last executing test programs: 7m49.702298709s ago: executing program 0 (id=2268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7m49.702021926s ago: executing program 0 (id=2269): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x4, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x7, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m49.561922174s ago: executing program 0 (id=2276): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) keyctl$search(0xa, 0x0, &(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0) 7m49.490571394s ago: executing program 0 (id=2278): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) 7m49.400345829s ago: executing program 0 (id=2280): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m49.39997798s ago: executing program 0 (id=2281): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syslog(0xa, 0x0, 0x0) 7m34.922750171s ago: executing program 2 (id=2662): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) keyctl$search(0xa, 0x0, &(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0) 7m34.818448872s ago: executing program 2 (id=2663): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unlinkat(0xffffffffffffffff, 0x0, 0x0) 7m34.817991684s ago: executing program 2 (id=2664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0xa, 0x2, 0x7, 0x25, 0xf7, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xf000, 0x80300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m34.660084848s ago: executing program 2 (id=2665): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) 7m34.474349116s ago: executing program 2 (id=2667): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m34.441738668s ago: executing program 2 (id=2668): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) 7m33.162196245s ago: executing program 32 (id=2281): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syslog(0xa, 0x0, 0x0) 7m18.146913729s ago: executing program 33 (id=2668): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) 6m13.523514789s ago: executing program 5 (id=5511): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000004, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000005c0)={'veth0_virt_wifi\x00', 0x9}) 6m13.488535653s ago: executing program 5 (id=5513): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) 6m13.39922855s ago: executing program 5 (id=5515): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getegid() 6m13.36549511s ago: executing program 5 (id=5517): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x14, 0x1) 6m13.3530526s ago: executing program 5 (id=5519): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000000)='.\x00', 0x800080, 0x11) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m13.298693053s ago: executing program 5 (id=5521): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040)=0x80000001, 0x4) 5m57.301766442s ago: executing program 34 (id=5521): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040)=0x80000001, 0x4) 5m37.789533372s ago: executing program 3 (id=6971): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a0300000000020001000000000000000a0d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 5m37.586422822s ago: executing program 3 (id=6977): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000140)=0x400032, 0x4) 5m37.532520328s ago: executing program 3 (id=6979): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001500add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c710020000000000000000000001ffe7ee00000000000000000200000000", 0x58}], 0x1) 5m37.500747097s ago: executing program 3 (id=6980): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x3ff, 0x0, 0x0, 0x0}) 5m37.451814119s ago: executing program 3 (id=6982): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 5m36.520575106s ago: executing program 3 (id=6989): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x1800000) 5m20.512199181s ago: executing program 35 (id=6989): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x1800000) 3m2.514982642s ago: executing program 7 (id=13501): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xffffffffffffff77, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m2.478695981s ago: executing program 7 (id=13503): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x4044800) 3m2.444533571s ago: executing program 7 (id=13506): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x10}], 0x1, 0x0, 0x0, 0x0) 3m1.524988905s ago: executing program 7 (id=13541): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x89800211, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 3m1.402850359s ago: executing program 7 (id=13547): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000240)='syz0\x00') 3m1.294020214s ago: executing program 7 (id=13551): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 3m1.231248984s ago: executing program 36 (id=13551): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 349.724534ms ago: executing program 1 (id=21761): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) 343.104524ms ago: executing program 1 (id=21762): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xd0}}], 0x1, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200001400"], 0x48) 337.492905ms ago: executing program 8 (id=21763): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, &(0x7f0000000000)) 309.523072ms ago: executing program 4 (id=21764): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) 302.431461ms ago: executing program 6 (id=21765): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000200), 0x4) 288.960486ms ago: executing program 8 (id=21766): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24d, 0xfffffffa, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0xffffffffffffff7f}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 275.89628ms ago: executing program 1 (id=21767): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) 251.77214ms ago: executing program 4 (id=21768): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 251.532517ms ago: executing program 6 (id=21769): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r3, 0x80079a0) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) 240.61908ms ago: executing program 8 (id=21770): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$cgroup_int(r4, &(0x7f0000000140)=0xfffffffffffffffb, 0x12) 206.573431ms ago: executing program 4 (id=21771): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x24000800) 194.699083ms ago: executing program 1 (id=21772): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) kcmp(r4, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 154.377134ms ago: executing program 6 (id=21773): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x8000000000000001, &(0x7f0000ffd000/0x3000)=nil, 0x3) 152.202435ms ago: executing program 8 (id=21774): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x103003) 109.469282ms ago: executing program 4 (id=21775): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) 103.493171ms ago: executing program 6 (id=21776): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 98.19119ms ago: executing program 8 (id=21777): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x4}, 0x4) 78.645062ms ago: executing program 1 (id=21778): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0), 0x4) 64.49699ms ago: executing program 6 (id=21779): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, 0x0, 0x0) 52.980819ms ago: executing program 4 (id=21780): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='sit0\x00') 30.788528ms ago: executing program 1 (id=21781): add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) 29.619591ms ago: executing program 6 (id=21782): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000271, 0x48854) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) fcntl$addseals(r3, 0x409, 0x7) 4.372976ms ago: executing program 4 (id=21783): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 0s ago: executing program 8 (id=21784): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, 0x0) kernel console output (not intermixed with test programs): ink: 120 bytes leftover after parsing attributes in process `syz.4.14448'. [ 466.882941][ T40] audit: type=1326 audit(2000000009.739:20299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.4.14459" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x0 [ 467.168960][ T4458] netlink: 76 bytes leftover after parsing attributes in process `syz.8.14473'. [ 467.227484][ T4466] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14476'. [ 467.236126][ T4468] netlink: 'syz.1.14478': attribute type 3 has an invalid length. [ 467.239388][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14478'. [ 467.255676][ T4465] xt_CT: No such helper "pptp" [ 467.294241][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14479'. [ 467.298325][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14479'. [ 468.079766][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14519'. [ 468.110526][ T40] audit: type=1326 audit(2000000010.883:20300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4552 comm="syz.4.14518" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x0 [ 468.340284][ T40] audit: type=1400 audit(2000000011.090:20301): avc: denied { execheap } for pid=4583 comm="syz.6.14533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 468.376541][ T40] audit: type=1400 audit(2000000011.137:20302): avc: denied { watch watch_with_perm watch_reads } for pid=4591 comm="syz.6.14537" path="/2136/bus" dev="tmpfs" ino=12912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 468.423520][ T4598] netlink: 180 bytes leftover after parsing attributes in process `syz.4.14539'. [ 468.523459][ T4606] netlink: 92 bytes leftover after parsing attributes in process `syz.6.14544'. [ 468.628184][ T5823] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 468.809465][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 468.814193][ T5823] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 468.817085][ T5823] usb 6-1: config 0 has no interface number 0 [ 468.821386][ T5823] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 468.826928][ T5823] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 468.838869][ T5823] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 468.851866][ T5823] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 468.857462][ T5823] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 468.861127][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.867066][ T5823] usb 6-1: config 0 descriptor?? [ 468.875308][ T5823] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 469.000018][ T4649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.090494][ T1677] usb 6-1: USB disconnect, device number 27 [ 469.094305][ T1677] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 469.992106][ T4720] tipc: Started in network mode [ 469.995311][ T4720] tipc: Node identity aabfcb4eb168, cluster identity 4711 [ 469.998612][ T4720] tipc: Enabled bearer , priority 0 [ 470.003484][ T4719] tipc: Resetting bearer [ 472.142642][ T4719] tipc: Disabling bearer [ 472.149776][ T4738] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 472.154190][ T4738] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 472.159232][ T10] tipc: Node number set to 467127118 [ 472.161049][ T4738] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 472.161578][ T40] audit: type=1400 audit(2000000014.683:20303): avc: denied { firmware_load } for pid=4737 comm="syz.1.14608" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 472.193588][ T4747] __nla_validate_parse: 1 callbacks suppressed [ 472.193602][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14612'. [ 472.452637][ T4777] Cannot find add_set index 4 as target [ 472.472900][ T4781] netlink: 84 bytes leftover after parsing attributes in process `syz.6.14629'. [ 472.624665][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.629215][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.632252][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.635105][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.638654][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.641664][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.644678][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.647946][ T4803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14640'. [ 472.648042][ T4803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14640'. [ 472.656917][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.659851][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.662732][T16114] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 472.672371][T16114] hid-generic 0003:0004:0000.000C: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 473.009021][ T4847] netlink: 188 bytes leftover after parsing attributes in process `syz.6.14662'. [ 473.163393][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14673'. [ 473.641142][ T40] audit: type=1400 audit(2000000016.081:20304): avc: denied { view } for pid=4920 comm="syz.8.14696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 473.651520][ T4923] __vm_enough_memory: pid: 4923, comm: syz.6.14697, bytes: 21199701917696 not enough memory for the allocation [ 474.229591][ T4978] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 474.532081][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14738'. [ 474.938800][ T5048] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14757'. [ 475.081355][ T40] audit: type=1326 audit(2000000017.432:20305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.14762" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x0 [ 475.532985][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14777'. [ 475.751436][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14790'. [ 476.149470][ T5162] random: crng reseeded on system resumption [ 476.333324][ T5181] netlink: 'syz.6.14821': attribute type 16 has an invalid length. [ 476.659595][ T5218] overlayfs: missing 'lowerdir' [ 476.756068][ T5229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 477.135609][ T5279] binder: 5278:5279 ioctl c0306201 200000000100 returned -14 [ 477.173778][ T5285] overlay: ./file0 is not a directory [ 477.499583][ T5343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.514396][ T40] audit: