last executing test programs: 2m2.509859713s ago: executing program 1 (id=883): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2, 0x1, 0x0, 0x8}}, 0x2e) getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x2) dup3(r3, r7, 0x80000) (async) dup3(r3, r7, 0x80000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) 2m2.508015121s ago: executing program 1 (id=885): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]}) (async) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) read$usbmon(r4, 0x0, 0x2f) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) (async) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 2m2.361704451s ago: executing program 1 (id=891): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000040)={0x4000000, 0xf, &(0x7f0000000080)=[0xa467fb7e, 0x9, 0x0, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5a, 0x5, 0xfffffffa, 0x3, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x180, 0x41009}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) (async) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000040)={0x4000000, 0xf, &(0x7f0000000080)=[0xa467fb7e, 0x9, 0x0, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5a, 0x5, 0xfffffffa, 0x3, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x180, 0x41009}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) (async) 2m2.361491314s ago: executing program 1 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x2, 0x8, {}, {0xee01}, 0x6, 0x10000}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000004, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}, {@version_L}, {@mmap}, {@loose}, {@version_u}], [{@euid_gt={'euid>', r3}}, {@permit_directio}, {@dont_hash}, {@measure}, {@permit_directio}, {@seclabel}, {@subj_role={'subj_role', 0x3d, '%'}}]}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x102ca1, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x37]}}]}) 2m2.28163713s ago: executing program 1 (id=893): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x40fff, 0x4) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="18010000100033060000000000000000ac1e0001000000000000000000000000ffffffff000000000000000000000000000000004e2400000000000000000000dcad2dd41e95492caa3e3b79e18536d5fe15c8f2514ddaf71062f7090b0c56e00d8775be5c3cbad583ae73bc1a765e2e106f3992ad273d7cc3e832d9fc2ba04166704b161c9aca3a4089376d27a29efce13dd01936f40829860f2c0e78b3706e1609f15506fe1882a34815c1cb326706558e3b73f614e23faa73faec05259c4aa626ca4347ca5f76a137e97ae94420841f59278635acf20adc3d12900005d60acf9e1e8d47938f751b7893604618aded33ca7d81744cc7d4b12e3c37f3566459aa6bcb9f312273d2ca3f81823c48bf112b410789", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000200000000000000000000000a00100000000000000000001c000800fdff0000000000006401010100"/208], 0x118}}, 0x0) (async) syz_emit_ethernet(0xa2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000000714000825bd7000ffdbdf250500540001000000050054000100000005005400010000000900020073797a320000000008004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32, @ANYBLOB="08004400cf2a13ea4228074f2477647f56d89903393f95f9eacbf0a302f26f76991f7913fdb702b8cce902ba2c37f22da3886862cca9bc13bfcb8ab2a04f7ac7d4f436dee561886db5fcc01cd1f0f0e7de81494ea4d26a43ec664b758fd09b7d51f60b727825f0362f68bf7b835a5c0a65213be490dc4e74e7fba51f3dc1ae97c2e798594758acca8308c05758ee9543eb2a4dd6e6998e1664407bb675240434d748aa2540df88de990b820b7adb9fec78d1147343a068b3c40029a48ebf43adef83cd85147d307e5de25af9562ebceaad0f324ff12ebdaf", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32, @ANYBLOB], 0x54}}, 0x20008014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="37a883c65400fcdbdf252000000008563172", @ANYRES32=r4, @ANYBLOB="24002d800500010003000000080003000200000005000400000000000800020003000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0xe}) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)=0x3) (async) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010280)=ANY=[@ANYBLOB="58000000100001042bbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab0817d9cb1f31a24001280110001006272696467655f736c617665000000000c00058005001c0001000000140003006272696467655f736c6176655f3000"], 0x58}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000d00)={&(0x7f00000003c0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf250700000014000200fc00000000000000000000000000000108000500640101011400060067656e6576653000000000000000000008000500640101022a00070073797374656d5f753a6f626a655c745f723a6175646974645f7661724c72756e5f743a73300000002500070073797374656d5f753a6f626a6563745f723a756465765f657865635f743a733000000000140006006272696467653000000000000000000014000300fe880000000000000000000000000001"], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f00000002c0)={0x5, &(0x7f00000000c0)=[{0x6, 0x1, 0x21}, {0x7ff, 0x4, 0x9, 0x9}, {0x3, 0x80, 0x1, 0x7}, {0x6, 0x5, 0xfe}, {0x3, 0x1, 0x97, 0x1}]}) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) write$dsp(r8, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_DELAY(r11, 0x80084121, &(0x7f0000000140)) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x1, 0x2}) 1m54.990977199s ago: executing program 1 (id=909): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640)=r1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r3, &(0x7f0000000040)="0d2bc7e48314bf370cfc1ec8bd0e32276439c51982262c56cf410930d6e02b", 0x1f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1m54.942328469s ago: executing program 32 (id=909): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640)=r1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r3, &(0x7f0000000040)="0d2bc7e48314bf370cfc1ec8bd0e32276439c51982262c56cf410930d6e02b", 0x1f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1m37.96910482s ago: executing program 0 (id=1193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3f, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x40, 0x4, 0x25cd, 0x4, 0xb4, 0xd49, 0x80a2b9, 0x6, 0xb, 0xe4, 0x6, 0xfc000000, 0x2, 0xbbf, 0x4a732f64, 0x2, 0x3, 0x5, 0xfffffffd, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1000, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x3, 0x4, 0x9, 0x1, 0x1, 0x80010401, 0xfffffff5, 0x404, 0xa7, 0x81, 0xb, 0x8001, 0x0, 0xff, 0x2, 0x4, 0x9, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0xb4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x497d, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x6, 0x8, 0x2, 0x4, 0x8, 0xffffff7f, 0x400, 0x8, 0x4c2336d3, 0x4, 0x0, 0xfffffff6, 0x401, 0x46, 0xf1, 0x4, 0xab000e0, 0x5, 0x7b7e4725, 0x2, 0x1, 0x8003ff, 0x1ff, 0x1, 0x7fff, 0x6, 0x1cb, 0x1, 0x80000004, 0x8, 0x438, 0x2, 0xa, 0x95, 0x80000001, 0x4, 0xfffffff9, 0x5, 0x1000, 0x8, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x5, 0x8d3, 0x200003, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10100a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x5, 0x97f7, 0x3, 0xd, 0x6, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xe, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x9, 0x10000, 0xfefffffd, 0x5, 0x72], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0x3, 0x1005, 0x1, 0x9, 0x1e, 0x9, 0x812, 0x3, 0x0, 0xd, 0xfffffff7, 0x5, 0x140f2, 0x5396, 0x6, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x98ce, 0x7fffffff, 0x100009, 0x800, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7ffc, 0x3, 0x6, 0xf, 0xe, 0x1, 0x269, 0x6, 0x1, 0xa82b, 0xfffffff9, 0x9, 0x4, 0x463f, 0x1, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffbb0bfffc140000001100010000000000000000000100000a664bb6b66bbd31a4b78e"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f00000233c0)={0x0, 0x0, &(0x7f0000023380)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x20048054) recvmmsg(r9, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x9f63422128890807, 0x0, {[0x6, 0x3, 0x7fffdff5, 0x0, 0xfffffffffffffffd, 0x83, 0xffffffff7fffffff, 0x294ce45d]}}) 1m37.680756544s ago: executing program 0 (id=1198): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="66b9800000c00f326635001000000f30490f20c066350a000000440f22c0440f20c0663506000000440f22c0650f09676cba430066edd9f866b8340000000f23d00f21f86635200000050f23f8baf80c66b8ec78bf8066efbafc0cba2000ec84d4d420d86635200000000f22d8", 0x6d}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x118a43, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) mprotect(&(0x7f000000d000/0x3000)=nil, 0x3000, 0xa) sendmmsg$inet(r7, &(0x7f0000002500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000200)="a716431d03367d94dae03696569485ac0b6d7a6344da6dcb87830d3dbca37ff74bc6660068e497874125a06d04eff62c5ccee10f337175f3fd2b82878c897c7c831ec74a5ab46239c566f40f0c81671efd64f1e2fc26bd3d77c604fa532fd3383f76e1a42eaa1e", 0x67}, {&(0x7f0000000280)="25243f26450dbb648ff4260874eae2cf5e4bd88d8352dacbac12c99cca385c9518342dd6dfd22f992f7ada6d1f9938325e01be8b1e48e9cf655fe06ac02dd6d958e60209fcfa209cd22b12c93276829a1e4fe681c29a208d7b5423cfe7c783227c3329b8ce17", 0x66}, {&(0x7f0000000300)="54b5c67df901476db5b581afd42a41edb67f3566478ba57bbe34dae912bc6bfdd5d31d570933a501d1c1173f2fcf6626d87719ecb6b77bad21459825911b464b5ea54ed40b7316b8ecb2b01595017978de0b226ce3c6170aff1829cdb0fd4d4c1f94a9b0d3e3b9b32a0fbc95497a8d8d16547583da705ea3ba", 0x79}, {&(0x7f0000000380)="93ba7aae8ce62278a3bef84f12a1bf2f79d6821ef1dd9f6a277a0bfed56e2686b86cdecaf2a743a72d3f2eba1f57b07016969588cd5885b4712c5f2be9d0789aa49f8452289ed0bcd9a617c240d9fd3b7cfb07ba61651885b6", 0x59}, {&(0x7f00000004c0)="271a27fa78a8adbc44866a0fe693f4bb809e66cc7c647b43ae27a0b8d9bc95fa049c14f82da98c468ea15fcd733fcb23a7a84e80b46b8cfb7890becb44af325a615b9597abe34ebf3721dec0e68aa40d9b4c18d3726e2aa7f0f7079291a5d7c6dcbd5230dd01e7f4b8d2b538d01cbd5de2e101b7e98870375b17005b1d9a32a5f71a8041df6d39f72bfa3f8a0e73855995d8fd2169423e290296143e516a7bfba466a2b93e5489", 0xa7}, {&(0x7f0000000580)="eee97ba0f394dafe81cb00aafd97b1c363b65284f48ea6a6276b3ae750e563cb4a6bf2", 0x23}, {&(0x7f00000010c0)="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", 0x1000}], 0x7, &(0x7f0000002140)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@end, @lsrr={0x83, 0xf, 0xbc, [@remote, @multicast1, @loopback]}, @ssrr={0x89, 0x17, 0xe6, [@multicast2, @private=0xa010101, @remote, @broadcast, @remote]}, @lsrr={0x83, 0x23, 0x4b, [@private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, @loopback]}]}}}, @ip_retopts={{0x10}}], 0x70}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000021c0)="ed41b06389ba1326b9b7dec15a23c8025e1dadf5fc90ddeb4c528e8d6107be2ae108399e1f3bac749ff2e64215f6", 0x2e}, {&(0x7f0000002200)="b25709c7c2ef08a6009dfcb21eccfa828bf1182e7daf1db1eae8a8f0d2", 0x1d}, {&(0x7f0000002240)}, {&(0x7f0000002280)}, {&(0x7f00000022c0)="9872c2c0f9e02bb0a50dde4bdacb1f16e0e0c716b2ce4bf29423fe08209329846a0f677b7c3f83814c585f17a4586ea7da168ebc4b34cbbbc02b4f8648e3becb04611ced4b9c95cabd0059f4b615580b10a064da56ac0e7b62c7c2e485bef3981ef2f37342708725fa991819e9598491ddfe81f1aaf372009581dbaf44584bf8b31698bd", 0x84}, {&(0x7f0000002380)="81f15bc6afec513c5bec5a0782e697d3ad0f428f3180533bb3f70382585a5e51a74f9e3e3a0a8697ee9af33f3d52a7b57171c1843919e8a690ee0e7afcc264bec75af0164a617570a47bbd0c6901eef8e65ee404af959f8c0690fb2ce876dd175ebb64ce753f5d776dd039942c8d914c8cc9c7fd49372efc70d852132ce425ab972873f0b74304c382fd9a11471d997f360b282133f7b4ac817aa9b6574b91c5eb8323426eb5a78308da9870dd9ac0de", 0xb0}], 0x6, &(0x7f00000024c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x30}}], 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) 1m37.430297722s ago: executing program 0 (id=1201): r0 = socket$alg(0x26, 0x5, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000900000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="faef520b097600000c0111"], 0x15c}}, 0x20008080) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x400, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r3, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200), &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'tgr128\x00'}}, 0x0, 0x0) setreuid(r1, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) close(0x3) 1m37.341627668s ago: executing program 0 (id=1202): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r0, &(0x7f0000000b80)="eb67b6617c0ac0e0f32319996c82fb8df152e186a59b9ccf0dfdf4a5808a4286285890d91d56577b18c8d1da033f2d602e1ec2e43ab041cb5d7a2bb3b956971e96b983a2d73676f32945e25a174f25b95b9731c8e7686ad58fae8c22f7e0762b60efd870a45e7740a02b199cf4b82b3222c5ff2cd7ced4422b2df6e34ee52a1de48cab715abc351029d781", 0xffffffaa) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r1, 0x0, 0x154) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x0, 0x1, {0x4, 0x1}, {0x2a, 0xffff}, @cond=[{0x10, 0x10, 0xcf, 0x1, 0x1, 0x3}, {0x271e, 0x4, 0x1, 0x7f, 0xfffe, 0x7ff}]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000006c0)={0x54, 0xf7fe, 0xa9, {0x6, 0x1}, {0x2, 0x40}, @cond=[{0x7, 0x209, 0x9, 0xffff, 0x2, 0x7}, {0x8, 0x5, 0x1, 0x50, 0x9, 0xd}]}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r3, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000000)={0x9}, 0x4) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\b', @ANYRES16=r7, @ANYBLOB="01002abd7010040000000500000008000c000400000005002200000000000500140004000000060001000500000008001800000000000500210000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @empty}, 0x4, 0x0, 0x1, 0x3}}, 0x26) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8008, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x3, 0x4, 0x0, 0x4, 0x6, 0x6, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m37.340683822s ago: executing program 0 (id=1203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x50, 0x0, &(0x7f00000001c0)="0b58ad1d576a9880ec5574bcaae3801bb44a06d6f26badf4a8362935c0565d17c126c46d66dff58a519c8c740e52df9be22675902806d5995fb8396a858d90b9bd24a5f0d88ca5967f7b22a64badca59"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000900)={0xc, 0x0, &(0x7f0000000740)=[@dead_binder_done={0x40086310, 0x1000000}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 1m37.130471017s ago: executing program 0 (id=1206): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000400)={'dac02\x00', [0x809, 0xf00fffc, 0x6, 0xe, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x4, 0x2, 0x1, 0x7, 0xffffff80, 0x1, 0x400, 0xfffffffd, 0x20000009, 0x3, 0x7fffffff, 0xfffffffc, 0xca9f, 0x0, 0x8, 0xdfffffff, 0xf39e, 0xffffffff, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/230) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000480)="e3008067000600678387460884df784a4d66784390", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc}, 0x50) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/175) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3, @none}, 0xe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) fchdir(r6) socket$nl_generic(0x10, 0x3, 0x10) 1m37.033796928s ago: executing program 33 (id=1206): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000400)={'dac02\x00', [0x809, 0xf00fffc, 0x6, 0xe, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x4, 0x2, 0x1, 0x7, 0xffffff80, 0x1, 0x400, 0xfffffffd, 0x20000009, 0x3, 0x7fffffff, 0xfffffffc, 0xca9f, 0x0, 0x8, 0xdfffffff, 0xf39e, 0xffffffff, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/230) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000480)="e3008067000600678387460884df784a4d66784390", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc}, 0x50) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/175) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3, @none}, 0xe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) fchdir(r6) socket$nl_generic(0x10, 0x3, 0x10) 40.420300312s ago: executing program 5 (id=2166): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x4, 0x2}, @vsock={0x28, 0x0, 0x2710}, @llc={0x1a, 0x30b, 0xf, 0x4, 0xff, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x10001, 0xff3, 0xa31}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x10201, 0x2, 0x42000, 0x2000, &(0x7f0000003000/0x2000)=nil}) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0f21f60f3566b842000f00d8b805000000b9a00000003ef30f093e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x10, 0x6}, {0xe, 0xffe7}, {0xfff3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xe9, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000240)={@val={0xa, 0x8906}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x8, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, {[@routing={0x29, 0x0, 0x0, 0x4}]}}}}}}, 0x4a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100)="cce83bd3c120bd06b91653a1e3df518c788fa5a843c613e41daee963e3942a62bb41ce2dca0d8fc1dfdf4f1f51bebc5b84f9ef29deef2e3a27047c40213857b6f02043637941274e859e09fed012dd62aeaae8a4eee2609c5dd62617e4c7db5ec3688772087bb645909212375c81d6e1a1dedc1e04b29ac3fa8ed61957", &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 39.389567409s ago: executing program 5 (id=2183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x74}}, 0x8004) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x500, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x481d4}, 0x20040000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '%.'