_ioctl+0x10/0x10 [ 61.541107][ T6737] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.541131][ T6737] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 61.541156][ T6737] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 61.541189][ T6737] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 61.541221][ T6737] ? hook_file_ioctl_common+0x145/0x410 [ 61.541253][ T6737] ? selinux_file_ioctl+0x180/0x270 [ 61.541276][ T6737] ? selinux_file_ioctl+0xb4/0x270 [ 61.541300][ T6737] ? __pfx_binder_ioctl+0x10/0x10 [ 61.541322][ T6737] __x64_sys_ioctl+0x190/0x200 [ 61.541344][ T6737] do_syscall_64+0xcd/0x260 [ 61.541367][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.541384][ T6737] RIP: 0033:0x7f0d3678e969 [ 61.541398][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.541414][ T6737] RSP: 002b:00007f0d375e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.541430][ T6737] RAX: ffffffffffffffda RBX: 00007f0d369b5fa0 RCX: 00007f0d3678e969 [ 61.541440][ T6737] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 61.541450][ T6737] RBP: 00007f0d375e0090 R08: 0000000000000000 R09: 0000000000000000 [ 61.541459][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.541469][ T6737] R13: 0000000000000000 R14: 00007f0d369b5fa0 R15: 00007ffc5be05b18 [ 61.541491][ T6737] [ 61.663781][ T6672] net_ratelimit: 395 callbacks suppressed [ 61.663793][ T6672] Set syz1 is full, maxelem 65536 reached [ 61.664076][ C1] vkms_vblank_simulate: vblank timer overrun [ 61.709156][ C1] vkms_vblank_simulate: vblank timer overrun [ 61.752175][ T6743] netlink: 596 bytes leftover after parsing attributes in process `syz.2.257'. [ 61.754030][ T6741] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.777468][ T6741] evm: overlay not supported [ 61.787292][ T6741] fuse: Unknown parameter '8+r6 O:kOQK̯DK[' [ 61.795977][ T6745] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.802645][ T6745] Cannot find set identified by id 0 to match [ 61.809642][ T6747] binder: BINDER_SET_CONTEXT_MGR already set [ 61.811969][ T6747] binder: 6746:6747 ioctl 4018620d 200000000040 returned -16 [ 61.838403][ T6749] capability: warning: `syz.2.261' uses deprecated v2 capabilities in a way that may be insecure [ 61.936367][ T6767] binder: BINDER_SET_CONTEXT_MGR already set [ 61.938846][ T6767] binder: 6766:6767 ioctl 4018620d 200000000040 returned -16 [ 61.986646][ T6777] netlink: 596 bytes leftover after parsing attributes in process `syz.3.269'. [ 62.073758][ T6786] ======================================================= [ 62.073758][ T6786] WARNING: The mand mount option has been deprecated and [ 62.073758][ T6786] and is ignored by this kernel. Remove the mand [ 62.073758][ T6786] option from the mount to silence this warning. [ 62.073758][ T6786] ======================================================= [ 62.487755][ T6817] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 62.527970][ T6819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 62.558921][ T6822] 9pnet: p9_errstr2errno: server reported unknown error @ [ 62.693461][ T6828] binder: 6827:6828 ioctl 401870cc 200000000180 returned -22 [ 62.772979][ T6836] Option 'n4:vmRfROqrsJ)rq' to dns_resolver key: bad/missing value [ 63.111526][ T6858] binder: BINDER_SET_CONTEXT_MGR already set [ 63.115277][ T6858] binder: 6857:6858 ioctl 4018620d 2000000000c0 returned -16 [ 63.124338][ T6858] binder: BINDER_SET_CONTEXT_MGR already set [ 63.126259][ T6858] binder: 6857:6858 ioctl 4018620d 200000000040 returned -16 [ 63.160125][ T6860] Illegal XDP return value 4294967274 on prog (id 20) dev syz_tun, expect packet loss! [ 63.161952][ T6863] binder: BINDER_SET_CONTEXT_MGR already set [ 63.166555][ T6863] binder: 6861:6863 ioctl 4018620d 2000000000c0 returned -16 [ 63.172200][ T6863] binder: BINDER_SET_CONTEXT_MGR already set [ 63.175373][ T6863] binder: 6861:6863 ioctl 4018620d 200000000040 returned -16 [ 63.349273][ T6871] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.586910][ T6904] hsr_slave_0: left promiscuous mode [ 63.589867][ T6904] hsr_slave_1: left promiscuous mode [ 63.743025][ T6917] IPVS: length: 184 != 24 [ 63.752479][ T6914] bond1: entered promiscuous mode [ 63.764705][ T6914] bond1: entered allmulticast mode [ 63.767339][ T6914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.038374][ T6955] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.041376][ T6955] overlayfs: failed to set xattr on upper [ 64.042555][ T6956] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 64.043764][ T6955] overlayfs: ...falling back to redirect_dir=nofollow. [ 64.052211][ T6955] overlayfs: ...falling back to index=off. [ 64.055006][ T6955] overlayfs: ...falling back to uuid=null. [ 64.179094][ T6970] fuse: Bad value for 'user_id' [ 64.181316][ T6970] fuse: Bad value for 'user_id' [ 64.184816][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 64.184828][ T40] audit: type=1400 audit(1746024738.475:5616): avc: denied { execute } for pid=6969 comm="syz.3.329" name="file2" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.196681][ T40] audit: type=1400 audit(1746024738.475:5617): avc: denied { execute_no_trans } for pid=6969 comm="syz.3.329" path="/76/file2" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.327624][ T40] audit: type=1400 audit(1746024738.615:5618): avc: denied { bind } for pid=6978 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.338035][ T40] audit: type=1400 audit(1746024738.615:5619): avc: denied { node_bind } for pid=6978 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 64.347836][ T6979] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 64.348846][ T6981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6981 comm=syz.3.333 [ 64.447072][ T40] audit: type=1400 audit(1746024738.735:5620): avc: denied { create } for pid=6991 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 64.462484][ T40] audit: type=1400 audit(1746024738.735:5621): avc: denied { ioctl } for pid=6991 comm="syz.1.336" path="socket:[14723]" dev="sockfs" ino=14723 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 64.487921][ T6996] trusted_key: encrypted_key: insufficient parameters specified [ 64.542425][ T40] audit: type=1400 audit(1746024738.825:5622): avc: denied { mounton } for pid=7001 comm="syz.3.341" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 64.642161][ T40] audit: type=1400 audit(1746024738.925:5623): avc: denied { ioctl } for pid=7005 comm="syz.3.342" path="socket:[12118]" dev="sockfs" ino=12118 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.834403][ T40] audit: type=1400 audit(1746024739.125:5624): avc: denied { write } for pid=7012 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 64.877886][ T7016] could not allocate digest TFM handle cbcmac-aes-ce [ 64.880784][ T7016] 9pnet_virtio: no channels available for device syz [ 65.156259][ T7030] binder: BINDER_SET_CONTEXT_MGR already set [ 65.158231][ T7030] binder: 7029:7030 ioctl 4018620d 2000000000c0 returned -16 [ 65.166041][ T7032] usb usb8: usbfs: process 7032 (syz.3.350) did not claim interface 0 before use [ 65.211174][ T7034] __nla_validate_parse: 12 callbacks suppressed [ 65.211185][ T7034] netlink: 596 bytes leftover after parsing attributes in process `syz.3.351'. [ 65.226540][ T7035] binder: BINDER_SET_CONTEXT_MGR already set [ 65.229127][ T7035] binder: 7029:7035 ioctl 4018620d 200000000040 returned -16 [ 65.246641][ T40] audit: type=1326 audit(1746024739.535:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54198e969 code=0x50000 [ 65.312934][ T6960] Set syz1 is full, maxelem 65536 reached [ 65.340261][ T7043] loop2: detected capacity change from 0 to 7 [ 65.344180][ T7043] Dev loop2: unable to read RDB block 7 [ 65.352117][ T7043] loop2: unable to read partition table [ 65.354364][ T7043] loop2: partition table beyond EOD, truncated [ 65.359539][ T7043] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 65.553486][ T7053] autofs4:pid:7053:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 65.597825][ T7056] fuse: Bad value for 'group_id' [ 65.599422][ T7056] fuse: Bad value for 'group_id' [ 65.664194][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 65.825695][ T9] usb 6-1: config index 0 descriptor too short (expected 62681, got 18) [ 65.828922][ T9] usb 6-1: config 242 has too many interfaces: 79, using maximum allowed: 32 [ 65.831872][ T9] usb 6-1: config 242 has an invalid descriptor of length 41, skipping remainder of the config [ 65.836085][ T9] usb 6-1: config 242 has 0 interfaces, different from the descriptor's value: 79 [ 65.842737][ T9] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 65.846873][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.852020][ T9] usb 6-1: Product: syz [ 65.854815][ T9] usb 6-1: Manufacturer: syz [ 65.857660][ T9] usb 6-1: SerialNumber: syz [ 66.056312][ T7087] netlink: 596 bytes leftover after parsing attributes in process `syz.2.360'. [ 66.111562][ T7091] ufs: You didn't specify the type of your ufs filesystem [ 66.111562][ T7091] [ 66.111562][ T7091] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 66.111562][ T7091] [ 66.111562][ T7091] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 66.122781][ T7091] ufs: failed to set blocksize [ 66.184588][ T9] usb 6-1: USB disconnect, device number 4 [ 66.497489][ T7112] mmap: syz.0.364 (7112) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.536670][ T7114] binder: BC_ACQUIRE_RESULT not supported [ 66.538592][ T7114] binder: 7113:7114 ioctl c0306201 200000000100 returned -22 [ 67.059751][ T7129] netlink: 596 bytes leftover after parsing attributes in process `syz.2.370'. [ 67.124321][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.141328][ T7135] trusted_key: encrypted_key: insufficient parameters specified [ 67.145957][ T7135] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 67.179642][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 67.182909][ T7137] binder: 7136:7137 ioctl 4018620d 2000000000c0 returned -16 [ 67.188140][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 67.190428][ T7137] binder: 7136:7137 ioctl 4018620d 200000000040 returned -16 [ 67.288459][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.293100][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.298589][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 67.298610][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.314695][ T7141] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 67.323503][ T9] usb 6-1: config 0 descriptor?? [ 67.463672][ T7151] netlink: 596 bytes leftover after parsing attributes in process `syz.0.379'. [ 67.529164][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 67.664168][ T3232] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.739007][ T9] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 67.742666][ T9] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 67.750508][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0003/input/input10 [ 67.762972][ T58] IPVS: starting estimator thread 0... [ 67.769469][ T9] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 67.815188][ T3232] usb 7-1: Using ep0 maxpacket: 8 [ 67.818087][ T3232] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.821233][ T3232] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.828096][ T3232] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 67.831548][ T3232] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 67.836637][ T3232] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 67.839482][ T3232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.846690][ T3232] hub 7-1:1.0: bad descriptor, ignoring hub [ 67.848567][ T3232] hub 7-1:1.0: probe with driver hub failed with error -5 [ 67.851013][ T3232] cdc_wdm 7-1:1.0: skipping garbage [ 67.852643][ T3232] cdc_wdm 7-1:1.0: skipping garbage [ 67.857207][ T3232] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 67.859103][ T3232] cdc_wdm 7-1:1.0: Unknown control protocol [ 67.864140][ T7166] IPVS: using max 44 ests per chain, 105600 per kthread [ 68.083211][ T7149] sctp: [Deprecated]: syz.2.378 (pid 7149) Use of int in max_burst socket option. [ 68.083211][ T7149] Use struct sctp_assoc_value instead [ 68.214330][ T3232] usb 7-1: USB disconnect, device number 3 [ 68.257174][ T7182] netlink: 596 bytes leftover after parsing attributes in process `syz.0.390'. [ 68.323067][ T7185] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.391'. [ 68.326909][ T7184] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.391'. [ 68.367667][ T7192] binder: 7191:7192 unknown command 0 [ 68.369947][ T7192] binder: 7191:7192 ioctl c0306201 2000000001c0 returned -22 [ 68.393530][ T7196] geneve2: entered promiscuous mode [ 68.395447][ T7196] geneve2: entered allmulticast mode [ 68.437067][ T7200] autofs: Unknown parameter 'fscrypt:e8dab99234bb312e' [ 68.453719][ T9] usb 6-1: USB disconnect, device number 5 [ 68.481960][ T7205] program syz.1.