last executing test programs: 47.914606297s ago: executing program 1 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0xd4) 47.913733018s ago: executing program 1 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40842, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x0, 0x8001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r5, r6, 0x0, 0x1000000000008) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) (async) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0xfffffffe, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcdd, 0x0, 0x0, 0x10, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.859698472s ago: executing program 1 (id=767): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x1, 0x0) fsopen(&(0x7f0000000000)='9p\x00', 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r2, 0x25, 0x4, @val=@perf_event={0x8000000000000000}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) userfaultfd(0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 47.856527877s ago: executing program 1 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') move_mount(r0, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x123) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 47.792818947s ago: executing program 1 (id=772): syz_emit_ethernet(0x56, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaa8f064ab6bf7c86dd606410a60020000020010000000000000000000000000001fe8000000000000000000000000000aa0003000000000000050200000710"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000040)="5699cebe6a9176c1354840dbd2b654a4adac8936df3bfc67bc96deed2f7ffcc19953d6c13307bccff5a45763c1258c0b02ee4ecc9328ea9b18193f11bccfcc3345f6a4265d63362612cbd83a3f48194b1691bfc0059d697cd656e4cee5467ac79bc1002db631cc490a5952909cf620ad51dca0d39521ee2ab18594c45de240ef5ec6190897bc8f30a09a1a36402c9a77ee8e25", 0x93}, {&(0x7f0000000100)="268a1bae7248e67181497509f8855ff5bbd65ab4be49acd882d4a5faae6b079c8f92b19a4db25b05c13fed16a5d8a2b630d07ea67386968d029f71efacef16ac2641184ce704baea8be59f54be82ed47ab6bd219fd4ef6e893d09a5dbdc5c076e677adca07ac8fde2fa8f49ac1abaa79a4db2f03394087ab24bcc701527e72ed329b5892219b", 0x86}, {&(0x7f00000001c0)="6917543475f4a95416d2a57c932e545467f0ebdee72d70d68512debb70db47a88e6b33268516dc586949f69e4e4e954abe73ff83d1887be5ab578e80dab3a3ae05995c6eebd673c35c7d60b07f03db750c6c99ddd6a5a7d5744715fa431b7ce69404569e11bd45230740697b7a0e4a4f632b27980372217a056934a75563ef4a51da79021ee699f251fc59db87c7631996b0bfc242b4c113c1b29f6a936e4e4d29e9a4632f17e96ed044f69cf4b8b8b26ba3fd6996baf91ed29ae2ea37ec2664d43d673979ceaa9cbacdae304e76ec82e4", 0xd1}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="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", 0x1000}], 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x140}, 0x4044050) 47.434660461s ago: executing program 1 (id=781): socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) openat$ptp0(0xffffffffffffff9c, 0x0, 0x43, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="d7488ef46b0b"}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x10da) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 47.398709423s ago: executing program 32 (id=781): socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) openat$ptp0(0xffffffffffffff9c, 0x0, 0x43, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="d7488ef46b0b"}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x10da) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 30.25212521s ago: executing program 3 (id=1055): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_clone3(&(0x7f00000004c0)={0x40004000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0, {0x4}, &(0x7f0000000280)=""/247, 0xf7, &(0x7f0000000380)=""/222, &(0x7f0000000480)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/igmp6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xc002a0, 0xffffffff) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) syz_clone3(&(0x7f00000004c0)={0x40004000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x4}, &(0x7f0000000280)=""/247, 0xf7, &(0x7f0000000380)=""/222, &(0x7f0000000480)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (async) syz_open_procfs(r1, &(0x7f00000000c0)='net/igmp6\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xc002a0, 0xffffffff) (async) 29.161668336s ago: executing program 3 (id=1068): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x0, 0xc, 0x1, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) r3 = socket(0x28, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'veth1_to_bridge\x00', {0x2, 0x4e23, @broadcast}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000001840)=0x8, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r4, 0x7}, &(0x7f00000003c0)=0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x7, &(0x7f0000000000)=0x20009b6b, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) sendto$inet6(r3, &(0x7f0000000540)="c8edbcc9b81c7df7aef5fe8da437a457da3ba7eb456c2061bc6bcaf6201f7dfa914fe2f164dd240c2277894020ef66f48d0a5fe06cee2376ec6a504d90b117d0160c63c0c703d65db7241a6d30893845b81ceeb22e4cd3b04bf2f7804e98c6c24430103813ebe282ce73177a7fddf99692f9f5", 0x73, 0x800, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000004, 0x200000005c832, 0xffffffffffffffff, 0x5cded000) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000000)='\'!]\\\x00', 0x5) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) 27.388507649s ago: executing program 3 (id=1090): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000000280)="0f", 0x1, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES64=r1, @ANYBLOB="6d30826100000000", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x5}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x42f2a6166aa24f20) 27.229416875s ago: executing program 3 (id=1091): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) ioctl$KDSETLED(r0, 0x4b32, 0xa) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000200001030000008ef54565ff05"], 0x14}}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) (async) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRES16=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="5a1cafaa2275af05c4b1247851df5c12d1a6b81bee2439425a113a43db2d5dabe58b684f"]) r4 = socket$caif_seqpacket(0x25, 0x5, 0x2) bind(r4, 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d78939", 0x41, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r8 = dup(r7) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) (async) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r9 = syz_open_dev$I2C(&(0x7f0000003000), 0x5, 0x582ac1) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) 26.905895516s ago: executing program 3 (id=1095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)={0x1, 0x0, [{0x1, 0x3, 0x133, 0xfff, 0x9bf}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.714215507s ago: executing program 3 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kvm_fpu\x00', r0, 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x6, 0xa}, {0xfc3a, 0x3, 0x520d, 0x3, 0x3}}}}, 0x17) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) inotify_init1(0x81800) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 10.593727527s ago: executing program 33 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kvm_fpu\x00', r0, 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x6, 0xa}, {0xfc3a, 0x3, 0x520d, 0x3, 0x3}}}}, 0x17) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) inotify_init1(0x81800) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 5.02407193s ago: executing program 5 (id=1314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf", @ANYRES32, @ANYBLOB="08000800c400"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 5.023085361s ago: executing program 5 (id=1316): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='+#\x00', &(0x7f00000000c0)='./file0\x00', r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x170488, &(0x7f0000000300)={[{@subsystem='pids'}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@cpuset_v2_mode}, {@noprefix}], [{@audit}, {@hash}, {@dont_appraise}, {@uid_lt={'uid<', r3}}]}) (async, rerun: 32) mount$afs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000040, &(0x7f0000000440)={[{@flock_openafs}, {@dyn}, {}, {@flock_write}, {@flock_write}, {@dyn}, {@flock_strict}], [{@fowner_gt={'fowner>', r3}}]}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) futimesat(r2, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)={{r4, r5/1000+60000}, {0x0, 0x2710}}) (async, rerun: 32) chdir(&(0x7f0000000580)='./file0\x00') (rerun: 32) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f00000005c0)) (async) accept4$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x180800) (async) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') timer_create(0x0, &(0x7f0000000740)={0x0, 0x28}, &(0x7f0000000780)=0x0) (async) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000800)={{r7, r8+10000000}, {0x0, 0x3938700}}, &(0x7f0000000840)) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_FSYNC={0x3, 0x14, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9}}) (async, rerun: 64) syz_clone3(&(0x7f0000001a80)={0x101000000, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0, {0x2}, &(0x7f0000000980)=""/136, 0x88, &(0x7f0000000a40)=""/4096, &(0x7f0000001a40)=[0x0], 0x1, {r1}}, 0x58) (rerun: 64) write$cgroup_pid(r2, &(0x7f0000001b00)=r10, 0x12) unlink(&(0x7f0000001b40)='./file0\x00') r11 = openat2(r1, &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x8200, 0x0, 0x4}, 0x18) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r12, 0xc008ae09, &(0x7f0000001c00)=""/242) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000001d00)={0xa0b5, [0x6, 0x6ef5, 0x6], [{0x10000, 0x1, 0x1}, {0x22, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x4, 0x1, 0x1}, {0x0, 0xfd, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x401, 0x1, 0x0, 0x1}, {0x19, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x630, 0x2}, {0x3, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xae9, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x90, 0x62, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x7, 0x1, 0x1, 0x1, 0x1}], 0x800}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00), 0x80001, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r11, 0x8934, &(0x7f0000001e40)={'veth0\x00', 0x2}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) (async) socket$inet(0x2, 0xa6988cc79b45d614, 0x5) 4.937103293s ago: executing program 5 (id=1317): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x15, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@void}, {@llc={0x4, {@llc={0xfe, 0x7e, "a2"}}}}}, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) (async) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) (async, rerun: 32) keyctl$link(0x8, r0, r1) (rerun: 32) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x74000000) (async) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) read$rfkill(r4, &(0x7f0000000080), 0xffffff1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) (async) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r0) 2.287704917s ago: executing program 2 (id=1345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000140)='smaps\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000ffffffffffffff7f000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRESOCT=r0, @ANYBLOB="00000000001800001c001280090001087800007866f26505e612f9e9b01900c2def59f12cfad3095f72f6a00"/54], 0x50}}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f00000005c0)=@get={0x1, 0x0}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.956497009s ago: executing program 0 (id=1349): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x180, 0x4, 0x9}, 0x18) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xc0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42e31973f0add60b2f7d3ac700d64310744f6c4c450ef03d"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x6, 0x1, 0x8c5d19f64a2f41a4, 0x0, 0x3}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 1.838715204s ago: executing program 0 (id=1350): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, r1, 0xdededede}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r2, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r1, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[{}, {}], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x2, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x100, 0x1, &(0x7f0000000000)=[r2], &(0x7f00000000c0)=[0x6, 0x81, 0xd, 0xb39], &(0x7f00000007c0)=[0x0, 0x0, r3, r4, r5, r6, r7], &(0x7f0000000800)=[0x8000000000000001, 0xc9, 0x4, 0x8, 0x33], 0x0, 0xffffffff}) poll(&(0x7f0000000040)=[{r0, 0xf624}], 0x1, 0x6) 1.83839541s ago: executing program 0 (id=1351): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xb7092000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x401c2103, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000002e0efc247520d20060f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000240)={0x6, @capture={0x1000, 0x1, {0x80000001}, 0x4, 0x9}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3], 0x54}}, 0x0) 1.63600201s ago: executing program 0 (id=1352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="fc0000000000f1ff18259c00", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.635240003s ago: executing program 0 (id=1353): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x5, 0x2, 0x9, 0xb588, 0x5, 0x7fffffff, 0x3, 0x7, 0x7, 0x80000000, 0x200, 0x9, 0x4, 0xd24, 0x8, 0x4002, 0x0, 0x99, 0x15b, 0x5, 0x0, 0x9, 0x9, 0x7, 0x9, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x7, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x7, 0x3ca5, 0x5, 0x40, 0x0, 0x0, 0x6, 0x9, 0x10000, 0x4, 0x7, 0x0, 0x5, 0x0, 0xf, 0x8, 0x1, 0x31c, 0xd, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xb0, 0x1, 0xecc4, 0x8, 0x2559, 0x8000, 0xb647, 0xffffff80, 0x0, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x5, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x87, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0x0, 0x3, 0x6, 0x80000005, 0x7, 0x3, 0x401, 0x100, 0x0, 0xc, 0x0, 0x80000000]}}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x24fa, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, &(0x7f0000001c40)="f6", 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000b0002000000000000080000080009"], 0x30}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x34, 0x0, 0x5d24909143d20715, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x0, 0x2, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x1}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001d00000006000100000000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x60}}, 0x0) 1.255416622s ago: executing program 2 (id=1358): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x840) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x10000011}) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x20400000) write$P9_RVERSION(r2, 0x0, 0x13) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0xd}}}}}, 0x0) 1.193103081s ago: executing program 4 (id=1360): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000006c0), 0x2a00, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000040)={@lba=0xd73, 0x1e}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1e, 0x0, &(0x7f00000002c0)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001300)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC], 0xc) 1.110854193s ago: executing program 4 (id=1361): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240080, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x437, 0x1, 0x25dfdbb8, {0x0, 0x0, 0x0, r3, 0x40c89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xc}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) (async) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000180)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000180)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.110616173s ago: executing program 4 (id=1362): socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) socket$kcm(0x29, 0x7, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 523.740587ms ago: executing program 5 (id=1363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r10}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private1, 0xa06}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r10, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r9, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r10, 0x5}}, 0x10) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f0000000400)={0xc5, 0x0, r5}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 523.397921ms ago: executing program 4 (id=1364): syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @empty, 0x3}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)=r6}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 291.974237ms ago: executing program 2 (id=1365): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xc92) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 32) r3 = getpid() (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) socket(0x10, 0x80803, 0x0) socket(0x10, 0x803, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1d, 0x0, @loopback, 0x5}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x29}}, 0xffffffffffffffff, 0x7fff}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async, rerun: 32) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (rerun: 32) write$P9_RXATTRWALK(r5, &(0x7f0000000240)={0xf, 0x1f, 0x1, 0xd34}, 0xf) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) (async) wait4(r3, &(0x7f0000000280), 