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'veth\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffa1a8}]}, 0x4c}}, 0x404c011) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc4c03d12, &(0x7f0000000380)={0x4, 0x1}) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_PERIODIC_INQ={{0x3}, 0x62}}}, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x1022104) keyctl$get_security(0x11, r7, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 39.218505747s ago: executing program 5 (id=2187): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) 39.158991585s ago: executing program 5 (id=2188): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7040010600000000000000000300", @ANYRES32=r5, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() (async) gettid() timer_create(0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x814810, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x814810, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) socket$nl_xfrm(0x10, 0x3, 0x6) 38.918391706s ago: executing program 5 (id=2193): r0 = syz_open_dev$rtc(&(0x7f0000002c40), 0x0, 0x2200) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0xf5, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000821e2549334aaaf396470639fc530a5dc45383b9b51d0b75ec21d72ecdcc758bf8aca02fbb163f34a3f7fc32aabfc5d013d904aec87510d20ec4", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 38.840110405s ago: executing program 5 (id=2195): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x58000, 0x5, 0x4, 0xa0000, 0x0, [{0x9, 0x5, 0x6d, '\x00', 0x82}, {0x2, 0x3, 0x5, '\x00', 0x7}, {0x2, 0x4, 0xfd, '\x00', 0xc4}, {0xb, 0x1, 0xaf, '\x00', 0x5}, {0x5, 0x5, 0x8, '\x00', 0xd}, {0x4, 0x4, 0x9, '\x00', 0x1}, {0x3, 0x5, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x7, '\x00', 0xa}, {0x35, 0x2, 0xac, '\x00', 0x1}, {0x9, 0x5, 0xce, '\x00', 0x81}, {0x42, 0x3, 0xf5, '\x00', 0x3}, {0x6, 0x6, 0x3, '\x00', 0x2}, {0xf3, 0x9, 0x8, '\x00', 0xd5}, {0xd, 0x4, 0x3, '\x00', 0xd}, {0x1, 0x3, 0x7f, '\x00', 0x80}, {0x6, 0x8, 0x9, '\x00', 0x8}, {0xc, 0x4, 0x1, '\x00', 0xb3}, {0xe, 0x5, 0x6, '\x00', 0x4}, {0x6, 0x40, 0x0, '\x00', 0x7}, {0xff, 0xf7, 0x8, '\x00', 0xcb}, {0x2, 0x3e, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x3, '\x00', 0x7}, {0x0, 0x40, 0x7f, '\x00', 0x2}, {0x40, 0x2, 0x6, '\x00', 0x5}]}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4c, 0x2, 0x3, '\x00', 0x400}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000340)=@arm64) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x4, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x8, 0xf5, '\x00', 0xb4}, {0xec, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x7, 0x5, 0x1}, {0x7f, 0x5, 0x48, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x1}, {0x0, 0x28, 0x80, '\x00', 0x10}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x8, 0x2, '\x00', 0x9}, {0x4, 0x4, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x0, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x5, 0x6, 0x4}]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'wg1\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x3, 0xc}, {0x3, 0xb}, {0xf}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x45}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)=@getchain={0x3c, 0x66, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff3, 0x5}, {0x10}, {0x1, 0xd}}, [{0x8, 0xb, 0x40}, {0x8, 0xb, 0x658}, {0x8, 0xb, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x8048000) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) flistxattr(r0, &(0x7f0000000a80)=""/221, 0xdd) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=@delchain={0xe0, 0x65, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0x7}, {0x4}, {0xf, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x58f}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0xe2}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xff, 0xff]}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x8}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xae}, @TCA_ROUTE4_TO={0x8, 0x2, 0x60}]}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0x8004) 23.373867008s ago: executing program 34 (id=2195): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x58000, 0x5, 0x4, 0xa0000, 0x0, [{0x9, 0x5, 0x6d, '\x00', 0x82}, {0x2, 0x3, 0x5, '\x00', 0x7}, {0x2, 0x4, 0xfd, '\x00', 0xc4}, {0xb, 0x1, 0xaf, '\x00', 0x5}, {0x5, 0x5, 0x8, '\x00', 0xd}, {0x4, 0x4, 0x9, '\x00', 0x1}, {0x3, 0x5, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x7, '\x00', 0xa}, {0x35, 0x2, 0xac, '\x00', 0x1}, {0x9, 0x5, 0xce, '\x00', 0x81}, {0x42, 0x3, 0xf5, '\x00', 0x3}, {0x6, 0x6, 0x3, '\x00', 0x2}, {0xf3, 0x9, 0x8, '\x00', 0xd5}, {0xd, 0x4, 0x3, '\x00', 0xd}, {0x1, 0x3, 0x7f, '\x00', 0x80}, {0x6, 0x8, 0x9, '\x00', 0x8}, {0xc, 0x4, 0x1, '\x00', 0xb3}, {0xe, 0x5, 0x6, '\x00', 0x4}, {0x6, 0x40, 0x0, '\x00', 0x7}, {0xff, 0xf7, 0x8, '\x00', 0xcb}, {0x2, 0x3e, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x3, '\x00', 0x7}, {0x0, 0x40, 0x7f, '\x00', 0x2}, {0x40, 0x2, 0x6, '\x00', 0x5}]}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4c, 0x2, 0x3, '\x00', 0x400}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000340)=@arm64) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x4, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x8, 0xf5, '\x00', 0xb4}, {0xec, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x7, 0x5, 0x1}, {0x7f, 0x5, 0x48, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x1}, {0x0, 0x28, 0x80, '\x00', 0x10}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x8, 0x2, '\x00', 0x9}, {0x4, 0x4, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x0, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x5, 0x6, 0x4}]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'wg1\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x3, 0xc}, {0x3, 0xb}, {0xf}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x45}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)=@getchain={0x3c, 0x66, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff3, 0x5}, {0x10}, {0x1, 0xd}}, [{0x8, 0xb, 0x40}, {0x8, 0xb, 0x658}, {0x8, 0xb, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x8048000) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) flistxattr(r0, &(0x7f0000000a80)=""/221, 0xdd) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=@delchain={0xe0, 0x65, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0x7}, {0x4}, {0xf, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x58f}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0xe2}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xff, 0xff]}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x8}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xae}, @TCA_ROUTE4_TO={0x8, 0x2, 0x60}]}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0x8004) 4.406289757s ago: executing program 4 (id=2453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x3, 0xff) r2 = syz_clone(0x20900, &(0x7f0000000440)="d8a56d45d9fd5daff9a7405f3db681b2f7a43a46386854a0567eaeb7a7e3745048ad8aceb173af95d3befab9a4d7224c0d568ed7bba71fe5e947991f7e3d2d9a659004e128aca66facb5b9b5710615c54afcdbf5b927dbc3ada3149a957f683c8a2fddc0a918d06fa700a58e24cd5ed002076587dd6dacbd01df933260b166730239cda825b509050c5a7ed1d079b11438bf9320ae74445970d1ed924e513d34b1c3ca76ffc4f0691e0000ee010ffac43c205fb0863fd61164cecdd1f8c000ab5871cf", 0xc3, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="5612ba41255d48eb1fbb6970307e5f15743f29c454fd6976d4bb89264d58a019b228162580ea0e24ec5cc774c73b32667d74cdd12acdfefb46753d0feb958a32f51b4d5a2b9c3911f73ab51ff708517b6373fe463077b65257374d960931c96f45586387c59051ee94c75ddc0fd8e42a02cc8dc5aeec899d6c438843583eb3a90984b670e583ff5f51744fa9679acb7566b3179f35782c2505d43b0aa0d1d209f03a55dff840481ec378f75ac1c9d94f3491695b8e1960f0") capset(&(0x7f0000000080)={0xf1504, r2}, &(0x7f0000000040)={0x1ffffd, 0x200000, 0x0, 0x4}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e3, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x40, 0x8af}]}) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x4004854) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockname(r8, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e0001002abd7000040000001c000000", @ANYRES32=0x0, @ANYBLOB="8000000000000000000800000000000099ece719bb61ecc0122fd7d749cdc156f489152f5c40042c77e885f1998306fa6d4102000000f36bcb676e442542e119a21bc34b60947fbe8beebbbf7e490ce2cd852daaff9c5371de316f3a78dfbfa799ff47268e21785728298097c4162754477910942c7358f5842e10b487ed9094ebf8cc9fe6950d9351e240835f062f7ce7f89ed29588b7b2a3eeec5e44b7b668a8a18c729474d7c469722ca14a3cb7ef"], 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4000004) 3.469815499s ago: executing program 4 (id=2463): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000200)=0x1e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0x7e423000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.287295104s ago: executing program 4 (id=2467): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) timer_getoverrun(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x7, &(0x7f00000000c0)=0x2) 1.9261413s ago: executing program 3 (id=2479): r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b8008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.807736851s ago: executing program 3 (id=2481): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20, &(0x7f0000001b00)=ANY=[@ANYBLOB='fd']) 1.657719046s ago: executing program 3 (id=2483): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x5d22f5f6fd534cd7}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x4, 0xd59f83, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x26, {0x45, 0x80}, 0xcd, 0x3}}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1.657000725s ago: executing program 2 (id=2484): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) r0 = io_uring_setup(0x497c, &(0x7f00000000c0)={0x0, 0x4203, 0x4000, 0x4000, 0x40}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000a00)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0xfffffdc9, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FIONCLEX(r5, 0x5450) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) (async) io_uring_setup(0x497c, &(0x7f00000000c0)={0x0, 0x4203, 0x4000, 0x4000, 0x40}) (async) socket(0x2b, 0x1, 0x1) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000a00)=ANY=[@ANYBLOB="00020201"], 0x18) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0xfffffdc9, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$FIONCLEX(r5, 0x5450) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.559705309s ago: executing program 6 (id=2486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) 1.559215382s ago: executing program 3 (id=2487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634f9412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1ef01e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.499638648s ago: executing program 6 (id=2488): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) symlink(&(0x7f0000002bc0)='./file0/file0\x00', &(0x7f0000002c00)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000180)}) 1.395170717s ago: executing program 6 (id=2489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001"], 0xe4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @broadcast}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.178745701s ago: executing program 3 (id=2490): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x80801) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000081}, 0x80) r5 = dup3(r3, r4, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000ac0)={0x20, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r11, &(0x7f0000000d40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r11, &(0x7f0000002f00)={0x130, 0x0, r12, {0x4, 0x5, 0x0, '\x00', {0x10000, 0x85, 0x7, 0x3d0, 0x0, 0x0, 0x6000, '\x00', 0x9, 0x0, 0x7, 0x9, {0x200, 0x78}, {0x2000006, 0xb}, {0x0, 0x3}, {0xb, 0xf151}, 0xc221, 0x0, 0x6, 0x200}}}, 0x130) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', r7, &(0x7f0000000180)='./file1/file3\x00', 0x2) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 960.341772ms ago: executing program 2 (id=2491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x1f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x3fff, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x20008080) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x18, r3, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x20000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) pipe2$9p(&(0x7f0000000040), 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) 897.311433ms ago: executing program 2 (id=2492): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) 897.048554ms ago: executing program 3 (id=2493): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1d752f2d72f716d2ca0e1b3e6120e4ee6f7ef181bc26e87347c010a9ba137825891c8f18a6611b", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00a80066697273746e616d65000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r5, r7, 0x25, 0x4, @void}, 0x10) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="662ab035e30000", 0x7}, {&(0x7f0000000100)="a9715fedead152d37599e6", 0xb}], 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000130a010100000000000000000100000609009849020073797a310000"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 840.144554ms ago: executing program 2 (id=2494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket(0x2b, 0x1, 0x1) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4002, @local, 0x6}, 0x1c) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES32=r0, @ANYBLOB="0386000000000000140012800b0001006970766c616e0080", @ANYRES32=r2, @ANYBLOB="08001b"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x400a100) 730.435534ms ago: executing program 2 (id=2495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'pimreg0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4000014) 729.341684ms ago: executing program 4 (id=2496): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {r0, 0x5}], 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x43a3]}, 0x8) ppoll(&(0x7f0000000100)=[{r0, 0x100}, {r0, 0x10}, {r0, 0x2200}, {r0, 0x42}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={[0x5]}, 0x8) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d0c, &(0x7f00000001c0)=0xd) ppoll(&(0x7f0000000200)=[{r0, 0x20}], 0x1, &(0x7f0000000240), &(0x7f0000000280)={[0xffffffffffffffff]}, 0x8) r1 = syz_io_uring_complete(0x0, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000002c0)=0xb775) ppoll(&(0x7f0000000300)=[{r1}, {r0, 0x8001}], 0x2, &(0x7f0000000340), &(0x7f0000000380)={[0xb]}, 0x8) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff}}}, 0xd) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000400)) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000440)) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000480)={'NETMAP\x00'}, &(0x7f00000004c0)=0x1e) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x8100, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000580)={&(0x7f0000000540)=[{0x6, 0x1800, 0x3}, {0x6, 0x6}, {0xfffffffffffffffd, 0x36f9062c}, {0x400, 0x8, 0x2}], 0x4, 0x10, 0x4c, 0x3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000006c0)=0xe8) r4 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000000800)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000840)={0x61, 0x7d, 0x1, {{0x0, 0x4b, 0x3, 0x6, {0x10, 0x3, 0x3}, 0x80000, 0x8, 0x75d, 0xfffffffffffffffc, 0x7, 'NETMAP\x00', 0x10, '/dev/cachefiles\x00', 0x1, 'j'}, 0x1, '\xef', r3, r4, r5}}, 0x61) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000008c0)={0x0, 0x7ff}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000940)={r6, 0x401, 0xd9, "e488eadc05dbae76a987fe202e915a2161bb9d9cb0bd988e07e96c56c22d3cebcca5e5b93c071820911f49a40d30caa7a2db6f08643aaf50ad29a9d49018eb9a97b73b72fa8649160da381287621d94bbe6f21d6e20dc120ad73d17060d7b371206ca67f8b26ed78dd37dabc3594a1e3ae660cc047267e4613ecbeb838e960c07c9aef75f79e0e6d64f80cc512d49d9dafcd05f28bd2350c12d4c8fbbe5f9510bc9c3d2fc86006e0cd5534da2c8906ac835310db4b4794ae484cd97b240df16bc503d11a753bcd725d187f0b811a284c135dda9e467c721be5"}, 0xe1) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x144, r7, 0x901, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x80000000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x8}, {0x5}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0xc000) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000cc0)={0x1, 0x0, [{0x1e71, 0x0, 0xffffffff}]}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000d00)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)='%pI4 \x00'}, 0x20) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000e00), 0x200, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r8, 0x4c80, r9) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000e40)) 728.187583ms ago: executing program 2 (id=2497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000008, 0x4000010, 0xffffffffffffffff, 0xf09c0000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x4661, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r1, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0fc775bef2a7660f3adf1e0098daba200066edd1c866b8d97d00000f23d80f21f86635800000700f23f80f02669f2e65650f01c466b807a9120b0f23d80f21f86635000000d00f23f865640fc7a8f200", 0x50}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 619.92944ms ago: executing program 4 (id=2498): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd27, 0x25ffdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x48040) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140036000100f20000000000000004000bc0"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x40) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r4 = socket(0x11, 0x2, 0x5) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000180)={0xa, {0x7, 0xc0, 0xf}}, 0xa) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x7c3b7356) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="11054305", 0x4, 0xb01, &(0x7f00000004c0)={0x11, 0x8100, r7, 0x1, 0xfc, 0x6, @random="a3cac7f9a4c7"}, 0x14) setsockopt(r4, 0xc1, 0x8, &(0x7f00000001c0)="fcff0000018b2f0000071a80010061cc", 0xffffffffffffff0a) 400.258591ms ago: executing program 6 (id=2499): ioperm(0x0, 0x7fff, 0x15f9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x20, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x2a}, 0x28) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) syz_io_uring_setup(0x5739, &(0x7f0000000280)={0x0, 0x1, 0x10100, 0x0, 0x32e}, 0x0, 0x0, &(0x7f0000000000)) getegid() 399.992914ms ago: executing program 6 (id=2500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x7}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xb50, 0x0, 0x8}]}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x3}) 290.349113ms ago: executing program 4 (id=2501): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x44040, 0x0) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x6b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001800010026bd70000000000002781d01000015000100030000a00002000032ba630f60057a490700f17d4e380b432f5d98eecfdeac2df055b63e6e52de3e576292aa62b9658bf4dd748075be961ac1ffb5c187ca4d8a63cc590b947b4479cce876f1833481196ec910bc9985877676dbfccb5b579707b2dd0001ce00b334ac8b009a9b31c1816f0d90e841f9b89eb0940d71cc8a587d53722fc3aacdb265ef9fc27de80759ba2ea4c764ae362e48338b0bf2f6c4abb2c5"], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 0s ago: executing program 6 (id=2502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r1, @ANYRES16=r0, @ANYRESDEC=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) getsockname$inet6(r1, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000700)=0xfffffeed) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async, rerun: 64) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000) (async) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4086) (async, rerun: 32) bind$packet(r5, &(0x7f0000000100)={0x11, 0x17, r6, 0x1, 0xd6, 0x6, @random="c1392bcff318"}, 0x14) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "6ca0ef44bcdaf33d9060001a65aae2621600f79c1f901d896f9157b1a7166ac1", "abfdff7d", "708958f96700"}, 0x38) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000036c0)="f20f2ba9008000000f09c744240049000000c74424025d000000c7442406000000000f011c240fdf760066b893008ec06462ba00d0ffffc744240000000080c7442402d92b0000c7442406000000000f011c24c4e17dd7dfc744240000900000c74424020f000000c7442406000000000f0114243e0f796000", 0x79}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r9, 0x402, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x7b7e128654022424}, 0x4008090) kernel console output (not intermixed with test programs): hread [ 194.111138][T12057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1779'. [ 