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.517599][ T7207] netlink: 596 bytes leftover after parsing attributes in process `syz.1.401'. [ 68.565537][ T57] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.620412][ T7211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.630013][ T7211] warning: `syz.3.402' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.635782][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 68.694190][ T57] usb 7-1: device descriptor read/64, error -71 [ 68.798609][ T7242] overlayfs: failed to resolve './file0': -2 [ 68.853299][ T7245] loop2: detected capacity change from 0 to 11839 [ 68.954234][ T57] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.964221][ T3232] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.975205][ T59] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.104211][ T57] usb 7-1: device descriptor read/64, error -71 [ 69.124170][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 69.130818][ T59] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.133546][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.134311][ T3232] usb 8-1: Using ep0 maxpacket: 8 [ 69.136402][ T59] usb 5-1: Product: syz [ 69.139381][ T3232] usb 8-1: config index 0 descriptor too short (expected 5138, got 18) [ 69.139501][ T59] usb 5-1: Manufacturer: Г [ 69.142681][ T3232] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.146655][ T59] usb 5-1: SerialNumber: syz [ 69.154140][ T3232] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 69.160230][ T3232] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 69.162933][ T3232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.166685][ T3232] usb 8-1: Product: syz [ 69.167977][ T3232] usb 8-1: Manufacturer: syz [ 69.169457][ T3232] usb 8-1: SerialNumber: syz [ 69.174968][ T3232] usb 8-1: config 0 descriptor?? [ 69.193867][ T7251] binder: 7250:7251 unknown command 1078485781 [ 69.198420][ T7251] binder: 7250:7251 ioctl c0306201 2000000001c0 returned -22 [ 69.214517][ T57] usb usb7-port1: attempt power cycle [ 69.257547][ T7253] binder: BINDER_SET_CONTEXT_MGR already set [ 69.260179][ T7253] binder: 7252:7253 ioctl 4018620d 200000000040 returned -16 [ 69.324907][ T40] kauditd_printk_skb: 28175 callbacks suppressed [ 69.324918][ T40] audit: type=1400 audit(1746024743.615:33801): avc: denied { kexec_image_load } for pid=7254 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 69.358950][ T40] audit: type=1400 audit(1746024743.645:33802): avc: denied { map } for pid=7230 comm="syz.0.411" path="/dev/video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.360230][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.373096][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.382257][ T3232] usb 8-1: USB disconnect, device number 3 [ 69.443968][ T7260] tipc: Started in network mode [ 69.446587][ T7260] tipc: Node identity 4, cluster identity 4711 [ 69.448580][ T7260] tipc: Node number set to 4 [ 69.519821][ T40] audit: type=1800 audit(1746024743.805:33803): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.424" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 69.564241][ T57] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 69.597588][ T57] usb 7-1: device descriptor read/8, error -71 [ 69.790162][ T40] audit: type=1400 audit(1746024744.075:33804): avc: denied { mount } for pid=7270 comm="syz.1.426" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.791018][ T7271] devtmpfs: Cannot change global quota limit on remount [ 69.798076][ T40] audit: type=1400 audit(1746024744.075:33805): avc: denied { remount } for pid=7270 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.847750][ T57] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 69.850489][ T40] audit: type=1400 audit(1746024744.135:33806): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.867629][ T57] usb 7-1: device descriptor read/8, error -71 [ 69.978219][ T57] usb usb7-port1: unable to enumerate USB device [ 70.050626][ T40] audit: type=1400 audit(1746024744.335:33807): avc: denied { accept } for pid=7285 comm="syz.1.431" lport=57401 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.058113][ T40] audit: type=1400 audit(1746024744.335:33808): avc: denied { getopt } for pid=7285 comm="syz.1.431" lport=57401 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.076562][ T40] audit: type=1400 audit(1746024744.365:33809): avc: denied { setopt } for pid=7285 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.084746][ T40] audit: type=1400 audit(1746024744.365:33810): avc: denied { connect } for pid=7285 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.348355][ T7312] netlink: 'syz.1.441': attribute type 17 has an invalid length. [ 70.493521][ T7320] __nla_validate_parse: 3 callbacks suppressed [ 70.493532][ T7320] netlink: 596 bytes leftover after parsing attributes in process `syz.2.443'. [ 71.118841][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.439439][ T7347] netlink: 596 bytes leftover after parsing attributes in process `syz.2.452'. [ 71.481403][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.454'. [ 71.485405][ T7351] netlink: 'syz.1.454': attribute type 27 has an invalid length. [ 71.522787][ T7353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.529718][ T7353] SELinux: policydb string length 1611923464 does not match expected length 8 [ 71.532774][ T7353] SELinux: failed to load policy [ 71.567602][ T7353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.575685][ T7355] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 71.577759][ T7355] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.580169][ T7356] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 71.582250][ T7356] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.585149][ T7356] vhci_hcd vhci_hcd.0: Device attached [ 71.587107][ T7355] vhci_hcd vhci_hcd.0: Device attached [ 71.588571][ T7356] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 71.591238][ T7356] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.593710][ T7356] vhci_hcd vhci_hcd.0: Device attached [ 71.595469][ T7355] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(6) [ 71.595482][ T7355] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.595615][ T7355] vhci_hcd vhci_hcd.0: Device attached [ 71.597047][ T7355] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 71.603801][ T7355] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.606122][ T7356] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(11) [ 71.608171][ T7356] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.610543][ T7355] vhci_hcd vhci_hcd.0: Device attached [ 71.610752][ T7356] vhci_hcd vhci_hcd.0: Device attached [ 71.613145][ T7355] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 71.616751][ T7355] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.619847][ T7356] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 71.622649][ T7356] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.626876][ T7355] vhci_hcd vhci_hcd.0: Device attached [ 71.634151][ T7356] vhci_hcd vhci_hcd.0: Device attached [ 71.658099][ T7372] vhci_hcd: connection closed [ 71.658146][ T7369] vhci_hcd: connection closed [ 71.658295][ T13] vhci_hcd: stop threads [ 71.659440][ T7353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.660754][ T7360] vhci_hcd: connection closed [ 71.660889][ T7367] vhci_hcd: connection closed [ 71.661033][ T7362] vhci_hcd: connection closed [ 71.661670][ T7358] vhci_hcd: connection closed [ 71.661759][ T7365] vhci_hcd: connection closed [ 71.662125][ T7375] vhci_hcd: connection closed [ 71.662300][ T13] vhci_hcd: release socket [ 71.662314][ T13] vhci_hcd: disconnect device [ 71.662468][ T13] vhci_hcd: stop threads [ 71.662475][ T13] vhci_hcd: release socket [ 71.662484][ T13] vhci_hcd: disconnect device [ 71.662533][ T13] vhci_hcd: stop threads [ 71.662540][ T13] vhci_hcd: release socket [ 71.662549][ T13] vhci_hcd: disconnect device [ 71.662714][ T13] vhci_hcd: stop threads [ 71.662722][ T13] vhci_hcd: release socket [ 71.662730][ T13] vhci_hcd: disconnect device [ 71.664531][ T13] vhci_hcd: stop threads [ 71.701687][ T13] vhci_hcd: release socket [ 71.703726][ T13] vhci_hcd: disconnect device [ 71.706563][ T13] vhci_hcd: stop threads [ 71.714370][ T13] vhci_hcd: release socket [ 71.716424][ T13] vhci_hcd: disconnect device [ 71.718616][ T13] vhci_hcd: stop threads [ 71.720514][ T13] vhci_hcd: release socket [ 71.722092][ T59] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 71.722940][ T13] vhci_hcd: disconnect device [ 71.730285][ T13] vhci_hcd: stop threads [ 71.731960][ T13] vhci_hcd: release socket [ 71.732281][ T59] usb 5-1: failed to enable PITCH for EP 0x82 [ 71.733430][ T13] vhci_hcd: disconnect device [ 71.738854][ T59] usb 5-1: 2:1: cannot set freq 14014851 to ep 0x82 [ 71.762762][ T7353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.774543][ T59] usb 5-1: USB disconnect, device number 5 [ 71.793093][ T6546] udevd[6546]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.833301][ T7353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.932418][ T7353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.943630][ T7353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.957710][ T7353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.995186][ T7394] netlink: 596 bytes leftover after parsing attributes in process `syz.0.463'. [ 71.996361][ T7353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.049772][ T7402] fuse: Invalid rootmode [ 72.055543][ T7402] xt_hashlimit: max too large, truncated to 1048576 [ 72.058204][ T7402] afs: Unknown parameter 'Dyn' [ 72.177049][ T7418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.469'. [ 72.181673][ T7418] openvswitch: netlink: IPv4 tunnel dst address is zero [ 72.185061][ T7418] xt_hashlimit: size too large, truncated to 1048576 [ 72.328191][ T7423] netlink: 256 bytes leftover after parsing attributes in process `syz.2.470'. [ 72.394364][ T5934] Bluetooth: hci3: command 0x0405 tx timeout [ 72.407544][ T7429] tmpfs: Bad value for 'mpol' [ 72.824160][ T7472] netlink: 596 bytes leftover after parsing attributes in process `syz.0.486'. [ 72.877678][ T7477] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 72.887848][ T7477] batman_adv: batadv0: Adding interface: team0 [ 72.890221][ T7477] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.897677][ T7477] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 72.902005][ T7477] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 72.904843][ T7477] netlink: 2 bytes leftover after parsing attributes in process `syz.0.488'. [ 72.907442][ T7477] team0: entered promiscuous mode [ 72.908965][ T7477] team_slave_0: entered promiscuous mode [ 72.910778][ T7477] team_slave_1: entered promiscuous mode [ 72.915564][ T7477] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.917924][ T7477] batman_adv: batadv0: Interface activated: team0 [ 72.920512][ T7477] batman_adv: batadv0: Interface deactivated: team0 [ 72.923183][ T7477] batman_adv: batadv0: Removing interface: team0 [ 72.927111][ T7477] bridge0: port 3(team0) entered blocking state [ 72.930034][ T7477] bridge0: port 3(team0) entered disabled state [ 72.932693][ T7477] team0: entered allmulticast mode [ 72.934941][ T7477] team_slave_0: entered allmulticast mode [ 72.937193][ T7477] team_slave_1: entered allmulticast mode [ 72.942673][ T7477] bridge0: port 3(team0) entered blocking state [ 72.945442][ T7477] bridge0: port 3(team0) entered forwarding state [ 73.244161][ T59] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.292930][ T7486] Bluetooth: MGMT ver 1.23 [ 73.389781][ T7499] netlink: 596 bytes leftover after parsing attributes in process `syz.1.495'. [ 73.409927][ T7501] binder: BINDER_SET_CONTEXT_MGR already set [ 73.411882][ T7501] binder: 7500:7501 ioctl 4018620d 2000000000c0 returned -16 [ 73.415061][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 73.418132][ T59] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 73.422945][ T7501] binder: BINDER_SET_CONTEXT_MGR already set [ 73.423900][ T59] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 73.427460][ T7501] binder: 7500:7501 ioctl 4018620d 200000000040 returned -16 [ 73.431777][ T59] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 73.434477][ T59] usb 5-1: Product: syz [ 73.435811][ T59] usb 5-1: Manufacturer: syz [ 73.437279][ T59] usb 5-1: SerialNumber: syz [ 73.444354][ T59] usb 5-1: config 0 descriptor?? [ 73.448586][ T7482] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.448671][ T7503] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 73.452422][ T59] hub 5-1:0.0: bad descriptor, ignoring hub [ 73.457007][ T59] hub 5-1:0.0: probe with driver hub failed with error -5 [ 73.516873][ T7509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.499'. [ 73.647976][ T1326] IPVS: starting estimator thread 0... [ 73.724344][ T7536] batadv0: entered promiscuous mode [ 73.727092][ T7536] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 73.731135][ T7536] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 73.751001][ T7530] IPVS: using max 43 ests per chain, 103200 per kthread [ 73.774438][ T57] usb 5-1: USB disconnect, device number 6 [ 74.094140][ T834] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 74.265981][ T834] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.270789][ T834] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.275073][ T834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.278938][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.286927][ T7482] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.292556][ T834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.457454][ T7563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 74.480411][ T7563] ipvlan2: entered allmulticast mode [ 74.482133][ T7563] veth0_vlan: entered allmulticast mode [ 74.504951][ T58] usb 5-1: USB disconnect, device number 7 [ 74.578419][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 74.578435][ T40] audit: type=1400 audit(1746024748.865:33843): avc: denied { ioctl } for pid=7568 comm="syz.2.517" path="socket:[16857]" dev="sockfs" ino=16857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.618215][ T40] audit: type=1400 audit(1746024748.905:33844): avc: denied { getopt } for pid=7572 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.662034][ T40] audit: type=1400 audit(1746024748.945:33845): avc: denied { getopt } for pid=7579 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.669300][ T40] audit: type=1400 audit(1746024748.945:33846): avc: denied { ioctl } for pid=7579 comm="syz.1.521" path="socket:[18502]" dev="sockfs" ino=18502 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.718884][ T40] audit: type=1326 audit(1746024749.005:33847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7582 comm="syz.1.522" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fbcd8e969 code=0x0 [ 74.885797][ T7598] Cannot find set identified by id 1 to match [ 74.922856][ T7600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=7600 comm=syz.3.525 [ 74.966882][ T7602] ipvlan2: entered allmulticast mode [ 74.969090][ T7602] macvlan0: entered allmulticast mode [ 74.971376][ T7602] veth1_vlan: entered allmulticast mode [ 75.036904][ T40] audit: type=1400 audit(1746024749.325:33848): avc: denied { setattr } for pid=7605 comm="syz.3.528" name="PPPOE" dev="sockfs" ino=17648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.087226][ T40] audit: type=1800 