type=1326 audit(2000000019.712:20306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.6.14897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 477.523954][ T40] audit: type=1326 audit(2000000019.712:20307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.6.14897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 477.536214][ T40] audit: type=1326 audit(2000000019.712:20308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.6.14897" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 477.545055][ T5349] netlink: 'syz.1.14898': attribute type 19 has an invalid length. [ 477.546440][ T40] audit: type=1326 audit(2000000019.712:20309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.6.14897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 477.565420][ T40] audit: type=1326 audit(2000000019.712:20310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.6.14897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 477.578973][ T40] audit: type=1326 audit(2000000019.712:20311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.6.14897" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 477.590407][ T40] audit: type=1326 audit(2000000019.712:20312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.6.14897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 477.607872][ T40] audit: type=1326 audit(2000000019.712:20313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.6.14897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 477.617314][ T5357] __nla_validate_parse: 6 callbacks suppressed [ 477.617331][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14902'. [ 477.623999][ T5357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14902'. [ 477.832861][ T5394] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14918'. [ 477.835780][ T5394] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14918'. [ 477.840102][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14920'. [ 478.512464][ T5455] netlink: 'syz.1.14948': attribute type 153 has an invalid length. [ 479.314862][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14984'. [ 479.323933][ T5531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.368810][ T5535] tipc: Enabling of bearer rejected, failed to enable media [ 479.435861][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14990'. [ 479.724018][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 479.724030][ T40] audit: type=1400 audit(2000000021.786:20331): avc: denied { ioctl } for pid=5577 comm="syz.6.15008" path="socket:[151973]" dev="sockfs" ino=151973 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 479.787935][ T5586] netlink: 'syz.6.15012': attribute type 4 has an invalid length. [ 479.791640][ T5586] netlink: 17 bytes leftover after parsing attributes in process `syz.6.15012'. [ 479.842152][ T5595] netlink: 'syz.1.15016': attribute type 12 has an invalid length. [ 479.915139][ T5597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.963366][ T5607] netlink: 'syz.1.15022': attribute type 58 has an invalid length. [ 480.102962][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15029'. [ 480.117586][ T5296] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 480.795435][ T5678] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 480.798998][ T5678] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 480.803609][ T5678] overlayfs: missing 'lowerdir' [ 481.014045][ T40] audit: type=1400 audit(2000000022.996:20332): avc: denied { nlmsg_tty_audit } for pid=5689 comm="syz.6.15058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 481.480552][ T5736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15079'. [ 482.335069][ T5795] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 482.346932][ T5795] netem: change failed [ 482.687319][ T5838] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 482.690796][ T5838] overlayfs: failed to set xattr on upper [ 482.692685][ T5838] overlayfs: ...falling back to redirect_dir=nofollow. [ 482.694982][ T5838] overlayfs: ...falling back to index=off. [ 482.697037][ T5838] overlayfs: ...falling back to uuid=null. [ 482.705778][ T5838] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 482.932314][ T5865] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.030417][ T40] audit: type=1326 audit(2000000024.891:20333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.8.15131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x7fc00000 [ 483.136286][ T5878] can0: slcan on ttyS3. [ 483.219459][ T5878] can0 (unregistered): slcan off ttyS3. [ 483.452468][ T5926] __nla_validate_parse: 3 callbacks suppressed [ 483.452479][ T5926] netlink: 180 bytes leftover after parsing attributes in process `syz.6.15163'. [ 483.632676][ T5966] sctp: [Deprecated]: syz.6.15178 (pid 5966) Use of int in maxseg socket option. [ 483.632676][ T5966] Use struct sctp_assoc_value instead [ 483.723203][ T40] audit: type=1326 audit(2000000025.539:20334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.8.15131" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6f492b789 code=0x7fc00000 [ 484.825941][ T6121] netlink: 44 bytes leftover after parsing attributes in process `syz.6.15238'. [ 484.876230][ T6126] netlink: 188 bytes leftover after parsing attributes in process `syz.6.15241'. [ 485.104808][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15256'. [ 485.122439][ T6160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.169710][ T6170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 485.310426][ T6190] overlayfs: conflicting options: userxattr,metacopy=on [ 485.410792][ T6207] netlink: 72 bytes leftover after parsing attributes in process `syz.6.15279'. [ 485.816539][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15300'. [ 485.921150][ T6262] netlink: 'syz.6.15305': attribute type 3 has an invalid length. [ 486.060659][ T6280] syz_tun: entered allmulticast mode [ 486.097332][ T6284] netlink: 112 bytes leftover after parsing attributes in process `syz.6.15317'. [ 486.577669][ T40] audit: type=1326 audit(2000000028.222:20335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.588866][ T40] audit: type=1326 audit(2000000028.222:20336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.598962][ T40] audit: type=1326 audit(2000000028.222:20337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.608075][ T40] audit: type=1326 audit(2000000028.222:20338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.619120][ T40] audit: type=1326 audit(2000000028.222:20339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.629270][ T40] audit: type=1326 audit(2000000028.222:20340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.639633][ T40] audit: type=1326 audit(2000000028.222:20341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.650506][ T40] audit: type=1326 audit(2000000028.222:20342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.661660][ T40] audit: type=1326 audit(2000000028.222:20343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.673169][ T40] audit: type=1326 audit(2000000028.222:20344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.15340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7ffc0000 [ 486.730928][ T6352] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15348'. [ 486.747009][ T6354] SELinux: security_context_str_to_sid () failed with errno=-22 [ 486.775658][ T6358] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 486.995773][ T6382] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 487.444314][ T6394] tipc: Enabling of bearer rejected, media not registered [ 487.680150][ T6406] SELinux: security_context_str_to_sid (E釁) failed with errno=-22 [ 487.726800][ T6408] openvswitch: netlink: IP tunnel dst address not specified [ 488.266562][ T6453] trusted_key: encrypted_key: master key parameter '' is invalid [ 488.308488][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15400'. [ 488.342951][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15402'. [ 488.864173][ T6505] geneve1: entered allmulticast mode [ 489.121741][ T6531] netlink: 'syz.8.15435': attribute type 10 has an invalid length. [ 489.124288][ T6531] __nla_validate_parse: 5 callbacks suppressed [ 489.124297][ T6531] netlink: 40 bytes leftover after parsing attributes in process `syz.8.15435'. [ 489.173810][ T6531] team0: Port device geneve0 added [ 489.255784][ T6537] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 489.258680][ T6537] overlayfs: missing 'lowerdir' [ 489.501890][ T6553] fuse: Bad value for 'group_id' [ 489.503706][ T6553] fuse: Bad value for 'group_id' [ 489.722436][ T6565] binder: 6564:6565 ioctl c0306201 0 returned -14 [ 489.929204][ T6575] loop9: detected capacity change from 0 to 7 [ 489.931669][ T6575] buffer_io_error: 5 callbacks suppressed [ 489.931677][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.936312][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.939531][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.943175][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.946381][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.949411][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.952136][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.955557][ T6575] ldm_validate_partition_table(): Disk read failed. [ 489.958020][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.960590][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.963703][ T6575] Buffer I/O error on dev loop9, logical block 0, async page read [ 489.967861][ T6575] Dev loop9: unable to read RDB block 0 [ 489.969989][ T6575] loop9: unable to read partition table [ 489.972014][ T6575] loop9: partition table beyond EOD, truncated [ 489.974204][ T6575] loop_reread_partitions: partition scan of loop9 (x熝鵂诂ЫdGご鄸冚’牆夥 [ 489.974204][ T6575] ) failed (rc=-5) [ 490.057940][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15463'. [ 490.191775][ T6595] 9pnet_fd: Insufficient options for proto=fd [ 490.302302][ T6610] netlink: 'syz.6.15474': attribute type 10 has an invalid length. [ 490.305112][ T6610] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15474'. [ 490.310088][ T6610] team0: Port device geneve0 added [ 490.313083][ T73] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.316243][ T73] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.319449][ T73] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.322438][ T73] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.448781][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15482'. [ 490.546120][ T6641] netlink: 'syz.8.15489': attribute type 11 has an invalid length. [ 490.625395][ T6651] overlayfs: conflicting options: userxattr,redirect_dir=on [ 490.743262][ T6665] netlink: 76 bytes leftover after parsing attributes in process `syz.4.15501'. [ 491.061219][ T6693] overlayfs: failed to clone lowerpath [ 491.291556][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15525'. [ 491.627073][ T6735] xt_bpf: check failed: parse error [ 492.008933][ T6786] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 492.356296][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15579'. [ 492.420982][ T6838] netlink: 182 bytes leftover after parsing attributes in process `syz.1.15584'. [ 492.580379][ T6858] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 492.600430][ T6859] netlink: 'syz.4.15594': attribute type 1 has an invalid length. [ 492.603189][ T6859] netlink: 1 bytes leftover after parsing attributes in process `syz.4.15594'. [ 492.635417][ T6863] tipc: Enabling of bearer rejected, media not registered [ 493.125003][ T6924] kernel profiling enabled (shift: 5) [ 493.999578][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 493.999596][ T40] audit: type=1401 audit(2000000035.175:20378): op=setxattr invalid_context="" [ 494.064404][ T40] audit: type=1400 audit(2000000035.240:20379): avc: denied { connect } for pid=7030 comm="syz.4.15676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 494.142773][ T7042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15682'. [ 494.307139][ T7055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7055 comm=syz.4.15689 [ 494.955484][ T7102] veth0_to_team: entered promiscuous mode [ 494.957621][ T7102] veth0_to_team: entered allmulticast mode [ 495.086750][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15719'. [ 495.308859][ T7135] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 496.182868][ T7202] netlink: 'syz.4.15759': attribute type 13 has an invalid length. [ 496.188580][ T7202] erspan0: refused to change device tx_queue_len [ 496.304302][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15769'. [ 496.377654][ T7150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.379955][ T7150] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 496.390549][ T7150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 496.399308][ T7150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.402177][ T7230] netlink: 'syz.8.15775': attribute type 10 has an invalid length. [ 496.409282][ T7230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.414842][ T7230] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 496.415756][ T7150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.467949][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15780'. [ 496.472248][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15780'. [ 496.841575][ T7298] netlink: 'syz.8.15808': attribute type 28 has an invalid length. [ 497.090980][ T7323] comedi comedi0: Cannot bond this driver to itself! [ 497.290292][ T7333] netlink: 'syz.8.15824': attribute type 58 has an invalid length. [ 497.350323][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15827'. [ 497.408393][ T7345] netlink: 76 bytes leftover after parsing attributes in process `syz.4.15830'. [ 497.778230][ T5296] Bluetooth: hci3: command 0x0405 tx timeout [ 498.143580][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.202964][ T7432] binder: 7431:7432 ioctl c0306201 200000000080 returned -14 [ 498.207705][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.250049][ T7438] netlink: 'syz.1.15875': attribute type 3 has an invalid length. [ 498.266560][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.305053][ T7446] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15879'. [ 498.330212][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15881'. [ 