194.116898][T12057] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 194.250228][T12066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12066 comm=syz.4.1784 [ 195.164888][T12096] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1792'. [ 195.177771][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 195.234749][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 195.303407][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 195.347714][T12117] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 195.413157][T12113] veth3: entered allmulticast mode [ 195.447581][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 195.608274][T12129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12129 comm=syz.3.1801 [ 195.662339][T12123] hsr_slave_0: left promiscuous mode [ 195.669936][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 195.682946][T12134] input: syz1 as /devices/virtual/input/input21 [ 195.703111][T12123] hsr_slave_1: left promiscuous mode [ 195.758986][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 195.770480][T12139] overlayfs: failed to resolve '/-check it first [ 195.770480][T12139] verification time 1029 usec [ 195.770480][T12139] stack depth 0 [ 195.770480][T12139] processed 3 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 195.770480][T12139] ': -2 [ 195.795514][T12139] overlayfs: failed to resolve '/mode=00000000000000000100000': -2 [ 195.831576][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 195.844989][T12127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.861616][T12128] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 196.003120][T12158] veth0_to_bond: entered allmulticast mode [ 196.078347][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 196.081709][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 196.084603][T12164] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 196.106737][T12170] smc: net device ip_vti0 applied user defined pnetid SYZ2 [ 196.117703][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 196.139660][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 196.187585][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 196.207054][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 196.209907][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 196.230231][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 196.280418][T12181] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 196.282886][T12181] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 196.330290][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 196.392367][ T1042] IPVS: starting estimator thread 0... [ 196.491978][T12207] IPVS: using max 44 ests per chain, 105600 per kthread [ 196.754637][T12228] veth7: entered promiscuous mode [ 196.756263][T12228] veth7: entered allmulticast mode [ 197.266683][T12269] netlink: 'syz.3.1845': attribute type 4 has an invalid length. [ 197.342070][ T5738] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 197.504324][ T5738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.511812][ T5738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.518960][ T5738] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 197.524559][ T5738] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.530630][ T5738] usb 9-1: config 0 descriptor?? [ 197.939593][ T5738] hid_parser_main: 6 callbacks suppressed [ 197.939612][ T5738] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 197.947370][ T5738] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 197.962150][ T5738] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0005/input/input22 [ 197.993187][T12313] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 197.993187][T12313] The task syz.3.1855 (12313) triggered the difference, watch for misbehavior. [ 198.001883][ T34] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 198.019403][ T5738] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 198.162697][ T34] usb 10-1: not running at top speed; connect to a high speed hub [ 198.165979][ T34] usb 10-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 198.169394][ T34] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 198.173968][ T34] usb 10-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 198.177200][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.180121][ T34] usb 10-1: Product: syz [ 198.181543][ T34] usb 10-1: Manufacturer: syz [ 198.183684][ T34] usb 10-1: SerialNumber: syz [ 198.205530][ T5738] usb 9-1: USB disconnect, device number 7 [ 198.340481][ T40] kauditd_printk_skb: 481 callbacks suppressed [ 198.340497][ T40] audit: type=1400 audit(1778348183.091:6344): avc: denied { read } for pid=12321 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.377058][ T40] audit: type=1400 audit(1778348183.131:6345): avc: denied { write } for pid=12322 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.385173][ T40] audit: type=1400 audit(1778348183.131:6346): avc: denied { remove_name } for pid=12322 comm="rm" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=8907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.393259][ T40] audit: type=1400 audit(1778348183.131:6347): avc: denied { unlink } for pid=12322 comm="rm" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=8907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.401674][ T40] audit: type=1400 audit(1778348183.141:6348): avc: denied { read } for pid=12299 comm="syz.5.1853" dev="nsfs" ino=4026532879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 198.409342][ T40] audit: type=1400 audit(1778348183.141:6349): avc: denied { open } for pid=12299 comm="syz.5.1853" path="mnt:[4026532879]" dev="nsfs" ino=4026532879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 198.419521][ T40] audit: type=1400 audit(1778348183.151:6350): avc: denied { mounton } for pid=12299 comm="syz.5.1853" path="/proc/409/cgroup" dev="proc" ino=46527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 198.434155][T12300] __nla_validate_parse: 2 callbacks suppressed [ 198.434170][T12300] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1853'. [ 198.443581][T12300] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.453001][ T40] audit: type=1400 audit(1778348183.211:6351): avc: denied { read } for pid=12326 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.462822][ T40] audit: type=1400 audit(1778348183.211:6352): avc: denied { read open } for pid=12326 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.473866][ T40] audit: type=1400 audit(1778348183.211:6353): avc: denied { getattr } for pid=12326 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.522673][T12299] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 198.532445][ T34] usb 10-1: USB disconnect, device number 9 [ 198.830128][T12343] x_tables: duplicate underflow at hook 2 [ 198.872540][T12350] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1862'. [ 198.913370][T12347] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.915534][T12347] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.987601][T12347] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 199.144864][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.147506][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.390737][T12404] netlink: 'syz.3.1870': attribute type 2 has an invalid length. [ 199.404394][T12406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1875'. [ 199.408994][T12404] !: entered promiscuous mode [ 199.424932][T12385] netlink: 'syz.3.1870': attribute type 2 has an invalid length. [ 199.437558][T12409] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1875'. [ 199.656451][T12428] random: crng reseeded on system resumption [ 199.936221][T12448] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.939078][T12448] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.132816][T12453] hfs: can't find a HFS filesystem on dev sr0 [ 200.232599][T12453] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 200.277689][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1886'. [ 200.387860][T12461] sit1: entered promiscuous mode [ 200.390089][T12461] sit1: entered allmulticast mode [ 200.420199][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 200.425814][T12465] netlink: 'syz.5.1889': attribute type 4 has an invalid length. [ 200.461584][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 200.507634][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 200.563644][T12468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.599542][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 200.673589][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 200.734530][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 200.803407][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 200.808527][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1906'. [ 200.821008][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1906'. [ 200.821135][T10014] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.827692][T10014] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.830718][T10014] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.838496][T10014] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.882468][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 200.939082][T12521] IPVS: length: 149 != 24 [ 200.988179][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 201.054873][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 201.123910][T12544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1913'. [ 201.126854][T12544] netlink: 'syz.5.1913': attribute type 7 has an invalid length. [ 201.129369][T12544] netlink: 'syz.5.1913': attribute type 8 has an invalid length. [ 201.134369][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1913'. [ 201.291828][T12548] nbd2: detected capacity change from 0 to 63 [ 201.319163][ T5741] block nbd2: Receive control failed (result -104) [ 201.629765][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1920'. [ 201.639550][T12565] tipc: Enabling of bearer rejected, failed to enable media [ 202.098479][T12607] netem: change failed [ 202.130509][T12607] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 202.214337][T12607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12607 comm=syz.5.1934 [ 202.248664][T12618] 9pnet_virtio: no channels available for device syz [ 202.571965][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.716370][T12637] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 202.719326][T12637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.789295][T12643] trusted_key: encrypted_key: keylen parameter is missing [ 203.114431][T12674] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 203.157033][T12677] syz.3.1955 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 203.162800][T12677] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 203.282131][T12687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12687 comm=syz.5.1958 [ 203.342438][ T40] kauditd_printk_skb: 362 callbacks suppressed [ 203.342449][ T40] audit: type=1400 audit(1778348188.101:6716): avc: denied { accept } for pid=12680 comm="syz.4.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.351295][ T40] audit: type=1400 audit(1778348188.101:6717): avc: denied { module_request } for pid=12680 comm="syz.4.1956" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 203.430414][ T40] audit: type=1400 audit(1778348188.181:6718): avc: denied { map_create } for pid=12696 comm="syz.3.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 203.442945][ T40] audit: type=1400 audit(1778348188.181:6719): avc: denied { map_read map_write } for pid=12696 comm="syz.3.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 203.465031][ T40] audit: type=1400 audit(1778348188.181:6720): avc: denied { create } for pid=12696 comm="syz.3.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.473596][ T40] audit: type=1400 audit(1778348188.191:6721): avc: denied { allowed } for pid=12698 comm="syz.5.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 203.491900][ T40] audit: type=1400 audit(1778348188.201:6722): avc: denied { create } for pid=12698 comm="syz.5.1961" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.498853][ T40] audit: type=1400 audit(1778348188.211:6723): avc: denied { create } for pid=12698 comm="syz.5.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.505814][ T40] audit: type=1400 audit(1778348188.211:6724): avc: denied { connect } for pid=12698 comm="syz.5.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.512388][ T40] audit: type=1400 audit(1778348188.221:6725): avc: denied { write } for pid=12698 comm="syz.5.1961" path="socket:[47049]" dev="sockfs" ino=47049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.754865][T12709] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 204.546171][T12746] CIFS mount error: No usable UNC path provided in device string! [ 204.546171][T12746] [ 204.550341][T12746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 204.651986][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.654867][T12764] __nla_validate_parse: 8 callbacks suppressed [ 204.654879][T12764] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1981'. [ 204.740110][T12771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1983'. [ 205.005090][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'. [ 205.008725][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 205.012593][T12782] netlink: 'syz.2.1987': attribute type 7 has an invalid length. [ 205.016139][T12782] netlink: 'syz.2.1987': attribute type 13 has an invalid length. [ 205.022192][T12782] netlink: 'syz.2.1987': attribute type 39 has an invalid length. [ 205.028485][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1986'. [ 205.463982][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 205.521123][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 205.629208][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 205.674132][T12816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.683205][T12816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.688846][T12816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.166072][T12832] program syz.5.2004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.312465][T12833] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 206.367207][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 206.386099][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 206.483899][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 206.571252][T12844] tipc: Started in network mode [ 206.573206][T12844] tipc: Node identity 36130c5d89bb, cluster identity 4711 [ 206.576494][T12844] tipc: Enabled bearer , priority 0 [ 206.580866][T12844] +: renamed from syzkaller0 [ 206.623140][T12844] tipc: Disabling bearer [ 206.741801][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.795682][T12854] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 206.881216][T12859] netlink: 'syz.2.2014': attribute type 18 has an invalid length. [ 206.884875][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 206.928009][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 206.932607][T12861] openvswitch: netlink: Missing key (keys=40, expected=80) [ 207.016572][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 207.147965][T12876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12876 comm=syz.3.2019 [ 207.187295][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 207.233268][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 207.280314][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 207.359206][ T7544] udevd[7544]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 207.364284][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2027'. [ 207.374157][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'. [ 207.383272][T12914] xt_hashlimit: size too large, truncated to 1048576 [ 207.391903][T12909] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 207.541985][T12928] netlink: 'syz.5.2034': attribute type 1 has an invalid length. [ 207.655835][T12947] overlayfs: conflicting options: userxattr,metacopy=on [ 207.687085][T12949] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 207.729102][T12954] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 207.735564][T12954] /dev/nullb0: Can't open blockdev [ 208.066664][T12974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.132367][ T5142] block nbd2: Connection timed out, retrying (0/1 alive) [ 208.138543][ T5142] block nbd2: Connection timed out, retrying (0/1 alive) [ 208.141339][ T5142] block nbd2: Connection timed out, retrying (0/1 alive) [ 208.145996][ T35] block nbd2: Dead connection, failed to find a fallback [ 208.158545][ T5142] block nbd2: Connection timed out, retrying (0/1 alive) [ 208.159949][T12985] SQUASHFS error: Failed to read block 0x0: -5 [ 208.162775][ T35] block nbd2: shutting down sockets [ 208.164283][T12985] unable to read squashfs_super_block [ 208.165671][ T35] blk_print_req_error: 8 callbacks suppressed [ 208.165680][ T35] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.171459][T12986] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 208.174702][ T35] buffer_io_error: 9 callbacks suppressed [ 208.174713][ T35] Buffer I/O error on dev nbd2, logical block 1, async page read [ 208.185373][ T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.188345][ T35] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.190910][ T35] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.194035][ T35] Buffer I/O error on dev nbd2, logical block 3, async page read [ 208.196830][T12982] bond2: option primary: mode dependency failed, not supported in mode broadcast(3) [ 208.197746][ T35] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.205373][ T35] Buffer I/O error on dev nbd2, logical block 2, async page read [ 208.210728][ T7055] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.215170][ T7055] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.217892][ T7055] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.221626][ T7055] Buffer I/O error on dev nbd2, logical block 1, async page read [ 208.224519][ T7055] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.227440][ T7055] Buffer I/O error on dev nbd2, logical block 2, async page read [ 208.229984][ T7055] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.233065][ T7055] Buffer I/O error on dev nbd2, logical block 3, async page read [ 208.233983][T12982] bond2 (unregistering): Released all slaves [ 208.236287][ T7055] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.240443][ T7055] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.243328][ T7055] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.246280][ T7055] Buffer I/O error on dev nbd2, logical block 1, async page read [ 208.250398][ T7055] ldm_validate_partition_table(): Disk read failed. [ 208.254177][ T7055] Dev nbd2: unable to read RDB block 0 [ 208.257443][ T7055] nbd2: unable to read partition table [ 208.268164][ T7055] ldm_validate_partition_table(): Disk read failed. [ 208.271180][ T7055] Dev nbd2: unable to read RDB block 0 [ 208.274835][ T7055] nbd2: unable to read partition table [ 208.364498][ T40] kauditd_printk_skb: 280 callbacks suppressed [ 208.364510][ T40] audit: type=1400 audit(1778348193.121:7006): avc: denied { read write } for pid=12999 comm="syz.4.2057" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.380639][ T40] audit: type=1400 audit(1778348193.121:7007): avc: denied { open } for pid=12999 comm="syz.4.2057" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.391810][ T40] audit: type=1400 audit(1778348193.141:7008): avc: denied { create } for pid=13001 comm="syz.3.2058" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.398567][ T40] audit: type=1400 audit(1778348193.141:7009): avc: denied { map } for pid=13001 comm="syz.3.2058" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.406883][ T40] audit: type=1400 audit(1778348193.141:7010): avc: denied { read write } for pid=13001 comm="syz.3.2058" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.415322][ T40] audit: type=1400 audit(1778348193.141:7011): avc: denied { create } for pid=13001 comm="syz.3.