audit(1746024749.375:33849): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.528" name="/" dev="sockfs" ino=17648 res=0 errno=0 [ 75.410704][ T40] audit: type=1400 audit(1746024749.695:33850): avc: denied { shutdown } for pid=7614 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.447829][ T7619] input: syz0 as /devices/virtual/input/input13 [ 75.460827][ T7577] orangefs_mount: mount request failed with -4 [ 75.491596][ T40] audit: type=1400 audit(1746024749.775:33851): avc: denied { getopt } for pid=7620 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 75.636933][ T7636] __nla_validate_parse: 6 callbacks suppressed [ 75.636945][ T7636] netlink: 596 bytes leftover after parsing attributes in process `syz.0.539'. [ 75.689369][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 75.700678][ T40] audit: type=1400 audit(1746024749.985:33852): avc: denied { bind } for pid=7642 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.826965][ T7660] xt_hashlimit: size too large, truncated to 1048576 [ 75.844481][ T7659] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 75.881847][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 76.374916][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 76.433261][ T7715] binder: BINDER_SET_CONTEXT_MGR already set [ 76.436250][ T7715] binder: 7713:7715 ioctl 4018620d 2000000000c0 returned -16 [ 76.441234][ T7715] binder: BINDER_SET_CONTEXT_MGR already set [ 76.443848][ T7715] binder: 7713:7715 ioctl 4018620d 200000000040 returned -16 [ 76.736771][ T7754] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 76.910386][ T7750] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 77.066662][ T7779] 9p: Unknown access argument 00000000000000016384[: -22 [ 77.240681][ T7793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.587'. [ 77.295764][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.587'. [ 77.375905][ T1326] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 77.430346][ T7811] netlink: 'syz.1.593': attribute type 10 has an invalid length. [ 77.435168][ T7811] veth0_macvtap: left promiscuous mode [ 77.494962][ T7816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.595'. [ 77.515320][ T5939] Bluetooth: hci3: command 0x0405 tx timeout [ 77.516503][ T1326] usb 7-1: device descriptor read/64, error -71 [ 77.536878][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 77.603017][ T7825] netlink: 52 bytes leftover after parsing attributes in process `syz.3.598'. [ 77.761535][ T7832] overlayfs: failed to resolve './file1': -2 [ 77.785908][ T1326] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 77.787380][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 77.924324][ T1326] usb 7-1: device descriptor read/64, error -71 [ 78.035352][ T1326] usb usb7-port1: attempt power cycle [ 78.202289][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.286177][ T7873] bridge_slave_1 (unregistering): left allmulticast mode [ 78.288438][ T7873] bridge_slave_1 (unregistering): left promiscuous mode [ 78.290757][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.298505][ T7875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.394990][ T1326] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 78.414723][ T1326] usb 7-1: device descriptor read/8, error -71 [ 78.654143][ T1326] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 78.674604][ T1326] usb 7-1: device descriptor read/8, error -71 [ 78.774380][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.777504][ T7897] IPv6: NLM_F_CREATE should be set when creating new route [ 78.780860][ T7897] IPv6: NLM_F_CREATE should be set when creating new route [ 78.784593][ T1326] usb usb7-port1: unable to enumerate USB device [ 78.895847][ T7905] block nbd0: shutting down sockets [ 79.229979][ T7917] ptm ptm50: ldisc open failed (-12), clearing slot 50 [ 79.297865][ T7921] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 80.251309][ T7979] macsec0: entered promiscuous mode [ 80.270484][ T7981] binder: BINDER_SET_CONTEXT_MGR already set [ 80.271758][ T7979] tmpfs: Group quota block hardlimit too large. [ 80.272423][ T7981] binder: 7980:7981 ioctl 4018620d 2000000000c0 returned -16 [ 80.283196][ T7981] binder: BINDER_SET_CONTEXT_MGR already set [ 80.286830][ T7981] binder: 7980:7981 ioctl 4018620d 200000000040 returned -16 [ 80.677531][ T1326] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 80.690597][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.701575][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 80.701584][ T40] audit: type=1400 audit(1746024754.985:33876): avc: denied { read } for pid=8009 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.702821][ T7999] bond0: (slave rose0): Enslaving as an active interface with an up link [ 80.703534][ T40] audit: type=1400 audit(1746024754.985:33877): avc: denied { open } for pid=8009 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.726606][ T40] audit: type=1400 audit(1746024754.985:33878): avc: denied { getattr } for pid=8009 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.736270][ T40] audit: type=1400 audit(1746024755.005:33879): avc: denied { write } for pid=8005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.743545][ T40] audit: type=1400 audit(1746024755.005:33880): avc: denied { add_name } for pid=8005 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.763613][ T40] audit: type=1400 audit(1746024755.045:33881): avc: denied { remove_name } for pid=8013 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=3761 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.808373][ T8021] binder: BINDER_SET_CONTEXT_MGR already set [ 80.810834][ T8021] binder: 8019:8021 ioctl 4018620d 2000000000c0 returned -16 [ 80.818231][ T8021] binder: BINDER_SET_CONTEXT_MGR already set [ 80.820686][ T8021] binder: 8019:8021 ioctl 4018620d 200000000040 returned -16 [ 80.824387][ T1326] usb 5-1: Invalid ep0 maxpacket: 32 [ 80.850651][ T8026] Debayer B: ================= START STATUS ================= [ 80.853069][ T8026] Debayer B: Debayer Mean Window Size: 3 [ 80.855467][ T8026] Debayer B: ================== END STATUS ================== [ 80.883265][ T40] audit: type=1400 audit(1746024755.165:33882): avc: denied { read } for pid=8029 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.953915][ T40] audit: type=1400 audit(1746024755.235:33883): avc: denied { accept } for pid=8041 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.975706][ T1326] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 80.998386][ T8046] netlink: 'syz.1.664': attribute type 7 has an invalid length. [ 81.058435][ T40] audit: type=1400 audit(1746024755.345:33884): avc: denied { write } for pid=8056 comm="syz.2.667" name="net" dev="proc" ino=20992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 81.065115][ T40] audit: type=1400 audit(1746024755.345:33885): avc: denied { add_name } for pid=8056 comm="syz.2.667" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 81.089986][ T8059] binder: BINDER_SET_CONTEXT_MGR already set [ 81.092035][ T8059] binder: 8058:8059 ioctl 4018620d 2000000000c0 returned -16 [ 81.097641][ T8059] binder: BINDER_SET_CONTEXT_MGR already set [ 81.100329][ T8059] binder: 8058:8059 ioctl 4018620d 200000000040 returned -16 [ 81.135552][ T8061] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 81.144321][ T1326] usb 5-1: Invalid ep0 maxpacket: 32 [ 81.146283][ T1326] usb usb5-port1: attempt power cycle [ 81.366120][ T10] cfg80211: failed to load regulatory.db [ 81.386191][ T8070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=8070 comm=syz.2.672 [ 81.487228][ T1326] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 81.515573][ T1326] usb 5-1: Invalid ep0 maxpacket: 32 [ 81.521186][ T8076] __nla_validate_parse: 13 callbacks suppressed [ 81.521201][ T8076] netlink: 48 bytes leftover after parsing attributes in process `syz.2.674'. [ 81.540417][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 81.638964][ T8076] hsr_slave_1 (unregistering): left promiscuous mode [ 81.644807][ T1326] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 81.664690][ T1326] usb 5-1: Invalid ep0 maxpacket: 32 [ 81.667396][ T1326] usb usb5-port1: unable to enumerate USB device [ 81.705846][ T8089] netlink: 'syz.1.679': attribute type 4 has an invalid length. [ 81.707557][ T8091] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 81.715235][ T8091] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 81.718941][ T8091] netlink: 'syz.3.680': attribute type 3 has an invalid length. [ 81.721545][ T8091] netlink: 228 bytes leftover after parsing attributes in process `syz.3.680'. [ 81.723648][ T8089] netlink: 'syz.1.679': attribute type 4 has an invalid length. [ 81.891435][ T5934] block nbd1: Receive control failed (result -107) [ 81.922884][ T8104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.929016][ T8104] macvlan1: entered promiscuous mode [ 81.931069][ T8104] macvlan1: entered allmulticast mode [ 81.984388][ T8102] nbd1: detected capacity change from 0 to 8589934592 [ 82.025760][ T8106] gre0: entered promiscuous mode [ 82.030643][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 82.066435][ T5944] block nbd1: Dead connection, failed to find a fallback [ 82.068767][ T5944] block nbd1: shutting down sockets [ 82.070855][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.074025][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.077817][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.081191][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.083662][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.087521][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.090013][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.092770][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.095573][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.098406][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.100851][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.103626][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.106223][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.109028][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.111473][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.114420][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.116841][ T5944] ldm_validate_partition_table(): Disk read failed. [ 82.118852][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.121614][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.124191][ T5944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.126922][ T5944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 82.129644][ T5944] Dev nbd1: unable to read RDB block 0 [ 82.131877][ T5944] nbd1: unable to read partition table [ 82.135521][ T5944] ldm_validate_partition_table(): Disk read failed. [ 82.137792][ T5944] Dev nbd1: unable to read RDB block 0 [ 82.139720][ T5944] nbd1: unable to read partition table [ 82.159253][ T8116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.690'. [ 82.204937][ T8123] Cannot find del_set index 85 as target [ 82.440614][ T8149] binder: BINDER_SET_CONTEXT_MGR already set [ 82.443262][ T8149] binder: 8148:8149 ioctl 4018620d 2000000000c0 returned -16 [ 82.450965][ T8149] binder: BINDER_SET_CONTEXT_MGR already set [ 82.452936][ T8149] binder: 8148:8149 ioctl 4018620d 200000000040 returned -16 [ 82.534293][ T1326] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.665958][ T1326] usb 6-1: device descriptor read/64, error -71 [ 82.681807][ T8166] Process accounting resumed [ 82.699224][ T8171] vivid-000: disconnect [ 82.703257][ T8171] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.706'. [ 82.706612][ T8171] netlink: zone id is out of range [ 82.708220][ T8171] netlink: zone id is out of range [ 82.709855][ T8171] netlink: zone id is out of range [ 82.711440][ T8171] netlink: zone id is out of range [ 82.713100][ T8171] netlink: zone id is out of range [ 82.714807][ T8171] netlink: zone id is out of range [ 82.904211][ T1326] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 83.034226][ T1326] usb 6-1: device descriptor read/64, error -71 [ 83.146242][ T1326] usb usb6-port1: attempt power cycle [ 83.432698][ T8199] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 83.437350][ T8199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.504208][ T1326] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 83.526651][ T1326] usb 6-1: device descriptor read/8, error -71 [ 83.532765][ T8170] vivid-000: reconnect [ 83.628458][ T8202] dlm: non-version read from control device 0 [ 83.632255][ T8202] random: crng reseeded on system resumption [ 83.794315][ T1326] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 83.817688][ T1326] usb 6-1: device descriptor read/8, error -71 [ 83.904367][ T8217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.908319][ T8217] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 83.925180][ T1326] usb usb6-port1: unable to enumerate USB device [ 84.182670][ T8226] netlink: 666 bytes leftover after parsing attributes in process `syz.2.721'. [ 84.848485][ T5934] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 84.849666][ T8241] 9pnet_virtio: no channels available for device syz [ 84.999329][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.151925][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.204874][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.226871][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.231214][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.236491][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.239810][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.242450][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.327728][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.422396][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 85.530160][ T8261] delete_channel: no stack [ 85.588748][ T1139] team0: left allmulticast mode [ 85.590462][ T1139] team_slave_0: left allmulticast mode [ 85.592231][ T1139] team_slave_1: left allmulticast mode [ 85.594901][ T1139] bridge0: port 3(team0) entered disabled state [ 85.614666][ T1139] bridge_slave_1: left allmulticast mode [ 85.616496][ T1139] bridge_slave_1: left promiscuous mode [ 