0x80000000, &(0x7f0000000540)) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be81e131", 0x20000}, {0x0}], 0x2, 0x5, 0xa, 0x14) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r7) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @local}) (rerun: 64) 291.737248ms ago: executing program 2 (id=1366): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r0, &(0x7f00000001c0)=""/36, 0x24) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x633fb000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd26, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 138.328538ms ago: executing program 2 (id=1367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18f", 0x4b}, {&(0x7f0000000380)="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", 0xff04}], 0x2}, 0x20008010) sendmmsg$alg(r1, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="7926b8687de4d9065df0", 0xa}, {&(0x7f0000000280)="b5f1dfc0fe810cc2efec734a256ce132e216a8c0bc31b66d7f705c826fe3", 0x1e}], 0x2, 0x0, 0x0, 0x840}], 0x1, 0x400480d1) recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000680)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/221, 0xdd}, 0x22) (async) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 64) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x25c, r4, 0x800, 0xffffffff, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4005}, 0x42) (async) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0xffdffffffffffffe, r3, 'id0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x10200, 0x2, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$CDROMVOLREAD(r5, 0x5313, &(0x7f0000000640)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffc27, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0xa9582bf5f4059055}}, 0x20) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x103) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16}, 0x1c) (async) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x220802, 0xf2) (async, rerun: 32) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) (rerun: 32) splice(r8, &(0x7f00000011c0)=0x3, r7, 0x0, 0x88000001, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x6}, r6, 0x7}}, 0x48) (rerun: 64) 137.191753ms ago: executing program 0 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r7, r4, 0x25, 0x0, @void}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @private=0xa010101, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x1, 0x200000) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_usbip_server_init(0x1) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0xb) 136.84282ms ago: executing program 5 (id=1369): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000100)='net/mcfilter6\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000) 64.461892ms ago: executing program 2 (id=1370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00c8"], 0x24}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000020000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000800"/244], 0x13c}}, 0x4004090) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x4, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x9, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 64.302695ms ago: executing program 4 (id=1371): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x108, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000140)=[r1, r2, r3, 0xee00]) 226.987µs ago: executing program 4 (id=1372): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001e00), 0x80, 0x0) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c00018008001600", @ANYRES32=0xee01], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) sendmsg$alg(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}, 0x4000c840) write$6lowpan_enable(r7, 0x0, 0x0) read$FUSE(r7, &(0x7f0000004780)={0x2020}, 0xe61) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r9) getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r10, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range(r4, r8, 0x2) r11 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r11, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r11, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4080) 0s ago: executing program 5 (id=1373): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r3, 0x5460, 0x0) ioctl(r3, 0x5451, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 0s ago: executing program 2 (id=1375): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x8000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x20000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000100)={'pcl812\x00', [0x200, 0x80000001, 0x7, 0x2fd6, 0x0, 0x8, 0x9, 0xec4, 0x3ff, 0x6ac, 0x6, 0x8, 0x1, 0x5, 0x5, 0x6, 0x59, 0x7ccd, 0x0, 0x7, 0x3, 0x7f, 0x10000, 0x8, 0x8, 0xfffffffd, 0x1, 0x3, 0x9df, 0x0, 0x3]}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x5f, {"0f01bc0f798f09980fc71e66f30f096467450f794c0417f390b9800000c00f3235000400000f30660f62ff48b800000000008000000f23d80f21f835400000300f23f845d9952d000000410f1001"}}, @code={0x1, 0x60, {"b9800000c00f3235010000000f3066b8c0008ee0c74424004c000000c74424020d4c9b28ff2c24c4a17c101764f042306e5b0f01cb66653e263ef30fc734790fbde7460f01cbc4a2c59c8e66640000"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x7}}, @uexit={0x0, 0x18, 0x6c4e}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x7eafb066}, @uexit={0x0, 0x18, 0x483878d0}, @uexit={0x0, 0x18, 0xae5}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @cpuid={0x2, 0x18, {0x2, 0x6}}, @code={0x1, 0x96, {"c7442400e77e0000c7442402f95f0000c7442406000000000f011c240f20d835200000000f22d8c744240009010000c744240200000000ff2c24440f20c03502000000440f22c0400f5fba0000000066baf80cb850b36284ef66bafc0cec460f07c4017555d448b8e152ffffffffffff0f23c80f21f8350c00d0000f23f8b9a90300000f32"}}, @code={0x1, 0x4b, {"26f3a7660f38810366b82e000f00d8660fc77700c4a2a101180fc768080f20c035000004000f22c00f01ca363e0fc7afc90000002e36430f01c0"}}, @uexit={0x0, 0x18, 0x97e}, @code={0x1, 0x5e, {"b90c020000b8378c0000ba000000000f30b9350800000f32673665420f01c30f01ca66baf80cb888c42d8aef66bafc0cec430f01c566baa100edc4c32d5e1cbd0038000069c422750a63f4cdaa"}}, @uexit={0x0, 0x18, 0xb}, @cpuid={0x2, 0x18, {0xfff, 0x3}}], 0x34e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(r1) ioctl$COMEDI_SETRSUBD(r3, 0x6410) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000580)={0x0, @aes256, 0x0, @desc1}) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000005c0)={0x0, 0x2, 0x1}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x14) write$sysctl(r1, &(0x7f0000000600)='4\x00', 0x2) bind$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$TIOCNOTTY(r3, 0x5422) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000680)={'pcl726\x00', [0x9, 0x4, 0x7, 0x0, 0xe391, 0x7, 0x7, 0xcc45, 0x3, 0x4, 0x8, 0x5, 0x200, 0xd6, 0xa, 0x7, 0x6, 0x1, 0x8, 0x8, 0x72, 0x4, 0x800, 0xc, 0xc6, 0x40, 0x10, 0x2, 0x69fb, 0x101, 0x8c, 0x6]}) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) ioctl$BLKFRAGET(r3, 0x1265, &(0x7f0000000740)) ioctl$COMEDI_BUFINFO(0xffffffffffffffff, 0xc02c640e, &(0x7f0000000780)={0x354, 0x7, 0xd67, 0x7, 0x9, 0x8001, 0x7}) ioctl$COMEDI_UNLOCK(r1, 0x6406) mount(&(0x7f00000007c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='romfs\x00', 0x2908000, &(0x7f0000000880)='pcl812\x00') ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000008c0)) fremovexattr(r2, &(0x7f0000000900)=@known='security.selinux\x00') r4 = open(&(0x7f0000000940)='./file0/file0\x00', 0x151f00, 0x39) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x5, 0x0, {{0x9, 0x4, 0x0, 0x3, 0x24, 0x65, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0xf, "c1ad89337623e97e76a63b9c9e"}]}}}}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x2, 0x4e22, 0x8a, 0xa, 0x80, 0x20, 0x2c, r5, r6}, {0x7e, 0x9f, 0x1000, 0x6, 0x3, 0xffffffff, 0x10001, 0x9}, {0x8, 0x1, 0xc1c8, 0x7}, 0x4, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3506, 0x1, 0x1, 0x8, 0x4, 0x0, 0x3}}, 0xe8) stat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000d00)={'ni_at_ao\x00', [0x0, 0x7fffffff, 0x1, 0x7, 0x2, 0xd9, 0x9, 0x1580, 0x0, 0x1, 0xc, 0x4, 0xfe0, 0x9, 0xe, 0x7, 0x2, 0x4, 0x3, 0x2, 0x6eb, 0x3, 0x1, 0x1000, 0x5, 0x1, 0x7fffffff, 0x5, 0x10, 0x5, 0x844, 0xe]}) kernel console output (not intermixed with test programs): [ 85.729131][ T40] audit: type=1400 audit(1752869156.759:526): avc: denied { mounton } for pid=7916 comm="syz.3.540" path="/137/file0" dev="hugetlbfs" ino=19849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 85.863842][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 85.919470][ T40] audit: type=1400 audit(1752869156.947:527): avc: denied { execmod } for pid=7934 comm="syz.3.546" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 85.998530][ T7028] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.164872][ T7028] usb 6-1: too many configurations: 142, using maximum allowed: 8 [ 86.169003][ T7028] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 86.182077][ T7028] usb 6-1: can't read configurations, error -61 [ 86.319221][ T7028] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.480804][ T7028] usb 6-1: too many configurations: 142, using maximum allowed: 8 [ 86.484705][ T7028] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 86.487238][ T7028] usb 6-1: can't read configurations, error -61 [ 86.489531][ T7028] usb usb6-port1: attempt power cycle [ 86.652475][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 86.728925][ T7963] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 86.809418][ T40] audit: type=1400 audit(1752869157.770:528): avc: denied { create } for pid=7967 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 86.819798][ T40] audit: type=1400 audit(1752869157.779:529): avc: denied { sys_admin } for pid=7967 comm="syz.3.553" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 86.832334][ T40] audit: type=1400 audit(1752869157.788:530): avc: denied { ioctl } for pid=7967 comm="syz.3.553" path="socket:[19225]" dev="sockfs" ino=19225 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.853849][ T7028] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 86.878027][ T7028] usb 6-1: too many configurations: 142, using maximum allowed: 8 [ 86.882653][ T7028] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 86.885091][ T7028] usb 6-1: can't read configurations, error -61 [ 87.036172][ T7028] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.057642][ T7028] usb 6-1: too many configurations: 142, using maximum allowed: 8 [ 87.062485][ T7028] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 87.065767][ T7028] usb 6-1: can't read configurations, error -61 [ 87.069144][ T7028] usb usb6-port1: unable to enumerate USB device [ 87.289406][ T40] audit: type=1400 audit(1752869158.219:531): avc: denied { write } for pid=7997 comm="syz.2.564" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.350780][ T40] audit: type=1400 audit(1752869158.284:532): avc: denied { setcheckreqprot } for pid=8004 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.428050][ T8010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8010 comm=syz.2.568 [ 87.525120][ T40] audit: type=1400 audit(1752869158.443:533): avc: denied { write } for pid=8019 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.689442][ T8029] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 87.689469][ T8029] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 87.706214][ T8029] syzkaller0: entered allmulticast mode [ 87.706832][ T8028] syzkaller0: left allmulticast mode [ 87.820638][ T8031] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 87.841925][ T8037] tipc: Enabled bearer , priority 0 [ 87.848375][ T8037] tipc: Resetting bearer [ 88.265440][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 88.930251][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.994026][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.045560][ T8081] hfsplus: unable to find HFS+ superblock [ 89.229590][ T8083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.591'. [ 89.245211][ T8084] netlink: 44 bytes leftover after parsing attributes in process `syz.1.591'. [ 89.429129][ T8096] netlink: 96 bytes leftover after parsing attributes in process `syz.1.595'. [ 89.587185][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 89.864631][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'. [ 89.883444][ T8127] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 89.885525][ T8127] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.887924][ T8127] vhci_hcd vhci_hcd.0: Device attached [ 89.890483][ T8128] vhci_hcd: unknown pdu 2 [ 89.893590][ T7881] vhci_hcd: stop threads [ 89.895814][ T7881] vhci_hcd: release socket [ 89.897308][ T7881] vhci_hcd: disconnect device [ 89.936656][ T8125] netlink: 'syz.0.604': attribute type 30 has an invalid length. [ 89.946976][ T8125] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.950807][ T8125] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.954744][ T8125] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.957926][ T8125] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.963024][ T8125] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.965840][ T8125] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.968666][ T8125] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.971348][ T8125] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.991115][ T8130] cgroup: name respecified [ 90.515667][ T8136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 90.623434][ T8145] tmpfs: Unknown parameter 'Ô ã½æQ6†ù§' [ 90.630454][ T8145] macvtap1: entered allmulticast mode [ 90.632273][ T8145] veth0_macvtap: entered allmulticast mode [ 90.669711][ T8153] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 90.948534][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 90.951403][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.620'. [ 90.979775][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 91.064859][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 91.064870][ T40] audit: type=1400 audit(1752869161.754:547): avc: denied { ioctl } for pid=8186 comm="syz.0.621" path="socket:[22660]" dev="sockfs" ino=22660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.067165][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 91.067196][ T8189] netlink: 'syz.0.621': attribute type 30 has an invalid length. [ 91.072626][ T8189] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.085453][ T8189] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.089434][ T8189] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.092978][ T8189] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.150089][ T8197] hpfs: hpfs_map_sector(): read error [ 91.160912][ T8189] nbd: must specify a size in bytes for the device [ 91.258225][ T40] audit: type=1400 audit(1752869161.923:548): avc: denied { read write } for pid=8205 comm="syz.1.630" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.267306][ T40] audit: type=1400 audit(1752869161.923:549): avc: denied { open } for pid=8205 comm="syz.1.630" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.407684][ T8223] i2c i2c-1: Invalid block write size 34 [ 91.415578][ T8223] bond0: (slave bond_slave_0): Releasing backup interface [ 91.421262][ T8223] bond0: (slave bond_slave_1): Releasing backup interface [ 91.429453][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 91.435897][ T8223] team0: Port device team_slave_0 removed [ 91.448436][ T8223] team0: Port device team_slave_1 removed [ 91.452856][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.455799][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.459434][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.462244][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.470294][ T8223] bond3: (slave gretap1): Releasing active interface [ 91.502468][ T8225] team0: Mode changed to "activebackup" [ 91.506671][ T8224] team0: Unable to change to the same mode the team is in [ 91.510379][ T8223] vlan0: entered promiscuous mode [ 91.524511][ T8223] team0: Port device vlan0 added [ 91.535910][ T8223] tipc: Started in network mode [ 91.538008][ T8223] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 91.540299][ T8223] tipc: Enabled bearer , priority 0 [ 91.579038][ T29] usb 7-1: device descriptor read/64, error -71 [ 91.579900][ T8232] overlay: Unknown parameter 'euid<00000000000000000000' [ 91.779671][ T40] audit: type=1400 audit(1752869162.419:550): avc: denied { read } for pid=8252 comm="syz.1.643" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.786331][ T40] audit: type=1400 audit(1752869162.419:551): avc: denied { open } for pid=8252 comm="syz.1.643" path="/162/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.835553][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 91.893002][ T8264] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 91.985315][ T29] usb 7-1: device descriptor read/64, error -71 [ 92.057021][ T8279] overlay: Unknown parameter 'measure' [ 92.059480][ T8281] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 92.062320][ T8281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.067434][ T8281] vhci_hcd vhci_hcd.0: Device attached [ 92.102956][ T29] usb usb7-port1: attempt power cycle [ 92.125836][ T8282] vhci_hcd: connection closed [ 92.126528][ T1249] vhci_hcd: stop threads [ 92.130388][ T1249] vhci_hcd: release socket [ 92.132227][ T1249] vhci_hcd: disconnect device [ 92.137073][ T8288] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 92.141954][ T8288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.224613][ T8288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.325024][ T8288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.398832][ T8288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.477023][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 92.481003][ T8288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.499008][ T29] usb 7-1: device descriptor read/8, error -71 [ 92.606966][ T10] tipc: Node number set to 11578026 [ 92.635607][ T8288] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.644298][ T8288] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.651392][ T8288] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.660339][ T8288] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.684415][ T8301] tmpfs: Bad value for 'mpol' [ 92.732577][ T8308] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 92.754887][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.777756][ T29] usb 7-1: device descriptor read/8, error -71 [ 92.895178][ T29] usb usb7-port1: unable to enumerate USB device [ 92.945459][ T8329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.990116][ T40] audit: type=1400 audit(1752869163.550:552): avc: denied { accept } for pid=8332 comm="syz.1.666" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 93.261259][ T40] audit: type=1400 audit(1752869163.812:553): avc: denied { read } for pid=8346 comm="syz.0.671" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.268949][ T40] audit: type=1400 audit(1752869163.812:554): avc: denied { open } for pid=8346 comm="syz.0.671" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.276459][ T40] audit: type=1400 audit(1752869163.812:555): avc: denied { ioctl } for pid=8346 comm="syz.0.671" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.314088][ T8349] program syz.0.672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.319530][ T40] audit: type=1400 audit(1752869163.859:556): avc: denied { read } for pid=8348 comm="syz.0.672" path="socket:[22306]" dev="sockfs" ino=22306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.406919][ T8371] ip6gretap0: entered promiscuous mode [ 94.478836][ T8375] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 94.481259][ T8375] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.604382][ T8408] netlink: 'syz.3.690': attribute type 4 has an invalid length. [ 95.610028][ T8408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8408 comm=syz.3.690 [ 95.615704][ T8408] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 95.618947][ T8408] __nla_validate_parse: 7 callbacks suppressed [ 95.618956][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 95.713855][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 95.718087][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 95.721736][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 95.724918][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 95.800459][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 95.868425][ T8440] sp0: Synchronizing with TNC [ 95.893847][ T8444] SELinux: policydb version 971480632 does not match my version range 15-34 [ 95.896975][ T8444] SELinux: failed to load policy [ 96.157346][ T8462] 9pnet: Found fid 0 not clunked [ 96.226298][ T8468] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.228550][ T8468] overlayfs: failed to set xattr on upper [ 96.230623][ T8468] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.232875][ T8468] overlayfs: ...falling back to index=off. [ 96.234723][ T8468] overlayfs: ...falling back to uuid=null. [ 96.236535][ T8468] overlayfs: ...falling back to xino=off. [ 96.238305][ T8471] fuse: Bad value for 'fd' [ 96.238452][ T8468] overlayfs: conflicting lowerdir path [ 96.304219][ T5962] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.439987][ T8488] netlink: 248 bytes leftover after parsing attributes in process `syz.2.717'. [ 96.441211][ T8490] overlayfs: missing 'workdir' [ 96.554889][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 96.568711][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 96.568726][ T40] audit: type=1400 audit(1752869166.899:570): avc: denied { write } for pid=8497 comm="syz.3.720" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.639007][ T8504] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 96.652146][ T8504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.656006][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 96.657640][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 96.691130][ T8509] dlm: no locking on control device [ 96.715861][ T8504] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 96.719309][ T8504] bond4: (slave batadv1): making interface the new active one [ 96.723239][ T8504] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 96.730597][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 96.741963][ T8505] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 97.312376][ T8537] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 98.336020][ T40] audit: type=1400 audit(1752869168.564:571): avc: denied { write } for pid=8554 comm="syz.2.738" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.611022][ T8580] program syz.0.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.617391][ T8580] sctp: [Deprecated]: syz.0.746 (pid 8580) Use of int in max_burst socket option deprecated. [ 98.617391][ T8580] Use struct sctp_assoc_value instead [ 98.627563][ T8580] ipvlan0: mtu less than device minimum [ 98.651036][ T40] audit: type=1400 audit(1752869168.854:572): avc: denied { write } for pid=8581 comm="syz.2.747" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.822241][ T8597] bridge3: entered promiscuous mode [ 98.912789][ T40] audit: type=1400 audit(1752869169.079:573): avc: denied { create } for pid=8614 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 99.005377][ T8622] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 47 [ 99.009405][ T8625] netlink: 'syz.3.762': attribute type 11 has an invalid length. [ 99.112814][ T8644] SELinux: failed to load policy [ 99.166383][ T8646] program syz.0.768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.166647][ T8654] random: crng reseeded on system resumption [ 99.166915][ T40] audit: type=1400 audit(1752869169.331:574): avc: denied { append } for pid=8653 comm="syz.3.771" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.172508][ T40] audit: type=1400 audit(1752869169.341:575): avc: denied { mounton } for pid=8651 comm="syz.1.770" path="/187/file1/bus/file1" dev="autofs" ino=23034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 99.180174][ T8650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.240857][ T8660] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 99.262707][ T8660] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 99.313193][ T8668] Failed to get privilege flags for destination (handle=0x2:0x4) [ 99.562931][ T8674] netlink: 'syz.0.780': attribute type 21 has an invalid length. [ 99.575503][ T6040] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 99.591039][ T40] audit: type=1400 audit(1752869169.733:576): avc: denied { execute } for pid=8677 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 99.605162][ T40] audit: type=1400 audit(1752869169.733:577): avc: denied { execute_no_trans } for pid=8677 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 99.664276][ T8681] netlink: 'syz.0.784': attribute type 10 has an invalid length. [ 99.721985][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.725286][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.725605][ T6040] usb 8-1: device descriptor read/64, error -71 [ 99.728478][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.734984][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.738207][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.745328][ T5962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.749165][ T5962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.751986][ T5962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.755223][ T5962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.758456][ T5962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.870637][ T8684] chnl_net:caif_netlink_parms(): no params data found [ 99.995546][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.997863][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.999136][ T40] audit: type=1400 audit(1752869170.108:578): avc: denied { map } for pid=8719 comm="syz.0.792" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 100.000156][ T8684] bridge_slave_0: entered allmulticast mode [ 100.008620][ T6040] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 100.013833][ T8684] bridge_slave_0: entered promiscuous mode [ 100.018024][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.024605][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.026999][ T8684] bridge_slave_1: entered allmulticast mode [ 100.027832][ T8715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8715 comm=syz.2.791 [ 100.031266][ T8684] bridge_slave_1: entered promiscuous mode [ 100.084590][ T8684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.089343][ T8684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.103668][ T40] audit: type=1400 audit(1752869170.210:579): avc: denied { write } for pid=8723 comm="syz.0.793" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.156673][ T6040] usb 8-1: device descriptor read/64, error -71 [ 100.157637][ T8684] team0: Port device team_slave_0 added [ 100.162745][ T8684] team0: Port device team_slave_1 added [ 100.212933][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.215669][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.225809][ T8684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.230907][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.233586][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.244824][ T8684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.281418][ T6040] usb usb8-port1: attempt power cycle [ 100.292072][ T8684] hsr_slave_0: entered promiscuous mode [ 100.294899][ T8684] hsr_slave_1: entered promiscuous mode [ 100.297552][ T8684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.300547][ T8684] Cannot create hsr debugfs directory [ 100.448738][ T8750] IPv6: sit1: Disabled Multicast RS [ 100.473195][ T8684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.477623][ T8684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.483342][ T8684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.488598][ T8684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.558450][ T8684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.599572][ T8684] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.608606][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.610869][ T7891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.618493][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.619013][ T8760] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 100.620789][ T7891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.663620][ T6040] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 100.690517][ T6040] usb 8-1: device descriptor read/8, error -71 [ 100.783231][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.943953][ T6040] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 100.963704][ T8684] veth0_vlan: entered promiscuous mode [ 100.965997][ T6040] usb 8-1: device descriptor read/8, error -71 [ 100.970193][ T8684] veth1_vlan: entered promiscuous mode [ 100.992016][ T8684] veth0_macvtap: entered promiscuous mode [ 100.995955][ T8684] veth1_macvtap: entered promiscuous mode [ 101.006213][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.017999][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.023251][ T8684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.026119][ T8684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.029127][ T8684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.032749][ T8684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.078186][ T7891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.081125][ T7891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.083172][ T6040] usb usb8-port1: unable to enumerate USB device [ 101.103032][ T7887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.106105][ T7887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.702265][ T8784] ip6erspan0: tun_chr_ioctl cmd 1074025675 [ 101.704964][ T8784] ip6erspan0: persist disabled [ 101.883357][ T8785] (syz.2.806,8785,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 101.951407][ T5960] Bluetooth: hci2: command tx timeout [ 102.091386][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 102.091404][ T40] audit: type=1400 audit(1752869172.072:591): avc: denied { read } for pid=8789 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.174985][ T8799] __nla_validate_parse: 13 callbacks suppressed [ 102.174997][ T8799] netlink: 596 bytes leftover after parsing attributes in process `syz.4.810'. [ 102.242829][ T8801] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 102.245613][ T8801] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 102.253401][ T8801] vhci_hcd vhci_hcd.0: Device attached [ 102.259433][ T8804] vhci_hcd: connection closed [ 102.259672][ T7887] vhci_hcd: stop threads [ 102.263383][ T7887] vhci_hcd: release socket [ 102.265321][ T7887] vhci_hcd: disconnect device [ 102.293986][ T40] audit: type=1400 audit(1752869172.259:592): avc: denied { ioctl } for pid=8806 comm="syz.4.813" path="socket:[25199]" dev="sockfs" ino=25199 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.304770][ T40] audit: type=1400 audit(1752869172.259:593): avc: denied { write } for pid=8806 comm="syz.4.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.362194][ T8811] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 102.570369][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.816'. [ 102.573432][ T8817] netlink: 'syz.3.816': attribute type 7 has an invalid length. [ 102.575733][ T8817] netlink: 'syz.3.816': attribute type 8 has an invalid length. [ 102.578129][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 102.716296][ T8825] binder: 8821:8825 ioctl c020f509 200000000280 returned -22 [ 102.722740][ T8825] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.787228][ T8835] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 102.789603][ T8835] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 102.794691][ T8835] program syz.4.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.869851][ T8843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.047788][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.830'. [ 103.079759][ T8865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8865 comm=syz.3.830 [ 103.085853][ T8865] comedi comedi1: Minor 0 could not be opened [ 103.124609][ T8872] input: syz0 as /devices/virtual/input/input12 [ 103.269959][ T40] audit: type=1400 audit(1752869173.176:594): avc: denied { map } for pid=8886 comm="syz.3.838" path="/dev/nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.270293][ T8887] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 103.277366][ T40] audit: type=1400 audit(1752869173.176:595): avc: denied { execute } for pid=8886 comm="syz.3.838" path="/dev/nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.334311][ T40] audit: type=1400 audit(1752869173.232:596): avc: denied { map } for pid=8888 comm="syz.3.839" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.344779][ T40] audit: type=1400 audit(1752869173.232:597): avc: denied { execute } for pid=8888 comm="syz.3.839" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.435123][ T6039] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 103.452170][ T40] audit: type=1400 audit(1752869173.344:598): avc: denied { create } for pid=8894 comm="syz.0.841" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.463711][ T40] audit: type=1400 audit(1752869173.353:599): avc: denied { link } for pid=8894 comm="syz.0.841" name="file1" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.486478][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.530764][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.606145][ T6039] usb 7-1: Using ep0 maxpacket: 16 [ 103.610975][ T6039] usb 7-1: config 0 has no interfaces? [ 103.614095][ T6039] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.616988][ T6039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.619570][ T6039] usb 7-1: SerialNumber: syz [ 103.623819][ T6039] usb 7-1: config 0 descriptor?? [ 103.728806][ T8925] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.850'. [ 103.753363][ T8927] tipc: Started in network mode [ 103.755319][ T8927] tipc: Node identity e6cd704de08b, cluster identity 4711 [ 103.759648][ T8927] tipc: Enabled bearer , priority 0 [ 103.762505][ T8928] tipc: Enabling of bearer rejected, already enabled [ 103.765771][ T8927] syzkaller0: entered promiscuous mode [ 103.768216][ T8927] syzkaller0: entered allmulticast mode [ 103.788400][ T8927] tipc: Resetting bearer [ 103.793835][ T8926] tipc: Resetting bearer [ 103.805429][ T8926] tipc: Disabling bearer [ 103.809617][ T8934] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 103.842368][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.831'. [ 103.848910][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 103.855964][ T6019] usb 7-1: USB disconnect, device number 8 [ 103.896485][ T40] audit: type=1400 audit(1752869173.765:600): avc: denied { getopt } for pid=8941 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.926216][ T8945] netlink: 'syz.3.857': attribute type 30 has an invalid length. [ 103.929948][ T8945] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 103.933155][ T8945] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 103.969202][ T8950] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 103.971982][ T8950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.976589][ T8950] vhci_hcd vhci_hcd.0: Device attached [ 103.997674][ T8953] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 104.172580][ T5960] Bluetooth: hci2: command tx timeout [ 104.228672][ T6039] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 104.236740][ T34] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 104.397049][ T34] usb 8-1: Invalid ep0 maxpacket: 16 [ 104.441217][ T8955] fuse: blksize only supported for fuseblk [ 104.453138][ T8955] bridge: RTM_NEWNEIGH with invalid ether address [ 104.456090][ T8956] bridge: RTM_NEWNEIGH with invalid ether address [ 104.535947][ T34] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 104.698387][ T34] usb 8-1: Invalid ep0 maxpacket: 16 [ 104.700425][ T34] usb usb8-port1: attempt power cycle [ 104.748526][ T8971] SELinux: policydb version 0 does not match my version range 15-34 [ 104.751056][ T8971] SELinux: failed to load policy [ 104.826887][ T8978] fuse: Unknown parameter 'ƒe®…ult_ssions' [ 104.860703][ T8981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.978329][ T8989] netlink: 'syz.0.870': attribute type 8 has an invalid length. [ 105.059883][ T34] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 105.079342][ T8994] binder: 8993:8994 ioctl c4c85512 200000000600 returned -22 [ 105.082027][ T34] usb 8-1: Invalid ep0 maxpacket: 16 [ 105.220389][ T34] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 105.242162][ T34] usb 8-1: Invalid ep0 maxpacket: 16 [ 105.244072][ T34] usb usb8-port1: unable to enumerate USB device [ 105.396652][ T8999] comedi comedi3: bad chanlist[0]=0xffff0001 chan=1 range length=1 [ 105.628596][ T9022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.878'. [ 105.654495][ T9029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.733871][ T7028] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 105.894909][ T7028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.898376][ T7028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.901419][ T7028] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.905628][ T7028] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.908426][ T7028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.913264][ T7028] usb 7-1: config 0 descriptor?? [ 106.362002][ T7028] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 106.407278][ T5960] Bluetooth: hci2: command tx timeout [ 106.642152][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.686925][ T9044] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 106.708139][ T9044] macvlan2: entered promiscuous mode [ 106.710386][ T9044] macvlan2: entered allmulticast mode [ 106.797940][ T9047] new mount options do not match the existing superblock, will be ignored [ 106.802409][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 106.807128][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 106.811688][ T29] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 106.816348][ T29] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 106.823580][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.827464][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.830731][ T29] usb 5-1: Product: syz [ 106.832306][ T9050] openvswitch: netlink: IPv4 tun info is not correct [ 106.832494][ T29] usb 5-1: Manufacturer: Ђ [ 106.838507][ T29] usb 5-1: SerialNumber: syz [ 106.914592][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'. [ 107.063968][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.068895][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.114377][ T29] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 107.116558][ T29] cdc_ncm 5-1:1.0: bind() failure [ 107.120372][ T29] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 107.122481][ T29] cdc_ncm 5-1:1.1: bind() failure [ 107.126757][ T29] usb 5-1: USB disconnect, device number 7 [ 107.191116][ T8951] vhci_hcd: connection reset by peer [ 107.194050][ T7887] vhci_hcd: stop threads [ 107.195484][ T7887] vhci_hcd: release socket [ 107.198721][ T7887] vhci_hcd: disconnect device [ 107.279710][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 107.298656][ T9074] can0: slcan on ptm0. [ 107.380652][ T9073] can0 (unregistered): slcan off ptm0. [ 107.429734][ T9080] bridge_slave_0: left allmulticast mode [ 107.431832][ T9080] bridge_slave_0: left promiscuous mode [ 107.434338][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.439049][ T9080] bridge_slave_1: left allmulticast mode [ 107.440820][ T9080] bridge_slave_1: left promiscuous mode [ 107.443777][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.451087][ T9080] bond0: (slave bond_slave_0): Releasing backup interface [ 107.463574][ T9080] bond0: (slave bond_slave_1): Releasing backup interface [ 107.477742][ T9080] team_slave_0: left promiscuous mode [ 107.492406][ T9080] team0: Port device team_slave_0 removed [ 107.496758][ T9080] team_slave_1: left promiscuous mode [ 107.503551][ T9080] team0: Port device team_slave_1 removed [ 107.506308][ T9080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.509943][ T9080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.513810][ T9080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.516385][ T9080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.788192][ T9095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.903'. [ 108.125456][ T9115] infiniband syz1: set active [ 108.127090][ T9115] infiniband syz1: added syz_tun [ 108.149474][ T29] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 108.169526][ T9115] RDS/IB: syz1: added [ 108.172118][ T9115] smc: adding ib device syz1 with port count 1 [ 108.174824][ T9115] smc: ib device syz1 port 1 has pnetid [ 108.245581][ T9120] netlink: 124 bytes leftover after parsing attributes in process `syz.2.910'. [ 108.248915][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 108.309744][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 108.313369][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.319354][ T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.324870][ T29] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.328357][ T29] usb 8-1: Product: syz [ 108.330706][ T29] usb 8-1: Manufacturer: syz [ 108.335032][ T29] usb 8-1: SerialNumber: syz [ 108.353218][ T29] usb 8-1: config 0 descriptor?? [ 108.355874][ T9107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.399429][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 108.399442][ T40] audit: type=1400 audit(1752869177.974:605): avc: denied { setopt } for pid=9127 comm="syz.4.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.464396][ T24] usb 7-1: USB disconnect, device number 9 [ 108.585493][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 108.588740][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 108.591536][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 108.596074][ T9107] trusted_key: encrypted_key: insufficient parameters specified [ 108.599858][ T6038] usb 8-1: USB disconnect, device number 16 [ 108.620035][ T5960] Bluetooth: hci2: command tx timeout [ 108.975957][ T40] audit: type=1400 audit(1752869178.507:606): avc: denied { listen } for pid=9157 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.173770][ T9168] netlink: 148 bytes leftover after parsing attributes in process `syz.3.926'. [ 109.695683][ T9176] .: renamed from bond0 (while UP) [ 109.732823][ T6039] vhci_hcd: vhci_device speed not set [ 109.988404][ T7028] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 110.126400][ T9187] btrfs: Unknown parameter 'barrieryÐHÇ ' [ 110.150235][ T7028] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.154245][ T7028] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.162732][ T7028] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.166467][ T7028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.276613][ T9190] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 110.360190][ T9194] FAULT_INJECTION: forcing a failure. [ 110.360190][ T9194] name failslab, interval 1, probability 0, space 0, times 1 [ 110.364225][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.3.936 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 110.364252][ T9194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.364259][ T9194] Call Trace: [ 110.364264][ T9194] [ 110.364268][ T9194] dump_stack_lvl+0x16c/0x1f0 [ 110.364306][ T9194] should_fail_ex+0x512/0x640 [ 110.364332][ T9194] ? fs_reclaim_acquire+0xae/0x150 [ 110.364346][ T9194] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 110.364357][ T9194] should_failslab+0xc2/0x120 [ 110.364369][ T9194] __kmalloc_noprof+0xd2/0x510 [ 110.364389][ T9194] tomoyo_realpath_from_path+0xc2/0x6e0 [ 110.364401][ T9194] ? tomoyo_profile+0x47/0x60 [ 110.364414][ T9194] tomoyo_path_number_perm+0x245/0x580 [ 110.364429][ T9194] ? tomoyo_path_number_perm+0x237/0x580 [ 110.364445][ T9194] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 110.364462][ T9194] ? find_held_lock+0x2b/0x80 [ 110.364499][ T9194] ? find_held_lock+0x2b/0x80 [ 110.364514][ T9194] ? hook_file_ioctl_common+0x145/0x410 [ 110.364530][ T9194] ? __fget_files+0x20e/0x3c0 [ 110.364543][ T9194] security_file_ioctl+0x9b/0x240 [ 110.364562][ T9194] __x64_sys_ioctl+0xb7/0x210 [ 110.364579][ T9194] do_syscall_64+0xcd/0x4c0 [ 110.364590][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.364602][ T9194] RIP: 0033:0x7fb71038e9a9 [ 110.364611][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.364622][ T9194] RSP: 002b:00007fb711215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.364632][ T9194] RAX: ffffffffffffffda RBX: 00007fb7105b5fa0 RCX: 00007fb71038e9a9 [ 110.364640][ T9194] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 110.364646][ T9194] RBP: 00007fb711215090 R08: 0000000000000000 R09: 0000000000000000 [ 110.364652][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.364658][ T9194] R13: 0000000000000000 R14: 00007fb7105b5fa0 R15: 00007ffd65f436a8 [ 110.364672][ T9194] [ 110.365100][ T9194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.392913][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.439081][ T7028] usb 9-1: GET_CAPABILITIES returned 0 [ 110.440818][ T7028] usbtmc 9-1:16.0: can't read capabilities [ 110.442863][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.618574][ T9178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.930'. [ 110.626555][ T6037] usb 9-1: USB disconnect, device number 2 [ 110.651886][ T6038] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 110.824750][ T6038] usb 7-1: unable to get BOS descriptor or descriptor too short [ 110.827694][ T6038] usb 7-1: not running at top speed; connect to a high speed hub [ 110.831112][ T6038] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.835836][ T6038] usb 7-1: config 1 interface 0 has no altsetting 0 [ 110.840365][ T6038] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.843557][ T6038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.847259][ T6038] usb 7-1: Product: syz [ 110.848745][ T6038] usb 7-1: Manufacturer: syz [ 110.850325][ T6038] usb 7-1: SerialNumber: syz [ 111.080125][ T6038] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 111.087498][ T6038] usb 7-1: USB disconnect, device number 10 [ 111.225046][ T40] audit: type=1400 audit(1752869180.612:607): avc: denied { mounton } for pid=9215 comm="syz.4.942" path="/41/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 111.284627][ T40] audit: type=1400 audit(1752869180.668:608): avc: denied { getopt } for pid=9218 comm="syz.3.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.411490][ T9228] tmpfs: Bad value for 'mpol' [ 111.434276][ T9222] kvm: user requested TSC rate below hardware speed [ 111.490574][ T9222] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 111.493462][ T9222] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 111.677379][ T9239] FAULT_INJECTION: forcing a failure. [ 111.677379][ T9239] name failslab, interval 1, probability 0, space 0, times 0 [ 111.682121][ T9239] CPU: 3 UID: 0 PID: 9239 Comm: syz.3.948 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 111.682138][ T9239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.682145][ T9239] Call Trace: [ 111.682151][ T9239] [ 111.682156][ T9239] dump_stack_lvl+0x16c/0x1f0 [ 111.682177][ T9239] should_fail_ex+0x512/0x640 [ 111.682194][ T9239] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 111.682211][ T9239] should_failslab+0xc2/0x120 [ 111.682223][ T9239] __kmalloc_cache_noprof+0x6a/0x3e0 [ 111.682237][ T9239] ? __pfx___might_resched+0x10/0x10 [ 111.682253][ T9239] ? vhost_task_create+0xe5/0x2e0 [ 111.682264][ T9239] ? rcu_is_watching+0x12/0xc0 [ 111.682278][ T9239] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 111.682296][ T9239] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 111.682314][ T9239] vhost_task_create+0xe5/0x2e0 [ 111.682330][ T9239] ? __pfx_vhost_task_create+0x10/0x10 [ 111.682355][ T9239] ? __pfx_vhost_task_fn+0x10/0x10 [ 111.682383][ T9239] kvm_mmu_post_init_vm+0x1b7/0x370 [ 111.682409][ T9239] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 111.682430][ T9239] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 111.682463][ T9239] kvm_vcpu_ioctl+0x5eb/0x1690 [ 111.682486][ T9239] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 111.682518][ T9239] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 111.682549][ T9239] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 111.682586][ T9239] ? hook_file_ioctl_common+0x145/0x410 [ 111.682621][ T9239] ? selinux_file_ioctl+0x180/0x270 [ 111.682648][ T9239] ? selinux_file_ioctl+0xb4/0x270 [ 111.682677][ T9239] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 111.682700][ T9239] __x64_sys_ioctl+0x18e/0x210 [ 111.682725][ T9239] do_syscall_64+0xcd/0x4c0 [ 111.682745][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.682764][ T9239] RIP: 0033:0x7fb71038e9a9 [ 111.682780][ T9239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.682797][ T9239] RSP: 002b:00007fb711215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.682815][ T9239] RAX: ffffffffffffffda RBX: 00007fb7105b5fa0 RCX: 00007fb71038e9a9 [ 111.682826][ T9239] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 111.682837][ T9239] RBP: 00007fb711215090 R08: 0000000000000000 R09: 0000000000000000 [ 111.682847][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.682857][ T9239] R13: 0000000000000000 R14: 00007fb7105b5fa0 R15: 00007ffd65f436a8 [ 111.682882][ T9239] [ 111.792335][ T9247] fuseblk: Unknown parameter '#9®–ד¯üW¿(žå{/"²Å¤f²Ëjù”OLOÞ [uгex¥EÌÌí4ŒËDš‹|¢.²íŠm&dÔXlÇ+' [ 111.904507][ T9261] netlink: 'syz.2.955': attribute type 21 has an invalid length. [ 111.907804][ T9261] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.924707][ T9261] tipc: Failed to remove unknown binding: 66,1,1/0:706780965/706780967 [ 111.927535][ T9261] tipc: Failed to remove unknown binding: 66,1,1/0:706780965/706780967 [ 112.062695][ T40] audit: type=1400 audit(1752869181.389:609): avc: denied { setattr } for pid=9265 comm="syz.2.957" path="socket:[28058]" dev="sockfs" ino=28058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.099653][ T40] audit: type=1400 audit(1752869181.398:610): avc: denied { map } for pid=9265 comm="syz.2.957" path="socket:[28055]" dev="sockfs" ino=28055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.181364][ T40] audit: type=1400 audit(1752869181.510:611): avc: denied { setattr } for pid=9269 comm="syz.2.960" path="socket:[28070]" dev="sockfs" ino=28070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.236292][ T40] audit: type=1400 audit(1752869181.566:612): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 112.269927][ T9284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.965'. [ 112.311760][ T9291] FAULT_INJECTION: forcing a failure. [ 112.311760][ T9291] name failslab, interval 1, probability 0, space 0, times 0 [ 112.315986][ T9291] CPU: 3 UID: 0 PID: 9291 Comm: syz.0.962 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 112.316001][ T9291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.316008][ T9291] Call Trace: [ 112.316012][ T9291] [ 112.316016][ T9291] dump_stack_lvl+0x16c/0x1f0 [ 112.316038][ T9291] should_fail_ex+0x512/0x640 [ 112.316070][ T9291] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 112.316089][ T9291] should_failslab+0xc2/0x120 [ 112.316101][ T9291] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 112.316131][ T9291] ? copy_process+0x4b6/0x7650 [ 112.316149][ T9291] copy_process+0x4b6/0x7650 [ 112.316170][ T9291] ? __pfx_copy_process+0x10/0x10 [ 112.316188][ T9291] ? lockdep_init_map_type+0x5c/0x280 [ 112.316200][ T9291] ? lockdep_init_map_type+0x5c/0x280 [ 112.316211][ T9291] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 112.316229][ T9291] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 112.316242][ T9291] vhost_task_create+0x1d2/0x2e0 [ 112.316254][ T9291] ? __pfx_vhost_task_create+0x10/0x10 [ 112.316269][ T9291] ? __pfx_vhost_task_fn+0x10/0x10 [ 112.316287][ T9291] kvm_mmu_post_init_vm+0x1b7/0x370 [ 112.316303][ T9291] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 112.316325][ T9291] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 112.316342][ T9291] kvm_vcpu_ioctl+0x5eb/0x1690 [ 