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.421529][ T40] audit: type=1400 audit(1778348193.161:7012): avc: denied { create } for pid=12997 comm="syz.5.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.428230][ T40] audit: type=1400 audit(1778348193.181:7013): avc: denied { sys_module } for pid=12997 comm="syz.5.2056" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 208.942407][ T40] audit: type=1400 audit(1778348193.701:7014): avc: denied { recv } for pid=12983 comm="syz.2.2053" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49152 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 208.952349][ T40] audit: type=1400 audit(1778348193.701:7015): avc: denied { write } for pid=13011 comm="syz.3.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.999368][T12987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.254120][T13042] XFS (loop2): SB validate failed with error -5. [ 209.261887][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 209.288743][T13049] tmpfs: Bad value for 'mpol' [ 209.290892][T13050] tmpfs: Bad value for 'mpol' [ 209.430593][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 209.434499][ T34] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.438150][ T34] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.441922][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 209.444197][ T34] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 209.447253][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.450929][ T34] usb 9-1: config 0 descriptor?? [ 209.780274][T13094] ldm_validate_partition_table(): Disk read failed. [ 209.786525][T13093] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 209.786915][T13094] Dev nbd2: unable to read RDB block 0 [ 209.789065][T13093] UDF-fs: Scanning with blocksize 2048 failed [ 209.793044][T13093] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 209.794946][T13094] nbd2: unable to read partition table [ 209.795312][T13093] UDF-fs: Scanning with blocksize 4096 failed [ 209.801059][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 209.804632][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=30, location=30 [ 209.808756][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=29, location=29 [ 209.811536][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=28, location=28 [ 209.814599][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 209.817347][T13094] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 209.819542][T13094] UDF-fs: Scanning with blocksize 1024 failed [ 209.823235][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 209.826979][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=14, location=14 [ 209.829953][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13, location=13 [ 209.833824][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=12, location=12 [ 209.837121][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 209.840178][T13094] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 209.842885][T13094] UDF-fs: Scanning with blocksize 2048 failed [ 209.845021][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 209.847939][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6, location=6 [ 209.851042][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=5, location=5 [ 209.854378][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=4, location=4 [ 209.857035][T13094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 209.859769][T13094] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 209.863514][ T34] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 209.863836][T13093] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 209.864007][T13094] UDF-fs: Scanning with blocksize 4096 failed [ 209.864015][T13094] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 209.866235][ T34] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 209.876228][ T34] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 209.878649][ T34] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 209.886330][ T34] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 209.891227][ T34] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 210.066974][ T34] usb 9-1: USB disconnect, device number 8 [ 210.122417][T13116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13116 comm=syz.3.2092 [ 210.126205][T13116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2590 sclass=netlink_tcpdiag_socket pid=13116 comm=syz.3.2092 [ 210.255433][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.268418][T13126] __nla_validate_parse: 7 callbacks suppressed [ 210.268433][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 210.322774][T13132] overlayfs: failed to clone upperpath [ 210.513821][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 210.524897][T13139] program syz.2.2101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.528808][T13139] ata1.00: non-matching transfer count (32/0) [ 210.596787][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2105'. [ 210.604046][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 210.652893][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 210.722654][T13179] netlink: 'syz.4.2107': attribute type 21 has an invalid length. [ 210.725532][T13179] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.763562][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2113'. [ 210.764051][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 210.766572][T13186] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 210.775932][T13181] netlink: 'syz.3.2112': attribute type 33 has an invalid length. [ 210.778465][T13181] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2112'. [ 210.808833][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 210.830546][T13190] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2115'. [ 210.835343][T13190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2115'. [ 210.838224][T13190] netlink: 'syz.2.2115': attribute type 6 has an invalid length. [ 210.840717][T13190] netlink: 'syz.2.2115': attribute type 5 has an invalid length. [ 210.843599][T13190] netlink: 'syz.2.2115': attribute type 4 has an invalid length. [ 210.850702][T13193] overlayfs: failed to clone upperpath [ 210.850905][T13194] overlayfs: failed to clone upperpath [ 210.853058][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 210.914111][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 210.928388][T13203] trusted_key: encrypted_key: master key parameter is missing [ 210.943534][T13203] netlink: 'syz.2.2120': attribute type 21 has an invalid length. [ 210.954527][T13194] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 211.001213][T13209] openvswitch: netlink: IPv6 tunnel dst address is zero [ 211.029572][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 211.392756][T13216] sit0: entered promiscuous mode [ 211.398692][T13216] netlink: 'syz.2.2123': attribute type 1 has an invalid length. [ 211.402271][T13216] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2123'. [ 211.532891][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 211.535950][T13227] netlink: 'syz.2.2124': attribute type 21 has an invalid length. [ 211.621609][T13230] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1iÒûm÷]7ä(äaŠàó H˜] ³¹¿ÃÇ [ 211.924021][T13240] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 211.927178][T13240] vim2m vim2m.0: vidioc_s_fmt queue busy [ 212.287133][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 212.292247][T13250] bond8: (slave bond_slave_1): Device is not our slave [ 212.294495][T13250] bond8: option active_slave: invalid value (bond_slave_1) [ 212.335415][T13250] bond8 (unregistering): Released all slaves [ 212.432276][T13255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.438631][T13255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.486843][T13263] fuse: fd is not a fuse device [ 212.581513][T13263] netlink: 'syz.3.2134': attribute type 2 has an invalid length. [ 212.683767][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 212.744007][T13261] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 213.408465][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 213.408477][ T40] audit: type=1400 audit(1778348198.161:7242): avc: denied { mounton } for pid=13290 comm="syz.3.2140" path="/563/bus" dev="tmpfs" ino=2989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 213.408529][T13291] 9p: Bad value for 'dfltgid' [ 213.424084][T13291] 9p: Bad value for 'dfltgid' [ 213.465983][T13293] fuse: fd is not a fuse device [ 213.474716][ T40] audit: type=1400 audit(1778348198.231:7243): avc: denied { mount } for pid=13292 comm="syz.3.2141" name="/" dev="9p" ino=75261523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.538179][ T40] audit: type=1400 audit(1778348198.291:7244): avc: denied { read write } for pid=10044 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.548270][ T40] audit: type=1400 audit(1778348198.291:7245): avc: denied { open } for pid=10044 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.557907][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 213.558716][ T40] audit: type=1400 audit(1778348198.291:7246): avc: denied { ioctl } for pid=10044 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.573354][ T40] audit: type=1400 audit(1778348198.311:7247): avc: denied { prog_load } for pid=13295 comm="syz.5.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.581409][ T40] audit: type=1400 audit(1778348198.311:7248): avc: denied { bpf } for pid=13295 comm="syz.5.2142" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.593033][ T40] audit: type=1400 audit(1778348198.321:7249): avc: denied { perfmon } for pid=13295 comm="syz.5.2142" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.601717][ T40] audit: type=1400 audit(1778348198.321:7250): avc: denied { prog_run } for pid=13295 comm="syz.5.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.617413][ T40] audit: type=1400 audit(1778348198.371:7251): avc: denied { read } for pid=13295 comm="syz.5.2142" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 213.910860][T13307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.051810][ T29] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 214.211842][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 214.215330][ T29] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.218045][ T29] usb 10-1: config 0 has no interface number 0 [ 214.220136][ T29] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.223829][ T29] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 214.227480][ T29] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.230911][ T29] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.235315][ T29] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 214.238294][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.245464][ T29] usb 10-1: config 0 descriptor?? [ 214.258984][ T29] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 214.457375][ T29] usb 10-1: USB disconnect, device number 10 [ 214.473201][ T29] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 215.820596][T13273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.872961][ T7055] buffer_io_error: 202 callbacks suppressed [ 215.872977][ T7055] Buffer I/O error on dev loop6, logical block 8191999, async page read [ 215.999549][T13329] netlink: 'syz.2.2152': attribute type 63 has an invalid length. [ 216.002590][T13329] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2152'. [ 216.005585][T13329] gretap0: entered allmulticast mode [ 216.007601][T13329] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.070379][T13334] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 216.072896][T13334] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 216.152594][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 216.314653][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.317628][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.321504][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.324527][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.327919][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.332181][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.335270][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.337786][ T9] usb 9-1: Product: syz [ 216.339113][ T9] usb 9-1: Manufacturer: syz [ 216.343692][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 216.345411][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 216.351195][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2158'. [ 216.351681][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 216.356931][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 216.386682][T13351] netlink: 'syz.3.2159': attribute type 1 has an invalid length. [ 216.398301][T13351] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.408609][T13351] bond4: (slave geneve5): making interface the new active one [ 216.414145][T13351] bond4: (slave geneve5): Enslaving as an active interface with an up link [ 216.467883][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 216.472287][T13356] all: renamed from bridge_slave_1 (while UP) [ 216.545021][T13356] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2161'. [ 216.549710][T13318] netlink: 'syz.4.2148': attribute type 4 has an invalid length. [ 216.586751][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 216.593731][ T29] usb 9-1: USB disconnect, device number 9 [ 216.786980][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 216.874543][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 216.913472][T13374] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 216.933629][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 217.318455][T13394] fuse: fd is not a fuse device [ 217.321139][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2170'. [ 217.399346][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 217.406327][T13403] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 217.506272][T13411] netlink: 'syz.3.2175': attribute type 1 has an invalid length. [ 217.522742][T13411] bond5: entered promiscuous mode [ 217.525289][T13411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.532193][T13411] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2175'. [ 217.569395][T13411] bond5: (slave bridge10): making interface the new active one [ 217.573494][T13411] bridge10: entered promiscuous mode [ 217.577101][T13411] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 217.824663][ T7055] udevd[7055]: symlink '../../loop9' '/dev/disk/by-diskseq/101.tmp-b7:9' failed: Read-only file system [ 217.996873][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 218.059519][ T5749] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 218.136252][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 218.160059][T13451] option changes via remount are deprecated (pid=13449 comm=syz.5.2187) [ 218.167769][T13451] program syz.5.2187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.176263][T13436] netlink: 'syz.3.2181': attribute type 4 has an invalid length. [ 218.228697][T13455] netlink: 'syz.2.2189': attribute type 28 has an invalid length. [ 218.231390][T13455] netlink: 'syz.2.2189': attribute type 3 has an invalid length. [ 218.234017][T13455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2189'. [ 218.242470][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 218.312228][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 218.315095][T13464] netlink: 'syz.4.2190': attribute type 30 has an invalid length. [ 218.427216][ T40] kauditd_printk_skb: 184 callbacks suppressed [ 218.427228][ T40] audit: type=1400 audit(1778348203.181:7436): avc: denied { write } for pid=13469 comm="syz.5.2193" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 218.430734][ T7055] udevd[7055]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 218.442501][ T40] audit: type=1400 audit(1778348203.181:7437): avc: denied { map_create } for pid=13469 comm="syz.5.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 218.448875][ T40] audit: type=1400 audit(1778348203.181:7438): avc: denied { map_read map_write } for pid=13469 comm="syz.5.