85.618962][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.639368][ T1139] bridge_slave_0: left allmulticast mode [ 85.641169][ T1139] bridge_slave_0: left promiscuous mode [ 85.643051][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.720339][ T40] kauditd_printk_skb: 399 callbacks suppressed [ 85.720355][ T40] audit: type=1400 audit(1746024760.005:34285): avc: denied { search } for pid=8260 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.729983][ T40] audit: type=1400 audit(1746024760.005:34286): avc: denied { search } for pid=8260 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.738356][ T40] audit: type=1400 audit(1746024760.005:34287): avc: denied { search } for pid=8260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.751348][ T40] audit: type=1400 audit(1746024760.005:34288): avc: denied { search } for pid=8260 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.759753][ T40] audit: type=1400 audit(1746024760.025:34289): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 85.766653][ T40] audit: type=1400 audit(1746024760.025:34290): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.773195][ T40] audit: type=1400 audit(1746024760.025:34291): avc: denied { append } for pid=5328 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.780103][ T40] audit: type=1400 audit(1746024760.025:34292): avc: denied { append open } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.787298][ T40] audit: type=1400 audit(1746024760.025:34293): avc: denied { getattr } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.794267][ T40] audit: type=1400 audit(1746024760.025:34294): avc: denied { read write } for pid=5930 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.876284][ T8267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8267 comm=syz.2.733 [ 85.972976][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.979535][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.984193][ T1139] bond0 (unregistering): Released all slaves [ 86.058105][ T1139] bond1 (unregistering): Released all slaves [ 86.082166][ T8250] chnl_net:caif_netlink_parms(): no params data found [ 86.186299][ T8257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.188346][ T8257] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 86.202025][ T8257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.204851][ T8257] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 86.407498][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.409814][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.412049][ T8250] bridge_slave_0: entered allmulticast mode [ 86.419263][ T8250] bridge_slave_0: entered promiscuous mode [ 86.466362][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.469451][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.472540][ T8250] bridge_slave_1: entered allmulticast mode [ 86.476578][ T8250] bridge_slave_1: entered promiscuous mode [ 86.487311][ T8257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.489215][ T8257] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 86.571926][ T8250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.583531][ T8250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.630553][ T8286] binder: BINDER_SET_CONTEXT_MGR already set [ 86.632513][ T8286] binder: 8285:8286 ioctl 4018620d 2000000000c0 returned -16 [ 86.655074][ T8286] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 86.675429][ T1139] hsr_slave_0: left promiscuous mode [ 86.677917][ T1139] hsr_slave_1: left promiscuous mode [ 86.679913][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.682312][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.689268][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.692388][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.731118][ T1139] veth1_macvtap: left promiscuous mode [ 86.733845][ T1139] veth0_macvtap: left promiscuous mode [ 86.742028][ T1139] veth1_vlan: left promiscuous mode [ 86.743830][ T1139] veth0_vlan: left promiscuous mode [ 87.533742][ T1139] team_slave_1 (unregistering): left promiscuous mode [ 87.538292][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 87.608411][ T1139] team_slave_0 (unregistering): left promiscuous mode [ 87.611350][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 88.240066][ T8286] bond0: (slave wlan1): Opening slave failed [ 88.268204][ T8250] team0: Port device team_slave_0 added [ 88.277357][ T8250] team0: Port device team_slave_1 added [ 88.378468][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.381363][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.407580][ T8250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.428912][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.431102][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.444945][ T8250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.479685][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 88.520515][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 88.523386][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 88.540576][ T8318] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 88.581653][ T8250] hsr_slave_0: entered promiscuous mode [ 88.584642][ T8318] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 88.585371][ T8250] hsr_slave_1: entered promiscuous mode [ 88.738041][ T1139] IPVS: stop unused estimator thread 0... [ 88.803723][ T8250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.857737][ T8250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.870500][ T8250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.889015][ T8250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.065912][ T8250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.078157][ T8337] netlink: 76 bytes leftover after parsing attributes in process `syz.1.745'. [ 89.084587][ T8338] netlink: 76 bytes leftover after parsing attributes in process `syz.1.745'. [ 89.096512][ T8250] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.108315][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.110593][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.118661][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.121747][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.696941][ T8357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.749'. [ 89.913525][ T8362] xt_hashlimit: size too large, truncated to 1048576 [ 90.067827][ T8250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.385156][ T8374] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 90.448840][ T8374] kvm: emulating exchange as write [ 90.556139][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 90.556161][ T5934] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.724273][ T40] kauditd_printk_skb: 1564 callbacks suppressed [ 90.724288][ T40] audit: type=1400 audit(1746024765.005:35859): avc: denied { search } for pid=8375 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.756202][ T40] audit: type=1400 audit(1746024765.005:35860): avc: denied { search } for pid=8375 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.763720][ T40] audit: type=1400 audit(1746024765.005:35861): avc: denied { search } for pid=8375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.772119][ T40] audit: type=1400 audit(1746024765.005:35862): avc: denied { write search } for pid=8375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.782501][ T40] audit: type=1400 audit(1746024765.005:35863): avc: denied { read write } for pid=8386 comm="syz.2.754" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 90.793404][ T40] audit: type=1400 audit(1746024765.005:35864): avc: denied { add_name search } for pid=8375 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.808685][ T40] audit: type=1400 audit(1746024765.005:35865): avc: denied { create } for pid=8375 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.820035][ T40] audit: type=1400 audit(1746024765.005:35866): avc: denied { read write open } for pid=8386 comm="syz.2.754" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 90.830292][ T40] audit: type=1400 audit(1746024765.005:35867): avc: denied { write open } for pid=8375 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.link" dev="tmpfs" ino=4054 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.842244][ T40] audit: type=1400 audit(1746024765.015:35868): avc: denied { mounton } for pid=8386 comm="syz.2.754" path="/209/file0" dev="tmpfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.192715][ T8250] veth0_vlan: entered promiscuous mode [ 91.207261][ T8250] veth1_vlan: entered promiscuous mode [ 91.251306][ T8250] veth0_macvtap: entered promiscuous mode [ 91.260409][ T8250] veth1_macvtap: entered promiscuous mode [ 91.282224][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.286141][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.289043][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.292252][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.295374][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.298543][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.302320][ T8250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.311251][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.314722][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.318064][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.321524][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.325788][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.329007][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.332809][ T8250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.348783][ T8250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.351492][ T8250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.356916][ T8250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.359722][ T8250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.449358][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.454371][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.492717][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.495644][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.547344][ T8387] overlayfs: statfs failed on './file0' [ 91.658820][ T8402] binder: BINDER_SET_CONTEXT_MGR already set [ 91.660717][ T8402] binder: 8401:8402 ioctl 4018620d 2000000000c0 returned -16 [ 91.672004][ T8402] binder: BINDER_SET_CONTEXT_MGR already set [ 91.673903][ T8402] binder: 8401:8402 ioctl 4018620d 200000000040 returned -16 [ 91.855155][ T8412] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 91.857430][ T8412] netlink: 228 bytes leftover after parsing attributes in process `syz.4.759'. [ 91.860346][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 92.089901][ T8417] hfs: unable to load iocharset "io#harsetseq" [ 92.184342][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 92.325714][ T29] usb 9-1: device descriptor read/64, error -71 [ 92.555760][ T8434] netlink: 64 bytes leftover after parsing attributes in process `syz.2.765'. [ 92.574160][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 92.640045][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 92.650662][ T8436] xfrm1: entered promiscuous mode [ 92.652780][ T8436] xfrm1: entered allmulticast mode [ 92.704975][ T29] usb 9-1: device descriptor read/64, error -71 [ 92.749095][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.767'. [ 92.758003][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.767'. [ 92.767155][ T8438] netlink: 'syz.2.767': attribute type 4 has an invalid length. [ 92.823882][ T8438] kvm: Disabled LAPIC found during irq injection [ 92.834236][ T29] usb usb9-port1: attempt power cycle [ 93.184199][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 93.213179][ T29] usb 9-1: device descriptor read/8, error -71 [ 93.454320][ T29] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 93.486041][ T29] usb 9-1: device descriptor read/8, error -71 [ 93.595619][ T29] usb usb9-port1: unable to enumerate USB device [ 94.141028][ T8471] binder: BINDER_SET_CONTEXT_MGR already set [ 94.143428][ T8471] binder: 8469:8471 ioctl 4018620d 2000000000c0 returned -16 [ 94.244862][ T8476] input: syz0 as /devices/virtual/input/input15 [ 94.319198][ T8482] binder: BINDER_SET_CONTEXT_MGR already set [ 94.321105][ T8482] binder: 8479:8482 ioctl 4018620d 2000000000c0 returned -16 [ 94.335853][ T8482] binder: BINDER_SET_CONTEXT_MGR already set [ 94.337762][ T8482] binder: 8479:8482 ioctl 4018620d 200000000040 returned -16 [ 94.566164][ T8487] syz.2.778 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.573442][ T8487] ptrace attach of "/syz-executor exec"[5930] was attempted by "/syz-executor exec"[8487] [ 94.576147][ T8492] __nla_validate_parse: 2 callbacks suppressed [ 94.576157][ T8492] netlink: 596 bytes leftover after parsing attributes in process `syz.1.780'. [ 95.211512][ T8510] netlink: 816 bytes leftover after parsing attributes in process `syz.2.783'. [ 95.496997][ T8534] netlink: 596 bytes leftover after parsing attributes in process `syz.1.790'. [ 95.740482][ T40] kauditd_printk_skb: 1831 callbacks suppressed [ 95.740494][ T40] audit: type=1400 audit(1746024770.025:37700): avc: denied { getopt } for pid=8540 comm="syz.1.