498.409454][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15885'. [ 498.534743][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 498.536773][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout [ 499.307956][ T7524] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15915'. [ 499.502145][ T7538] sctp: [Deprecated]: syz.8.15923 (pid 7538) Use of int in maxseg socket option. [ 499.502145][ T7538] Use struct sctp_assoc_value instead [ 499.984865][ T5941] Bluetooth: hci3: command 0x0405 tx timeout [ 500.436171][ T7614] __nla_validate_parse: 2 callbacks suppressed [ 500.436189][ T7614] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15956'. [ 500.743677][ T7639] vlan1: entered promiscuous mode [ 500.746391][ T7639] bridge0: entered promiscuous mode [ 500.919288][ T7651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.980861][ T7655] netlink: 'syz.4.15976': attribute type 28 has an invalid length. [ 501.091884][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.097369][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.112419][ T7644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15970'. [ 501.116824][ T7644] netem: invalid attributes len -22 [ 501.120824][ T7644] netem: change failed [ 501.184259][ T7665] netlink: 84 bytes leftover after parsing attributes in process `syz.4.15981'. [ 501.189889][ T7665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.15981'. [ 501.243495][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.248305][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.326915][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.334004][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.441683][ T46] bond0: (slave netdevsim0): Releasing backup interface [ 501.483748][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15989'. [ 501.493055][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.502191][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.594744][ T7691] netlink: 84 bytes leftover after parsing attributes in process `syz.4.15993'. [ 501.598955][ T7691] netlink: 56 bytes leftover after parsing attributes in process `syz.4.15993'. [ 501.726037][ T46] bridge_slave_1: left allmulticast mode [ 501.728484][ T46] bridge_slave_1: left promiscuous mode [ 501.733428][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.750498][ T46] bridge_slave_0: left allmulticast mode [ 501.752866][ T46] bridge_slave_0: left promiscuous mode [ 501.755574][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.024034][ T7736] overlayfs: missing 'lowerdir' [ 502.269202][ T40] audit: type=1400 audit(2000000042.934:20380): avc: denied { append } for pid=7754 comm="syz.4.16024" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 502.299336][ T46] bond1 (unregistering): (slave bridge1): Releasing active interface [ 502.534780][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.576743][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.639842][ T46] bond0 (unregistering): Released all slaves [ 502.651866][ T46] bond1 (unregistering): Released all slaves [ 502.775392][ T46] bond2 (unregistering): (slave veth9): Releasing active interface [ 502.822860][ T46] bond2 (unregistering): Released all slaves [ 502.856632][ T7757] mkiss: ax0: crc mode is auto. [ 502.890790][ T7759] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 503.016049][ T7776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.097072][ T7784] qrtr: Invalid version 0 [ 503.297485][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16047'. [ 503.400451][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16052'. [ 503.443880][ T46] hsr_slave_0: left promiscuous mode [ 503.446606][ T46] hsr_slave_1: left promiscuous mode [ 503.451086][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.455296][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.459329][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.462484][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.462511][ T7824] netlink: 'syz.1.16054': attribute type 28 has an invalid length. [ 503.504038][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16057'. [ 503.507983][ T7828] netlink: 'syz.8.16055': attribute type 10 has an invalid length. [ 503.532650][ T46] veth1_macvtap: left promiscuous mode [ 503.534661][ T46] veth0_macvtap: left promiscuous mode [ 503.536560][ T46] veth1_vlan: left promiscuous mode [ 503.538574][ T46] veth0_vlan: left promiscuous mode [ 503.879319][ T7849] overlay: ./file1 is not a directory [ 504.648186][ T46] team0 (unregistering): Port device team_slave_1 removed [ 504.763726][ T46] team0 (unregistering): Port device team_slave_0 removed [ 505.625802][ T7828] team0: Cannot enslave team device to itself [ 505.808414][ T7885] __nla_validate_parse: 2 callbacks suppressed [ 505.808432][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16084'. [ 506.011496][ T7903] tipc: Enabling of bearer rejected, failed to enable media [ 506.095587][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16096'. [ 506.096769][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16095'. [ 506.106835][ T46] IPVS: stop unused estimator thread 0... [ 506.107223][ T7916] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16097'. [ 506.910223][ T8009] mmap: syz.1.16139 (8009): VmData 37453824 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 507.019980][ T6022] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 507.178416][ T6022] usb 9-1: Using ep0 maxpacket: 16 [ 507.182549][ T6022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.187023][ T6022] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 507.192525][ T6022] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 507.195668][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.200435][ T6022] usb 9-1: config 0 descriptor?? [ 507.205273][ T8032] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16151'. [ 507.258273][ T40] audit: type=1400 audit(2000000047.616:20381): avc: denied { write } for pid=8035 comm="syz.8.16153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 507.533036][ T8060] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 507.535829][ T8060] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 507.540285][ T8060] vhci_hcd vhci_hcd.0: Device attached [ 507.547616][ T8061] vhci_hcd: connection closed [ 507.548169][ T13] vhci_hcd: stop threads [ 507.551918][ T13] vhci_hcd: release socket [ 507.553407][ T13] vhci_hcd: disconnect device [ 507.612117][ T6022] usbhid 9-1:0.0: can't add hid device: -71 [ 507.614195][ T6022] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 507.619294][ T6022] usb 9-1: USB disconnect, device number 19 [ 507.646430][ T8072] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16170'. [ 508.041822][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 508.134183][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16181'. [ 508.160159][ T8099] random: crng reseeded on system resumption [ 508.223271][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 508.230722][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 508.235104][ T10] usb 6-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 508.240403][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 508.243170][ T10] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 508.248990][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.253553][ T10] usb 6-1: config 0 descriptor?? [ 508.483576][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 508.486158][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 508.492327][ T10] usb 6-1: USB disconnect, device number 28 [ 508.925323][ T8176] netlink: 172 bytes leftover after parsing attributes in process `syz.8.16220'. [ 508.943990][ T8178] netlink: 'syz.4.16221': attribute type 1 has an invalid length. [ 509.013986][ T40] audit: type=1400 audit(2000000049.267:20382): avc: denied { connect } for pid=8183 comm="syz.4.16224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 509.076550][ T8194] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 509.079531][ T8194] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 509.082773][ T8194] vhci_hcd vhci_hcd.0: Device attached [ 509.086591][ T8195] vhci_hcd: connection closed [ 509.088276][ T13] vhci_hcd: stop threads [ 509.091577][ T13] vhci_hcd: release socket [ 509.093077][ T13] vhci_hcd: disconnect device [ 509.181169][ T8208] netlink: 'syz.8.16234': attribute type 11 has an invalid length. [ 509.805327][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16266'. [ 509.895572][ T8290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16272'. [ 510.103876][ T8323] overlayfs: empty lowerdir [ 510.212448][ T8337] xt_l2tp: missing protocol rule (udp|l2tpip) [ 510.216727][ T8338] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 510.221506][ T8338] SELinux: failed to load policy [ 510.869036][ T40] audit: type=1326 audit(2000000050.994:20383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.8.16332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 510.887394][ T40] audit: type=1326 audit(2000000050.994:20384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.8.16332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 510.895713][ T40] audit: type=1326 audit(2000000050.994:20385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.8.16332" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 510.919303][ T40] audit: type=1326 audit(2000000051.003:20386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.8.16332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 510.929121][ T40] audit: type=1326 audit(2000000051.003:20387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.8.16332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 511.325597][ T8460] trusted_key: encrypted_key: master key parameter is missing [ 511.383272][ T8467] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 511.399067][ T8467] overlayfs: missing 'lowerdir' [ 511.493843][ T8483] tipc: New replicast peer: 0.0.0.0 [ 511.496539][ T8483] tipc: Enabled bearer , priority 10 [ 511.922412][ T1677] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 512.102419][ T1677] usb 13-1: Using ep0 maxpacket: 32 [ 512.106449][ T1677] usb 13-1: config 2 has an invalid interface number: 194 but max is 0 [ 512.109965][ T1677] usb 13-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 512.115773][ T1677] usb 13-1: config 2 has no interface number 0 [ 512.118367][ T1677] usb 13-1: config 2 interface 194 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 512.123496][ T1677] usb 13-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 512.127556][ T1677] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.353376][ T1677] usb 13-1: string descriptor 0 read error: -71 [ 512.358717][ T1677] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.373604][ T1677] snd-usb-audio 13-1:2.194: probe with driver snd-usb-audio failed with error -2 [ 512.380732][ T1677] usb 13-1: USB disconnect, device number 3 [ 512.544952][ T8556] __nla_validate_parse: 4 callbacks suppressed [ 512.544965][ T8556] netlink: 236 bytes leftover after parsing attributes in process `syz.4.16402'. [ 513.100554][ T8609] GUP no longer grows the stack in syz.6.16427 (8609): 200000005000-200000008000 (200000004000) [ 513.104583][ T8609] CPU: 1 UID: 0 PID: 8609 Comm: syz.6.16427 Not tainted syzkaller #0 PREEMPT(full) [ 513.104602][ T8609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 513.104610][ T8609] Call Trace: [ 513.104625][ T8609] [ 513.104630][ T8609] dump_stack_lvl+0x16c/0x1f0 [ 513.104658][ T8609] gup_vma_lookup+0x1d2/0x220 [ 513.104673][ T8609] fixup_user_fault+0x26e/0x540 [ 513.104688][ T8609] ? futex_lock_pi+0x678/0x7c0 [ 513.104705][ T8609] fault_in_user_writeable+0x70/0xe0 [ 513.104725][ T8609] futex_lock_pi+0x681/0x7c0 [ 513.104741][ T8609] ? __pfx_futex_lock_pi+0x10/0x10 [ 513.104754][ T8609] ? __futex_wait+0x24b/0x2f0 [ 513.104768][ T8609] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.104788][ T8609] ? futex_private_hash_put+0xd5/0x190 [ 513.104808][ T8609] ? __pfx_futex_wake_mark+0x10/0x10 [ 513.104829][ T8609] do_futex+0x11a/0x350 [ 513.104840][ T8609] ? __pfx_do_futex+0x10/0x10 [ 513.104851][ T8609] ? __vm_munmap+0x1d2/0x380 [ 513.104871][ T8609] __x64_sys_futex+0x1e0/0x4c0 [ 513.104884][ T8609] ? __pfx___x64_sys_futex+0x10/0x10 [ 513.104896][ T8609] ? xfd_validate_state+0x61/0x180 [ 513.104919][ T8609] do_syscall_64+0xcd/0xfa0 [ 513.104931][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.104949][ T8609] RIP: 0033:0x7f5969d8f6c9 [ 513.104960][ T8609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.104972][ T8609] RSP: 002b:00007f5967ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 513.104984][ T8609] RAX: ffffffffffffffda RBX: 00007f5969fe5fa0 RCX: 00007f5969d8f6c9 [ 513.104992][ T8609] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 513.105000][ T8609] RBP: 00007f5969e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 513.105007][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.105014][ T8609] R13: 00007f5969fe6038 R14: 00007f5969fe5fa0 R15: 00007fffbff1ff88 [ 513.105029][ T8609] [ 513.156552][ T8613] binder: 8612:8613 ioctl 40046205 0 returned -22 [ 513.196304][ T8613] binder: 8612:8613 ioctl c0306201 200000000300 returned -11 [ 513.320335][ T8633] 9pnet_fd: p9_fd_create_unix (8633): problem connecting socket: ./bus: -2 [ 513.468741][ T8646] can: request_module (can-proto-0) failed. [ 513.910060][ T8690] lo: Caught tx_queue_len zero misconfig [ 514.558349][ T8755] 9pnet_fd: Insufficient options for proto=fd [ 514.672257][ T8764] netlink: 'syz.8.16501': attribute type 4 has an invalid length. [ 514.674895][ T8764] netlink: 17 bytes leftover after parsing attributes in process `syz.8.16501'. [ 514.920828][ T40] audit: type=1326 audit(2000000054.812:20388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.1.16510" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x0 [ 515.091987][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16521'. [ 515.095778][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16521'. [ 515.367790][ T8844] trusted_key: encrypted_key: insufficient parameters specified [ 515.495960][ T40] audit: type=1326 audit(2000000055.347:20389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.4.16545" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x0 [ 515.678288][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16554'. [ 515.854089][ T1677] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 516.026846][ T1677] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 516.030002][ T1677] usb 9-1: config 1 has no interface number 0 [ 516.032481][ T1677] usb 9-1: config 1 interface 105 has no altsetting 0 [ 516.040565][ T1677] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 516.043768][ T1677] usb 9-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 516.051644][ T1677] usb 9-1: Product: syz [ 516.053213][ T1677] usb 9-1: Manufacturer: syz [ 516.054771][ T1677] usb 9-1: SerialNumber: syz [ 516.394309][ T24] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 516.440412][ T8928] tipc: Enabling of bearer rejected, media not registered [ 516.535167][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16584'. [ 516.538998][ T8935] netlink: 116 bytes leftover after parsing attributes in process `syz.6.16584'. [ 516.566883][ T24] usb 13-1: not running at top speed; connect to a high speed hub [ 516.571987][ T24] usb 13-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 516.575593][ T24] usb 13-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.578032][ T8939] overlayfs: failed to clone upperpath [ 516.580478][ T24] usb 13-1: config 1 interface 0 has no altsetting 0 [ 516.589647][ T24] usb 13-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 516.592902][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.596201][ T24] usb 13-1: Product: syz [ 516.598014][ T24] usb 13-1: Manufacturer: syz [ 516.600272][ T24] usb 13-1: SerialNumber: syz [ 516.607309][ T8914] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 516.706276][ T1677] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 516.711075][ T1677] aqc111 9-1:1.105: probe with driver aqc111 failed with error -71 [ 516.716474][ T1677] usb 9-1: USB disconnect, device number 20 [ 516.843620][ T24] input: bcm5974 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/input/input60 [ 516.858023][ T24] usb 13-1: USB disconnect, device number 4 [ 516.873782][ T5331] bcm5974 13-1:1.0: could not read from device [ 517.137961][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16608'. [ 517.155388][ T8984] netlink: 80 bytes leftover after parsing attributes in process `syz.6.16607'. [ 517.645509][ T9035] SELinux: policydb string length 0 does not match expected length 8 [ 517.648205][ T9035] SELinux: failed to load policy [ 517.721341][ T9045] batadv_slave_1: entered promiscuous mode [ 517.724114][ T9044] batadv_slave_1: left promiscuous mode [ 517.951119][ T9075] @: renamed from vlan0 [ 518.081301][ T9082] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 518.084089][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16656'. [ 518.314126][ T9090] netlink: 32 bytes leftover after parsing attributes in process `syz.8.16660'. [ 518.596279][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16664'. [ 518.915410][ T9120] netem: incorrect gi model size [ 518.918243][ T9120] netem: change failed [ 519.058430][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16684'. [ 519.492161][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16705'. [ 520.264743][ T9254] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16739'. [ 520.940286][ T9332] netlink: 'syz.1.16776': attribute type 6 has an invalid length. [ 521.158412][ T9363] netlink: 68 bytes leftover after parsing attributes in process `syz.6.16791'. [ 521.185182][ T9367] binder: BINDER_SET_CONTEXT_MGR already set [ 521.189055][ T9367] binder: 9365:9367 ioctl 4018620d 200000004a80 returned -16 [ 521.860353][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16817'. [ 521.976820][ T40] audit: type=1400 audit(2000000061.427:20390): avc: denied { getopt } for pid=9428 comm="syz.1.16822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 522.045953][ T40] audit: type=1400 audit(2000000061.483:20391): avc: denied { map } for pid=9436 comm="syz.4.16826" path="/proc/7738/net/ptype" dev="proc" ino=4026533856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 522.065741][ T40] audit: type=1400 audit(2000000061.483:20392): avc: denied { execute } for pid=9436 comm="syz.4.16826" path="/proc/7738/net/ptype" dev="proc" ino=4026533856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 522.316360][ T9453] xt_limit: Overflow, try lower: 1207959552/384 [ 522.601294][ T6003] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 522.756826][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16850'. [ 522.759769][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16850'. [ 522.762779][ T6003] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.767726][ T6003] usb 13-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 522.770895][ T6003] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.783795][ T6003] usb 13-1: config 0 descriptor?? [ 523.014526][ T6003] usbhid 13-1:0.0: can't add hid device: -71 [ 523.017215][ T6003] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 523.020855][ T6003] usb 13-1: USB disconnect, device number 5 [ 523.111064][ T9515] overlayfs: overlapping lowerdir path [ 523.417376][ T40] audit: type=1400 audit(2000000062.778:20393): avc: denied { write } for pid=9539 comm="syz.4.16875" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 523.418669][ T9542] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 523.418669][ T9542] program syz.4.16875 not setting count and/or reply_len properly [ 523.762321][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 523.922455][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 523.927215][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 523.931691][ T24] usb 6-1: config 179 has no interface number 0 [ 523.934745][ T24] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 523.939238][ T24] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 523.944747][ T24] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 55, changing to 9 [ 523.949263][ T24] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8496, setting to 1024 [ 523.965014][ T24] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.970206][ T24] usb 6-1: config 179 interface 65 has no altsetting 0 [ 523.972666][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 523.975962][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.982473][ T9554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 523.993478][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input62 [ 524.040016][ T5331] input input62: unable to receive magic message: -110 [ 524.050161][ T53] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 524.125183][ T5331] input input62: unable to receive magic message: -32 [ 524.202118][ T9618] overlayfs: overlapping lowerdir path [ 524.215710][ T9554] input input62: unable to receive magic message: -32 [ 524.245043][ T53] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.252218][ T53] usb 9-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 524.257962][ T10] usb 6-1: USB disconnect, device number 29 [ 524.258061][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 524.258884][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.261947][ T53] usb 9-1: config 0 descriptor?? [ 524.263962][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 524.490283][ T53] usbhid 9-1:0.0: can't add hid device: -71 [ 524.493128][ T53] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 524.501946][ T53] usb 9-1: USB disconnect, device number 21 [ 524.931893][ T9674] netlink: 'syz.1.16937': attribute type 11 has an invalid length. [ 524.935059][ T9674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16937'. [ 526.303211][ T9824] cgroup: subsys name conflicts with all [ 526.952591][ T9889] binder: 9888:9889 ioctl c0306201 200000000500 returned -14 [ 527.415208][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17059'. [ 527.633188][ T9948] netlink: 'syz.8.17067': attribute type 11 has an invalid length. [ 527.636094][ T9948] netlink: 'syz.8.17067': attribute type 1 has an invalid length. [ 527.638646][ T9948] netlink: 3593 bytes leftover after parsing attributes in process `syz.8.17067'. [ 527.777400][ T9971] batadv_slave_1: entered promiscuous mode [ 527.783133][ T9969] batadv_slave_1: left promiscuous mode [ 527.882625][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17085'. [ 527.965854][ T9990] netlink: 'syz.6.17089': attribute type 322 has an invalid length. [ 528.228116][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17107'. [ 528.280376][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17109'. [ 528.503215][T10049] input: syz0 as /devices/virtual/input/input63 [ 528.757956][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17119'. [ 529.933412][T16156] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 530.105851][T16156] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 530.112639][T16156] usb 9-1: config 0 has no interface number 0 [ 530.118861][T16156] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 530.122266][T16156] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.129128][T16156] usb 9-1: Product: syz [ 530.130924][T16156] usb 9-1: Manufacturer: syz [ 530.137387][T16156] usb 9-1: SerialNumber: syz [ 530.142131][T16156] usb 9-1: config 0 descriptor?? [ 530.365352][T16156] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 530.369843][T16156] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 530.374606][T16156] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 530.378382][T16156] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 530.385634][T16156] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 530.389669][T16156] usb 9-1: USB disconnect, device number 22 [ 530.395194][T16156] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 530.400378][T16156] keyspan 9-1:0.133: device disconnected [ 531.103686][ T40] audit: type=1400 audit(2000000069.984:20394): avc: denied { append } for pid=10209 comm="syz.4.17193" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 531.151748][T10215] binder: Bad value for 'context' [ 531.200918][T10218] bond0: Caught tx_queue_len zero misconfig [ 531.254240][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17199'. [ 531.646849][T10273] netlink: 88 bytes leftover after parsing attributes in process `syz.8.17224'. [ 531.748990][T10285] fuse: Bad value for 'fd' [ 531.788623][T10289] openvswitch: netlink: Flow key attr not present in new flow. [ 531.917398][T10301] netlink: 388 bytes leftover after parsing attributes in process `syz.1.17238'. [ 532.392516][T10328] netlink: 96 bytes leftover after parsing attributes in process `syz.8.17251'. [ 532.489012][T10336] netlink: 'syz.1.17255': attribute type 25 has an invalid length. [ 532.794595][T10369] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17271'. [ 532.990587][ T40] audit: type=1400 audit(2000000071.758:20395): avc: denied { map } for pid=10391 comm="syz.4.17281" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 533.000623][ T40] audit: type=1400 audit(2000000071.758:20396): avc: denied { execute } for pid=10391 comm="syz.4.17281" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 533.210608][T10413] netlink: 120 bytes leftover after parsing attributes in process `syz.4.17291'. [ 533.310705][T10424] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17296'. [ 533.313358][T10425] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 533.454725][T10427] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 533.519278][T10440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17303'. [ 533.588519][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.8.17306'. [ 534.362230][ T24] hid_parser_main: 8 callbacks suppressed [ 534.362244][ T24] hid-generic 0002:0000:0009.000D: unknown main item tag 0x0 [ 534.367309][ T24] hid-generic 0002:0000:0009.000D: unknown main item tag 0x0 [ 534.370305][ T24] hid-generic 0002:0000:0009.000D: unknown main item tag 0x0 [ 534.372643][ T24] hid-generic 0002:0000:0009.000D: unknown main item tag 0x0 [ 534.375141][ T24] hid-generic 0002:0000:0009.000D: unknown main item tag 0x0 [ 534.378875][ T24] hid-generic 0002:0000:0009.000D: unknown main item tag 0x0 [ 534.381574][ T24] hid-generic 0002:0000:0009.000D: unknown main item tag 0x0 [ 534.387700][ T24] hid-generic 0002:0000:0009.000D: hidraw1: HID v0.04 Device [syz1] on syz0 [ 534.589420][T10549] bpf: Bad value for 'gid' [ 534.754522][T10564] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17363'. [ 535.676993][T10655] netlink: 'syz.1.17408': attribute type 4 has an invalid length. [ 535.801565][T10666] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 535.804082][T10666] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 535.807742][T10666] vhci_hcd vhci_hcd.0: Device attached [ 535.811417][T10667] vhci_hcd: connection closed [ 535.812261][ T1153] vhci_hcd: stop threads [ 535.820152][ T1153] vhci_hcd: release socket [ 535.821979][ T1153] vhci_hcd: disconnect device [ 536.564098][T10734] netlink: 'syz.6.17447': attribute type 10 has an invalid length. [ 536.567900][T10734] netlink: 'syz.6.17447': attribute type 10 has an invalid length. [ 536.571353][T10737] overlayfs: missing 'workdir' [ 536.808341][T10767] __nla_validate_parse: 8 callbacks suppressed [ 536.808357][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17462'. [ 536.961765][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17469'. [ 536.969025][T10782] overlayfs: failed to clone upperpath [ 537.626907][ T40] audit: type=1326 audit(2000000076.111:20397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.8.17503" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x0 [ 537.678865][T10854] netlink: 'syz.8.17505': attribute type 10 has an invalid length. [ 537.687843][T10854] netlink: 'syz.8.17505': attribute type 10 has an invalid length. [ 537.690846][T10854] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17505'. [ 537.694786][T10854] batadv0: entered promiscuous mode [ 537.696521][T10854] batadv0: entered allmulticast mode [ 537.699575][T10854] bond0: (slave batadv0): Releasing backup interface [ 537.736334][T10854] bridge0: port 3(batadv0) entered blocking state [ 537.739391][T10854] bridge0: port 3(batadv0) entered disabled state [ 537.938125][T10883] netlink: 84 bytes leftover