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 218.456956][ T40] audit: type=1400 audit(1778348203.201:7439): avc: denied { write } for pid=13471 comm="syz.2.2194" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 218.465860][ T40] audit: type=1400 audit(1778348203.201:7440): avc: denied { open } for pid=13471 comm="syz.2.2194" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 218.475012][ T40] audit: type=1400 audit(1778348203.201:7441): avc: denied { ioctl } for pid=13471 comm="syz.2.2194" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 218.482693][ T40] audit: type=1400 audit(1778348203.211:7442): avc: denied { mount } for pid=13469 comm="syz.5.2193" name="/" dev="9p" ino=75261523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 218.490482][ T40] audit: type=1400 audit(1778348203.221:7443): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49152 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 218.498579][ T40] audit: type=1400 audit(1778348203.241:7444): avc: denied { unmount } for pid=10044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 218.505091][ T40] audit: type=1400 audit(1778348203.251:7445): avc: denied { read append } for pid=13471 comm="syz.2.2194" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 218.522171][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 218.525702][T13464] netlink: 'syz.4.2190': attribute type 30 has an invalid length. [ 218.748933][T13484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13484 comm=syz.3.2198 [ 218.755389][T13484] netlink: 'syz.3.2198': attribute type 1 has an invalid length. [ 218.787878][T13484] bond6: (slave bridge11): making interface the new active one [ 218.791972][T13484] bond6: (slave bridge11): Enslaving as an active interface with an up link [ 218.956310][T13500] fuse: fd is not a fuse device [ 219.338727][T13515] binder: 13514:13515 ioctl c0306201 200000000080 returned -14 [ 219.344972][T13515] binder: 13514:13515 ioctl c0306201 2000000003c0 returned -14 [ 219.349458][T13515] netlink: del zone limit has 4 unknown bytes [ 219.390285][T13518] ªªªªªª: renamed from vlan0 (while UP) [ 219.444000][T13518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2210'. [ 219.669049][T13536] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 219.672113][T13536] CPU: 2 UID: 0 PID: 13536 Comm: syz.4.2215 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.672139][T13536] Tainted: [L]=SOFTLOCKUP [ 219.672144][T13536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.672150][T13536] Call Trace: [ 219.672154][T13536] [ 219.672158][T13536] dump_stack_lvl+0x100/0x190 [ 219.672188][T13536] sysfs_warn_dup.cold+0x1c/0x28 [ 219.672204][T13536] sysfs_do_create_link_sd+0x113/0x140 [ 219.672220][T13536] sysfs_create_link+0x61/0xc0 [ 219.672233][T13536] device_add+0x675/0x1950 [ 219.672255][T13536] ? __pfx_device_add+0x10/0x10 [ 219.672267][T13536] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.672282][T13536] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 219.672310][T13536] wiphy_register+0x1edd/0x2d90 [ 219.672322][T13536] ? __rtnl_unlock+0xb9/0xf0 [ 219.672339][T13536] ? __pfx_wiphy_register+0x10/0x10 [ 219.672352][T13536] ? __asan_memset+0x23/0x50 [ 219.672367][T13536] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 219.672389][T13536] ieee80211_register_hw+0x3055/0x4570 [ 219.672412][T13536] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 219.672428][T13536] ? __pfx___debug_object_init+0x10/0x10 [ 219.672445][T13536] ? find_held_lock+0x2b/0x80 [ 219.672457][T13536] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.672470][T13536] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 219.672483][T13536] ? __hrtimer_setup+0x208/0x330 [ 219.672500][T13536] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 219.672538][T13536] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 219.672568][T13536] ? __asan_memcpy+0x3c/0x60 [ 219.672594][T13536] hwsim_new_radio_nl+0xc5f/0x1370 [ 219.672620][T13536] ? rcu_is_watching+0x12/0xc0 [ 219.672647][T13536] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 219.672681][T13536] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 219.672707][T13536] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 219.672738][T13536] genl_family_rcv_msg_doit+0x214/0x300 [ 219.672766][T13536] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 219.672799][T13536] ? bpf_lsm_capable+0x9/0x10 [ 219.672817][T13536] ? security_capable+0x80/0x260 [ 219.672835][T13536] ? ns_capable+0xd2/0xf0 [ 219.672862][T13536] genl_rcv_msg+0x560/0x800 [ 219.672889][T13536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.672914][T13536] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 219.672950][T13536] netlink_rcv_skb+0x159/0x420 [ 219.672971][T13536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.672997][T13536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.673029][T13536] ? netlink_deliver_tap+0x1ae/0xcc0 [ 219.673054][T13536] genl_rcv+0x28/0x40 [ 219.673075][T13536] netlink_unicast+0x585/0x850 [ 219.673101][T13536] ? __pfx_netlink_unicast+0x10/0x10 [ 219.673145][T13536] netlink_sendmsg+0x8b0/0xda0 [ 219.673170][T13536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.673191][T13536] ? pti_set_user_pgtbl+0x30/0x50 [ 219.673216][T13536] ____sys_sendmsg+0x9e1/0xb70 [ 219.673228][T13536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.673247][T13536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.673264][T13536] ? __pfx_futex_wake_mark+0x10/0x10 [ 219.673278][T13536] ___sys_sendmsg+0x190/0x1e0 [ 219.673292][T13536] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.673324][T13536] __sys_sendmsg+0x170/0x220 [ 219.673334][T13536] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.673344][T13536] ? __x64_sys_futex+0x34f/0x4d0 [ 219.673365][T13536] ? rcu_is_watching+0x12/0xc0 [ 219.673384][T13536] do_syscall_64+0x10b/0xf80 [ 219.673397][T13536] ? clear_bhb_loop+0x40/0x90 [ 219.673410][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.673423][T13536] RIP: 0033:0x7f2099b9cdd9 [ 219.673437][T13536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.673452][T13536] RSP: 002b:00007f2097df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.673470][T13536] RAX: ffffffffffffffda RBX: 00007f2099e15fa0 RCX: 00007f2099b9cdd9 [ 219.673480][T13536] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 219.673491][T13536] RBP: 00007f2099c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 219.673500][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.673509][T13536] R13: 00007f2099e16038 R14: 00007f2099e15fa0 R15: 00007fffe888fe58 [ 219.673531][T13536] [ 219.864704][ T104] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.868746][ T104] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.899365][T13549] ip6t_rpfilter: unknown options [ 219.941664][ T5736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.954419][ T5736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.957658][ T5736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.961157][ T5736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.967227][ T5736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.043833][ T104] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.046995][ T104] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.231858][ T5832] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 220.309563][ T104] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.312823][ T104] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.381856][ T5832] usb 9-1: Using ep0 maxpacket: 8 [ 220.385411][ T5832] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 220.389349][ T5832] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.393468][ T5832] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.397342][ T5832] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.403808][ T5832] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.407409][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.615673][ T5832] usb 9-1: GET_CAPABILITIES returned 0 [ 220.617949][ T5832] usbtmc 9-1:16.0: can't read capabilities [ 220.762653][ T104] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.765881][ T104] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.773667][T13569] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 220.823153][ T5832] usb 9-1: USB disconnect, device number 10 [ 220.914992][T13551] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.917460][T13551] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.919831][T13551] bridge_slave_0: entered allmulticast mode [ 220.922902][T13551] bridge_slave_0: entered promiscuous mode [ 220.929196][T13551] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.933973][T13551] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.937143][T13551] bridge_slave_1: entered allmulticast mode [ 220.942621][T13551] bridge_slave_1: entered promiscuous mode [ 220.964163][T13551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.970487][T13551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.990496][T13551] team0: Port device team_slave_0 added [ 221.017660][T13551] team0: Port device team_slave_1 added [ 221.056861][T13551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.059862][T13551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.070557][T13551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.077231][T13551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.080198][T13551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.091128][T13551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.168226][T13551] hsr_slave_0: entered promiscuous mode [ 221.170606][T13551] hsr_slave_1: entered promiscuous mode [ 221.872316][ T104] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 221.875744][ T104] ip6gre1 (unregistering): left promiscuous mode [ 221.951902][ T5738] SELinux: failure in sel_netif_sid_slow(), invalid network interface (84) [ 222.013376][ T5736] Bluetooth: hci4: command tx timeout [ 222.112205][ T104] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 222.114902][ T104] bridge1 (unregistering): left promiscuous mode [ 222.161619][T13611] TCP: TCP_TX_DELAY enabled [ 222.312696][ T104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.382559][ T104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.433703][ T104] bond0 (unregistering): Released all slaves [ 222.442328][ T104] bond1 (unregistering): Released all slaves [ 222.455016][ T104] bond2 (unregistering): Released all slaves [ 222.467432][ T104] bond3 (unregistering): Released all slaves [ 223.209586][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 223.251846][ T1192] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 223.672303][T13551] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.675761][T13551] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.679645][T13551] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 223.684752][T13551] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 223.737221][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 223.831235][ T40] kauditd_printk_skb: 167 callbacks suppressed [ 223.831247][ T40] audit: type=1400 audit(1778348208.581:7613): avc: denied { write } for pid=13641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.873508][ T40] audit: type=1400 audit(1778348208.631:7614): avc: denied { write } for pid=13644 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.023700][ T104] hsr_slave_0: left promiscuous mode [ 224.062874][ T104] hsr_slave_1: left promiscuous mode [ 224.067149][ T104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.069582][ T104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.091944][ T5736] Bluetooth: hci4: command tx timeout [ 224.112727][ T104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.115510][ T104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.212055][ T104] veth1_macvtap: left promiscuous mode [ 224.213920][ T104] veth0_macvtap: left allmulticast mode [ 224.215695][ T104] veth0_macvtap: left promiscuous mode [ 224.217509][ T104] veth1_vlan: left promiscuous mode [ 224.219234][ T104] veth0_vlan: left promiscuous mode [ 224.414006][ T40] audit: type=1400 audit(1778348209.171:7615): avc: denied { create } for pid=13646 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.439915][ T40] audit: type=1400 audit(1778348209.171:7616): avc: denied { write } for pid=13646 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.447971][ T40] audit: type=1400 audit(1778348209.171:7617): avc: denied { nlmsg_write } for pid=13646 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.461612][ T40] audit: type=1400 audit(1778348209.201:7618): avc: denied { create } for pid=13646 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.471016][ T40] audit: type=1400 audit(1778348209.201:7619): avc: denied { create } for pid=13646 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.478608][ T40] audit: type=1400 audit(1778348209.201:7620): avc: denied { bind } for pid=13646 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.496305][ T40] audit: type=1400 audit(1778348209.201:7621): avc: denied { write } for pid=13646 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.504436][ T40] audit: type=1400 audit(1778348209.201:7622): avc: denied { read } for pid=13646 comm="syz.2.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.393439][T13551] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.397929][T13551] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.401189][T13551] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 225.404634][T13551] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 225.436320][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 225.685088][T13551] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.689158][T13551] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.693464][T13551] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 225.697411][T13551] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 225.746133][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 225.913027][T13551] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.917011][T13551] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.922672][T13551] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 225.926683][T13551] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 226.182092][ T5736] Bluetooth: hci4: command tx timeout [ 226.327285][T13551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.356139][T13551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.360007][T13551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.396070][T13551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.399884][T13551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.434817][T13551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.438706][T13551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.487759][T13551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.605829][T13551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.621465][T13551] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.626144][T13700] 9pnet_virtio: no channels available for device syz [ 226.631581][T10006] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.634737][T10006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.647282][T10006] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.649687][T10006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.934892][T13551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.948909][T13722] xt_hashlimit: size too large, truncated to 1048576 [ 226.957087][T13551] veth0_vlan: entered promiscuous mode [ 226.963117][T13551] veth1_vlan: entered promiscuous mode [ 226.980510][T13551] veth0_macvtap: entered promiscuous mode [ 226.985853][T13551] veth1_macvtap: entered promiscuous mode [ 226.993942][T13551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.999440][T13551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.005691][ T104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.009335][ T104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.012005][ T5839] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 227.015753][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.018683][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.168079][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 227.176901][ T5839] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.184438][ T5839] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.190145][ T5839] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.212128][ T5839] usb 7-1: config 1 interface 0 has no altsetting 0 [ 227.225472][ T5839] usb 7-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 227.229179][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.239130][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.242810][ T5839] usb 7-1: Product: syz [ 227.243983][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.244596][ T5839] usb 7-1: Manufacturer: syz [ 227.244613][ T5839] usb 7-1: SerialNumber: syz [ 227.280409][T10006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.283813][T10006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.429800][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 227.456395][ T5839] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 227.486276][ T7055] udevd[7055]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 227.501716][T13731] sg_write: data in/out 63015/10 bytes for SCSI command 0xff-- guessing data in; [ 227.501716][T13731] program syz.3.2249 not setting count and/or reply_len properly [ 227.614640][T13733] overlayfs: missing 'lowerdir' [ 227.657459][ T5839] usb 7-1: USB disconnect, device number 12 [ 227.673004][ T5839] usblp0: removed [ 227.977400][ T7055] udevd[7055]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 227.993411][T13742] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 227.996908][ T7055] udevd[7055]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 228.012421][T13738] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 228.056659][ T7055] udevd[7055]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 228.093522][T13742] geneve1: entered allmulticast mode [ 228.226436][T13760] __nla_validate_parse: 2 callbacks suppressed [ 228.226452][T13760] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2257'. [ 228.251894][ T5736] Bluetooth: hci4: command tx timeout [ 228.363702][T13760] nbd4: detected capacity change from 0 to 447 [ 228.370387][ T5736] block nbd4: Receive control failed (result -104) [ 228.471371][T13768] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:21 [ 228.491446][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 229.191465][ T40] kauditd_printk_skb: 194 callbacks suppressed [ 229.191481][ T40] audit: type=1400 audit(1778348213.941:7817): avc: denied { execute } for pid=13777 comm="syz.2.2261" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=54962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 229.204956][ T40] audit: type=1400 audit(1778348213.961:7818): avc: denied { getopt } for pid=13777 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.211699][ T40] audit: type=1400 audit(1778348213.961:7819): avc: denied { connect } for pid=13777 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.220798][ T40] audit: type=1400 audit(1778348213.961:7820): avc: denied { name_connect } for pid=13777 comm="syz.2.2261" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 229.231052][ T40] audit: type=1400 audit(1778348213.961:7821): avc: denied { shutdown } for pid=13777 comm="syz.2.2261" lport=39620 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.241298][ T40] audit: type=1400 audit(1778348213.981:7822): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49152 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.253676][T13779] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2261'. [ 229.256597][ T40] audit: type=1400 audit(1778348214.011:7823): avc: denied { create } for pid=13777 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 229.271403][ T40] audit: type=1400 audit(1778348214.011:7824): avc: denied { getopt } for pid=13777 comm="syz.2.2261" lport=39620 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.280520][ T40] audit: type=1400 audit(1778348214.011:7825): avc: denied { write } for pid=13777 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 229.292620][ T40] audit: type=1400 audit(1778348214.051:7826): avc: denied { egress } for pid=844 comm="kworker/2:2" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 