112.316357][ T9291] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.316375][ T9291] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 112.316395][ T9291] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 112.316418][ T9291] ? hook_file_ioctl_common+0x145/0x410 [ 112.316434][ T9291] ? selinux_file_ioctl+0x180/0x270 [ 112.316451][ T9291] ? selinux_file_ioctl+0xb4/0x270 [ 112.316469][ T9291] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.316483][ T9291] __x64_sys_ioctl+0x18e/0x210 [ 112.316500][ T9291] do_syscall_64+0xcd/0x4c0 [ 112.316511][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.316522][ T9291] RIP: 0033:0x7f84bfd8e9a9 [ 112.316531][ T9291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.316542][ T9291] RSP: 002b:00007f84c0b7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.316553][ T9291] RAX: ffffffffffffffda RBX: 00007f84bffb6080 RCX: 00007f84bfd8e9a9 [ 112.316560][ T9291] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 112.316566][ T9291] RBP: 00007f84c0b7a090 R08: 0000000000000000 R09: 0000000000000000 [ 112.316572][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.316579][ T9291] R13: 0000000000000000 R14: 00007f84bffb6080 R15: 00007ffd004fb298 [ 112.316593][ T9291] [ 112.323805][ T9294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.966'. [ 112.473545][ T9300] (syz.2.968,9300,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 112.476564][ T9300] (syz.2.968,9300,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 112.481852][ T40] audit: type=1400 audit(1752869181.791:613): avc: denied { setopt } for pid=9299 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.509949][ T40] audit: type=1400 audit(1752869181.800:614): avc: denied { read } for pid=9299 comm="syz.2.968" path="socket:[28180]" dev="sockfs" ino=28180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.531438][ T9302] xfrm1: entered allmulticast mode [ 112.626132][ T9306] netlink: 'syz.0.970': attribute type 10 has an invalid length. [ 112.699182][ T9310] tipc: Started in network mode [ 112.701278][ T9310] tipc: Node identity e0000002, cluster identity 4711 [ 112.704607][ T9310] tipc: Enabling of bearer rejected, failed to enable media [ 112.801917][ T9322] xt_hashlimit: size too large, truncated to 1048576 [ 112.807856][ T9325] overlayfs: missing 'lowerdir' [ 112.929878][ T9336] FAULT_INJECTION: forcing a failure. [ 112.929878][ T9336] name failslab, interval 1, probability 0, space 0, times 0 [ 112.934011][ T9336] CPU: 3 UID: 0 PID: 9336 Comm: syz.4.978 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 112.934027][ T9336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.934034][ T9336] Call Trace: [ 112.934038][ T9336] [ 112.934043][ T9336] dump_stack_lvl+0x16c/0x1f0 [ 112.934064][ T9336] should_fail_ex+0x512/0x640 [ 112.934082][ T9336] ? __kmalloc_noprof+0xbf/0x510 [ 112.934100][ T9336] ? lsm_blob_alloc+0x68/0x90 [ 112.934113][ T9336] should_failslab+0xc2/0x120 [ 112.934124][ T9336] __kmalloc_noprof+0xd2/0x510 [ 112.934141][ T9336] ? __pfx_perf_event_init_task+0x10/0x10 [ 112.934171][ T9336] ? audit_alloc+0xa2/0x7b0 [ 112.934186][ T9336] ? __pfx_audit_alloc+0x10/0x10 [ 112.934201][ T9336] lsm_blob_alloc+0x68/0x90 [ 112.934214][ T9336] security_task_alloc+0x2d/0x260 [ 112.934228][ T9336] copy_process+0x2205/0x7650 [ 112.934250][ T9336] ? __pfx_copy_process+0x10/0x10 [ 112.934267][ T9336] ? lockdep_init_map_type+0x5c/0x280 [ 112.934280][ T9336] ? lockdep_init_map_type+0x5c/0x280 [ 112.934291][ T9336] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 112.934309][ T9336] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 112.934322][ T9336] vhost_task_create+0x1d2/0x2e0 [ 112.934334][ T9336] ? __pfx_vhost_task_create+0x10/0x10 [ 112.934354][ T9336] ? __pfx_vhost_task_fn+0x10/0x10 [ 112.934372][ T9336] kvm_mmu_post_init_vm+0x1b7/0x370 [ 112.934388][ T9336] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 112.934403][ T9336] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 112.934420][ T9336] kvm_vcpu_ioctl+0x5eb/0x1690 [ 112.934435][ T9336] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.934453][ T9336] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 112.934473][ T9336] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 112.934496][ T9336] ? hook_file_ioctl_common+0x145/0x410 [ 112.934513][ T9336] ? selinux_file_ioctl+0x180/0x270 [ 112.934530][ T9336] ? selinux_file_ioctl+0xb4/0x270 [ 112.934557][ T9336] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.934578][ T9336] __x64_sys_ioctl+0x18e/0x210 [ 112.934605][ T9336] do_syscall_64+0xcd/0x4c0 [ 112.934621][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.934637][ T9336] RIP: 0033:0x7f451a78e9a9 [ 112.934650][ T9336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.934668][ T9336] RSP: 002b:00007f451b5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.934685][ T9336] RAX: ffffffffffffffda RBX: 00007f451a9b5fa0 RCX: 00007f451a78e9a9 [ 112.934694][ T9336] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 112.934701][ T9336] RBP: 00007f451b5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 112.934707][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.934714][ T9336] R13: 0000000000000000 R14: 00007f451a9b5fa0 R15: 00007fff1eb76ef8 [ 112.934728][ T9336] [ 112.980913][ T9341] openvswitch: netlink: IP tunnel dst address not specified [ 113.584977][ T9360] overlayfs: workdir and upperdir must reside under the same mount [ 113.617463][ T9362] syz.3.987 uses old SIOCAX25GETINFO [ 113.626766][ T9363] mkiss: ax0: crc mode is auto. [ 113.841016][ T9376] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.857338][ T9377] xt_socket: unknown flags 0x50 [ 114.279684][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 114.279698][ T40] audit: type=1404 audit(1752869183.474:618): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 114.295601][ T40] audit: type=1400 audit(1752869183.484:619): avc: denied { recv } for pid=5934 comm="syz-executor" saddr=127.0.0.1 src=42458 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 114.304233][ T40] audit: type=1400 audit(1752869183.484:620): avc: denied { read write } for pid=8684 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.312368][ T40] audit: type=1404 audit(1752869183.503:621): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 114.321682][ T40] audit: type=1400 audit(1752869183.512:622): avc: denied { map_create } for pid=9396 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.326999][ T40] audit: type=1400 audit(1752869183.512:623): avc: denied { read } for pid=9396 comm="syz.4.996" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.333886][ T40] audit: type=1400 audit(1752869183.512:624): avc: denied { open } for pid=9396 comm="syz.4.996" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.335521][ T9397] binder: 9396:9397 ioctl c0306201 200000000240 returned -14 [ 114.342759][ T40] audit: type=1400 audit(1752869183.531:625): avc: denied { ioctl } for pid=9396 comm="syz.4.996" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.350243][ T40] audit: type=1400 audit(1752869183.531:626): avc: denied { perfmon } for pid=9396 comm="syz.4.996" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.355989][ T40] audit: type=1400 audit(1752869183.531:627): avc: denied { map_read map_write } for pid=9396 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.488403][ T9417] netlink: 'syz.2.1003': attribute type 1 has an invalid length. [ 114.496012][ T9415] __nla_validate_parse: 2 callbacks suppressed [ 114.496026][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1002'. [ 114.504059][ T9417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.527932][ T9417] veth5: entered promiscuous mode [ 114.531857][ T9417] bond3: (slave veth5): Enslaving as an active interface with a down link [ 114.544975][ T9417] vlan0: entered allmulticast mode [ 114.546868][ T9417] bond3: entered allmulticast mode [ 114.549997][ T9417] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 114.734408][ T9433] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 114.758228][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 114.792902][ T9426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1006'. [ 114.796649][ T9426] nbd: must specify a size in bytes for the device [ 114.812680][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 114.885190][ T9444] Cannot find set identified by id 3 to match [ 115.115640][ T9461] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 115.121478][ T9465] netlink: 'syz.4.1020': attribute type 21 has an invalid length. [ 115.128333][ T9461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.136142][ T9461] bond1: (slave geneve2): making interface the new active one [ 115.139636][ T9461] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 115.143125][ T9465] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1020'. [ 115.319692][ T9501] lo: Master is either lo or non-ether device [ 115.394005][ T9513] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 115.510674][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1034'. [ 115.985652][ T5962] Bluetooth: hci2: command 0x0405 tx timeout [ 116.040284][ T9538] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 116.087806][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 116.122782][ T9544] netlink: 'syz.4.1043': attribute type 4 has an invalid length. [ 116.226325][ T9549] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 116.619756][ T9576] sch_fq: defrate 4294967295 ignored. [ 116.746441][ T6020] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.846096][ T9592] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 116.905383][ T6020] usb 5-1: Using ep0 maxpacket: 32 [ 116.926196][ T6020] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 116.929410][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.931913][ T6020] usb 5-1: Product: syz [ 116.933254][ T6020] usb 5-1: Manufacturer: syz [ 116.934724][ T6020] usb 5-1: SerialNumber: syz [ 116.955071][ T6020] usb 5-1: config 0 descriptor?? [ 116.967405][ T6020] usb 5-1: no audio or video endpoints found [ 117.248735][ T9] usb 5-1: USB disconnect, device number 8 [ 117.368077][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 117.455513][ T9622] /dev/sg0: Can't lookup blockdev [ 117.525126][ T9618] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 117.527264][ T9618] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.529803][ T9618] vhci_hcd vhci_hcd.0: Device attached [ 117.535138][ T9626] vhci_hcd: connection closed [ 117.535326][ T7885] vhci_hcd: stop threads [ 117.540143][ T7885] vhci_hcd: release socket [ 117.541701][ T7885] vhci_hcd: disconnect device [ 118.008066][ T9642] syz.4.1071: attempt to access beyond end of device [ 118.008066][ T9642] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.013210][ T9642] SQUASHFS error: Failed to read block 0x0: -5 [ 118.015221][ T9642] unable to read squashfs_super_block [ 118.059611][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 118.191926][ T9659] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 118.200954][ T5962] Bluetooth: hci2: command 0x0405 tx timeout [ 118.226870][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 118.241423][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 118.244491][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.247057][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 118.250141][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.254133][ T9] usb 8-1: config 0 descriptor?? [ 118.337604][ T6189] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 118.523074][ T6189] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.528169][ T6189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 118.533339][ T6189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.538115][ T6189] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.544424][ T6189] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.548394][ T6189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.554264][ T6189] usb 9-1: config 0 descriptor?? [ 118.558150][ T9648] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 118.689516][ T9] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 118.777598][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.788053][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.792144][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.796117][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.799778][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.802546][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.806422][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.810256][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.814315][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.818096][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.849069][ T6189] usbhid 9-1:0.0: can't add hid device: -71 [ 118.851836][ T6189] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 118.855635][ T6189] usb 9-1: USB disconnect, device number 3 [ 118.888463][ T9677] netlink: 'syz.4.1082': attribute type 5 has an invalid length. [ 118.892467][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1082'. [ 119.002474][ T6038] usb 8-1: USB disconnect, device number 17 [ 119.239875][ T9690] netlink: 'syz.4.1086': attribute type 10 has an invalid length. [ 119.247512][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.253137][ T9690] .: (slave batadv0): Enslaving as an active interface with an up link [ 119.507879][ T9695] can: request_module (can-proto-0) failed. [ 119.587092][ T9700] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9700 comm=syz.3.1090 [ 119.647179][ T40] kauditd_printk_skb: 174 callbacks suppressed [ 119.647190][ T40] audit: type=1400 audit(1752869188.488:802): avc: denied { create } for pid=9699 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 119.733022][ T40] audit: type=1400 audit(1752869188.572:803): avc: denied { mount } for pid=9705 comm="syz.3.1091" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 119.783250][ T9706] fuse: Bad value for 'fd' [ 119.784846][ T40] audit: type=1400 audit(1752869188.619:804): avc: denied { mounton } for pid=9705 comm="syz.3.1091" path="/305/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 119.792076][ T40] audit: type=1400 audit(1752869188.619:805): avc: denied { create } for pid=9705 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.947778][ T9712] __nla_validate_parse: 2 callbacks suppressed [ 119.947789][ T9712] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1092'. [ 120.002376][ T9688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.005414][ T9688] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.008442][ T9688] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.039546][ T40] audit: type=1400 audit(1752869188.862:806): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 120.084880][ T40] audit: type=1400 audit(1752869188.900:807): avc: denied { read write } for pid=9713 comm="syz.2.1094" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.086321][ T9715] kvm: Disabled LAPIC found during irq injection [ 120.096021][ T40] audit: type=1400 audit(1752869188.900:808): avc: denied { open } for pid=9713 comm="syz.2.1094" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.096049][ T40] audit: type=1400 audit(1752869188.900:809): avc: denied { ioctl } for pid=9713 comm="syz.2.1094" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.098845][ T40] audit: type=1400 audit(1752869188.909:810): avc: denied { getopt } for pid=9717 comm="syz.0.1096" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.098999][ T6038] IPVS: starting estimator thread 0... [ 120.200745][ T40] audit: type=1400 audit(1752869189.012:811): avc: denied { bind } for pid=9727 comm="syz.4.