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.752859][ T40] audit: type=1400 audit(1746024770.035:37701): avc: denied { read } for pid=8543 comm="syz.2.795" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.760395][ T40] audit: type=1400 audit(1746024770.045:37702): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 95.767210][ T40] audit: type=1400 audit(1746024770.045:37703): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.773847][ T40] audit: type=1400 audit(1746024770.045:37704): avc: denied { append } for pid=5328 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.782234][ T40] audit: type=1400 audit(1746024770.045:37705): avc: denied { append open } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.789996][ T40] audit: type=1400 audit(1746024770.045:37706): avc: denied { getattr } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.798765][ T40] audit: type=1400 audit(1746024770.045:37707): avc: denied { read open } for pid=8543 comm="syz.2.795" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.811565][ T40] audit: type=1400 audit(1746024770.045:37708): avc: denied { ioctl } for pid=8543 comm="syz.2.795" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.819511][ T40] audit: type=1400 audit(1746024770.045:37709): avc: denied { read open } for pid=8543 comm="syz.2.795" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.919024][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 95.922537][ T8546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.944543][ T8546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.949926][ T8546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.953022][ T8546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.030572][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.033679][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.799'. [ 96.081436][ T8555] team0: Port device geneve0 added [ 96.084816][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.087155][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.799'. [ 96.105365][ T8552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.116754][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.119454][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.799'. [ 96.123776][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.157215][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.799'. [ 96.161745][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.171760][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.799'. [ 96.193093][ T8559] netlink: 596 bytes leftover after parsing attributes in process `syz.1.800'. [ 96.204317][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.208899][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.213131][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.217205][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 96.221192][ T8555] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 97.844544][ T5971] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 97.992346][ T8649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8649 comm=syz.2.828 [ 98.049838][ T8649] tmpfs: Bad value for 'mpol' [ 98.159121][ T8656] o2cb: This node has not been configured. [ 98.161074][ T8656] o2cb: Cluster check failed. Fix errors before retrying. [ 98.163278][ T8656] (syz.4.827,8656,3):user_dlm_register:674 ERROR: status = -22 [ 98.181029][ T8656] (syz.4.827,8656,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 98.388396][ T8674] CUSE: DEVNAME unspecified [ 99.214538][ T8701] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 99.251720][ T8701] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 99.813737][ T8726] sctp: [Deprecated]: syz.2.841 (pid 8726) Use of int in max_burst socket option. [ 99.813737][ T8726] Use struct sctp_assoc_value instead [ 100.062965][ T8747] Cannot find del_set index 4 as target [ 100.110745][ T8749] sctp: [Deprecated]: syz.4.846 (pid 8749) Use of int in maxseg socket option. [ 100.110745][ T8749] Use struct sctp_assoc_value instead [ 100.116048][ T8750] sctp: [Deprecated]: syz.4.846 (pid 8750) Use of int in maxseg socket option. [ 100.116048][ T8750] Use struct sctp_assoc_value instead [ 100.125989][ T8749] __nla_validate_parse: 65 callbacks suppressed [ 100.125999][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 100.132175][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 100.183330][ T8752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.359658][ T8762] x_tables: duplicate underflow at hook 1 [ 100.393812][ T8767] binder: BINDER_SET_CONTEXT_MGR already set [ 100.404113][ T8767] binder: 8764:8767 ioctl 4018620d 2000000000c0 returned -16 [ 100.442882][ T8766] binder_alloc: binder_alloc_mmap_handler: 8764 200000ffd000-200001000000 already mapped failed -16 [ 100.447435][ T8767] binder: BINDER_SET_CONTEXT_MGR already set [ 100.449333][ T8767] binder: 8764:8767 ioctl 4018620d 200000000040 returned -16 [ 100.488527][ T8771] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 100.745271][ T40] kauditd_printk_skb: 1562 callbacks suppressed [ 100.745282][ T40] audit: type=1400 audit(1746024775.035:39272): avc: denied { search } for pid=8779 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.772161][ T40] audit: type=1400 audit(1746024775.035:39273): avc: denied { search } for pid=8779 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.781347][ T40] audit: type=1400 audit(1746024775.035:39274): avc: denied { search } for pid=8779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.790194][ T40] audit: type=1400 audit(1746024775.035:39275): avc: denied { read } for pid=8779 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.799732][ T40] audit: type=1400 audit(1746024775.035:39276): avc: denied { read open } for pid=8779 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.809205][ T8779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.809395][ T40] audit: type=1400 audit(1746024775.035:39277): avc: denied { getattr } for pid=8779 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.811322][ T8779] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 100.822756][ T8779] audit: backlog limit exceeded [ 100.826341][ T40] audit: type=1400 audit(1746024775.035:39278): avc: denied { search } for pid=8779 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.222342][ T8807] xt_hashlimit: size too large, truncated to 1048576 [ 101.499404][ T8823] validate_nla: 58 callbacks suppressed [ 101.499421][ T8823] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 101.566660][ T8823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.582325][ T8825] bond1: (slave gretap1): making interface the new active one [ 101.590367][ T8825] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.701792][ T8830] netlink: 596 bytes leftover after parsing attributes in process `syz.1.868'. [ 102.244950][ T8849] binder: BINDER_SET_CONTEXT_MGR already set [ 102.247770][ T8849] binder: 8848:8849 ioctl 4018620d 2000000000c0 returned -16 [ 102.283908][ T8849] binder: BINDER_SET_CONTEXT_MGR already set [ 102.286736][ T8849] binder: 8848:8849 ioctl 4018620d 200000000040 returned -16 [ 102.730184][ T8866] netlink: 596 bytes leftover after parsing attributes in process `syz.2.877'. [ 102.866146][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 102.868873][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 103.284135][ T1020] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 103.440936][ T1020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.445164][ T1020] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 103.448117][ T1020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.455546][ T1020] usb 9-1: config 0 descriptor?? [ 103.462543][ T8899] netlink: 596 bytes leftover after parsing attributes in process `syz.1.887'. [ 103.709647][ T8905] Bluetooth: hci0: unsupported parameter 16384 [ 103.711763][ T8905] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 103.749682][ T1020] usbhid 9-1:0.0: can't add hid device: -71 [ 103.752100][ T1020] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 103.765091][ T1020] usb 9-1: USB disconnect, device number 6 [ 104.346303][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 104.349119][ T8928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.487721][ T8928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.635795][ T8944] 9pnet_virtio: no channels available for device syz [ 104.649867][ T8944] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 104.653078][ T8945] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 104.678088][ T8944] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.905'. [ 104.936480][ T8967] netlink: 596 bytes leftover after parsing attributes in process `syz.1.909'. [ 105.050172][ T8977] netlink: 'syz.1.914': attribute type 13 has an invalid length. [ 105.348627][ T8993] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 105.353304][ T8993] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 105.416041][ T8998] binder: BINDER_SET_CONTEXT_MGR already set [ 105.418575][ T8998] binder: 8994:8998 ioctl 4018620d 2000000000c0 returned -16 [ 105.446963][ T8998] binder: BINDER_SET_CONTEXT_MGR already set [ 105.449450][ T8998] binder: 8994:8998 ioctl 4018620d 200000000040 returned -16 [ 105.510805][ T9001] __nla_validate_parse: 4 callbacks suppressed [ 105.510816][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 105.544587][ T9005] netlink: 596 bytes leftover after parsing attributes in process `syz.2.923'. [ 105.567383][ T9006] netlink: 500 bytes leftover after parsing attributes in process `syz.1.919'. [ 105.626497][ T9006] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 105.644694][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 105.783803][ T40] kauditd_printk_skb: 1662 callbacks suppressed [ 105.783813][ T40] audit: type=1400 audit(1746024780.065:40893): avc: denied { read } for pid=9015 comm="syz.2.925" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.799524][ T40] audit: type=1400 audit(1746024780.075:40894): avc: denied { read open } for pid=9015 comm="syz.2.925" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.818571][ T40] audit: type=1400 audit(1746024780.075:40895): avc: denied { create } for pid=9015 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.824235][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.824273][ T10] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.840957][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.843811][ T40] audit: type=1400 audit(1746024780.075:40896): avc: denied { write } for pid=9015 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.859752][ T40] audit: type=1400 audit(1746024780.085:40897): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 105.868968][ T10] usb 8-1: config 0 descriptor?? [ 105.878882][ T40] audit: type=1400 audit(1746024780.085:40898): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.887865][ T40] audit: type=1400 audit(1746024780.085:40899): avc: denied { append } for pid=5328 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.902586][ T40] audit: type=1400 audit(1746024780.085:40900): avc: denied { append open } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.913242][ T40] audit: type=1400 audit(1746024780.085:40901): avc: denied { getattr } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.921836][ T40] audit: type=1400 audit(1746024780.095:40902): avc: denied { ioctl } for pid=8995 comm="syz.3.920" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.930826][ T9018] bond0: entered promiscuous mode [ 105.932439][ T9018] bond_slave_0: entered promiscuous mode [ 105.940950][ T9018] bond_slave_1: entered promiscuous mode [ 106.089636][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 106.095516][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 106.105452][ T10] usb 8-1: USB disconnect, device number 4 [ 106.220860][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 106.223631][ T9037] netlink: 'syz.4.929': attribute type 9 has an invalid length. [ 106.229230][ T9037] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 106.233218][ T9037] macvlan2: entered allmulticast mode [ 106.237776][ T9037] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 106.555967][ T5971] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 106.568256][ T9051] IPVS: persistence engine module ip_vs_pe_" not found [ 106.705296][ T5971] usb 8-1: Using ep0 maxpacket: 32 [ 106.720310][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.725877][ T5971] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 106.729368][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.738958][ T5971] usb 8-1: config 0 descriptor?? [ 106.765352][ T5971] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 106.779816][ T5971] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 107.088177][ T9077] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 107.105391][ T9074] fuse: Bad value for 'fd' [ 107.134745][ T5971] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 107.240211][ T9080] netlink: 'syz.4.939': attribute type 16 has an invalid length. [ 107.243325][ T9080] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.939'. [ 107.277866][ T5971] usb 7-1: device descriptor read/64, error -71 [ 107.524505][ T5971] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 107.675182][ T5971] usb 7-1: device descriptor read/64, error -71 [ 107.794891][ T5971] usb usb7-port1: attempt power cycle [ 107.967488][ T9100] netlink: 596 bytes leftover after parsing attributes in process `syz.4.948'. [ 108.146534][ T5971] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 108.168255][ T5971] usb 7-1: device descriptor read/8, error -71 [ 108.169097][ T9105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.950'. [ 108.396989][ T5972] usb 8-1: USB disconnect, device number 5 [ 108.408956][ T5972] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 108.424184][ T5971] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 108.459351][ T5971] usb 7-1: device descriptor read/8, error -71 [ 108.574960][ T5971] usb usb7-port1: unable to enumerate USB device [ 108.646817][ T9118] netlink: 48 bytes leftover after parsing attributes in process `syz.4.955'. [ 108.778242][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 108.842401][ T9127] netlink: 596 bytes leftover after parsing attributes in process `syz.4.958'. [ 109.211181][ T9136] overlayfs: missing 'lowerdir' [ 109.482980][ T9150] binder: BINDER_SET_CONTEXT_MGR already set [ 109.485004][ T9150] binder: 9149:9150 ioctl 4018620d 200000000040 returned -16 [ 109.543538][ T9158] program syz.1.