229.300007][T13783] xt_hashlimit: size too large, truncated to 1048576 [ 229.566306][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 229.620179][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 229.659949][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 229.693952][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 230.089133][T13806] netlink: 'syz.2.2271': attribute type 10 has an invalid length. [ 230.571394][T13819] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 230.578605][T13819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13819 comm=syz.4.2276 [ 230.595886][T13819] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 230.673168][T13819] bond2 (unregistering): Released all slaves [ 231.217179][T13833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2281'. [ 232.018535][T13844] netlink: 'syz.4.2285': attribute type 21 has an invalid length. [ 232.021155][T13844] netlink: 'syz.4.2285': attribute type 6 has an invalid length. [ 232.023757][T13844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2285'. [ 232.112876][T13853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.075503][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 233.117654][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 233.326515][T13878] cgroup: fork rejected by pids controller in /syz2 [ 234.110382][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.119226][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.124687][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.130370][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.135541][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.141092][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 234.145433][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 234.148340][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 234.266771][ T40] kauditd_printk_skb: 144 callbacks suppressed [ 234.266793][ T40] audit: type=1400 audit(1778348219.021:7971): avc: denied { recv } for pid=5719 comm="syz-executor" saddr=127.0.0.1 src=49152 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 234.290924][ T40] audit: type=1400 audit(1778348219.041:7972): avc: denied { read } for pid=13985 comm="syz.2.2302" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.304115][ T40] audit: type=1400 audit(1778348219.041:7973): avc: denied { open } for pid=13985 comm="syz.2.2302" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.314115][ T40] audit: type=1400 audit(1778348219.041:7974): avc: denied { ioctl } for pid=13985 comm="syz.2.2302" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.324687][ T40] audit: type=1400 audit(1778348219.041:7975): avc: denied { sys_module } for pid=13970 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 234.333896][ T40] audit: type=1400 audit(1778348219.071:7976): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49152 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 234.399302][ T40] audit: type=1400 audit(1778348219.151:7977): avc: denied { create } for pid=13990 comm="syz.4.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.413772][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 234.422924][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 234.468979][ T40] audit: type=1400 audit(1778348219.221:7978): avc: denied { read write } for pid=13992 comm="syz.4.2304" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.476862][ T40] audit: type=1400 audit(1778348219.221:7979): avc: denied { open } for pid=13992 comm="syz.4.2304" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.484850][ T40] audit: type=1400 audit(1778348219.221:7980): avc: denied { ioctl } for pid=13992 comm="syz.4.2304" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.798355][T13970] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.801577][T13970] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.805217][T13970] bridge_slave_0: entered allmulticast mode [ 234.809036][T13970] bridge_slave_0: entered promiscuous mode [ 234.814249][T13970] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.817444][T13970] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.820670][T13970] bridge_slave_1: entered allmulticast mode [ 234.825157][T13970] bridge_slave_1: entered promiscuous mode [ 234.853152][T13970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.860032][T13970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.887258][T13970] team0: Port device team_slave_0 added [ 234.895899][T13970] team0: Port device team_slave_1 added [ 234.920091][T13970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.923240][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.933789][T13970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.939964][T13970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.942044][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 234.943044][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.945565][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 234.955602][T13970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.992233][T13973] ceph: No mds server is up or the cluster is laggy [ 234.996204][T13970] hsr_slave_0: entered promiscuous mode [ 234.999927][T13970] hsr_slave_1: entered promiscuous mode [ 235.003547][T13970] debugfs: 'hsr0' already exists in 'hsr' [ 235.006102][T13970] Cannot create hsr debugfs directory [ 235.081254][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 235.098725][T14004] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 235.101512][T14004] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.111689][T14004] vhci_hcd vhci_hcd.0: Device attached [ 235.129740][T14005] vhci_hcd: connection closed [ 235.142302][ T1192] vhci_hcd vhci_hcd.3: stop threads [ 235.147699][ T1192] vhci_hcd vhci_hcd.3: release socket [ 235.150155][ T1192] vhci_hcd vhci_hcd.3: disconnect device [ 235.224413][T13970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.255870][T13970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.259733][T13970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.294459][T13970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.298278][T13970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.314451][T14008] binder: 14007:14008 ioctl 40304580 200000000100 returned -22 [ 235.336769][T13970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.349301][T13970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.377032][T13970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.408063][T13970] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.411268][T13970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.414599][T13970] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.417651][T13970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.459768][T13970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.492103][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.532056][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.658806][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 235.688614][T14032] netlink: 'syz.2.2312': attribute type 1 has an invalid length. [ 235.740611][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 235.776023][T14025] batadv0: entered promiscuous mode [ 235.782027][T14025] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 235.822265][T14025] batadv0: left promiscuous mode [ 235.904592][T14026] IPv6: sit2: Disabled Multicast RS [ 235.907214][T14026] sit2: entered allmulticast mode [ 235.934089][T14036] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 236.043667][T14037] veth1: entered promiscuous mode [ 236.048309][T14037] bond8: (slave veth1): Enslaving as a backup interface with a down link [ 236.059123][T13970] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.103306][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.105714][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.111264][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.114300][T10010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.182048][ T5749] Bluetooth: hci1: command tx timeout [ 236.400333][T13970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.572243][T13970] veth0_vlan: entered promiscuous mode [ 236.577500][T13970] veth1_vlan: entered promiscuous mode [ 236.591723][T13970] veth0_macvtap: entered promiscuous mode [ 236.596545][T13970] veth1_macvtap: entered promiscuous mode [ 236.612310][T13970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.620690][T13970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.627540][ T1192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.631261][ T1192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.637114][ T1192] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.640833][ T1192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.823697][T14064] bond2: Unable to set up delay as MII monitoring is disabled [ 236.863360][T14064] bond2 (unregistering): Released all slaves [ 236.924095][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.928106][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.950607][T10010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.954329][T10010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.126271][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 237.350307][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 237.363851][T14098] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2321'. [ 237.442751][T14087] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 237.778786][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 238.251879][ T5749] Bluetooth: hci1: command tx timeout [ 238.351554][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 238.361938][T14136] team0 (unregistering): Port device team_slave_0 removed [ 238.382688][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 238.395122][T14136] team0 (unregistering): Port device team_slave_1 removed [ 238.450106][T14136] team0 (unregistering): Port device dummy0 removed [ 238.499931][T14128] veth0_vlan: left promiscuous mode [ 238.601298][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 238.874302][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 239.113297][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 239.162482][T14163] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 239.331011][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 239.331029][ T40] audit: type=1400 audit(1778348224.081:8272): avc: denied { read write } for pid=5737 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.340899][ T40] audit: type=1400 audit(1778348224.081:8273): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.351219][ T40] audit: type=1400 audit(1778348224.081:8274): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.385856][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.389136][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.391828][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.394484][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.397086][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.399822][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.402636][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.405607][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.408250][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.410890][T14170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.437688][ T40] audit: type=1400 audit(1778348224.191:8275): avc: denied { write } for pid=14173 comm="syz.4.2337" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 239.452774][ T40] audit: type=1400 audit(1778348224.211:8276): avc: denied { egress } for pid=5131 comm="klogd" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 239.460386][ T40] audit: type=1400 audit(1778348224.211:8277): avc: denied { sendto } for pid=5131 comm="klogd" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 239.484699][ T40] audit: type=1400 audit(1778348224.241:8278): avc: denied { read } for pid=14173 comm="syz.4.2337" dev="nsfs" ino=4026533821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 239.491986][ T40] audit: type=1400 audit(1778348224.241:8279): avc: denied { open } for pid=14173 comm="syz.4.2337" path="net:[4026533821]" dev="nsfs" ino=4026533821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 239.501860][ T40] audit: type=1400 audit(1778348224.251:8280): avc: denied { read } for pid=14173 comm="syz.4.2337" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 239.509146][ T40] audit: type=1400 audit(1778348224.261:8281): avc: denied { open } for pid=14173 comm="syz.4.2337" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 239.595760][T14179] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2339'. [ 239.743932][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 239.861565][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2342'. [ 239.905620][T14206] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 239.911433][T14206] Error validating options; rc = [-22] [ 240.087211][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 240.183527][T14228] netlink: 'syz.6.2345': attribute type 1 has an invalid length. [ 240.186961][T14228] netlink: 'syz.6.2345': attribute type 2 has an invalid length. [ 240.341865][ T5749] Bluetooth: hci1: command tx timeout [ 240.619603][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 240.639312][T14242] tipc: Started in network mode [ 240.640941][T14242] tipc: Node identity 84e, cluster identity 4711 [ 240.651995][T14242] tipc: Node number set to 2126 [ 240.698740][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 240.736243][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 240.899231][T14260] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2353'. [ 240.905426][T14260] openvswitch: netlink: IP tunnel dst address not specified [ 241.030718][T14267] /dev/nullb0: Can't open blockdev [ 241.501904][ T984] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 241.673491][ T984] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 241.677018][ T984] usb 11-1: config 0 interface 0 has no altsetting 0 [ 241.681163][ T984] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 241.685084][ T984] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 241.687834][ T984] usb 11-1: Product: syz [ 241.689216][ T984] usb 11-1: Manufacturer: syz [ 241.690920][ T984] usb 11-1: SerialNumber: syz [ 241.696389][ T984] usb 11-1: config 0 descriptor?? [ 241.698569][T14281] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 241.708773][ T984] usb 11-1: selecting invalid altsetting 0 [ 241.719450][T14291] netlink: 'syz.3.2363': attribute type 11 has an invalid length. [ 241.957709][ T984] usb 11-1: USB disconnect, device number 2 [ 242.107504][T14294] /dev/nbd3: Can't open blockdev [ 242.411894][ T5736] Bluetooth: hci1: command tx timeout [ 242.471934][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 242.621935][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 242.628881][ T9] usb 9-1: unable to get BOS descriptor set [ 242.634374][ T9] usb 9-1: config 3 has an invalid interface number: 127 but max is 0 [ 242.639006][ T9] usb 9-1: config 3 has no interface number 0 [ 242.645593][ T9] usb 9-1: config 3 interface 127 altsetting 7 has an endpoint descriptor with address 0x76, changing to 0x6 [ 242.654845][ T9] usb 9-1: config 3 interface 127 altsetting 7 endpoint 0x6 has invalid maxpacket 51086, setting to 1024 [ 242.661936][ T9] usb 9-1: config 3 interface 127 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 1024 [ 242.670177][ T9] usb 9-1: config 3 interface 127 altsetting 7 has an endpoint descriptor with address 0x1F, changing to 0xF [ 242.674818][ T9] usb 9-1: config 3 interface 127 altsetting 7 endpoint 0xF has invalid maxpacket 520, setting to 64 [ 242.678775][ T9] usb 9-1: config 3 interface 127 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 242.683339][ T9] usb 9-1: config 3 interface 127 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 242.687226][ T9] usb 9-1: config 3 interface 127 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 242.691430][ T9] usb 9-1: config 3 interface 127 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 242.697506][ T9] usb 9-1: config 3 interface 127 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 242.701581][ T9] usb 9-1: config 3 interface 127 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 242.705810][ T9] usb 9-1: config 3 interface 127 altsetting 7 has an endpoint descriptor with address 0x27, changing to 0x7 [ 242.709888][ T9] usb 9-1: config 3 interface 127 altsetting 7 endpoint 0x7 has an invalid bInterval 104, changing to 7 [ 242.714579][ T9] usb 9-1: config 3 interface 127 altsetting 7 endpoint 0x7 has invalid maxpacket 41810, setting to 1024 [ 242.718984][ T9] usb 9-1: config 3 interface 127 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 242.723120][ T9] usb 9-1: config 3 interface 127 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 242.726910][ T9] usb 9-1: config 3 interface 127 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 242.730323][ T9] usb 9-1: config 3 interface 127 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 242.734683][ T9] usb 9-1: config 3 interface 127 altsetting 7 has 17 endpoint descriptors, different from the interface descriptor's value: 15 [ 242.739294][ T9] usb 9-1: config 3 interface 127 has no altsetting 0 [ 242.743932][ T9] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1100, bcdDevice=ae.fe [ 242.747260][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.757552][ T9] usb 9-1: Product: ⽿ä£éŒ€í¨åŠ«ê‰£ã•¿æ†®æ¿šê¯…硲홮矤豎ᤙ㡹Ӽ븥罣ꫦ骖㎶쥘떫膭᫿ឋä‡æ˜Žçƒ¤íŸ†è‘櫡呉⻲ీ㭗讠᜵缲ԗף㔣ࣻã€á«¨ê©¥ïµ´ï®…á·Šâ“šê“᪯슅Ʋ㗠î è¥è‚´ë’¦ì›»ë•²æˆ¹à½½ì”—㠧ꭇ䀢ᱠ椖ㄌ塵鮀埱↶௥ረáœà¨ å±¬æ ƒ [ 242.770442][ T9] usb 9-1: Manufacturer: 《 [ 242.772675][ T9] usb 9-1: SerialNumber: syz [ 242.779115][T14301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.783128][T14301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.902644][ T5746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.914574][ T5746] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.918488][ T5746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.926763][ T5746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.930424][ T5746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.033044][ T9] option 9-1:3.127: GSM modem (1-port) converter detected [ 243.095060][ T9] usb 9-1: USB disconnect, device number 11 [ 243.115921][ T9] option 9-1:3.127: device disconnected [ 243.283002][T14332] macsec0: entered promiscuous mode [ 243.287427][T14332] macsec0: entered allmulticast mode [ 243.300122][T14332] veth1_macvtap: entered allmulticast mode [ 243.315433][T14332] overlayfs: failed to resolve 'pcr=00000000000000000059': -2 [ 243.485141][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 243.828665][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 243.843069][T14345] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2377'. [ 