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.229928][ T9719] IPVS: using max 44 ests per chain, 105600 per kthread [ 120.308245][ T9731] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 120.310854][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 121.213526][ T9744] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1104'. [ 121.373730][ T5962] Bluetooth: hci2: command 0x0405 tx timeout [ 121.375630][ T9748] /dev/sr0: Can't open blockdev [ 121.412840][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'. [ 121.478909][ T9757] uprobe: syz.4.1108:9757 failed to unregister, leaking uprobe [ 121.572279][ T9760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'. [ 121.603194][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 121.749011][ T9765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1111'. [ 121.941619][ T9770] syz.4.1113: attempt to access beyond end of device [ 121.941619][ T9770] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.945691][ T9770] SQUASHFS error: Failed to read block 0x0: -5 [ 121.947624][ T9770] unable to read squashfs_super_block [ 122.068404][ T9776] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.077382][ T9776] cgroup: subsys name conflicts with all [ 123.113390][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 123.314280][ T6037] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 123.316853][ T6037] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 123.319190][ T6037] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 123.322281][ T6037] hid-generic 0000:0000:0000.0004: unexpected long global item [ 123.324928][ T6037] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 123.403546][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1122'. [ 123.505220][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.507639][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.510468][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.513222][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.515744][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.523327][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.525986][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.528385][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.530759][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.533839][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.536632][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.539093][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.541479][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.544556][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.547017][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.549538][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.551972][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.554451][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.557668][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.560076][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.562450][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.564851][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.567643][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.570004][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.572475][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.574840][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.577502][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.579889][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.582311][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.584685][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.589887][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.592816][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.595232][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.597941][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.598637][ T5962] Bluetooth: hci2: command 0x0405 tx timeout [ 123.600729][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.604950][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.607388][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.610208][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.612747][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.615221][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.617644][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.621635][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.624258][ T838] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 123.635311][ T838] hid-generic 0000:007F:FFFFFFFE.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 123.679215][ T9808] fido_id[9808]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.703561][ T9811] netlink: 696 bytes leftover after parsing attributes in process `syz.2.1126'. [ 123.761810][ T9813] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 123.801742][ T9815] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 123.806837][ T9815] BIDI support in bsg has been removed. [ 123.809632][ T9815] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 123.811694][ T9815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.815759][ T9815] vhci_hcd vhci_hcd.0: Device attached [ 123.817904][ T9816] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 123.822530][ T7887] vhci_hcd: stop threads [ 123.823915][ T7887] vhci_hcd: release socket [ 123.825393][ T7887] vhci_hcd: disconnect device [ 124.369940][ T9821] netlink: 'syz.0.1130': attribute type 30 has an invalid length. [ 124.443457][ T9831] syzkaller1: entered promiscuous mode [ 124.445183][ T9831] syzkaller1: entered allmulticast mode [ 124.509570][ T9835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.733780][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 124.806503][ T9842] dlm: no local IP address has been set [ 124.808587][ T9842] dlm: cannot start dlm midcomms -107 [ 124.927107][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.930315][ T9] usb 9-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.934442][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 124.938250][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 124.941031][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.943518][ T9] usb 9-1: Product: syz [ 124.945017][ T9] usb 9-1: Manufacturer: syz [ 124.946472][ T9] usb 9-1: SerialNumber: syz [ 125.022115][ T9845] netlink: 'syz.2.1138': attribute type 11 has an invalid length. [ 125.076279][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 125.076292][ T40] audit: type=1400 audit(1752869193.577:852): avc: denied { mount } for pid=9846 comm="syz.2.1139" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 125.096005][ T40] audit: type=1400 audit(1752869193.595:853): avc: denied { watch_mount watch_reads } for pid=9846 comm="syz.2.1139" path="/290/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 125.245285][ T40] audit: type=1400 audit(1752869193.736:854): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 125.272542][ T9853] netlink: 'syz.2.1140': attribute type 10 has an invalid length. [ 125.385219][ T40] audit: type=1400 audit(1752869193.857:855): avc: denied { map } for pid=9832 comm="syz.4.1135" path="socket:[34872]" dev="sockfs" ino=34872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 125.393185][ T40] audit: type=1400 audit(1752869193.857:856): avc: denied { create } for pid=9832 comm="syz.4.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 125.426452][ T9] usb 9-1: USB disconnect, device number 4 [ 125.583399][ T40] audit: type=1400 audit(1752869194.044:857): avc: denied { read } for pid=9861 comm="syz.2.1143" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 125.590464][ T40] audit: type=1400 audit(1752869194.044:858): avc: denied { open } for pid=9861 comm="syz.2.1143" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 125.777933][ T40] audit: type=1400 audit(1752869194.222:859): avc: denied { block_suspend } for pid=9867 comm="syz.2.1145" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.810506][ T5962] Bluetooth: hci2: command 0x0405 tx timeout [ 125.969055][ T40] audit: type=1400 audit(1752869194.400:860): avc: denied { append } for pid=9874 comm="syz.2.1147" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.023889][ T40] audit: type=1400 audit(1752869194.456:861): avc: denied { bind } for pid=9879 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.031857][ T9880] x_tables: duplicate underflow at hook 1 [ 126.041720][ T9883] __nla_validate_parse: 2 callbacks suppressed [ 126.041731][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1147'. [ 126.085857][ T9887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.349794][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.352941][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.356017][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.359748][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.362606][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.365059][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.367746][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.370195][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.372891][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.375345][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.378010][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.380587][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.383030][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.385478][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.388288][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.391060][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.393572][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.396118][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.399369][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.401786][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.404226][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.406732][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.410153][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.413407][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.416189][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.419002][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.422092][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.424857][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.427675][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.430626][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.433304][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.435920][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.438503][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.440902][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.443348][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.445815][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.448307][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.451070][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.454186][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.456686][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.459188][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.461694][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.464399][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.467011][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.469483][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.471899][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.474614][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.477155][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.479638][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.482063][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.484562][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.487001][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.489775][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.492762][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.496100][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.499308][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.502555][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.505932][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.509212][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.512474][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.515902][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.519237][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.522580][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.525886][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.529308][ T9900] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 126.572112][ T9902] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 126.574583][ T9902] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1155'. [ 126.578321][ T9902] i2c i2c-1: Invalid block write size 34 [ 126.580209][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.594191][ T9902] syz_tun: entered allmulticast mode [ 126.603906][ T9901] syz_tun: left allmulticast mode [ 126.795922][ T9923] loop7: detected capacity change from 0 to 7 [ 126.800717][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.804087][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.807649][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.810610][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.814123][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.818074][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.821539][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.825112][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.829060][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.832822][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.836282][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.840106][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.843781][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.847614][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.849757][ T9924] xt_limit: Overflow, try lower: 1207959552/384 [ 126.850863][ T7710] ldm_validate_partition_table(): Disk read failed. [ 126.851209][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.859738][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.862433][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.865666][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.868270][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.872065][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.875121][ T7710] Dev loop7: unable to read RDB block 0 [ 126.877299][ T7710] loop7: unable to read partition table [ 126.879176][ T7710] loop7: partition table beyond EOD, truncated [ 126.893911][ T9923] ldm_validate_partition_table(): Disk read failed. [ 126.898416][ T9923] Dev loop7: unable to read RDB block 0 [ 126.903260][ T9923] loop7: unable to read partition table [ 126.905115][ T9923] loop7: partition table beyond EOD, truncated [ 126.910593][ T9923] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 126.917010][ T5364] ldm_validate_partition_table(): Disk read failed. [ 126.919319][ T5364] Dev loop7: unable to read RDB block 0 [ 126.921261][ T5364] loop7: unable to read partition table [ 126.923594][ T5364] loop7: partition table beyond EOD, truncated [ 126.991059][ T9933] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 126.993606][ T9933] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1164'. [ 126.996386][ T9933] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 126.999238][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 127.092797][ T9933] QAT: failed to copy from user. [ 127.125197][ T6020] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 127.286512][ T6020] usb 9-1: Invalid ep0 maxpacket: 16 [ 127.435270][ T6020] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 127.539940][ T9956] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 127.617034][ T6020] usb 9-1: Invalid ep0 maxpacket: 16 [ 127.630638][ T6020] usb usb9-port1: attempt power cycle [ 128.023221][ T6020] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 128.055814][ T6020] usb 9-1: Invalid ep0 maxpacket: 16 [ 128.194289][ T6020] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 128.217313][ T6020] usb 9-1: Invalid ep0 maxpacket: 16 [ 128.219677][ T6020] usb usb9-port1: unable to enumerate USB device [ 128.847310][ T9978] xt_ecn: cannot match TCP bits for non-tcp packets [ 128.877030][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 129.064594][ T9986] netlink: 'syz.0.1179': attribute type 8 has an invalid length. [ 129.256561][ T9996] ata1.00: invalid multi_count 128 ignored [ 129.341789][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1183'. [ 129.506535][T10005] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 129.510692][T10005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.514020][T10005] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 129.686253][T10014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10014 comm=syz.0.1188 [ 130.118605][ T1471] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 130.268469][ T1471] usb 5-1: device descriptor read/64, error -71 [ 130.508928][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 130.524821][ T1471] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 130.674579][ T1471] usb 5-1: device descriptor read/64, error -71 [ 130.795469][ T1471] usb usb5-port1: attempt power cycle [ 131.155724][ T1471] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 131.189172][ T1471] usb 5-1: device descriptor read/8, error -71 [ 131.444335][ T1471] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 131.467532][ T1471] usb 5-1: device descriptor read/8, error -71 [ 131.511141][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 131.511153][ T40] audit: type=1400 audit(1752869199.591:889): avc: denied { unlink } for pid=10035 comm="syz.2.1195" name="#13" dev="tmpfs" ino=1692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.519347][T10036] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 131.536061][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 131.583494][ T1471] usb usb5-port1: unable to enumerate USB device [ 131.621857][T10036] hsr_slave_0 (unregistering): left promiscuous mode [ 131.694880][ T40] audit: type=1400 audit(1752869199.760:890): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 131.705510][ T40] audit: type=1400 audit(1752869199.769:891): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.773654][ T40] audit: type=1400 audit(1752869199.835:892): avc: denied { listen } for pid=10039 comm="syz.2.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.834722][ T40] audit: type=1400 audit(1752869199.891:893): avc: denied { watch watch_reads } for pid=10041 comm="syz.2.1198" path="/" dev="ramfs" ino=36828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 132.785808][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'. [ 132.913245][ T40] audit: type=1400 audit(1752869200.901:894): avc: denied { bind } for pid=10052 comm="syz.2.