after parsing attributes in process `syz.8.17520'. [ 538.177161][ T1153] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 538.183299][ T1153] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 538.350810][T10920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17536'. [ 538.393137][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17540'. [ 539.305040][T11023] netlink: 'syz.8.17586': attribute type 4 has an invalid length. [ 539.308675][T11023] netlink: 'syz.8.17586': attribute type 5 has an invalid length. [ 539.312261][T11023] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.17586'. [ 539.779920][T11044] x_tables: duplicate underflow at hook 3 [ 539.988733][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17605'. [ 539.992827][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17605'. [ 540.109266][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17610'. [ 540.142980][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 540.302936][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 540.307966][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 540.326799][ T24] usb 9-1: config 9 has an invalid interface number: 254 but max is 0 [ 540.329390][ T24] usb 9-1: config 9 has no interface number 0 [ 540.331575][ T24] usb 9-1: config 9 interface 254 has no altsetting 0 [ 540.336226][ T24] usb 9-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 540.339648][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.344484][ T24] usb 9-1: Product: syz [ 540.346859][ T24] usb 9-1: Manufacturer: syz [ 540.348811][ T24] usb 9-1: SerialNumber: syz [ 540.434039][T11100] netlink: 'syz.1.17623': attribute type 4 has an invalid length. [ 540.436757][T11100] netlink: 'syz.1.17623': attribute type 5 has an invalid length. [ 540.575083][ T24] hso 9-1:9.254: Not our interface [ 540.581924][ T24] usb 9-1: USB disconnect, device number 23 [ 541.453835][ T6003] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 541.625328][ T40] audit: type=1400 audit(2000000079.865:20398): avc: denied { setopt } for pid=11194 comm="syz.6.17668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 541.647492][ T6003] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.650707][ T6003] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.653679][ T6003] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.657000][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.661737][ T6003] usb 9-1: config 0 descriptor?? [ 541.884107][ T6003] usb 9-1: string descriptor 0 read error: -71 [ 541.887640][ T6003] usb 9-1: USB disconnect, device number 24 [ 542.263567][T11248] __nla_validate_parse: 2 callbacks suppressed [ 542.263582][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17692'. [ 542.625298][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17715'. [ 542.992919][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17733'. [ 543.413670][T11385] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17759'. [ 544.007322][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17785'. [ 544.059353][T11439] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 544.061777][T11439] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 544.624282][T11493] overlayfs: missing 'workdir' [ 544.877273][T11527] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 544.881203][T11527] overlayfs: missing 'lowerdir' [ 545.081061][T11554] tc_dump_action: action bad kind [ 545.543860][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17873'. [ 545.548404][T11625] bond0: left allmulticast mode [ 545.550137][T11625] : left allmulticast mode [ 545.551608][T11625] bond_slave_1: left allmulticast mode [ 545.553361][T11625] bond0: left promiscuous mode [ 545.554957][T11625] : left promiscuous mode [ 545.556504][T11625] bond_slave_1: left promiscuous mode [ 545.560526][T11625] +$<: port 3(bond0) entered disabled state [ 545.569682][T11625] bridge_slave_1: left allmulticast mode [ 545.571584][T11625] bridge_slave_1: left promiscuous mode [ 545.574642][T11625] +$<: port 2(bridge_slave_1) entered disabled state [ 545.579704][T11625] bridge_slave_0: left allmulticast mode [ 545.581977][T11625] bridge_slave_0: left promiscuous mode [ 545.584349][T11625] +$<: port 1(bridge_slave_0) entered disabled state [ 546.001318][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17895'. [ 546.079373][T11670] bond0: (slave bond_slave_1): Releasing backup interface [ 546.260368][ T5823] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 546.430788][ T5823] usb 6-1: Using ep0 maxpacket: 32 [ 546.434915][ T5823] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 546.439111][ T5823] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 546.444481][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 546.447675][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 546.451463][ T5823] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 546.456482][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 546.463305][ T5823] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 546.467488][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.469289][T11697] netlink: 72 bytes leftover after parsing attributes in process `syz.6.17908'. [ 546.472925][ T5823] usb 6-1: config 0 descriptor?? [ 546.705222][ T5823] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 546.722113][ T5823] usb 6-1: USB disconnect, device number 30 [ 546.732073][ T5823] usblp0: removed [ 547.114086][T11768] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 547.119924][T11768] Error validating options; rc = [-22] [ 547.166239][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 547.266888][T11784] netlink: 'syz.6.17951': attribute type 10 has an invalid length. [ 547.269849][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17951'. [ 547.326038][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 547.329085][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 547.332828][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 547.336263][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 547.339996][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 547.344165][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 547.348095][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 547.354293][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 547.359481][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.365721][ T24] usb 6-1: config 0 descriptor?? [ 547.400771][ T6022] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 547.434948][T11796] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 547.560702][ T6022] usb 9-1: Using ep0 maxpacket: 8 [ 547.566437][ T6022] usb 9-1: config 0 has no interfaces? [ 547.570696][ T6022] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.575047][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 547.578963][ T6022] usb 9-1: SerialNumber: syz [ 547.584264][ T6022] usb 9-1: config 0 descriptor?? [ 547.588010][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 547.807061][ T24] usb 9-1: USB disconnect, device number 25 [ 548.326970][T11801] netlink: 240 bytes leftover after parsing attributes in process `syz.6.17959'. [ 548.933128][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17982'. [ 549.211352][T16158] usb 6-1: USB disconnect, device number 31 [ 549.216315][T16158] usblp0: removed [ 549.258649][T11876] 9pnet_fd: Insufficient options for proto=fd [ 549.606674][ T5941] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 549.609690][ T5296] Bluetooth: hci2: command 0x1003 tx timeout [ 549.860373][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18023'. [ 549.983880][T11945] x_tables: duplicate underflow at hook 2 [ 550.432622][T12004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18051'. [ 550.767903][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18072'. [ 551.243311][T12105] openvswitch: netlink: Flow actions attr not present in new flow. [ 551.371637][T12121] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 551.374490][T12121] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 551.381799][T12121] vhci_hcd vhci_hcd.0: Device attached [ 551.386061][T12122] usbip_core: unknown command [ 551.389281][T12122] vhci_hcd: unknown pdu 0 [ 551.391260][T12122] usbip_core: unknown command [ 551.393675][ T12] vhci_hcd: stop threads [ 551.395583][ T12] vhci_hcd: release socket [ 551.399959][ T12] vhci_hcd: disconnect device [ 551.411575][T12125] veth1_macvtap: left promiscuous mode [ 551.414278][T12125] macsec0: entered promiscuous mode [ 551.617411][T12141] ip6tnl0: Caught tx_queue_len zero misconfig [ 551.620186][T12141] netlink: 'syz.4.18119': attribute type 3 has an invalid length. [ 551.833142][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18128'. [ 551.883361][T12164] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 552.888862][T12285] IPv6: addrconf: prefix option has invalid lifetime [ 553.020800][T12299] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18197'. [ 553.431839][T12340] 9pnet_fd: Insufficient options for proto=fd [ 553.653838][ T40] audit: type=1400 audit(2000000091.143:20399): avc: denied { create } for pid=12363 comm="syz.4.18229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 553.916333][T12395] sctp: [Deprecated]: syz.6.18244 (pid 12395) Use of int in maxseg socket option. [ 553.916333][T12395] Use struct sctp_assoc_value instead [ 554.072908][T12393] netlink: 76 bytes leftover after parsing attributes in process `syz.8.18242'. [ 554.255042][T12437] netlink: 'syz.8.18263': attribute type 34 has an invalid length. [ 554.629972][T12481] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18284'. [ 554.667639][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18287'. [ 554.686366][T12488] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18289'. [ 555.450518][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18332'. [ 556.107961][ T5823] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 556.165131][T12659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18370'. [ 556.169034][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18370'. [ 556.291492][ T5823] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 556.295063][ T5823] usb 9-1: config 0 has no interface number 0 [ 556.298255][ T5823] usb 9-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 556.307732][ T5823] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 556.313320][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.316680][ T5823] usb 9-1: Product: syz [ 556.318701][ T5823] usb 9-1: Manufacturer: syz [ 556.324777][ T5823] usb 9-1: SerialNumber: syz [ 556.330446][ T5823] usb 9-1: config 0 descriptor?? [ 556.400574][T12684] vxcan1: entered allmulticast mode [ 556.552521][ T5823] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 556.557251][ T5823] keyspan 9-1:0.133: unsupported endpoint type 0 [ 556.560300][ T5823] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 556.563258][ T5823] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 556.566893][ T5823] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 556.570223][ T5823] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 556.575422][ T5823] usb 9-1: USB disconnect, device number 26 [ 556.579735][ T5823] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 556.582914][ T5823] keyspan 9-1:0.133: device disconnected [ 556.812525][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18402'. [ 556.823696][T12727] netlink: 108 bytes leftover after parsing attributes in process `syz.1.18404'. [ 557.521144][ T40] audit: type=1326 audit(2000000094.775:20400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.531638][ T40] audit: type=1326 audit(2000000094.775:20401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.542394][ T40] audit: type=1326 audit(2000000094.775:20402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.553967][ T40] audit: type=1326 audit(2000000094.775:20403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.564507][ T40] audit: type=1326 audit(2000000094.775:20404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.578380][ T40] audit: type=1326 audit(2000000094.775:20405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.588541][ T40] audit: type=1326 audit(2000000094.775:20406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.597700][ T40] audit: type=1326 audit(2000000094.775:20407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.607185][ T40] audit: type=1326 audit(2000000094.775:20408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.18442" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f101518f6c9 code=0x7ffc0000 [ 557.880990][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.8.18456'. [ 559.263589][T12951] binder: 12950:12951 ioctl 40046205 0 returned -22 [ 559.265955][T12951] binder: 12950:12951 ioctl c0306201 200000000300 returned -11 [ 559.398062][T12964] sit1: entered allmulticast mode [ 559.473038][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 559.473049][ T40] audit: type=1326 audit(2000000096.604:20414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12973 comm="syz.8.18520" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6f498f6c9 code=0x0 [ 560.607920][T13055] __nla_validate_parse: 2 callbacks suppressed [ 560.607938][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18557'. [ 560.843917][ T40] audit: type=1400 audit(2000000097.899:20415): avc: denied { read } for pid=13087 comm="syz.8.18572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 561.355334][T13130] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 561.373773][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18594'. [ 561.798548][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18609'. [ 561.836367][T13168] macvlan4: entered promiscuous mode [ 561.840211][T13168] macvlan4: entered allmulticast mode [ 561.842748][T13168] bond2: entered promiscuous mode [ 561.845676][T13168] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 561.880322][T13168] bond2: left promiscuous mode [ 562.196789][T13204] netlink: 104 bytes leftover after parsing attributes in process `syz.8.18624'. [ 562.341546][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18637'. [ 562.548843][T13250] binder: 13249:13250 ioctl c0306201 200000000940 returned -22 [ 562.596946][T13256] netlink: 232 bytes leftover after