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.610966][ T9158] vxfs: WRONG superblock magic 00000000 at 1 [ 109.613542][ T9158] vxfs: WRONG superblock magic 00000000 at 8 [ 109.615526][ T9158] vxfs: can't find superblock. [ 109.944201][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 110.048640][ T9186] netlink: 'syz.1.978': attribute type 2 has an invalid length. [ 110.134315][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 110.142079][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 110.174565][ T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 110.177372][ T29] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 110.186756][ T29] usb 8-1: Product: syz [ 110.188078][ T29] usb 8-1: Manufacturer: syz [ 110.189754][ T29] usb 8-1: SerialNumber: syz [ 110.197806][ T29] usb 8-1: config 0 descriptor?? [ 110.206607][ T9162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.212659][ T29] hub 8-1:0.0: bad descriptor, ignoring hub [ 110.217245][ T29] hub 8-1:0.0: probe with driver hub failed with error -5 [ 110.245786][ T9191] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 110.554292][ T10] usb 8-1: USB disconnect, device number 6 [ 110.785563][ T40] kauditd_printk_skb: 1130 callbacks suppressed [ 110.785579][ T40] audit: type=1400 audit(1746024785.075:42033): avc: denied { map } for pid=9210 comm="syz.4.987" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 110.815584][ T40] audit: type=1400 audit(1746024785.085:42034): avc: denied { ioctl } for pid=9205 comm="syz.1.986" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.846813][ T40] audit: type=1400 audit(1746024785.095:42035): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 110.867892][ T40] audit: type=1400 audit(1746024785.095:42036): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.884263][ T58] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 110.899748][ T40] audit: type=1400 audit(1746024785.105:42037): avc: denied { append } for pid=5328 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.927923][ T40] audit: type=1400 audit(1746024785.115:42038): avc: denied { append open } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.950383][ T40] audit: type=1400 audit(1746024785.115:42039): avc: denied { ioctl } for pid=9157 comm="syz.3.971" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.964281][ T40] audit: type=1400 audit(1746024785.125:42040): avc: denied { getattr } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.972887][ T40] audit: type=1400 audit(1746024785.175:42041): avc: denied { ioctl } for pid=9157 comm="syz.3.971" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.986950][ T40] audit: type=1400 audit(1746024785.175:42042): avc: denied { ioctl } for pid=9157 comm="syz.3.971" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.027655][ T9217] __nla_validate_parse: 5 callbacks suppressed [ 111.027665][ T9217] netlink: 596 bytes leftover after parsing attributes in process `syz.4.988'. [ 111.046310][ T58] usb 8-1: config 2 has an invalid interface number: 156 but max is 0 [ 111.049747][ T58] usb 8-1: config 2 has no interface number 0 [ 111.052268][ T58] usb 8-1: config 2 interface 156 has no altsetting 0 [ 111.097850][ T58] usb 8-1: New USB device found, idVendor=1608, idProduct=0244, bcdDevice=35.d0 [ 111.101545][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.104012][ T58] usb 8-1: Product: syz [ 111.107297][ T58] usb 8-1: Manufacturer: syz [ 111.109313][ T58] usb 8-1: SerialNumber: syz [ 111.188944][ T9221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=9221 comm=syz.1.989 [ 111.265320][ T9223] x_tables: duplicate underflow at hook 2 [ 111.351096][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 111.351835][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.353854][ T9228] netlink: 'syz.4.992': attribute type 30 has an invalid length. [ 111.357880][ T9228] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.362489][ T9228] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.364436][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.365497][ T9228] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.370844][ T9228] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.376170][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 111.378934][ T9228] netlink: 'syz.4.992': attribute type 30 has an invalid length. [ 111.405017][ T9227] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 111.629927][ T9236] netlink: 376 bytes leftover after parsing attributes in process `syz.2.996'. [ 111.633981][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'. [ 111.639061][ T9236] netlink: 376 bytes leftover after parsing attributes in process `syz.2.996'. [ 111.802786][ T9240] netlink: 596 bytes leftover after parsing attributes in process `syz.4.998'. [ 112.548601][ T58] io_ti 8-1:2.156: required endpoints missing [ 112.555398][ T58] usb 8-1: USB disconnect, device number 7 [ 112.634227][ T834] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 112.807079][ T834] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 112.817386][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.821147][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.830361][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.843624][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.849074][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.853694][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.866902][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.870565][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.877951][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.879040][ T9278] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 112.889762][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.893528][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.899538][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.908328][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.911473][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.918879][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.929365][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.933042][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.935893][ T9278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.944015][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.955364][ T9283] netlink: 29 bytes leftover after parsing attributes in process `syz.4.1011'. [ 112.961034][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.966249][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.974517][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.982938][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.986981][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.991471][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.013808][ T834] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 113.019070][ T834] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 113.022632][ T834] usb 7-1: Product: syz [ 113.028584][ T834] usb 7-1: Manufacturer: syz [ 113.030659][ T834] usb 7-1: SerialNumber: syz [ 113.040254][ T834] usb 7-1: config 0 descriptor?? [ 113.058965][ T834] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 113.314670][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 113.318477][ T10] usb 7-1: USB disconnect, device number 16 [ 113.322608][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 113.504636][ T9300] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 113.611661][ T9304] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.617167][ T9304] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 113.621514][ T9304] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 113.830701][ T9324] binder: BINDER_SET_CONTEXT_MGR already set [ 113.833413][ T9324] binder: 9323:9324 ioctl 4018620d 2000000000c0 returned -16 [ 113.854179][ T9324] binder: BINDER_SET_CONTEXT_MGR already set [ 113.856425][ T9324] binder: 9323:9324 ioctl 4018620d 200000000040 returned -16 [ 114.278153][ T9342] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 114.283768][ T9342] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 114.479167][ T9361] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1034'. [ 114.758303][ T9371] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.043181][ T9389] lo: entered allmulticast mode [ 116.318404][ T40] kauditd_printk_skb: 1375 callbacks suppressed [ 116.318420][ T40] audit: type=1400 audit(1746024790.605:43418): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.336293][ T9419] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1058'. [ 116.344190][ T40] audit: type=1400 audit(1746024790.605:43419): avc: denied { read write } for pid=8250 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.353919][ T40] audit: type=1400 audit(1746024790.605:43420): avc: denied { read write open } for pid=8250 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.394527][ T40] audit: type=1400 audit(1746024790.605:43421): avc: denied { ioctl } for pid=8250 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.402998][ T40] audit: type=1400 audit(1746024790.625:43422): avc: denied { create } for pid=9417 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.414242][ T40] audit: type=1400 audit(1746024790.625:43423): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.434690][ T40] audit: type=1400 audit(1746024790.625:43424): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.450371][ T40] audit: type=1400 audit(1746024790.625:43425): avc: denied { write } for pid=9417 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.455477][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1052'. [ 116.460746][ T40] audit: type=1400 audit(1746024790.625:43426): avc: denied { nlmsg_write } for pid=9417 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.462467][ T9427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'. [ 116.475045][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1052'. [ 116.479215][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1052'. [ 116.483082][ T40] audit: type=1400 audit(1746024790.625:43427): avc: denied { create } for pid=9418 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.604530][ T9429] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.619708][ T9424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.210937][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.216425][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.220695][ T9464] netlink: 'syz.1.1065': attribute type 21 has an invalid length. [ 117.223456][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.227842][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.231856][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.245353][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.253190][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.270008][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.291198][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.314510][ T9459] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 117.571544][ T9477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.904959][ T1177] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.954818][ T9490] block nbd3: Device being setup by another task [ 117.973976][ T9490] block nbd3: shutting down sockets [ 117.980399][ T1177] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.988325][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 118.004167][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1077'. [ 118.039553][ T1177] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.111210][ T1177] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.214948][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.219450][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.222853][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.230325][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.233547][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.361935][ T1177] bridge_slave_1: left allmulticast mode [ 118.363864][ T1177] bridge_slave_1: left promiscuous mode [ 118.367960][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.373111][ T1177] bridge_slave_0: left allmulticast mode [ 118.376768][ T1177] bridge_slave_0: left promiscuous mode [ 118.378681][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.585517][ T9518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.746900][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.751590][ T1177] bond_slave_0: left promiscuous mode [ 118.756703][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.765435][ T1177] bond_slave_1: left promiscuous mode [ 118.770179][ T1177] bond0 (unregistering): Released all slaves [ 118.780580][ T1177] bond1 (unregistering): Released all slaves [ 118.787895][ T1177] bond2 (unregistering): Released all slaves [ 118.804757][ T1177] bond3 (unregistering): Released all slaves [ 118.904976][ T1177] bond4 (unregistering): Released all slaves [ 118.916660][ T1177] bond5 (unregistering): Released all slaves [ 119.157299][ T9531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.233481][ T9531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.284999][ T9505] chnl_net:caif_netlink_parms(): no params data found [ 119.314984][ T9535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.487747][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.490097][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.492467][ T9505] bridge_slave_0: entered allmulticast mode [ 119.496908][ T9505] bridge_slave_0: entered promiscuous mode [ 119.510314][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.512784][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.517592][ T9505] bridge_slave_1: entered allmulticast mode [ 119.520332][ T9505] bridge_slave_1: entered promiscuous mode [ 119.524299][ T5934] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 119.524665][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 119.598459][ T1177] hsr_slave_0: left promiscuous mode [ 119.608057][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.611201][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.635187][ T1177] veth1_macvtap: left promiscuous mode [ 119.636987][ T1177] veth0_macvtap: left promiscuous mode [ 119.638795][ T1177] veth1_vlan: left promiscuous mode [ 119.641002][ T1177] veth0_vlan: left promiscuous mode [ 119.705632][ T9555] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1092'. [ 120.325336][ T5934] Bluetooth: hci0: command tx timeout [ 120.790754][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 120.855162][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 121.301766][ T9505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.308179][ T9505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.324259][ T40] kauditd_printk_skb: 1295 callbacks suppressed [ 121.324273][ T40] audit: type=1400 