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.916228][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 132.919266][ T40] audit: type=1400 audit(1752869200.901:895): avc: denied { name_bind } for pid=10052 comm="syz.2.1203" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 132.930043][ T40] audit: type=1400 audit(1752869200.901:896): avc: denied { node_bind } for pid=10052 comm="syz.2.1203" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 132.939657][ T40] audit: type=1400 audit(1752869200.901:897): avc: denied { read } for pid=10052 comm="syz.2.1203" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.994525][ T5960] Bluetooth: hci4: command 0x1003 tx timeout [ 132.998501][ T5962] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.105421][ T40] audit: type=1400 audit(1752869201.079:898): avc: denied { sqpoll } for pid=10062 comm="syz.4.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.153415][T10067] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.156961][T10067] overlayfs: failed to set xattr on upper [ 133.159648][T10067] overlayfs: ...falling back to redirect_dir=nofollow. [ 133.161758][T10067] overlayfs: ...falling back to index=off. [ 133.163629][T10067] overlayfs: ...falling back to uuid=null. [ 133.170134][T10067] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 133.275478][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 133.619089][T10108] tipc: Enabling of bearer rejected, failed to enable media [ 133.649422][T10111] netlink: 'syz.4.1219': attribute type 7 has an invalid length. [ 133.683879][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 133.687147][T10118] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1222'. [ 133.696961][T10114] tipc: Can't bind to reserved service type 0 [ 133.707294][T10118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'. [ 133.754345][T10118] random: crng reseeded on system resumption [ 133.771792][T10129] netlink: 'syz.4.1224': attribute type 21 has an invalid length. [ 133.774381][T10129] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1224'. [ 133.780128][T10129] netlink: 'syz.4.1224': attribute type 4 has an invalid length. [ 133.782556][T10129] netlink: 'syz.4.1224': attribute type 5 has an invalid length. [ 133.785111][T10129] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1224'. [ 133.790487][T10128] netlink: 'syz.4.1224': attribute type 7 has an invalid length. [ 133.835904][T10133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1226'. [ 133.873193][T10139] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 135.580079][T10193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.737540][T10207] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.504013][ T5960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.509799][ T5960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.515012][ T5960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.518977][ T5960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.521842][ T5960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.691210][T10232] overlay: ./file0 is not a directory [ 136.738531][T10214] chnl_net:caif_netlink_parms(): no params data found [ 136.799075][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.805101][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.807475][T10214] bridge_slave_0: entered allmulticast mode [ 136.811340][T10214] bridge_slave_0: entered promiscuous mode [ 136.814848][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.817399][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.819668][T10214] bridge_slave_1: entered allmulticast mode [ 136.823680][T10214] bridge_slave_1: entered promiscuous mode [ 136.851243][T10247] syz.0.1260: attempt to access beyond end of device [ 136.851243][T10247] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 136.855919][T10247] (syz.0.1260,10247,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 136.858334][T10247] (syz.0.1260,10247,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 136.859531][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.860933][T10247] (syz.0.1260,10247,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 136.862694][ T7873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.863438][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.866378][T10247] (syz.0.1260,10247,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 136.905484][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 136.905495][ T40] audit: type=1400 audit(1752869204.633:928): avc: denied { mount } for pid=10248 comm="syz.0.1261" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.906986][T10214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.908014][ T40] audit: type=1400 audit(1752869204.633:929): avc: denied { map } for pid=10248 comm="syz.0.1261" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.917472][T10214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.925457][ T40] audit: type=1400 audit(1752869204.633:930): avc: denied { execute } for pid=10248 comm="syz.0.1261" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.941008][ T40] audit: type=1400 audit(1752869204.643:931): avc: denied { unmount } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.960616][ T6037] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 136.963166][ T7873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.988003][T10214] team0: Port device team_slave_0 added [ 136.991517][T10214] team0: Port device team_slave_1 added [ 137.021561][T10214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.023763][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.032930][T10214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.037719][T10214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.039877][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.048573][T10214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.067502][ T7873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.110401][ T6037] usb 7-1: device descriptor read/64, error -71 [ 137.121402][T10214] hsr_slave_0: entered promiscuous mode [ 137.123647][T10214] hsr_slave_1: entered promiscuous mode [ 137.125726][T10214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.128108][T10214] Cannot create hsr debugfs directory [ 137.131420][T10263] __nla_validate_parse: 6 callbacks suppressed [ 137.131438][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 137.151152][ T7873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.157125][T10263] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1265'. [ 137.161090][ T40] audit: type=1400 audit(1752869204.876:932): avc: denied { append } for pid=10261 comm="syz.4.1265" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 137.172770][T10263] tipc: Enabling of bearer rejected, failed to enable media [ 137.187144][ T40] audit: type=1400 audit(1752869204.904:933): avc: denied { mounton } for pid=10262 comm="syz.0.1266" path="/297/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 137.197226][T10264] Invalid source name [ 137.198541][T10264] UBIFS error (pid: 10264): cannot open "/dev/sg0", error -22 [ 137.205264][ T40] audit: type=1400 audit(1752869204.914:934): avc: denied { mounton } for pid=10262 comm="syz.0.1266" path="/297/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 137.274314][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 137.298699][ T7873] tipc: Resetting bearer [ 137.381339][ T40] audit: type=1400 audit(1752869205.082:935): avc: denied { write } for pid=10276 comm="syz.4.1271" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.388449][ T40] audit: type=1400 audit(1752869205.082:936): avc: denied { open } for pid=10276 comm="syz.4.1271" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.395762][ T40] audit: type=1400 audit(1752869205.082:937): avc: denied { ioctl } for pid=10276 comm="syz.4.1271" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.399430][ T6037] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 137.465663][ T7873] bond1 (unregistering): (slave geneve2): Releasing active interface [ 137.548609][ T6037] usb 7-1: device descriptor read/64, error -71 [ 137.609652][ T7873] tipc: Disabling bearer [ 137.666528][ T6037] usb usb7-port1: attempt power cycle [ 137.763570][ T7873] bond0 (unregistering): Released all slaves [ 137.833574][ T7873] bond1 (unregistering): Released all slaves [ 137.880048][ T7885] wlan1: Trigger new scan to find an IBSS to join [ 137.909288][T10214] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.930091][ T7873] tipc: Disabling bearer [ 137.934806][ T7873] tipc: Left network mode [ 137.935087][T10214] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.948802][T10214] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.960749][T10214] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.040418][ T6037] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 138.060246][T10214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.062410][ T6037] usb 7-1: device descriptor read/8, error -71 [ 138.071496][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.078367][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.080613][ T7876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.092164][T10308] netlink: 'syz.0.1275': attribute type 10 has an invalid length. [ 138.106745][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1275'. [ 138.109619][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.109666][ T7876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.121208][T10308] dummy0: entered promiscuous mode [ 138.129533][T10308] bridge0: port 3(dummy0) entered blocking state [ 138.132194][T10308] bridge0: port 3(dummy0) entered disabled state [ 138.134870][T10308] dummy0: entered allmulticast mode [ 138.143751][T10308] bridge0: port 3(dummy0) entered blocking state [ 138.146619][T10308] bridge0: port 3(dummy0) entered forwarding state [ 138.260321][T10320] syz.0.1280: attempt to access beyond end of device [ 138.260321][T10320] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 138.264665][T10320] syz.0.1280: attempt to access beyond end of device [ 138.264665][T10320] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 138.268902][T10320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.272007][T10320] syz.0.1280: attempt to access beyond end of device [ 138.272007][T10320] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 138.277457][T10320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 138.282193][T10320] syz.0.1280: attempt to access beyond end of device [ 138.282193][T10320] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 138.287326][T10320] syz.0.1280: attempt to access beyond end of device [ 138.287326][T10320] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 138.292048][T10320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.298852][T10320] syz.0.1280: attempt to access beyond end of device [ 138.298852][T10320] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 138.303234][T10320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 138.308608][T10320] syz.0.1280: attempt to access beyond end of device [ 138.308608][T10320] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 138.314130][T10320] syz.0.1280: attempt to access beyond end of device [ 138.314130][T10320] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 138.320633][T10320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.323571][T10320] syz.0.1280: attempt to access beyond end of device [ 138.323571][T10320] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 138.327738][T10320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 138.332753][ T6037] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 138.332764][ T7873] macvlan0: left promiscuous mode [ 138.338094][ T7873] batadv_slave_1: left promiscuous mode [ 138.344207][T10320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.352824][ T6037] usb 7-1: device descriptor read/8, error -71 [ 138.356938][T10320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 138.361166][T10320] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 138.372367][ T7873] hsr_slave_0: left promiscuous mode [ 138.375217][ T7873] hsr_slave_1: left promiscuous mode [ 138.391952][ T7873] veth1_macvtap: left promiscuous mode [ 138.394156][ T7873] veth0_macvtap: left promiscuous mode [ 138.397422][ T7873] veth1_vlan: left promiscuous mode [ 138.400754][ T7873] veth0_vlan: left promiscuous mode [ 138.468325][ T6037] usb usb7-port1: unable to enumerate USB device [ 138.724622][ T5960] Bluetooth: hci4: command tx timeout [ 139.665335][T10320] lo speed is unknown, defaulting to 1000 [ 139.677733][T10320] lo speed is unknown, defaulting to 1000 [ 139.682177][T10320] lo speed is unknown, defaulting to 1000 [ 139.686111][T10320] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.686811][T10214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.693823][T10320] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 139.710936][T10320] lo speed is unknown, defaulting to 1000 [ 139.714515][T10320] lo speed is unknown, defaulting to 1000 [ 139.718260][T10320] lo speed is unknown, defaulting to 1000 [ 139.729671][T10320] lo speed is unknown, defaulting to 1000 [ 139.733692][T10320] lo speed is unknown, defaulting to 1000 [ 139.793148][T10352] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20000 [ 139.883801][T10214] veth0_vlan: entered promiscuous mode [ 139.908512][T10214] veth1_vlan: entered promiscuous mode [ 139.929561][T10214] veth0_macvtap: entered promiscuous mode [ 139.935539][T10214] veth1_macvtap: entered promiscuous mode [ 139.949485][T10214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.959664][T10214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.965227][T10214] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.968795][T10214] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.972075][T10214] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.974812][T10214] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.986048][ T6189] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 140.013634][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.016145][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.045314][ T7876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.047837][ T7876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.148166][ T6189] usb 9-1: Using ep0 maxpacket: 8 [ 140.170064][ T6189] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 208, changing to 11 [ 140.174864][ T6189] usb 9-1: config 1 interface 0 has no altsetting 0 [ 140.181212][ T6189] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 140.184929][ T6189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.188315][ T6189] usb 9-1: Product: syz [ 140.191164][ T6189] usb 9-1: Manufacturer: syz [ 140.193228][ T6189] usb 9-1: SerialNumber: syz [ 140.229519][T10371] xt_hashlimit: size too large, truncated to 1048576 [ 140.450677][ T6189] usbhid 9-1:1.0: can't add hid device: -71 [ 140.455163][ T6189] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 140.466448][ T6189] usb 9-1: USB disconnect, device number 9 [ 140.557439][T10389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 140.610240][ T61] nci: nci_rsp_packet: unknown rsp opcode 0x10c [ 140.845426][T10409] can0: slcan on ptm1. [ 141.025156][T10407] can0 (unregistered): slcan off ptm1. [ 141.063953][T10414] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1561 sclass=netlink_xfrm_socket pid=10414 comm=syz.2.1293 [ 141.130648][ T61] wlan1: Trigger new scan to find an IBSS to join [ 141.464197][T10430] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 141.625524][T10456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10456 comm=syz.5.1306 [ 141.664888][T10459] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 141.719567][T10457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10457 comm=syz.2.1302 [ 141.813760][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1311'. [ 141.818262][T10476] 8021q: VLANs not supported on wg0 [ 141.820565][T10477] ip6_vti0: entered promiscuous mode [ 141.893918][T10487] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1313'. [ 141.965300][ T6020] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.114082][ T6020] usb 5-1: device descriptor read/64, error -71 [ 142.181554][ T7891] wlan1: Creating new IBSS network, BSSID 8a:b4:e8:bf:ac:18 [ 142.327723][ T5960] Bluetooth: hci4: command tx timeout [ 142.402730][ T6020] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.491009][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 142.491021][ T40] audit: type=1400 audit(1752869209.862:958): avc: denied { add_name } for pid=10507 comm="syz.2.1318" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.504557][ T40] audit: type=1400 audit(1752869209.862:959): avc: denied { create } for pid=10507 comm="syz.2.1318" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.511870][ T40] audit: type=1400 audit(1752869209.862:960): avc: denied { associate } for pid=10507 comm="syz.2.1318" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 142.518204][ T40] audit: type=1400 audit(1752869209.871:961): avc: denied { write } for pid=10507 comm="syz.2.1318" name="file0" dev="9p" ino=36047859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.525411][ T40] audit: type=1400 audit(1752869209.871:962): avc: denied { open } for pid=10507 comm="syz.2.1318" path="/348/file0/file0" dev="9p" ino=36047859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.552500][ T6020] usb 5-1: device descriptor read/64, error -71 [ 142.681198][ T6020] usb usb5-port1: attempt power cycle [ 142.761947][ T5960] Bluetooth: hci2: SCO packet for unknown connection handle 2249 [ 142.790498][ T40] audit: type=1326 