parsing attributes in process `syz.1.18652'. [ 563.261842][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18690'. [ 563.603909][T13376] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.18712'. [ 563.608551][T13376] ip_vti0: entered allmulticast mode [ 563.690383][T13387] binder: 13386:13387 ioctl 40046210 0 returned -14 [ 564.024218][T13419] binder: 13418:13419 ioctl 40046205 0 returned -22 [ 564.027295][T13419] binder: 13418:13419 ioctl c0306201 200000000300 returned -11 [ 564.827059][T13478] ptrace attach of "/syz-executor exec"[13481] was attempted by "/syz-executor exec"[13478] [ 565.161491][T13509] netlink: 'syz.4.18776': attribute type 2 has an invalid length. [ 565.164348][T13509] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18776'. [ 565.456555][ T40] audit: type=1400 audit(2000000108.649:20416): avc: denied { accept } for pid=13548 comm="syz.8.18794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 565.825841][T13599] netlink: 'syz.6.18821': attribute type 64 has an invalid length. [ 565.890468][T13609] netlink: 'syz.1.18826': attribute type 13 has an invalid length. [ 566.031058][T13626] netlink: 72 bytes leftover after parsing attributes in process `syz.8.18834'. [ 566.176807][T13640] tmpfs: Bad value for 'nr_blocks' [ 566.355216][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18847'. [ 566.578320][T13678] binder: 13677:13678 unknown command 0 [ 566.581746][T13678] binder: 13677:13678 ioctl c0306201 200000000100 returned -22 [ 566.662399][T13683] 9pnet: Could not find request transport: 0xffffffffffffffff [ 566.686350][T13689] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.728317][T13693] netlink: 100 bytes leftover after parsing attributes in process `syz.8.18866'. [ 566.908731][T13717] trusted_key: encrypted_key: master key parameter is missing [ 567.063378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 567.120470][T13734] netlink: 40 bytes leftover after parsing attributes in process `syz.6.18885'. [ 567.163291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 567.314652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 567.344829][T13747] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18893'. [ 567.436982][T13759] trusted_key: encrypted_key: master key parameter is missing [ 567.550464][T13771] netlink: 'syz.6.18905': attribute type 16 has an invalid length. [ 567.555307][T13771] netlink: 64122 bytes leftover after parsing attributes in process `syz.6.18905'. [ 567.617846][T13782] netlink: 'syz.8.18908': attribute type 13 has an invalid length. [ 567.798309][T13803] netlink: 104 bytes leftover after parsing attributes in process `syz.6.18918'. [ 568.184364][T13865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18949'. [ 568.206358][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18951'. [ 568.220849][T13871] netlink: 100 bytes leftover after parsing attributes in process `syz.6.18952'. [ 568.439505][T13898] usb usb9: usbfs: process 13898 (syz.4.18965) did not claim interface 0 before use [ 569.365440][T13998] overlay: ./file1 is not a directory [ 569.558046][T14032] SELinux: security_context_str_to_sid (syt) failed with errno=-22 [ 569.558084][T14030] trusted_key: encrypted_key: insufficient parameters specified [ 570.247871][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 570.394755][ T24] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 570.397473][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.405053][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.409327][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.415147][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.418037][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.422759][ T24] usb 6-1: config 0 descriptor?? [ 570.480514][T14164] netlink: 'syz.8.19095': attribute type 5 has an invalid length. [ 570.821199][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.835666][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.848712][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.851680][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.854490][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.858190][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.861305][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.864426][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.868379][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.871484][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 570.886171][ T24] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 570.947144][T14205] netlink: 'syz.8.19114': attribute type 4 has an invalid length. [ 570.950979][T14205] __nla_validate_parse: 6 callbacks suppressed [ 570.950989][T14205] netlink: 17 bytes leftover after parsing attributes in process `syz.8.19114'. [ 571.016315][T14212] cgroup: Unknown subsys name 'cpuset' [ 571.067934][ T24] usb 6-1: USB disconnect, device number 32 [ 571.609380][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19150'. [ 571.870102][ T40] audit: type=1400 audit(2000000115.379:20417): avc: denied { associate } for pid=14311 comm="syz.6.19164" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 571.902661][ T40] audit: type=1326 audit(2000000115.421:20418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.1.19167" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x0 [ 572.048476][T14330] netlink: 48 bytes leftover after parsing attributes in process `syz.8.19170'. [ 572.087685][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19175'. [ 572.316853][ T40] audit: type=1326 audit(2000000115.862:20419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.19188" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x0 [ 572.737797][T14388] netlink: 96 bytes leftover after parsing attributes in process `syz.8.19202'. [ 573.442172][T14467] netlink: 32 bytes leftover after parsing attributes in process `syz.8.19239'. [ 573.618007][T14491] netlink: 'syz.8.19251': attribute type 1 has an invalid length. [ 573.633389][T14491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.671731][T14491] veth3: entered promiscuous mode [ 573.677604][T14491] bond1: (slave veth3): Enslaving as an active interface with a down link [ 573.681820][T14498] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19254'. [ 573.705718][T14491] bond1: entered allmulticast mode [ 573.985436][T14533] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 573.994391][T14533] overlayfs: missing 'lowerdir' [ 574.498066][T14598] overlay: Bad value for 'redirect_dir' [ 574.774133][T14631] tipc: Enabling of bearer rejected, failed to enable media [ 574.775404][T14633] netlink: 'syz.4.19319': attribute type 21 has an invalid length. [ 574.779374][T14633] netlink: 128 bytes leftover after parsing attributes in process `syz.4.19319'. [ 574.782553][T14633] netlink: 'syz.4.19319': attribute type 6 has an invalid length. [ 574.785244][T14633] netlink: 3 bytes leftover after parsing attributes in process `syz.4.19319'. [ 574.789476][T14628] xt_CT: No such helper "pptp" [ 575.054990][T14666] smc: net device bond0 applied user defined pnetid SYZ2 [ 575.083635][T14672] netlink: 'syz.1.19338': attribute type 1 has an invalid length. [ 575.087693][T14672] netlink: 'syz.1.19338': attribute type 2 has an invalid length. [ 575.223008][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19347'. [ 576.245411][T14785] __nla_validate_parse: 1 callbacks suppressed [ 576.245423][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19389'. [ 576.671104][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19408'. [ 577.236112][T14870] SELinux: policydb string length 0 does not match expected length 8 [ 577.239283][T14870] SELinux: failed to load policy [ 577.500791][T14885] SELinux: failed to load policy [ 577.800197][ T40] audit: type=1326 audit(2000000121.605:20420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14926 comm="syz.4.19459" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x0 [ 577.904441][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19464'. [ 578.370721][T14991] veth0: entered promiscuous mode [ 578.373420][T14989] veth0: left promiscuous mode [ 578.652783][T15024] netlink: 152 bytes leftover after parsing attributes in process `syz.8.19506'. [ 578.657399][T15003] netlink: 76 bytes leftover after parsing attributes in process `syz.4.19495'. [ 578.918711][T15050] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 578.918711][T15050] program syz.1.19518 not setting count and/or reply_len properly [ 579.124546][T15068] SELinux: policydb version 0 does not match my version range 15-35 [ 579.127777][T15068] SELinux: failed to load policy [ 579.201435][T15072] overlayfs: conflicting options: userxattr,metacopy=on [ 579.269349][T15076] netlink: 4100 bytes leftover after parsing attributes in process `syz.4.19531'. [ 579.340568][T15082] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19534'. [ 579.597359][ T40] audit: type=1400 audit(2000000123.495:20421): avc: denied { watch } for pid=15105 comm="syz.4.19546" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 579.838951][ T6022] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 579.991725][ T6022] usb 9-1: Using ep0 maxpacket: 8 [ 579.996765][ T6022] usb 9-1: config 1 has an invalid interface number: 44 but max is 0 [ 580.003623][T15152] ip6tnl0: Caught tx_queue_len zero misconfig [ 580.004406][ T6022] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.010299][ T6022] usb 9-1: config 1 has no interface number 0 [ 580.014609][ T6022] usb 9-1: config 1 interface 44 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 580.019344][ T6022] usb 9-1: config 1 interface 44 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 580.026544][ T6022] usb 9-1: config 1 interface 44 has no altsetting 0 [ 580.031996][ T6022] usb 9-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=a3.c1 [ 580.035856][ T6022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.039995][ T6022] usb 9-1: Product: syz [ 580.042042][ T6022] usb 9-1: Manufacturer: syz [ 580.044472][ T6022] usb 9-1: SerialNumber: syz [ 580.246672][ T6022] usb 9-1: USB disconnect, device number 27 [ 580.442620][T15200] binder_alloc: 15199: binder_alloc_buf, no vma [ 580.573241][T15218] netlink: 756 bytes leftover after parsing attributes in process `syz.6.19601'. [ 581.750292][T15292] netlink: 56 bytes leftover after parsing attributes in process `syz.8.19638'. [ 582.408062][T15379] binder: Bad value for 'context' [ 582.414252][T15376] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19678'. [ 582.490240][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19683'. [ 582.533685][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19689'. [ 582.587717][ T40] audit: type=1400 audit(2000000126.634:20422): avc: denied { accept } for pid=15406 comm="syz.8.19693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 583.139450][T15457] SELinux: security_context_str_to_sid (5粕] 諷9q#摑) failed with errno=-22 [ 583.257596][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19723'. [ 583.261441][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19723'. [ 583.491758][T15497] netlink: 76 bytes leftover after parsing attributes in process `syz.4.19736'. [ 583.506504][T15499] netlink: 72 bytes leftover after parsing attributes in process `syz.1.19738'. [ 583.655543][T15519] tmpfs: Bad value for 'huge' [ 583.779690][T15540] trusted_key: encrypted_key: insufficient parameters specified [ 584.182717][T16156] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 584.326635][T16156] usb 6-1: Using ep0 maxpacket: 16 [ 584.330409][T16156] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.333763][T16156] usb 6-1: config 0 has no interfaces? [ 584.337068][T16156] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 584.339887][T16156] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 584.342368][T16156] usb 6-1: Manufacturer: syz [ 584.350376][T16156] usb 6-1: config 0 descriptor?? [ 584.520082][T15630] can: request_module (can-proto-0) failed. [ 584.556614][T15635] netlink: 104 bytes leftover after parsing attributes in process `syz.6.19804'. [ 584.576535][ T5823] usb 6-1: USB disconnect, device number 33 [ 584.609776][T15640] netlink: 'syz.6.19806': attribute type 4 has an invalid length. [ 584.712356][T15650] sctp: [Deprecated]: syz.4.19811 (pid 15650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.712356][T15650] Use struct sctp_sack_info instead [ 584.999738][T15669] netlink: 244 bytes leftover after parsing attributes in process `syz.8.19820'. [ 585.172141][T15691] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 585.487085][T16156] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 585.630665][T16156] usb 13-1: Using ep0 maxpacket: 16 [ 585.646692][T16156] usb 13-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 585.652283][T16156] usb 13-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 585.657155][T16156] usb 13-1: config 0 interface 0 has no altsetting 0 [ 585.660033][T16156] usb 13-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 585.662774][T16156] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.668337][T16156] usb 13-1: config 0 descriptor?? [ 585.746040][T15745] netlink: 'syz.4.19857': attribute type 4 has an invalid length. [ 585.866407][T16156] usbhid 13-1:0.0: can't add hid device: -71 [ 585.869450][T16156] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 585.875625][T16156] usb 13-1: USB disconnect, device number 6 [ 586.738619][T15872] __nla_validate_parse: 1 callbacks suppressed [ 586.738635][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19918'. [ 587.558090][T15928] netlink: 'syz.4.19946': attribute type 64 has an invalid length. [ 587.561462][T15928] netlink: 5 bytes leftover after parsing attributes in process `syz.4.19946'. [ 587.565478][T15928] gretap0: left promiscuous mode [ 587.567209][T15928] gretap0: entered allmulticast mode [ 587.690055][T15940] xt_bpf: check failed: parse error [ 587.756251][T15948] netlink: 'syz.6.19957': attribute type 4 has an invalid length. [ 587.758920][T15948] netlink: 17 bytes leftover after parsing attributes in process `syz.6.19957'. [ 588.552721][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19993'. [ 588.799128][T16039] SELinux: security_context_str_to_sid () failed with errno=-22 [ 