243.950099][ T7036] udevd[7036]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 244.109669][T14321] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.116557][T14321] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.121073][T14321] bridge_slave_0: entered allmulticast mode [ 244.125167][T14321] bridge_slave_0: entered promiscuous mode [ 244.129968][T14321] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.133286][T14321] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.136405][T14321] bridge_slave_1: entered allmulticast mode [ 244.140448][T14321] bridge_slave_1: entered promiscuous mode [ 244.168366][T14321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.176295][T14321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.221558][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 244.258831][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 244.259196][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.266828][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.275507][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.279541][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.283935][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.287877][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.292960][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.296944][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.300804][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 244.332077][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.372731][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.377487][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.382861][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 244.391439][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 244.397475][ T40] kauditd_printk_skb: 190 callbacks suppressed [ 244.397488][ T40] audit: type=1400 audit(1778348229.151:8472): avc: denied { name_bind } for pid=14365 comm="syz.4.2381" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 244.410438][ T40] audit: type=1400 audit(1778348229.151:8473): avc: denied { node_bind } for pid=14365 comm="syz.4.2381" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 244.421892][ T40] audit: type=1400 audit(1778348229.151:8474): avc: denied { recv } for pid=14365 comm="syz.4.2381" saddr=::1 src=20000 daddr=::1 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 244.439887][T14321] team0: Port device team_slave_0 added [ 244.443092][T14321] team0: Port device team_slave_1 added [ 244.456328][T14321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.458569][T14321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.466920][T14321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.471940][T14321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.474162][T14321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.482457][T14321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.510059][T14321] hsr_slave_0: entered promiscuous mode [ 244.512328][T14321] hsr_slave_1: entered promiscuous mode [ 244.514415][T14321] debugfs: 'hsr0' already exists in 'hsr' [ 244.516202][T14321] Cannot create hsr debugfs directory [ 244.741067][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.744960][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.748360][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 244.751815][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 244.887595][ T40] audit: type=1400 audit(1778348229.641:8475): avc: denied { read write } for pid=13551 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.898781][ T40] audit: type=1400 audit(1778348229.641:8476): avc: denied { open } for pid=13551 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.906208][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 244.907345][ T40] audit: type=1400 audit(1778348229.641:8477): avc: denied { ioctl } for pid=13551 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.920697][ T40] audit: type=1400 audit(1778348229.661:8478): avc: denied { prog_load } for pid=14369 comm="syz.3.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 244.927984][ T40] audit: type=1400 audit(1778348229.661:8479): avc: denied { bpf } for pid=14369 comm="syz.3.2382" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.936117][ T40] audit: type=1400 audit(1778348229.661:8480): avc: denied { perfmon } for pid=14369 comm="syz.3.2382" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.944872][ T40] audit: type=1400 audit(1778348229.661:8481): avc: denied { prog_run } for pid=14369 comm="syz.3.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 244.949042][T14370] 9p: Could not find request transport: unix [ 244.981945][ T5749] Bluetooth: hci6: command tx timeout [ 245.002795][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 245.025632][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.030108][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.035361][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 245.039749][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 245.080363][ T7036] udevd[7036]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 245.104306][T14378] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 245.106322][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 245.574297][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 245.614832][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.618270][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.621564][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 245.627466][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 245.944343][T14393] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 246.136741][T14404] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 246.372144][ T59] bridge_slave_1: left promiscuous mode [ 246.378223][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.461935][ T59] bridge_slave_0: left allmulticast mode [ 246.464485][ T59] bridge_slave_0: left promiscuous mode [ 246.467146][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.952595][T14396] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 247.039065][T14418] XFS (nullb0): Invalid superblock magic number [ 247.053644][ T5749] Bluetooth: hci6: command tx timeout [ 247.462720][ T59] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface [ 247.466275][ T59] bond8 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 06:31:b8:6a:03:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 247.722690][ T59] bond5 (unregistering): (slave geneve5): Releasing active interface [ 247.782280][ T59] bond4 (unregistering): (slave geneve4): Releasing active interface [ 248.472382][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.532356][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.583507][ T59] bond0 (unregistering): Released all slaves [ 248.632567][ T59] bond1 (unregistering): (slave veth5): Releasing backup interface [ 248.693230][ T59] bond1 (unregistering): Released all slaves [ 248.700673][ T59] bond2 (unregistering): Released all slaves [ 248.708610][ T59] bond3 (unregistering): Released all slaves [ 248.716881][ T59] bond4 (unregistering): Released all slaves [ 248.724608][ T59] bond5 (unregistering): Released all slaves [ 248.733632][ T59] bond6 (unregistering): Released all slaves [ 248.743272][ T59] bond7 (unregistering): Released all slaves [ 248.802591][ T59] bond8 (unregistering): (slave veth1): Releasing backup interface [ 248.863881][ T59] bond8 (unregistering): Released all slaves [ 249.007227][T14431] netlink: 'syz.6.2400': attribute type 29 has an invalid length. [ 249.063026][ T59] tipc: Left network mode [ 249.079035][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 249.106476][T14437] tmpfs: Bad value for 'nr_inodes' [ 249.124160][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 249.131938][ T5749] Bluetooth: hci6: command tx timeout [ 249.143889][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 249.159083][T14451] __nla_validate_parse: 26 callbacks suppressed [ 249.159097][T14451] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2403'. [ 249.164388][T14451] netlink: 'syz.3.2403': attribute type 2 has an invalid length. [ 249.181692][T14452] xt_hashlimit: size too large, truncated to 1048576 [ 249.242333][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 249.328414][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 249.332157][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 249.339541][T14462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=14462 comm=syz.3.2406 [ 249.356404][T14468] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2407'. [ 249.361203][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2407'. [ 249.365262][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2407'. [ 249.368961][T14468] netlink: 'syz.6.2407': attribute type 12 has an invalid length. [ 249.381111][T14468] netlink: 'syz.6.2407': attribute type 7 has an invalid length. [ 249.393996][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2408'. [ 249.417908][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 249.417962][ T40] audit: type=1400 audit(1778348234.171:8622): avc: denied { read } for pid=14475 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.441257][ T40] audit: type=1400 audit(1778348234.171:8623): avc: denied { read open } for pid=14475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.445185][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 249.461342][ T40] audit: type=1400 audit(1778348234.171:8624): avc: denied { getattr } for pid=14475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.471284][ T40] audit: type=1400 audit(1778348234.171:8625): avc: denied { read } for pid=14467 comm="syz.6.2407" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.483166][ T40] audit: type=1400 audit(1778348234.171:8626): avc: denied { open } for pid=14467 comm="syz.6.2407" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.495040][ T40] audit: type=1400 audit(1778348234.171:8627): avc: denied { ioctl } for pid=14467 comm="syz.6.2407" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.508966][ T40] audit: type=1400 audit(1778348234.171:8628): avc: denied { read write } for pid=14473 comm="syz.3.2409" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.518876][ T40] audit: type=1400 audit(1778348234.171:8629): avc: denied { open } for pid=14473 comm="syz.3.2409" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.527874][ T40] audit: type=1400 audit(1778348234.171:8630): avc: denied { create } for pid=14473 comm="syz.3.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.541529][ T40] audit: type=1400 audit(1778348234.181:8631): avc: denied { write } for pid=14472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.588037][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2410'. [ 249.598244][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 249.617936][ T7544] udevd[7544]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 249.663121][ T5749] block nbd5: Receive control failed (result -107) [ 249.706162][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.762833][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 250.026956][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.149299][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 250.328955][T14504] netlink: 'syz.6.2414': attribute type 30 has an invalid length. [ 250.510298][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.603811][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 250.608015][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2416'. [ 250.611008][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 250.624725][T14504] bond1: option arp_missed_max: invalid value (0) [ 250.626801][T14504] bond1: option arp_missed_max: allowed values 1 - 255 [ 250.665078][T14504] bond1 (unregistering): Released all slaves [ 250.866081][T14518] binder: 14517:14518 ioctl c0306201 200000000080 returned -14 [ 250.871271][T14518] binder: 14517:14518 ioctl c0306201 2000000003c0 returned -14 [ 250.888356][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 251.022822][T14321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.054393][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.064271][T14321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.068193][T14321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.079871][T14533] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 251.098685][T14321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.196333][T14543] ubi0: attaching mtd0 [ 251.211896][ T5749] Bluetooth: hci6: command tx timeout [ 251.272094][ T59] hsr_slave_0: left promiscuous mode [ 251.292264][ T59] hsr_slave_1: left promiscuous mode [ 251.298216][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.301632][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.372799][ T59] veth1_macvtap: left promiscuous mode [ 251.375016][ T59] veth0_macvtap: left promiscuous mode [ 251.377337][ T59] veth1_vlan: left promiscuous mode [ 252.003806][T14565] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 252.042532][ T59] team0 (unregistering): Port device team_slave_1 removed [ 252.084624][ T59] team0 (unregistering): Port device team_slave_0 removed [ 252.096234][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.202619][T14321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.255250][T14321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.269431][T14321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.315537][T14321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.393494][T14594] program syz.6.2437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.398448][T14321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.430059][T14321] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.447331][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.450429][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.456671][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.459805][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.509149][T14596] trusted_key: encrypted_key: insufficient parameters specified [ 252.523403][T14604] SELinux: security_context_str_to_sid (eamfs) failed with errno=-22 [ 252.776300][T14634] vivid-007: ================= START STATUS ================= [ 252.779050][T14634] vivid-007: Enable Output Cropping: true grabbed [ 252.781545][T14634] vivid-007: Enable Output Composing: true grabbed [ 252.784562][T14634] vivid-007: Enable Output Scaler: true grabbed [ 252.786790][T14634] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 252.789449][T14634] vivid-007: Transmit Mode: HDMI grabbed [ 252.791500][T14634] vivid-007: Hotplug Present: 0x00000000 [ 252.796103][T14634] vivid-007: RxSense Present: 0x00000000 [ 252.798369][T14634] vivid-007: EDID Present: 0x00000000 [ 252.800398][T14634] vivid-007: ================== END STATUS ================== [ 252.830733][T14321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.860739][ T5749] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 252.890104][ T59] IPVS: stop unused estimator thread 0... [ 252.895627][T14321] veth0_vlan: entered promiscuous mode [ 252.908137][T14321] veth1_vlan: entered promiscuous mode [ 252.931444][T14321] veth0_macvtap: entered promiscuous mode [ 252.939911][T14321] veth1_macvtap: entered promiscuous mode [ 252.953551][T14321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.961526][T14321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.988318][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.998812][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.006597][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.010221][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.028799][T14650] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 253.135527][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.532470][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.604587][T10012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.608071][T10012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.743379][T10012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.746714][T10012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.096322][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 254.153710][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 254.172689][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.176851][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.231682][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 254.280870][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 254.812453][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.860292][ T40] kauditd_printk_skb: 356 callbacks suppressed [ 254.860308][ T40] audit: type=1400 audit(1778348239.611:8988): avc: denied { setopt } for pid=14717 comm="syz.2.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.874763][ T40] audit: type=1400 audit(1778348239.631:8989): avc: denied { getopt } for pid=14717 comm="syz.2.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.887871][ T40] audit: type=1400 audit(1778348239.641:8990): avc: denied { remount } for pid=14717 comm="syz.2.2471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 254.887884][T14718] binder: Binderfs stats mode cannot be changed during a remount [ 254.941626][ T7544] udevd[7544]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 254.948740][ T40] audit: type=1400 audit(1778348239.701:8991): avc: denied { read } for pid=14721 comm="syz.6.2472" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 254.958718][ T40] audit: type=1400 audit(1778348239.711:8992): avc: denied { open } for pid=14721 comm="syz.6.2472" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 254.976631][ T40] audit: type=1400 audit(1778348239.721:8993): avc: denied { recv } for pid=14721 comm="syz.6.2472" saddr=127.0.0.1 src=49152 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 254.985680][ T40] audit: type=1400 audit(1778348239.721:8994): avc: denied { ioctl } for pid=14721 comm="syz.6.2472" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.011172][T14725] blk_print_req_error: 212 callbacks suppressed [ 255.011185][T14725] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.017772][ T40] audit: type=1400 audit(1778348239.771:8995): avc: denied { read } for pid=14721 comm="syz.6.2472" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.023285][T14725] Buffer I/O error on dev nbd2, logical block 0, async page read [ 255.024811][ T40] audit: type=1400 audit(1778348239.771:8996): avc: denied { open } for pid=14721 comm="syz.6.2472" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.036774][T14725] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.039965][T14725] Buffer I/O error on dev nbd2, logical block 1, async page read [ 255.042855][T14725] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.045900][T14725] Buffer I/O error on dev nbd2, logical block 2, async page read [ 255.048590][T14725] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.051661][T14725] Buffer I/O error on dev nbd2, logical block 3, async page read [ 255.056288][T14725] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.061232][ T40] audit: type=1400 audit(1778348239.811:8997): avc: denied { create } for pid=14723 comm="syz.2.