audit(1746024795.605:44723): avc: denied { recv } for pid=5845 comm="syz-executor" saddr=127.0.0.1 src=40870 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 121.340368][ T40] audit: type=1400 audit(1746024795.615:44724): avc: denied { recv } for pid=5845 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=40870 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 121.351102][ T40] audit: type=1400 audit(1746024795.615:44725): avc: denied { recv } for pid=5845 comm="syz-executor" saddr=127.0.0.1 src=40870 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 121.361325][ T40] audit: type=1400 audit(1746024795.615:44726): avc: denied { read write } for pid=8250 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.378998][ T40] audit: type=1400 audit(1746024795.625:44727): avc: denied { read write open } for pid=8250 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.391243][ T40] audit: type=1400 audit(1746024795.625:44728): avc: denied { recv } for pid=5845 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=40870 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 121.401400][ T40] audit: type=1400 audit(1746024795.625:44729): avc: denied { ioctl } for pid=8250 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.433751][ T40] audit: type=1400 audit(1746024795.625:44730): avc: denied { recv } for pid=5845 comm="syz-executor" saddr=127.0.0.1 src=40870 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 121.447039][ T40] audit: type=1400 audit(1746024795.625:44731): avc: denied { recv } for pid=5335 comm="klogd" saddr=10.0.2.2 src=44508 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 121.455067][ T40] audit: type=1400 audit(1746024795.625:44732): avc: denied { recv } for pid=5845 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=40870 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 121.479407][ T9505] team0: Port device team_slave_0 added [ 121.500186][ T9505] team0: Port device team_slave_1 added [ 121.605158][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.608070][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.617450][ T9505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.623895][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.631246][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.647634][ T9505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.752967][ T9584] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1100'. [ 121.911641][ T9505] hsr_slave_0: entered promiscuous mode [ 121.914865][ T9505] hsr_slave_1: entered promiscuous mode [ 121.918926][ T9505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.921957][ T9505] Cannot create hsr debugfs directory [ 121.954421][ T9589] netlink: 3696 bytes leftover after parsing attributes in process `syz.4.1102'. [ 121.957957][ T9589] netlink: 3696 bytes leftover after parsing attributes in process `syz.4.1102'. [ 121.966870][ T1177] IPVS: stop unused estimator thread 0... [ 122.232869][ T9607] xt_l2tp: v2 tid > 0xffff: 150994944 [ 122.256761][ T9505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.266653][ T9505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.276485][ T9505] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.293759][ T9505] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.382042][ T9612] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1109'. [ 122.395077][ T5934] Bluetooth: hci0: command tx timeout [ 122.530986][ T9505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.559543][ T9505] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.571360][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.573602][ T8724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.591650][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.593986][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.816106][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 123.244519][ T9637] binder: BINDER_SET_CONTEXT_MGR already set [ 123.246446][ T9637] binder: 9636:9637 ioctl 4018620d 2000000000c0 returned -16 [ 123.258477][ T9637] binder: BINDER_SET_CONTEXT_MGR already set [ 123.260376][ T9637] binder: 9636:9637 ioctl 4018620d 200000000040 returned -16 [ 123.512208][ T9505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.602824][ T9653] KVM: debugfs: duplicate directory 9653-4 [ 123.639281][ T9655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1124'. [ 123.793170][ T90] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.814119][ T90] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.900946][ T90] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.912368][ T90] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.931685][ T9664] erspan0: default FDB implementation only supports local addresses [ 124.004036][ T90] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.007809][ T90] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.051070][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.055425][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.058093][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.061349][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.063786][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.100379][ T90] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.107308][ T90] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.115177][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 124.118051][ T9671] openvswitch: netlink: Unknown nsh attribute 0 [ 124.120253][ T9671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.129340][ T9671] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 124.371304][ T90] bridge_slave_1: left allmulticast mode [ 124.373458][ T90] bridge_slave_1: left promiscuous mode [ 124.384553][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.403454][ T90] bridge_slave_0: left allmulticast mode [ 124.406175][ T90] bridge_slave_0: left promiscuous mode [ 124.408457][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.478300][ T5939] Bluetooth: hci0: command tx timeout [ 124.560571][ T90] team0: Port device geneve0 removed [ 124.719052][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.723335][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.731940][ T90] bond0 (unregistering): Released all slaves [ 124.740526][ T9683] input: syz1 as /devices/virtual/input/input16 [ 124.838906][ T90] bond1 (unregistering): Released all slaves [ 124.859980][ T9668] chnl_net:caif_netlink_parms(): no params data found [ 124.989551][ T9668] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.992727][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.004222][ T9668] bridge_slave_0: entered allmulticast mode [ 125.006873][ T9668] bridge_slave_0: entered promiscuous mode [ 125.014326][ T9668] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.017291][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.023010][ T9668] bridge_slave_1: entered allmulticast mode [ 125.027535][ T9668] bridge_slave_1: entered promiscuous mode [ 125.115935][ T9668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.122631][ T9668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.196329][ T9668] team0: Port device team_slave_0 added [ 125.218125][ T9668] team0: Port device team_slave_1 added [ 125.272704][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.275679][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.283373][ T9668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.287727][ T9697] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.297184][ T9505] veth0_vlan: entered promiscuous mode [ 125.299865][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.302007][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.310845][ T9668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.343184][ T9700] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1138'. [ 125.383382][ T9505] veth1_vlan: entered promiscuous mode [ 125.407019][ T9668] hsr_slave_0: entered promiscuous mode [ 125.409362][ T9668] hsr_slave_1: entered promiscuous mode [ 125.411713][ T9668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.414018][ T9668] Cannot create hsr debugfs directory [ 125.668738][ T9702] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.672130][ T9702] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.775977][ T9702] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.780221][ T9702] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.913202][ T9702] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.918921][ T9702] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.936623][ T9505] veth0_macvtap: entered promiscuous mode [ 125.981222][ T9505] veth1_macvtap: entered promiscuous mode [ 126.026912][ T9710] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 126.028195][ T9702] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.030116][ T9710] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1142'. [ 126.034972][ T9702] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.062250][ T9668] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.069338][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.073877][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.081618][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.084539][ T5939] Bluetooth: hci1: command tx timeout [ 126.086717][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.094651][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.100057][ T9668] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.112075][ T9668] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.131335][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.136645][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.140779][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.145827][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.151434][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.154749][ T9668] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 126.182167][ T9505] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.185931][ T9505] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.189500][ T9505] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.193082][ T9505] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.238369][ T9702] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 126.242127][ T9702] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.281683][ T9702] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 126.286728][ T9702] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.313392][ T9702] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 126.317739][ T9702] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.329202][ T9702] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 126.332513][ T9702] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.350905][ T40] kauditd_printk_skb: 1363 callbacks suppressed [ 126.350917][ T40] audit: type=1400 audit(1746024800.635:46096): avc: denied { create } for pid=9505 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.366413][ T40] audit: type=1400 audit(1746024800.635:46097): avc: denied { write } for pid=9505 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.382867][ T40] audit: type=1400 audit(1746024800.635:46098): avc: denied { read } for pid=9505 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.399707][ T40] audit: type=1400 audit(1746024800.645:46099): avc: denied { read } for pid=9505 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.417459][ T40] audit: type=1400 audit(1746024800.645:46100): avc: denied { write } for pid=9505 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.431221][ T40] audit: type=1400 audit(1746024800.645:46101): avc: denied { read } for pid=9505 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.445686][ T40] audit: type=1400 audit(1746024800.645:46102): avc: denied { read } for pid=9505 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.459438][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.460490][ T40] audit: type=1400 audit(1746024800.645:46103): avc: denied { write } for pid=9505 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.461909][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.478408][ T40] audit: type=1400 audit(1746024800.665:46104): avc: denied { recv } for pid=5845 comm="syz-executor" saddr=127.0.0.1 src=40870 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 126.494486][ T40] audit: type=1400 audit(1746024800.675:46105): avc: denied { recv } for pid=5346 comm="udevd" saddr=10.0.2.2 src=44508 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 126.554453][ T5939] Bluetooth: hci0: command tx timeout [ 126.590434][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 126.615883][ T90] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 126.682269][ T8719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.685540][ T8719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.751646][ T90] hsr_slave_0: left promiscuous mode [ 126.754021][ T90] hsr_slave_1: left promiscuous mode [ 126.756770][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.759129][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.763365][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.766091][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.775346][ T9722] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1145'. [ 126.788300][ T90] veth1_macvtap: left promiscuous mode [ 126.790147][ T90] veth0_macvtap: left promiscuous mode [ 126.791995][ T90] veth1_vlan: left promiscuous mode [ 126.793955][ T90] veth0_vlan: left promiscuous mode [ 126.837333][ T9505] ================================================================== [ 126.840784][ T9505] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 [ 126.844254][ T9505] Write of size 8 at addr ffff88802379a808 by task syz-executor/9505 [ 126.849419][ T9505] [ 126.850468][ T9505] CPU: 0 UID: 0 PID: 9505 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 126.850491][ T9505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.850501][ T9505] Call Trace: [ 126.850508][ T9505] [ 126.850515][ T9505] dump_stack_lvl+0x116/0x1f0 [ 126.850540][ T9505] print_report+0xc3/0x670 [ 126.850558][ T9505] ? __virt_addr_valid+0x5e/0x590 [ 126.850581][ T9505] ? __phys_addr+0xc6/0x150 [ 126.850604][ T9505] ? binder_add_device+0xa4/0xb0 [ 126.850630][ T9505] kasan_report+0xe0/0x110 [ 126.850647][ T9505] ? binder_add_device+0xa4/0xb0 [ 126.850670][ T9505] binder_add_device+0xa4/0xb0 [ 126.850691][ T9505] binderfs_binder_device_create.isra.0+0x95f/0xb70 [ 126.850719][ T9505] binderfs_fill_super+0x8d4/0x1360 [ 126.850746][ T9505] ? __pfx_binderfs_fill_super+0x10/0x10 [ 126.850779][ T9505] ? shrinker_register+0x1a8/0x260 [ 126.850799][ T9505] ? sget_fc+0x808/0xc20 [ 126.850823][ T9505] ? __pfx_set_anon_super_fc+0x10/0x10 [ 126.850845][ T9505] ? __pfx_binderfs_fill_super+0x10/0x10 [ 126.850869][ T9505] get_tree_nodev+0xda/0x190 [ 126.850893][ T9505] vfs_get_tree+0x8b/0x340 [ 126.850914][ T9505] path_mount+0x14d4/0x1f20 [ 126.850932][ T9505] ? kmem_cache_free+0x2d4/0x4d0 [ 126.850957][ T9505] ? __pfx_path_mount+0x10/0x10 [ 126.850976][ T9505] ? putname+0x154/0x1a0 [ 126.850995][ T9505] __x64_sys_mount+0x28d/0x310 [ 126.851011][ T9505] ? __pfx___x64_sys_mount+0x10/0x10 [ 126.851029][ T9505] ? __pfx___x64_sys_umount+0x10/0x10 [ 126.851058][ T9505] do_syscall_64+0xcd/0x260 [ 126.851080][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.851098][ T9505] RIP: 0033:0x7f44ac59010a [ 126.851112][ T9505] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.851129][ T9505] RSP: 002b:00007ffd352163a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.851145][ T9505] RAX: ffffffffffffffda RBX: 00007f44ac610e74 RCX: 00007f44ac59010a [ 126.851157][ T9505] RDX: 00007f44ac6208cb RSI: 00007f44ac610e74 RDI: 00007f44ac6208cb [ 126.851168][ T9505] RBP: 00007f44ac6110bd R08: 0000000000000000 R09: 00007f44ac7b6738 [ 126.851179][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f44ac5ec1a8 [ 126.851190][ T9505] R13: 00007f44ac5ec180 R14: 0000000000000009 R15: 0000000000000000 [ 126.851207][ T9505] [ 126.851212][ T9505] [ 126.936240][ T9505] Allocated by task 8250: [ 126.937887][ T9505] kasan_save_stack+0x33/0x60 [ 126.939872][ T9505] kasan_save_track+0x14/0x30 [ 126.941766][ T9505] __kasan_kmalloc+0xaa/0xb0 [ 126.943442][ T9505] binderfs_binder_device_create.isra.0+0x17a/0xb70 [ 126.946128][ T9505] binderfs_fill_super+0x8d4/0x1360 [ 126.948262][ T9505] get_tree_nodev+0xda/0x190 [ 126.950152][ T9505] vfs_get_tree+0x8b/0x340 [ 126.951920][ T9505] path_mount+0x14d4/0x1f20 [ 126.953634][ T9505] __x64_sys_mount+0x28d/0x310 [ 126.955630][ T9505] do_syscall_64+0xcd/0x260 [ 126.957464][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.959754][ T9505] [ 126.960673][ T9505] Freed by task 5972: [ 126.962295][ T9505] kasan_save_stack+0x33/0x60 [ 126.964108][ T9505] kasan_save_track+0x14/0x30 [ 126.965960][ T9505] kasan_save_free_info+0x3b/0x60 [ 126.968049][ T9505] __kasan_slab_free+0x51/0x70 [ 126.970158][ T9505] kfree+0x2b6/0x4d0 [ 126.971682][ T9505] binder_proc_dec_tmpref+0x4c3/0x590 [ 126.973785][ T9505] binder_deferred_func+0xe87/0x12c0 [ 126.975873][ T9505] process_one_work+0x9cc/0x1b70 [ 126.977845][ T9505] worker_thread+0x6c8/0xf10 [ 126.979645][ T9505] kthread+0x3c2/0x780 [ 126.981269][ T9505] ret_from_fork+0x45/0x80 [ 126.983044][ T9505] ret_from_fork_asm+0x1a/0x30 [ 126.984886][ T9505] [ 126.985858][ T9505] The buggy address belongs to the object at ffff88802379a800 [ 126.985858][ T9505] which belongs to the cache kmalloc-512 of size 512 [ 126.991175][ T9505] The buggy address is located 8 bytes inside of [ 126.991175][ T9505] freed 512-byte region [ffff88802379a800, ffff88802379aa00) [ 126.996436][ T9505] [ 126.997447][ T9505] The buggy address belongs to the physical page: [ 126.999973][ T9505] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23798 [ 127.003334][ T9505] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 127.006638][ T9505] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 127.009606][ T9505] page_type: f5(slab) [ 127.011174][ T9505] raw: 00fff00000000040 ffff88801b442c80 ffffea00013e9d00 dead000000000002 [ 127.014330][ T9505] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 127.017771][ T9505] head: 00fff00000000040 ffff88801b442c80 ffffea00013e9d00 dead000000000002 [ 127.020982][ T9505] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 127.024301][ T9505] head: 00fff00000000002 ffffea00008de601 00000000ffffffff 00000000ffffffff [ 127.027639][ T9505] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 127.030975][ T9505] page dumped because: kasan: bad access detected [ 127.033462][ T9505] page_owner tracks the page as allocated [ 127.035620][ T9505] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 46, tgid 46 (kworker/u32:2), ts 49432121125, free_ts 49165994134 [ 127.043517][ T9505] post_alloc_hook+0x181/0x1b0 [ 127.045529][ T9505] get_page_from_freelist+0x135c/0x3920 [ 127.047780][ T9505] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 127.050205][ T9505] alloc_pages_mpol+0x1fb/0x550 [ 127.052227][ T9505] new_slab+0x244/0x340 [ 127.053987][ T9505] ___slab_alloc+0xd9c/0x1940 [ 127.055944][ T9505] __slab_alloc.constprop.0+0x56/0xb0 [ 127.058160][ T9505] __kmalloc_cache_noprof+0xfb/0x3e0 [ 127.060137][ T9505] __ipv6_dev_mc_inc+0x2b9/0xc10 [ 127.062195][ T9505] addrconf_dad_work+0x284/0x14e0 [ 127.064275][ T9505] process_one_work+0x9cc/0x1b70 [ 127.066359][ T9505] worker_thread+0x6c8/0xf10 [ 127.068267][ T9505] kthread+0x3c2/0x780 [ 127.069915][ T9505] ret_from_fork+0x45/0x80 [ 127.071713][ T9505] ret_from_fork_asm+0x1a/0x30 [ 127.073709][ T9505] page last free pid 15 tgid 15 stack trace: [ 127.076164][ T9505] __free_frozen_pages+0x69d/0xff0 [ 127.078290][ T9505] tlb_remove_table_rcu+0x116/0x1a0 [ 127.080351][ T9505] rcu_core+0x799/0x14e0 [ 127.082112][ T9505] handle_softirqs+0x216/0x8e0 [ 127.084102][ T9505] run_ksoftirqd+0x3a/0x60 [ 127.085985][ T9505] smpboot_thread_fn+0x3f4/0xae0 [ 127.088069][ T9505] kthread+0x3c2/0x780 [ 127.089678][ T9505] ret_from_fork+0x45/0x80 [ 127.091499][ T9505] ret_from_fork_asm+0x1a/0x30 [ 127.093515][ T9505] [ 127.094525][ T9505] Memory state around the buggy address: [ 127.096835][ T9505] ffff88802379a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.100122][ T9505] ffff88802379a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.103409][ T9505] >ffff88802379a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.106680][ T9505] ^ [ 127.108479][ T9505] ffff88802379a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.111634][ T9505] ffff88802379a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.114848][ T9505] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.213872][ T9505] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.216903][ T9505] CPU: 0 UID: 0 PID: 9505 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 127.221833][ T9505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.226235][ T9505] Call Trace: [ 127.227639][ T9505] [ 127.228917][ T9505] dump_stack_lvl+0x3d/0x1f0 [ 127.230843][ T9505] panic+0x71c/0x800 [ 127.232477][ T9505] ? __pfx_panic+0x10/0x10 [ 127.234355][ T9505] ? mark_held_locks+0x49/0x80 [ 127.236366][ T9505] ? preempt_schedule_thunk+0x16/0x30 [ 127.238597][ T9505] ? binder_add_device+0xa4/0xb0 [ 127.240547][ T9505] ? preempt_schedule_common+0x44/0xc0 [ 127.242798][ T9505] ? check_panic_on_warn+0x1f/0xb0 [ 127.244918][ T9505] ? binder_add_device+0xa4/0xb0 [ 127.247008][ T9505] check_panic_on_warn+0xab/0xb0 [ 127.249081][ T9505] end_report+0x107/0x170 [ 127.250899][ T9505] kasan_report+0xee/0x110 [ 127.252756][ T9505] ? binder_add_device+0xa4/0xb0 [ 127.254848][ T9505] binder_add_device+0xa4/0xb0 [ 127.256867][ T9505] binderfs_binder_device_create.isra.0+0x95f/0xb70 [ 127.259633][ T9505] binderfs_fill_super+0x8d4/0x1360 [ 127.261812][ T9505] ? __pfx_binderfs_fill_super+0x10/0x10 [ 127.264135][ T9505] ? shrinker_register+0x1a8/0x260 [ 127.266290][ T9505] ? sget_fc+0x808/0xc20 [ 127.268070][ T9505] ? __pfx_set_anon_super_fc+0x10/0x10 [ 127.270363][ T9505] ? __pfx_binderfs_fill_super+0x10/0x10 [ 127.272688][ T9505] get_tree_nodev+0xda/0x190 [ 127.274621][ T9505] vfs_get_tree+0x8b/0x340 [ 127.276570][ T9505] path_mount+0x14d4/0x1f20 [ 127.278513][ T9505] ? kmem_cache_free+0x2d4/0x4d0 [ 127.280577][ T9505] ? __pfx_path_mount+0x10/0x10 [ 127.282592][ T9505] ? putname+0x154/0x1a0 [ 127.284361][ T9505] __x64_sys_mount+0x28d/0x310 [ 127.286388][ T9505] ? __pfx___x64_sys_mount+0x10/0x10 [ 127.288593][ T9505] ? __pfx___x64_sys_umount+0x10/0x10 [ 127.290820][ T9505] do_syscall_64+0xcd/0x260 [ 127.292710][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.295192][ T9505] RIP: 0033:0x7f44ac59010a [ 127.297066][ T9505] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.304916][ T9505] RSP: 002b:00007ffd352163a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.308348][ T9505] RAX: ffffffffffffffda RBX: 00007f44ac610e74 RCX: 00007f44ac59010a [ 127.311596][ T9505] RDX: 00007f44ac6208cb RSI: 00007f44ac610e74 RDI: 00007f44ac6208cb [ 127.314850][ T9505] RBP: 00007f44ac6110bd R08: 0000000000000000 R09: 00007f44ac7b6738 [ 127.318094][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f44ac5ec1a8 [ 127.321329][ T9505] R13: 00007f44ac5ec180 R14: 0000000000000009 R15: 0000000000000000 [ 127.324569][ T9505] [ 127.326597][ T9505] Kernel Offset: disabled [ 127.328403][ T9505] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:53:21 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854f25f0 RDI=ffffffff9adf64e0 RBP=ffffffff9adf64a0 RSP=ffffc90005bf74c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3332303838387257 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35becee R15=dffffc0000000000 RIP=ffffffff854f2617 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555e45a500 ffffffff 00c00000 GS =0000 ffff8880d69e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6fbdb70d58 CR3=000000005d9af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c0c0 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd352163c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd35216376 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd35216376 00007ffd3521637c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44ac611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44ac611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44ac611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44ac611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44ac611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44ac611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029706d742d7a79 73287269646b6d00 706d742d7a79732f 2e00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050c554851085f5c 560d574c414e4800 554851085f5c560a 0b00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888035cf1980 RCX=0000000000000000 RDX=0000000000000001 RSI=000000000000ffcb RDI=ffff888035cf1980 RBP=000000000000ffcb RSP=ffffc9000178f920 R8 =0000000000000820 R9 =0000000000000007 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=000000000000ffcb RIP=ffffffff89e01cf0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8a6ae8fd00 ffffffff 00c00000 GS =0000 ffff8880d6ae2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000011038 CR3=0000000029254000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e ZMM22=f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb ZMM23=bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f ZMM24=7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 ZMM25=3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f ZMM26=fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 ZMM27=fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e0050000e0050000 e0050000e0050000 e0050000e0050000 e0050000e0050000 e0050000e0050000 e0050000e0050000 e0050000e0050000 e0050000e0050000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8e3bf5c0 RCX=ffffffff911de501 RDX=0000000000000000 RSI=ffffffff8169cd14 RDI=ffffffff8e3bf5c0 RBP=0000000000000001 RSP=ffffc9000171ed20 R8 =ffffffff911de518 R9 =0000000000000000 R10=0000000000000005 R11=000000000000a6f5 R12=ffffffff8169cd14 R13=ffffc9000171edd8 R14=ffffc9000171ef08 R15=ffffc9000171ee0c RIP=ffffffff81980925 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6fbcfb7bac CR3=000000004ccf0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff896b75e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa541a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa541a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa541a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa541a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa541a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa541a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff88801d2156f8 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88801d2156fc RBP=0000000000000000 RSP=ffffc9000368f678 R8 =0000000000000000 R9 =ffffed1003a42adf R10=ffff88801d2156ff R11=0000000000000000 R12=ffff88801d2156b0 R13=0000000000000001 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff822c3115 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558f3c4500 ffffffff 00c00000 GS =0000 ffff8880d6ce2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6fbdae56c0 CR3=000000004c2ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=235ce7b5723265cc e2bdf056677fce2d 235ce7b5723265cc e2bdf056677fce2d 235ce7b5723265cc e2bdf056677fce2d 235ce7b5723265cc e2bdf056677fce2d ZMM18=962e73c59905b6f7 3979c6552ee6a629 962e73c59905b6f7 3979c6552ee6a629 962e73c59905b6f7 3979c6552ee6a629 962e73c59905b6f7 3979c6552ee6a629 ZMM19=c608000000000000 0000000000000005 c608000000000000 0000000000000004 c608000000000000 0000000000000003 c608000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e 52e2863e52e2863e ZMM22=f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb f85551cbf85551cb ZMM23=bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f bb75c42fbb75c42f ZMM24=7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 7d9edf467d9edf46 ZMM25=3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f 3efbe87f3efbe87f ZMM26=fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 fbc5fec0fbc5fec0 ZMM27=fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 fd33df33fd33df33 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=df050000df050000 df050000df050000 df050000df050000 df050000df050000 df050000df050000 df050000df050000 df050000df050000 df050000df050000