589.180837][T16069] netlink: 'syz.1.20017': attribute type 4 has an invalid length. [ 589.541016][T16106] cgroup: Invalid name [ 589.586790][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20034'. [ 589.590444][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20034'. [ 589.595144][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20034'. [ 590.149392][ T1153] tipc: Subscription rejected, illegal request [ 590.232138][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20063'. [ 590.379987][T16180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.422936][T16180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.460403][T16180] bond0 (unregistering): Released all slaves [ 590.595216][T16208] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20077'. [ 591.717909][T16296] netlink: 'syz.1.20121': attribute type 1 has an invalid length. [ 591.772251][T16296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.779659][T16296] bond3: (slave bond4): making interface the new active one [ 591.787408][T16296] bond3: (slave bond4): Enslaving as an active interface with an up link [ 591.807158][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20121'. [ 591.819919][T16296] bond3 (unregistering): (slave bond4): Releasing backup interface [ 591.860580][T16296] bond3 (unregistering): Released all slaves [ 592.009978][T16320] netlink: 'syz.1.20131': attribute type 15 has an invalid length. [ 592.013662][T16320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20131'. [ 592.056237][T16324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20133'. [ 592.068031][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20134'. [ 592.316446][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20149'. [ 592.367413][T16360] IPv6: Can't replace route, no match found [ 592.465821][T16378] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 592.624526][ T73] tipc: Subscription rejected, illegal request [ 592.697232][T16403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20171'. [ 592.831535][T16418] netlink: 'syz.4.20179': attribute type 4 has an invalid length. [ 592.835059][T16418] netlink: 'syz.4.20179': attribute type 21 has an invalid length. [ 592.838383][T16418] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.20179'. [ 592.947341][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20181'. [ 592.957306][T16428] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 593.030953][T16424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16424 comm=syz.4.20181 [ 593.210526][T16448] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20193'. [ 593.527441][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20210'. [ 593.837542][ T40] audit: type=1400 audit(2000000138.446:20423): avc: denied { remount } for pid=16522 comm="syz.1.20228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 593.889942][T16527] bridge0: port 1(hsr0) entered blocking state [ 593.892763][T16527] bridge0: port 1(hsr0) entered disabled state [ 593.895254][T16527] hsr0: entered allmulticast mode [ 593.899391][T16527] hsr_slave_0: entered allmulticast mode [ 593.902443][T16527] hsr0: entered promiscuous mode [ 593.905863][T16527] bridge0: port 1(hsr0) entered blocking state [ 593.910928][T16527] bridge0: port 1(hsr0) entered listening state [ 593.988739][T16535] netlink: 'syz.4.20234': attribute type 1 has an invalid length. [ 593.992112][T16535] netlink: 'syz.4.20234': attribute type 2 has an invalid length. [ 594.064187][T16546] 9pnet_fd: Insufficient options for proto=fd [ 594.118372][T16552] x_tables: duplicate underflow at hook 2 [ 594.298862][T16569] netlink: 'syz.1.20250': attribute type 3 has an invalid length. [ 594.614343][T16596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16596 comm=syz.4.20263 [ 595.300090][T16651] netlink: 'syz.1.20289': attribute type 7 has an invalid length. [ 595.303947][T16651] netlink: 'syz.1.20289': attribute type 8 has an invalid length. [ 595.323973][ T40] audit: type=1107 audit(2000000140.000:20424): pid=16652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 595.365878][T16657] usb usb8: usbfs: process 16657 (syz.1.20291) did not claim interface 0 before use [ 595.496968][ T40] audit: type=1400 audit(2000000140.189:20425): avc: denied { unmount } for pid=16670 comm="syz.6.20299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 595.806846][T16709] netlink: 'syz.6.20318': attribute type 1 has an invalid length. [ 595.826589][T16709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 595.845127][T16709] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 595.850399][T16709] bond6: entered allmulticast mode [ 595.862726][T16709] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 595.886166][T16716] 0{X功: renamed from gretap0 (while UP) [ 595.894334][T16716] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 596.063762][T16740] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 596.165592][ T40] audit: type=1326 audit(2000000140.892:20426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16751 comm="syz.4.20339" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101518f6c9 code=0x0 [ 596.347027][T16774] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 596.414177][ T40] audit: type=1804 audit(2000000141.155:20427): pid=16782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.20353" name="/newroot/5096/file0" dev="tmpfs" ino=30626 res=1 errno=0 [ 596.756450][T16835] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 597.583426][T16946] 9p: Unknown Cache mode or invalid value m [ 597.762996][T16967] validate_nla: 1 callbacks suppressed [ 597.763014][T16967] netlink: 'syz.8.20439': attribute type 4 has an invalid length. [ 597.769614][T16967] netlink: 'syz.8.20439': attribute type 5 has an invalid length. [ 597.775492][T16967] __nla_validate_parse: 11 callbacks suppressed [ 597.775506][T16967] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.20439'. [ 598.097155][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20463'. [ 598.272695][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20474'. [ 598.569862][T17060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20487'. [ 598.575776][T17060] netlink: 17 bytes leftover after parsing attributes in process `syz.1.20487'. [ 598.579876][T17060] tipc: Invalid UDP bearer configuration [ 598.579925][T17060] tipc: Enabling of bearer rejected, failed to enable media [ 599.057559][T17107] sctp: [Deprecated]: syz.6.20511 (pid 17107) Use of int in max_burst socket option deprecated. [ 599.057559][T17107] Use struct sctp_assoc_value instead [ 599.335715][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20521'. [ 599.634664][T17144] netlink: 'syz.1.20529': attribute type 32 has an invalid length. [ 599.876403][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20537'. [ 600.325654][T17203] 9pnet_fd: Insufficient options for proto=fd [ 600.334161][ T40] audit: type=1326 audit(2000000145.270:20428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17204 comm="syz.6.20558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 600.346111][ T40] audit: type=1326 audit(2000000145.270:20429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17204 comm="syz.6.20558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 600.357646][ T40] audit: type=1326 audit(2000000145.270:20430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17204 comm="syz.6.20558" exe="/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 600.369786][ T40] audit: type=1326 audit(2000000145.281:20431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17204 comm="syz.6.20558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 600.379543][ T40] audit: type=1326 audit(2000000145.281:20432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17204 comm="syz.6.20558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5969d8f6c9 code=0x7ffc0000 [ 600.828131][T17272] nfs: Unknown parameter 'a' [ 601.089298][T17312] netlink: 'syz.6.20609': attribute type 4 has an invalid length. [ 601.092722][T17312] netlink: 'syz.6.20609': attribute type 5 has an invalid length. [ 601.095999][T17312] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.20609'. [ 601.660840][ T40] audit: type=1326 audit(2000000146.667:20433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.1.20634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7fc00000 [ 601.671483][ T40] audit: type=1326 audit(2000000146.667:20434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.1.20634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7fc00000 [ 601.682324][ T40] audit: type=1326 audit(2000000146.667:20435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.1.20634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7fc00000 [ 601.694033][ T40] audit: type=1326 audit(2000000146.667:20436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.1.20634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7fc00000 [ 601.705964][ T40] audit: type=1326 audit(2000000146.667:20437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.1.20634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8955f8f6c9 code=0x7fc00000 [ 601.710804][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20636'. [ 601.773429][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20639'. [ 601.827382][T17380] lo: Caught tx_queue_len zero misconfig [ 601.977099][T17395] overlayfs: failed to clone lowerpath [ 602.191335][T17415] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 602.541093][T17451] nfs: Unknown parameter ''' [ 602.668683][T17467] netlink: 'syz.4.20683': attribute type 4 has an invalid length. [ 602.671771][T17467] __nla_validate_parse: 2 callbacks suppressed [ 602.671782][T17467] netlink: 17 bytes leftover after parsing attributes in process `syz.4.20683'. [ 603.231814][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20711'. [ 603.258599][T17524] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 603.264110][T17524] overlayfs: missing 'lowerdir' [ 603.281922][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20713'. [ 603.286535][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20713'. [ 603.297568][T17526] geneve4: entered promiscuous mode [ 603.299779][T17526] geneve4: entered allmulticast mode [ 603.303265][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.306255][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.309757][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.312593][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.550652][T17536] fuse: Bad value for 'group_id' [ 603.553507][T17536] fuse: Bad value for 'group_id' [ 603.703903][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20738'. [ 603.707332][T17579] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20738'. [ 603.710811][T17579] netlink: 36 bytes leftover after parsing attributes in process `syz.6.20738'. [ 603.714612][T17582] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 603.718804][T17582] SELinux: failed to load policy [ 604.461849][T17657] binder: 17656:17657 ioctl c0306201 200000000940 returned -22 [ 604.656544][T17677] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 604.664619][T17677] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 604.674982][T17680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17680 comm=syz.1.20787 [ 605.282723][T17754] binder: 17753:17754 ioctl 400c620e 200000000100 returned -22 [ 605.747725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 605.901903][T17845] netlink: 24 bytes leftover after parsing attributes in process `syz.8.20864'. [ 605.943523][T17845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17845 comm=syz.8.20864 [ 606.090628][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 606.090644][ T40] audit: type=1400 audit(2000000151.318:20440): avc: denied { lock } for pid=17868 comm="syz.1.20877" path="socket:[202403]" dev="sockfs" ino=202403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 606.192575][T17885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20883'. [ 606.427109][T17917] bond0: Caught tx_queue_len zero misconfig [ 606.553826][T17935] input: syz0 as /devices/virtual/input/input70 [ 606.687654][T17949] bpf: Bad value for 'uid' [ 606.866375][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20924'. [ 606.873903][T17968] bond0: entered promiscuous mode [ 606.875965][T17968] bridge0: entered promiscuous mode [ 606.878678][T17968] batadv0: entered promiscuous mode [ 606.882279][T17968] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 606.919158][T17976] Invalid ELF header type: 2 != 1 [ 606.935074][T17978] sit0: Caught tx_queue_len zero misconfig [ 607.398113][T18022] lo speed is unknown, defaulting to 1000 [ 607.404333][T18022] lo speed is unknown, defaulting to 1000 [ 607.409137][T18022] lo speed is unknown, defaulting to 1000 [ 607.443013][T18024] netlink: 'syz.8.20951': attribute type 4 has an invalid length. [ 607.446420][T18024] netlink: 'syz.8.20951': attribute type 4 has an invalid length. [ 607.522390][T18022] infiniband syz2: set active [ 607.525363][T18022] infiniband syz2: added lo [ 607.526119][ T1677] lo speed is unknown, defaulting to 1000 [ 607.529653][ T1677] syz2: Port: 1 Link ACTIVE [ 607.561447][T18022] RDS/IB: syz2: added [ 607.566756][T18022] smc: adding ib device syz2 with port count 1 [ 607.569985][T18022] smc: ib device syz2 port 1 has no pnetid [ 607.576250][T16158] lo speed is unknown, defaulting to 1000 [ 607.582333][T18022] lo speed is unknown, defaulting to 1000 [ 607.682480][T18022] lo speed is unknown, defaulting to 1000 [ 607.786365][T18022] lo speed is unknown, defaulting to 1000 [ 607.939246][T18022] lo speed is unknown, defaulting to 1000 [ 607.995354][T18055] __nla_validate_parse: 1 callbacks suppressed [ 607.995372][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20964'. [ 608.099646][T18022] lo speed is unknown, defaulting to 1000 [ 608.211240][T18076] netlink: 'syz.6.20975': attribute type 12 has an invalid length. [ 608.338832][T18098] Bluetooth: MGMT ver 1.23 [ 608.471079][T18116] 9pnet_fd: p9_fd_create_unix (18116): problem connecting socket: ./bus: -2 [ 608.642232][ C2] bridge0: port 1(hsr0) entered learning state [ 608.791973][T18150] bond0: entered allmulticast mode [ 608.795036][T18150] : entered allmulticast mode [ 608.797083][T18150] bond_slave_1: entered allmulticast mode [ 