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.061504][T14725] Buffer I/O error on dev nbd2, logical block 0, async page read [ 255.070238][T14725] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.073373][T14725] Buffer I/O error on dev nbd2, logical block 1, async page read [ 255.076022][T14725] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.078982][T14725] Buffer I/O error on dev nbd2, logical block 2, async page read [ 255.081910][T14725] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.085011][T14725] Buffer I/O error on dev nbd2, logical block 3, async page read [ 255.087647][T14725] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.090611][T14725] Buffer I/O error on dev nbd2, logical block 0, async page read [ 255.094006][T14725] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.097612][T14725] Buffer I/O error on dev nbd2, logical block 1, async page read [ 255.112930][T14725] ldm_validate_partition_table(): Disk read failed. [ 255.117774][T14725] Dev nbd2: unable to read RDB block 0 [ 255.122614][T14725] nbd2: unable to read partition table [ 255.125864][T14725] (syz.2.2473,14725,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 255.129331][T14725] (syz.2.2473,14725,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 255.132976][T14725] (syz.2.2473,14725,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 255.137837][T14725] (syz.2.2473,14725,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 255.149835][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 255.161867][T14722] create_pit_timer: 55 callbacks suppressed [ 255.161885][T14722] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 255.190001][T14722] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 255.228459][T14722] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 255.236105][T14722] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 255.243574][T14722] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 255.264205][T14722] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 255.293677][T14722] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 255.349498][ T7036] udevd[7036]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 255.414952][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 255.423288][T14743] __nla_validate_parse: 13 callbacks suppressed [ 255.423304][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 255.444512][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2477'. [ 255.470905][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 255.486129][T14750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.557417][ T7544] udevd[7544]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 255.583329][T14755] overlayfs: missing 'workdir' [ 255.622394][T14758] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 255.866335][T14766] syzkaller1: entered promiscuous mode [ 255.870743][T14766] syzkaller1: entered allmulticast mode [ 255.898435][T14770] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 255.975779][T14775] netlink: 'syz.6.2489': attribute type 1 has an invalid length. [ 256.005608][ T8976] libceph: connect (1)[c::]:6789 error -101 [ 256.012500][ T8976] libceph: mon0 (1)[c::]:6789 connect error [ 256.060637][ T9] libceph: connect (1)[c::]:6789 error -101 [ 256.062788][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 256.293092][ T39] libceph: connect (1)[c::]:6789 error -101 [ 256.295168][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 256.322235][ T9] libceph: connect (1)[c::]:6789 error -101 [ 256.325396][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 256.398352][T14789] netlink: 'syz.2.2491': attribute type 1 has an invalid length. [ 256.412070][T14789] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2491'. [ 256.422064][T14790] nbd: must specify a size in bytes for the device [ 256.619390][T14802] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 256.748930][T14810] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 256.806977][T14780] ceph: No mds server is up or the cluster is laggy [ 256.809908][T14775] ceph: No mds server is up or the cluster is laggy [ 256.813444][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 256.815889][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 256.832303][ T984] libceph: connect (1)[c::]:6789 error -101 [ 256.834669][ T984] libceph: mon0 (1)[c::]:6789 connect error [ 256.946017][T14812] binder: Bad value for 'max' [ 257.086016][T14817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2501'. [ 257.465238][ T1042] ================================================================== [ 257.468201][ T1042] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1887/0x1b10 [ 257.471096][ T1042] Read of size 8 at addr ffff88803a7ceae8 by task kworker/1:2/1042 [ 257.474840][ T1042] [ 257.476142][ T1042] CPU: 1 UID: 0 PID: 1042 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.476158][ T1042] Tainted: [L]=SOFTLOCKUP [ 257.476162][ T1042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.476169][ T1042] Workqueue: events l2cap_chan_timeout [ 257.476187][ T1042] Call Trace: [ 257.476191][ T1042] [ 257.476196][ T1042] dump_stack_lvl+0x100/0x190 [ 257.476210][ T1042] print_report+0x13d/0x4b0 [ 257.476226][ T1042] ? __virt_addr_valid+0x239/0x430 [ 257.476238][ T1042] ? __mutex_lock+0x1887/0x1b10 [ 257.476252][ T1042] kasan_report+0xdf/0x1d0 [ 257.476264][ T1042] ? __mutex_lock+0x1887/0x1b10 [ 257.476280][ T1042] __mutex_lock+0x1887/0x1b10 [ 257.476294][ T1042] ? l2cap_chan_timeout+0x6d/0x330 [ 257.476307][ T1042] ? add_lock_to_list+0x99/0x110 [ 257.476319][ T1042] ? __pfx___mutex_lock+0x10/0x10 [ 257.476334][ T1042] ? debug_object_deactivate+0x2e4/0x3b0 [ 257.476360][ T1042] ? l2cap_chan_timeout+0x6d/0x330 [ 257.476372][ T1042] l2cap_chan_timeout+0x6d/0x330 [ 257.476385][ T1042] process_one_work+0xa0e/0x1980 [ 257.476402][ T1042] ? __pfx_process_one_work+0x10/0x10 [ 257.476417][ T1042] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 257.476437][ T1042] worker_thread+0x5ef/0xe50 [ 257.476458][ T1042] ? __pfx_worker_thread+0x10/0x10 [ 257.476472][ T1042] ? kthread+0x13a/0x450 [ 257.476484][ T1042] ? __pfx_worker_thread+0x10/0x10 [ 257.476497][ T1042] kthread+0x370/0x450 [ 257.476508][ T1042] ? __pfx_kthread+0x10/0x10 [ 257.476521][ T1042] ret_from_fork+0x72b/0xd50 [ 257.476534][ T1042] ? __pfx_ret_from_fork+0x10/0x10 [ 257.476547][ T1042] ? __switch_to+0x800/0x1100 [ 257.476563][ T1042] ? __pfx_kthread+0x10/0x10 [ 257.476575][ T1042] ret_from_fork_asm+0x1a/0x30 [ 257.476594][ T1042] [ 257.476598][ T1042] [ 257.537282][ T1042] Allocated by task 13379: [ 257.538976][ T1042] kasan_save_stack+0x30/0x50 [ 257.540612][ T1042] kasan_save_track+0x14/0x30 [ 257.542282][ T1042] __kasan_kmalloc+0xaa/0xb0 [ 257.543897][ T1042] l2cap_conn_add.part.0+0x60/0xb00 [ 257.545684][ T1042] l2cap_chan_connect+0x1435/0x1f90 [ 257.547562][ T1042] l2cap_sock_connect+0x37a/0x770 [ 257.549177][ T1042] kernel_connect+0x107/0x160 [ 257.550675][ T1042] rfcomm_dlc_open+0x838/0xac0 [ 257.552210][ T1042] rfcomm_sock_connect+0x42c/0x690 [ 257.553868][ T1042] __sys_connect_file+0x141/0x1a0 [ 257.555466][ T1042] __sys_connect+0x141/0x170 [ 257.556940][ T1042] __x64_sys_connect+0x72/0xb0 [ 257.558511][ T1042] do_syscall_64+0x10b/0xf80 [ 257.560213][ T1042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.562387][ T1042] [ 257.563162][ T1042] Freed by task 13473: [ 257.564582][ T1042] kasan_save_stack+0x30/0x50 [ 257.566377][ T1042] kasan_save_track+0x14/0x30 [ 257.568153][ T1042] kasan_save_free_info+0x3b/0x70 [ 257.570066][ T1042] __kasan_slab_free+0x5f/0x80 [ 257.571538][ T1042] kfree+0x223/0x6c0 [ 257.572798][ T1042] l2cap_conn_del+0x57f/0x710 [ 257.574234][ T1042] l2cap_disconn_cfm+0x9f/0x100 [ 257.575722][ T1042] hci_conn_hash_flush+0x10e/0x280 [ 257.577338][ T1042] hci_dev_close_sync+0x5a7/0x1240 [ 257.578956][ T1042] hci_dev_do_close+0x2e/0xb0 [ 257.580408][ T1042] hci_unregister_dev+0x227/0x670 [ 257.582015][ T1042] vhci_release+0x17d/0x230 [ 257.583439][ T1042] __fput+0x3ff/0xb50 [ 257.584708][ T1042] task_work_run+0x150/0x240 [ 257.586173][ T1042] do_exit+0x8d2/0x2a60 [ 257.587514][ T1042] do_group_exit+0xd5/0x2a0 [ 257.588938][ T1042] get_signal+0x1ec7/0x21e0 [ 257.590387][ T1042] arch_do_signal_or_restart+0x91/0x7e0 [ 257.592119][ T1042] exit_to_user_mode_loop+0x8b/0x4f0 [ 257.593731][ T1042] do_syscall_64+0x706/0xf80 [ 257.595159][ T1042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.596960][ T1042] [ 257.597710][ T1042] The buggy address belongs to the object at ffff88803a7ce800 [ 257.597710][ T1042] which belongs to the cache kmalloc-1k of size 1024 [ 257.601861][ T1042] The buggy address is located 744 bytes inside of [ 257.601861][ T1042] freed 1024-byte region [ffff88803a7ce800, ffff88803a7cec00) [ 257.606718][ T1042] [ 257.607646][ T1042] The buggy address belongs to the physical page: [ 257.610017][ T1042] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a7c8 [ 257.613028][ T1042] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 257.615901][ T1042] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 257.618442][ T1042] page_type: f5(slab) [ 257.619804][ T1042] raw: 00fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 257.622720][ T1042] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 257.625447][ T1042] head: 00fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 257.628162][ T1042] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 257.630883][ T1042] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 257.633638][ T1042] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 257.636343][ T1042] page dumped because: kasan: bad access detected [ 257.638378][ T1042] page_owner tracks the page as allocated [ 257.640194][ T1042] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5737, tgid 5737 (syz-executor), ts 64618986864, free_ts 64602617271 [ 257.647575][ T1042] post_alloc_hook+0x153/0x170 [ 257.649285][ T1042] get_page_from_freelist+0x11a6/0x33b0 [ 257.651151][ T1042] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 257.652991][ T1042] new_slab+0xa6/0x6c0 [ 257.654292][ T1042] refill_objects+0x277/0x420 [ 257.655913][ T1042] __pcs_replace_empty_main+0x375/0x650 [ 257.657859][ T1042] __kmalloc_node_noprof+0x69a/0x850 [ 257.659434][ T1042] qdisc_alloc+0xbb/0xb30 [ 257.660921][ T1042] qdisc_create_dflt+0x97/0x4b0 [ 257.662666][ T1042] dev_activate+0x64f/0xce0 [ 257.664520][ T1042] __dev_open+0x490/0x8f0 [ 257.666317][ T1042] __dev_change_flags+0x596/0x850 [ 257.668338][ T1042] netif_change_flags+0x8d/0x160 [ 257.670282][ T1042] do_setlink.isra.0+0x1ac4/0x3e60 [ 257.672144][ T1042] rtnl_newlink+0x11c2/0x2380 [ 257.673745][ T1042] rtnetlink_rcv_msg+0x95e/0xe90 [ 257.675503][ T1042] page last free pid 5851 tgid 5851 stack trace: [ 257.677440][ T1042] __free_frozen_pages+0x747/0x1040 [ 257.679218][ T1042] qlist_free_all+0x47/0xf0 [ 257.680813][ T1042] kasan_quarantine_reduce+0x1a0/0x1f0 [ 257.682945][ T1042] __kasan_slab_alloc+0x69/0x90 [ 257.684628][ T1042] kmem_cache_alloc_noprof+0x241/0x6e0 [ 257.686470][ T1042] mas_preallocate+0x1105/0x14a0 [ 257.688060][ T1042] __mmap_region+0x124a/0x2da0 [ 257.689760][ T1042] mmap_region+0x35d/0x620 [ 257.691268][ T1042] do_mmap+0xc63/0x12f0 [ 257.692642][ T1042] vm_mmap_pgoff+0x29e/0x470 [ 257.694208][ T1042] vm_mmap+0x8e/0xc0 [ 257.695427][ T1042] elf_load+0x2b1/0x720 [ 257.696749][ T1042] load_elf_binary+0x14b9/0x51b0 [ 257.698389][ T1042] bprm_execve+0x8f5/0x1740 [ 257.699824][ T1042] kernel_execve+0x31e/0x3a0 [ 257.701275][ T1042] call_usermodehelper_exec_async+0x239/0x4b0 [ 257.703203][ T1042] [ 257.703952][ T1042] Memory state around the buggy address: [ 257.705813][ T1042] ffff88803a7ce980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.708973][ T1042] ffff88803a7cea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.712153][ T1042] >ffff88803a7cea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.715300][ T1042] ^ [ 257.718043][ T1042] ffff88803a7ceb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.720765][ T1042] ffff88803a7ceb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.723610][ T1042] ================================================================== [ 257.726584][ T1042] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 257.728843][ T1042] CPU: 1 UID: 0 PID: 1042 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.732213][ T1042] Tainted: [L]=SOFTLOCKUP [ 257.733603][ T1042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.736721][ T1042] Workqueue: events l2cap_chan_timeout [ 257.738633][ T1042] Call Trace: [ 257.739992][ T1042] [ 257.741129][ T1042] dump_stack_lvl+0x100/0x190 [ 257.742791][ T1042] vpanic+0x552/0x970 [ 257.744164][ T1042] ? __pfx_vpanic+0x10/0x10 [ 257.745689][ T1042] ? mark_held_locks+0x40/0x70 [ 257.747312][ T1042] ? irqentry_exit+0x24d/0x7e0 [ 257.748916][ T1042] ? __mutex_lock+0x1887/0x1b10 [ 257.750577][ T1042] panic+0xd1/0xe0 [ 257.751865][ T1042] ? __pfx_panic+0x10/0x10 [ 257.753343][ T1042] ? check_panic_on_warn+0x1f/0x90 [ 257.755132][ T1042] check_panic_on_warn.cold+0x19/0x34 [ 257.756919][ T1042] end_report.part.0+0x3a/0x90 [ 257.758511][ T1042] kasan_report.cold+0xe/0x18 [ 257.760112][ T1042] ? __mutex_lock+0x1887/0x1b10 [ 257.761778][ T1042] __mutex_lock+0x1887/0x1b10 [ 257.763291][ T1042] ? l2cap_chan_timeout+0x6d/0x330 [ 257.765062][ T1042] ? add_lock_to_list+0x99/0x110 [ 257.766743][ T1042] ? __pfx___mutex_lock+0x10/0x10 [ 257.768705][ T1042] ? debug_object_deactivate+0x2e4/0x3b0 [ 257.770596][ T1042] ? l2cap_chan_timeout+0x6d/0x330 [ 257.772293][ T1042] l2cap_chan_timeout+0x6d/0x330 [ 257.773917][ T1042] process_one_work+0xa0e/0x1980 [ 257.775558][ T1042] ? __pfx_process_one_work+0x10/0x10 [ 257.777386][ T1042] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 257.779143][ T1042] worker_thread+0x5ef/0xe50 [ 257.780641][ T1042] ? __pfx_worker_thread+0x10/0x10 [ 257.782277][ T1042] ? kthread+0x13a/0x450 [ 257.783966][ T1042] ? __pfx_worker_thread+0x10/0x10 [ 257.785925][ T1042] kthread+0x370/0x450 [ 257.787242][ T1042] ? __pfx_kthread+0x10/0x10 [ 257.788702][ T1042] ret_from_fork+0x72b/0xd50 [ 257.790190][ T1042] ? __pfx_ret_from_fork+0x10/0x10 [ 257.791848][ T1042] ? __switch_to+0x800/0x1100 [ 257.793371][ T1042] ? __pfx_kthread+0x10/0x10 [ 257.794995][ T1042] ret_from_fork_asm+0x1a/0x30 [ 257.796615][ T1042] [ 257.798398][ T1042] Kernel Offset: disabled [ 257.799760][ T1042] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:33:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffc90003d47ad0 RCX=ffffffff91756401 RDX=0000000000000000 RSI=ffffffff8c1c3700 RDI=ffffffff8e1d4920 RBP=0000000000000001 RSP=ffffc90003d47970 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000aee3 R12=ffffc90003d47a80 R13=ffffc90003d47a30 R14=ffffc90003d47ad0 R15=ffffc90003d47a64 RIP=ffffffff81b7d535 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f4fd8944880 ffffffff 00c00000 GS =0000 ffff8880d6372000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557c720a28 CR3=000000002cf9f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000007800000 Opmask02=0000000007ffffff Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f1e3fb0920 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f1e3e53fd0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4fd83f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 431d1c1a1416015c 43000611171d5c43 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a1018d4bc65979f 000000055f1e3e5e 0000000000000041 000055f100797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a104d255f82348f ffffaa0b4305201b 00007f4fd82bfd9b 00007ffe0462ff18 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a106fbf7fef7def ffffffffffffffbf 00007fffffeffffb fffffffea4e7fffc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f1e3e4b700 0000000000000041 00004e4f53414552 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000055f1e3e00 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff857e5780 RDI=ffffffff9b4741c0 RBP=ffffffff9b474180 RSP=ffffc90005ec7440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff368e88a R15=dffffc0000000000 RIP=ffffffff857e57a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6472000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd756f6a66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd756f6a66 00007ffd756f6a6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f897e43334c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f897e43338c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f897e4334f0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f897e43337e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea00013ede80 RCX=ffffffff825c0e6e RDX=0000000000000000 RSI=0000000000000004 RDI=ffffea00013edeb4 RBP=ffffea00013edeb4 RSP=ffffc900048a7540 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000008 R13=00000000000140f0 R14=ffff8880256fdbc8 R15=ffffea00013ede80 RIP=ffffffff82765e90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557c705500 ffffffff 00c00000 GS =0000 ffff8880d6572000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f897f1456b8 CR3=00000000360c9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe8890346 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe8890346 00007fffe889034c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2099c3334c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2099c3338c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2099c334f0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2099c3337e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001b8 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000001b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001f6bcd RBX=ffff88801eaaa500 RCX=ffffffff8b8a8095 RDX=0000000000000000 RSI=ffffffff8df20f0f RDI=ffffffff8c1c3780 RBP=0000000000000000 RSP=ffffc90000197df0 R8 =0000000000000001 R9 =ffffed100d4e67b5 R10=ffff88806a733dab R11=0000000000000000 R12=0000000000000003 R13=ffffed1003d554a0 R14=0000000000000003 R15=ffffffff90d7ab50 RIP=ffffffff8b8a687f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6672000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2099c4f0d1 CR3=0000000118759000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85c014d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85bf5ed600 00007f85bf5ed5e0 00007f85bf5ed5e8 00007f85bf5ed618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85bf5ed5f8 00007f85bf5ed5c8 00007f85bf5ed600 00007f85bf5ed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000