audit(1752869210.143:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.4.1323" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f451a78e9a9 code=0x0 [ 142.945996][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 142.952613][ T40] audit: type=1400 audit(1752869210.292:964): avc: denied { read } for pid=10532 comm="syz.2.1327" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=36047886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 143.056998][ T6020] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 143.076057][ T6020] usb 5-1: device descriptor read/8, error -71 [ 143.101894][ T40] audit: type=1400 audit(1752869210.433:965): avc: denied { connect } for pid=10537 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.106993][T10538] syzkaller0: entered promiscuous mode [ 143.110831][T10538] syzkaller0: entered allmulticast mode [ 143.116577][ T40] audit: type=1400 audit(1752869210.442:966): avc: denied { shutdown } for pid=10537 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.343051][ T6020] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 143.375526][ T6020] usb 5-1: device descriptor read/8, error -71 [ 143.492740][ T6020] usb usb5-port1: unable to enumerate USB device [ 144.021632][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 144.024395][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1337'. [ 144.077625][T10569] fuse: Bad value for 'group_id' [ 144.077626][T10570] fuse: Bad value for 'group_id' [ 144.077639][T10570] fuse: Bad value for 'group_id' [ 144.079199][T10569] fuse: Bad value for 'group_id' [ 144.086972][ T40] audit: type=1400 audit(1752869211.349:967): avc: denied { write } for pid=10568 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.353253][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 144.379880][ T6019] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 144.540264][ T5960] Bluetooth: hci4: command tx timeout [ 144.551013][ T6019] usb 9-1: Using ep0 maxpacket: 8 [ 144.554926][ T6019] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 144.557861][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.562430][ T6019] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.566935][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.571214][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.577281][ T6019] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 144.580244][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.584709][ T6019] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.589216][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.593576][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.599448][ T6019] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 144.602070][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.605680][ T6019] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.609460][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.613341][ T6019] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.619520][ T6019] usb 9-1: string descriptor 0 read error: -22 [ 144.621515][ T6019] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 144.624294][ T6019] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.638851][ T6019] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 144.867928][T10599] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1345'. [ 144.885311][T10599] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.905759][T10599] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 144.909777][T10599] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 144.912272][T10599] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 144.915810][T10599] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 144.919237][T10599] kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 144.921797][T10599] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 144.924524][T10599] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 144.927193][T10599] kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 144.930311][T10599] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 145.000436][T10608] xt_l2tp: v2 doesn't support IP mode [ 145.529510][T10623] netlink: 'syz.4.1355': attribute type 4 has an invalid length. [ 145.609609][ T6037] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 145.782920][T10640] bridge0: port 3(syz_tun) entered blocking state [ 145.786292][T10640] bridge0: port 3(syz_tun) entered disabled state [ 145.789280][T10640] syz_tun: entered allmulticast mode [ 145.791270][ T6037] usb 5-1: Using ep0 maxpacket: 8 [ 145.795196][T10640] syz_tun: entered promiscuous mode [ 145.797990][T10640] bridge0: port 3(syz_tun) entered blocking state [ 145.800262][T10640] bridge0: port 3(syz_tun) entered forwarding state [ 145.805341][ T6037] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 145.809126][ T6037] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.812261][ T6037] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.815609][ T6037] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.819682][ T6037] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.822492][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.880563][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10648 comm=syz.4.1362 [ 145.888034][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.890936][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.049779][ T6037] usb 5-1: GET_CAPABILITIES returned 0 [ 146.051605][ T6037] usbtmc 5-1:16.0: can't read capabilities [ 146.281113][ T6019] usb 5-1: USB disconnect, device number 17 [ 146.554378][T10650] ip6_vti0: left promiscuous mode [ 146.566878][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.569570][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.636980][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.650107][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.723438][T10650] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.726284][T10650] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.729037][T10650] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.732952][T10650] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.878524][T10675] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.914325][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 146.918076][T10681] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 146.920501][T10681] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1371'. [ 146.961751][T10685] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 146.972464][T10685] netlink: 'syz.4.1372': attribute type 7 has an invalid length. [ 146.976304][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 146.984694][T10672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 146.986819][T10672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.991890][T10672] vhci_hcd vhci_hcd.0: Device attached [ 146.997030][T10687] vhci_hcd: connection closed [ 147.001850][ T61] vhci_hcd: stop threads [ 147.004695][ T61] vhci_hcd: release socket [ 147.006310][ T61] vhci_hcd: disconnect device [ 147.032435][T10693] ------------[ cut here ]------------ [ 147.034204][T10693] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 147.036787][T10693] shift exponent -2147483647 is negative [ 147.040584][T10693] CPU: 1 UID: 0 PID: 10693 Comm: syz.2.1375 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 147.040601][T10693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.040609][T10693] Call Trace: [ 147.040613][T10693] [ 147.040618][T10693] dump_stack_lvl+0x16c/0x1f0 [ 147.040670][T10693] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 147.040695][T10693] pcl812_attach.cold+0x1a/0x1f [ 147.040713][T10693] comedi_device_attach+0x3b0/0x900 [ 147.040736][T10693] do_devconfig_ioctl+0x1a7/0x580 [ 147.040750][T10693] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 147.040772][T10693] ? find_held_lock+0x2b/0x80 [ 147.040789][T10693] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 147.040826][T10693] ? do_raw_spin_unlock+0xb4/0x230 [ 147.040842][T10693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.040857][T10693] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 147.040872][T10693] ? do_vfs_ioctl+0x523/0x1a60 [ 147.040888][T10693] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.040907][T10693] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 147.040926][T10693] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 147.040945][T10693] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 147.040967][T10693] ? hook_file_ioctl_common+0x145/0x410 [ 147.040984][T10693] ? selinux_file_ioctl+0x180/0x270 [ 147.041001][T10693] ? selinux_file_ioctl+0xb4/0x270 [ 147.041019][T10693] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 147.041033][T10693] __x64_sys_ioctl+0x18e/0x210 [ 147.041049][T10693] do_syscall_64+0xcd/0x4c0 [ 147.041060][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.041071][T10693] RIP: 0033:0x7fe098d8e9a9 [ 147.041081][T10693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.041091][T10693] RSP: 002b:00007fe096bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.041102][T10693] RAX: ffffffffffffffda RBX: 00007fe098fb5fa0 RCX: 00007fe098d8e9a9 [ 147.041109][T10693] RDX: 0000200000000100 RSI: 0000000040946400 RDI: 0000000000000004 [ 147.041115][T10693] RBP: 00007fe098e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 147.041121][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.041128][T10693] R13: 0000000000000000 R14: 00007fe098fb5fa0 R15: 00007ffce3359ec8 [ 147.041141][T10693] [ 147.041175][T10693] ---[ end trace ]--- [ 147.045090][T10696] ptrace attach of "/syz-executor exec"[8684] was attempted by ""[10696] [ 147.063979][T10695] kvm: Disabled LAPIC found during irq injection [ 147.068383][T10693] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 147.068396][T10693] CPU: 1 UID: 0 PID: 10693 Comm: syz.2.1375 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 147.068413][T10693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.068420][T10693] Call Trace: [ 147.068425][T10693] [ 147.068430][T10693] dump_stack_lvl+0x3d/0x1f0 [ 147.068452][T10693] panic+0x71c/0x800 [ 147.068471][T10693] ? __pfx_panic+0x10/0x10 [ 147.068491][T10693] ? __pfx__printk+0x10/0x10 [ 147.068508][T10693] check_panic_on_warn+0xab/0xb0 [ 147.068519][T10693] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 147.068539][T10693] pcl812_attach.cold+0x1a/0x1f [ 147.068555][T10693] comedi_device_attach+0x3b0/0x900 [ 147.068577][T10693] do_devconfig_ioctl+0x1a7/0x580 [ 147.068590][T10693] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 147.068610][T10693] ? find_held_lock+0x2b/0x80 [ 147.068627][T10693] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 147.068643][T10693] ? do_raw_spin_unlock+0xb4/0x230 [ 147.068657][T10693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.068671][T10693] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 147.068685][T10693] ? do_vfs_ioctl+0x523/0x1a60 [ 147.068701][T10693] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.068718][T10693] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 147.068738][T10693] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 147.068757][T10693] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 147.068779][T10693] ? hook_file_ioctl_common+0x145/0x410 [ 147.068834][T10693] ? selinux_file_ioctl+0x180/0x270 [ 147.068859][T10693] ? selinux_file_ioctl+0xb4/0x270 [ 147.068879][T10693] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 147.068894][T10693] __x64_sys_ioctl+0x18e/0x210 [ 147.068910][T10693] do_syscall_64+0xcd/0x4c0 [ 147.068923][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.068935][T10693] RIP: 0033:0x7fe098d8e9a9 [ 147.068945][T10693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.068956][T10693] RSP: 002b:00007fe096bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.068968][T10693] RAX: ffffffffffffffda RBX: 00007fe098fb5fa0 RCX: 00007fe098d8e9a9 [ 147.068981][T10693] RDX: 0000200000000100 RSI: 0000000040946400 RDI: 0000000000000004 [ 147.068988][T10693] RBP: 00007fe098e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 147.068995][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.069002][T10693] R13: 0000000000000000 R14: 00007fe098fb5fa0 R15: 00007ffce3359ec8 [ 147.069015][T10693] [ 147.069782][T10693] Kernel Offset: disabled VM DIAGNOSIS: 20:06:58 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff35c2690 RBX=0000000000063027 RCX=ffffffff822cd291 RDX=dffffc0000000000 RSI=ffffffff822cd29f RDI=0000000000000006 RBP=0000000000000000 RSP=ffffc90004c3f970 R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000001 R12=000000000000000c R13=0000000000001000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff822cd2be RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555571a3a500 ffffffff 00c00000 GS =0000 ffff8880d6722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c373fc8 CR3=0000000059f1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f451a811c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f451a811c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f451a811c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f451a811c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f451a811d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f451a811df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0061616161616161 6161616161616161 6161616161610004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000001 RCX=0000000000000000 RDX=ffffc900006a0008 RSI=0000000000000002 RDI=ffff88803b8db680 RBP=1ffff920000d3ffb RSP=ffffc9000069ffc0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900006a0008 R11=0000000000000001 R12=ffffc900006a00f0 R13=ffffc900006a00e0 R14=ffffc900006a0008 R15=dffffc0000000000 RIP=ffffffff8b2b78c0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fa512d48300 ffffffff 00c00000 GS =0000 ffff8880d6822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2b1859 CR3=0000000033774000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 055e000000040000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 0144000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 055a000000200000 0002000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030000000000 0008ffffff7e0000 03e6000000080004 0000000800080000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014000000280000 003c000000500000 0064000000780000 008c000000a00000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00c0000000090000 0000000000000000 01720000000007ce e6c0000000140000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001c0000000e0014 000c000000080004 001c000e00000000 0000000000000000 ZMM24=b187e2eab187e2ea b187e2eab187e2ea b187e2eab187e2ea b187e2eab187e2ea b187e2eab187e2ea b187e2eab187e2ea b187e2eab187e2ea b187e2eab187e2ea ZMM25=73f20b8973f20b89 73f20b8973f20b89 73f20b8973f20b89 73f20b8973f20b89 73f20b8973f20b89 73f20b8973f20b89 73f20b8973f20b89 73f20b8973f20b89 ZMM26=0bfa95260bfa9526 0bfa95260bfa9526 0bfa95260bfa9526 0bfa95260bfa9526 0bfa95260bfa9526 0bfa95260bfa9526 0bfa95260bfa9526 0bfa95260bfa9526 ZMM27=f6df545af6df545a f6df545af6df545a f6df545af6df545a f6df545af6df545a f6df545af6df545a f6df545af6df545a f6df545af6df545a f6df545af6df545a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3b0900003b090000 3b0900003b090000 3b0900003b090000 3b0900003b090000 3b0900003b090000 3b0900003b090000 3b0900003b090000 3b0900003b090000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000000002e RCX=ffffffff816ca7fb RDX=ffff8880336dc880 RSI=000000000000003f RDI=0000000000000001 RBP=000000004da46000 RSP=ffffc90003e27978 R8 =0000000000000001 R9 =000000000000003f R10=000000000000002e R11=0000000000000001 R12=0000000000000000 R13=0000000000000fff R14=ffff888037d3f490 R15=dffffc0000000000 RIP=ffffffff81bbe30b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5716955880 ffffffff 00c00000 GS =0000 ffff8880d6922000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f451a774740 CR3=00000000262f3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000410101 Opmask02=00000000ffffffff Opmask03=0000000000400004 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f03e8db218 000055f03e8db218 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f03e8e59f0 000055f03e8e59f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f03e8cb9e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f03e8db218 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57163f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 35706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d0d11420f0d 0d11040f0d000f0f 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000111 0000000000000050 0000000000000000 0000000000302e36 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a1 0000000000000070 32706f6f6c00322d 6332692f7665642d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=ffff88801dab8038 RSP=ffffc900041378e8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=1ffff92000826f20 R14=1ffff11003b57001 R15=0000000000000000 RIP=ffffffff81697ef8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a22000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c29d974 CR3=00000000496dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd03b657e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a69411c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a69411c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a69411c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a69411c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a69411d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a69411df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000