609.054907][T18175] netlink: 'syz.4.21024': attribute type 16 has an invalid length. [ 609.058325][T18175] netlink: 64122 bytes leftover after parsing attributes in process `syz.4.21024'. [ 609.157809][T18186] netlink: 76 bytes leftover after parsing attributes in process `syz.1.21029'. [ 609.217486][T18193] tipc: Cannot configure node identity twice [ 609.217654][T18194] netlink: 'syz.4.21034': attribute type 2 has an invalid length. [ 609.223366][T18194] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21034'. [ 609.265595][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21036'. [ 609.908854][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21058'. [ 610.005284][T18257] netlink: 'syz.1.21062': attribute type 13 has an invalid length. [ 610.323214][T18292] netlink: 'syz.4.21080': attribute type 1 has an invalid length. [ 610.329401][T18292] netlink: 'syz.4.21080': attribute type 2 has an invalid length. [ 610.351299][T18295] netlink: 228 bytes leftover after parsing attributes in process `syz.8.21081'. [ 610.384505][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21083'. [ 610.697620][T18333] overlayfs: failed to clone upperpath [ 611.134593][ T40] audit: type=1326 audit(2000000156.609:20441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.8.21123" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 611.145373][ T40] audit: type=1326 audit(2000000156.609:20442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.8.21123" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 611.160299][ T40] audit: type=1326 audit(2000000156.609:20443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.8.21123" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 611.172195][ T40] audit: type=1326 audit(2000000156.609:20444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.8.21123" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498f6c9 code=0x7ffc0000 [ 611.329351][T18398] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 611.329875][T18396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21131'. [ 611.422507][ T40] audit: type=1400 audit(2000000156.914:20445): avc: denied { setattr } for pid=18405 comm="syz.1.21136" name="PACKET" dev="sockfs" ino=206095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.492848][T18414] binfmt_misc: register: failed to install interpreter file ./file0 [ 611.742174][T18442] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21152'. [ 612.665217][ T40] audit: type=1326 audit(2000000158.216:20446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.8.21207" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6f498f6c9 code=0x0 [ 614.136998][ T5296] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 614.137352][ T5943] Bluetooth: hci2: command 0x1003 tx timeout [ 614.883010][T18694] 9p: Unknown Cache mode or invalid value m [ 615.036320][T18706] netlink: 56 bytes leftover after parsing attributes in process `syz.4.21277'. [ 615.108212][T18714] netlink: 'syz.4.21280': attribute type 10 has an invalid length. [ 615.127240][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21283'. [ 615.135281][T18718] netlink: 60 bytes leftover after parsing attributes in process `syz.6.21283'. [ 615.234571][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21290'. [ 615.237884][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21290'. [ 615.244779][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21290'. [ 615.280395][T18739] netlink: 556 bytes leftover after parsing attributes in process `syz.6.21293'. [ 615.313449][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21295'. [ 615.602220][T18778] netlink: 'syz.1.21311': attribute type 5 has an invalid length. [ 615.659215][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21314'. [ 615.749108][ T5296] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 615.844638][T18811] overlayfs: missing 'lowerdir' [ 615.923322][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21330'. [ 616.505246][ T40] audit: type=1400 audit(2000000162.247:20447): avc: denied { accept } for pid=18855 comm="syz.6.21348" path="socket:[207437]" dev="sockfs" ino=207437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 616.828559][T18882] sctp: [Deprecated]: syz.6.21360 (pid 18882) Use of int in max_burst socket option deprecated. [ 616.828559][T18882] Use struct sctp_assoc_value instead [ 616.885231][T18884] netlink: 'syz.6.21361': attribute type 21 has an invalid length. [ 617.167024][T18921] netlink: 'syz.1.21379': attribute type 4 has an invalid length. [ 617.254388][T18931] lo speed is unknown, defaulting to 1000 [ 617.437722][ T40] audit: type=1400 audit(2000000163.224:20448): avc: denied { watch } for pid=18952 comm="syz.1.21394" path="/5405/file0" dev="tmpfs" ino=32495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 617.448367][ T40] audit: type=1400 audit(2000000163.224:20449): avc: denied { watch_sb } for pid=18952 comm="syz.1.21394" path="/5405/file0" dev="tmpfs" ino=32495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 617.833516][ T40] audit: type=1400 audit(2000000163.644:20450): avc: denied { read } for pid=19005 comm="syz.1.21420" name="file0" dev="tmpfs" ino=32539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 618.319704][T19056] kvm: pic: single mode not supported [ 618.319722][T19056] kvm: pic: level sensitive irq not supported [ 618.322419][T19056] kvm: pic: non byte read [ 618.328310][T19056] kvm: pic: non byte read [ 618.331084][T19056] kvm: pic: single mode not supported [ 618.331096][T19056] kvm: pic: level sensitive irq not supported [ 618.333609][T19056] kvm: pic: non byte read [ 618.342324][T19056] kvm: pic: single mode not supported [ 618.342831][T19056] kvm: pic: non byte read [ 618.351152][T19056] kvm: pic: single mode not supported [ 618.351594][T19056] kvm: pic: non byte read [ 618.358918][T19056] kvm: pic: non byte read [ 618.359726][T19073] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 618.364211][T19056] kvm: pic: non byte read [ 618.372459][T19056] kvm: pic: non byte read [ 618.380401][T19056] kvm: pic: non byte read [ 619.023092][ T5823] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 619.168845][ T5823] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 619.172190][ T5823] usb 6-1: config 0 has no interface number 0 [ 619.174794][ T5823] usb 6-1: config 0 interface 184 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 619.179048][ T5823] usb 6-1: config 0 interface 184 has no altsetting 0 [ 619.185765][ T5823] usb 6-1: New USB device found, idVendor=1b3d, idProduct=4701, bcdDevice=53.f1 [ 619.189791][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.192446][ T5823] usb 6-1: Product: syz [ 619.193776][ T5823] usb 6-1: Manufacturer: syz [ 619.195484][ T5823] usb 6-1: SerialNumber: syz [ 619.199367][ T5823] usb 6-1: config 0 descriptor?? [ 619.303586][T16156] lo speed is unknown, defaulting to 1000 [ 619.398063][ T5823] ftdi_sio 6-1:0.184: FTDI USB Serial Device converter detected [ 619.402199][ T5823] ftdi_sio ttyUSB0: unknown device type: 0x53f1 [ 619.407044][ T5823] usb 6-1: USB disconnect, device number 34 [ 619.410809][ T5823] ftdi_sio 6-1:0.184: device disconnected [ 619.549421][T19198] 9pnet_fd: Insufficient options for proto=fd [ 620.012351][T19254] __nla_validate_parse: 12 callbacks suppressed [ 620.012369][T19254] netlink: 24 bytes leftover after parsing attributes in process `syz.8.21534'. [ 620.073747][T19254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19254 comm=syz.8.21534 [ 620.353103][T19289] lo: entered allmulticast mode [ 620.356277][T19289] tunl0: entered allmulticast mode [ 620.358669][T19289] gre0: entered allmulticast mode [ 620.360361][T19289] z00猉功: entered allmulticast mode [ 620.362745][T19289] erspan0: entered allmulticast mode [ 620.370816][T19289] ip_vti0: entered allmulticast mode [ 620.381964][T19289] ip6_vti0: entered allmulticast mode [ 620.384581][T19289] sit0: entered allmulticast mode [ 620.387085][T19289] ip6tnl0: entered allmulticast mode [ 620.389960][T19289] ip6gre0: entered allmulticast mode [ 620.392818][T19289] nlmon0: entered allmulticast mode [ 620.395690][T19289] caif0: entered allmulticast mode [ 620.397479][T19289] veth0: entered allmulticast mode [ 620.399369][T19289] veth1: entered allmulticast mode [ 620.401568][T19289] wg0: entered allmulticast mode [ 620.403965][T19289] wg1: entered allmulticast mode [ 620.406526][T19289] wg2: entered allmulticast mode [ 620.409248][T19289] veth0_to_bridge: entered allmulticast mode [ 620.412659][T19289] bridge_slave_0: entered allmulticast mode [ 620.417562][T19289] veth1_to_bridge: entered allmulticast mode [ 620.420338][T19289] bridge_slave_1: entered allmulticast mode [ 620.424085][T19289] veth0_to_bond: entered allmulticast mode [ 620.426877][T19289] veth1_to_bond: entered allmulticast mode [ 620.430752][T19289] veth0_to_team: left promiscuous mode [ 620.437817][T19289] team_slave_0: entered allmulticast mode [ 620.439795][T19289] veth1_to_team: entered allmulticast mode [ 620.444001][T19289] team_slave_1: entered allmulticast mode [ 620.445890][T19289] veth0_to_batadv: entered allmulticast mode [ 620.447972][T19289] batadv_slave_0: entered allmulticast mode [ 620.449985][T19289] veth1_to_batadv: entered allmulticast mode [ 620.452412][T19289] batadv_slave_1: entered allmulticast mode [ 620.454823][T19289] xfrm0: entered allmulticast mode [ 620.456804][T19289] veth0_to_hsr: entered allmulticast mode [ 620.459316][T19289] hsr_slave_0: entered allmulticast mode [ 620.461844][T19289] veth1_to_hsr: entered allmulticast mode [ 620.463799][T19289] hsr_slave_1: entered allmulticast mode [ 620.465628][T19289] hsr0: entered allmulticast mode [ 620.467281][T19289] veth1_virt_wifi: entered allmulticast mode [ 620.469392][T19289] veth0_virt_wifi: entered allmulticast mode [ 620.471825][T19289] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 620.475249][T19289] veth1_vlan: entered allmulticast mode [ 620.477797][T19289] veth0_vlan: entered allmulticast mode [ 620.480539][T19289] vlan0: entered allmulticast mode [ 620.482988][T19289] vlan1: entered allmulticast mode [ 620.485398][T19289] macvlan0: entered allmulticast mode [ 620.488125][T19289] macvlan1: entered allmulticast mode [ 620.491154][T19289] ipvlan0: entered allmulticast mode [ 620.494184][T19289] ipvlan1: entered allmulticast mode [ 620.496883][T19289] veth0_macvtap: entered allmulticast mode [ 620.502575][T19289] macsec0: left promiscuous mode [ 620.506249][T19289] geneve0: entered allmulticast mode [ 620.508918][T19289] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 620.512520][T19289] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 620.515559][T19289] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 620.518719][T19289] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 620.521497][T19289] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 620.524007][T19289] vxlan0: entered allmulticast mode [ 620.525890][T19289] sit1: entered allmulticast mode [ 620.527555][T19289] bridge1: entered allmulticast mode [ 620.530333][T19289] bridge2: entered allmulticast mode [ 620.532913][T19289] ipip0: entered allmulticast mode [ 620.535353][T19289] veth2: entered allmulticast mode [ 620.538175][T19289] veth3: entered allmulticast mode [ 620.540736][T19289] bridge3: entered allmulticast mode [ 620.543333][T19289] sit2: entered allmulticast mode [ 620.545641][T19289] veth4: entered allmulticast mode [ 620.548032][T19289] veth5: entered allmulticast mode [ 620.550401][T19289] bond1: entered allmulticast mode [ 620.552659][T19289] veth6: entered allmulticast mode [ 620.555010][T19289] veth7: entered allmulticast mode [ 620.557459][T19289] veth8: entered allmulticast mode [ 620.559870][T19289] veth9: entered allmulticast mode [ 620.562471][T19289] macvlan2: entered allmulticast mode [ 620.564889][T19289] macvlan3: entered allmulticast mode [ 620.567433][T19289] bridge4: entered allmulticast mode [ 620.569719][T19289] bridge5: entered allmulticast mode [ 620.572065][T19289] : entered allmulticast mode [ 620.574355][T19289] syztnl0: entered allmulticast mode [ 620.577121][T19289] bridge6: entered allmulticast mode [ 620.579607][T19289] ip6gre1: entered allmulticast mode [ 620.582128][T19289] ip6tnl1: entered allmulticast mode [ 620.584493][T19289] sit3: entered allmulticast mode [ 620.587300][T19289] bridge7: entered allmulticast mode [ 620.589635][T19289] bridge8: entered allmulticast mode [ 620.591938][T19289] bridge9: entered allmulticast mode [ 620.594117][T19289] geneve2: entered allmulticast mode [ 620.596506][T19289] bridge10: entered allmulticast mode [ 620.598957][T19289] geneve3: entered allmulticast mode [ 620.601722][T19289] veth10: entered allmulticast mode [ 620.605208][T19289] veth11: entered allmulticast mode [ 620.607509][T19289] syztnl1: entered allmulticast mode [ 620.609868][T19289] gretap0: entered allmulticast mode [ 620.612135][T19289] ip6erspan0: entered allmulticast mode [ 620.614688][T19289] ip6gre2: left promiscuous mode [ 620.632761][T19289] bridge0: entered allmulticast mode [ 620.635274][T19289] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 620.638268][T19289] bridge11: entered allmulticast mode [ 620.640673][T19289] syztnl2: entered allmulticast mode [ 620.644077][T19289] wireguard0: entered allmulticast mode [ 620.646112][T19289] gre1: entered allmulticast mode [ 620.650912][T19289] bridge12: entered allmulticast mode [ 620.654004][T19289] vxcan0: entered allmulticast mode [ 620.655978][T19289] bond2: entered allmulticast mode [ 620.657591][T19289] bond4: entered allmulticast mode [ 620.689869][T19289] geneve4: left promiscuous mode [ 620.693902][T19289] veth1.4: entered allmulticast mode [ 620.697522][T19289] bridge13: entered allmulticast mode [ 620.704025][ T61] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.707611][ T61] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.711748][ T61] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.715720][ T61] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.283353][T19383] lo speed is unknown, defaulting to 1000 [ 621.746380][T19435] SELinux: policydb string does not match my string SE Linux [ 621.751988][T19435] SELinux: failed to load policy [ 621.808726][T19442] tipc: Enabling of bearer rejected, failed to enable media [ 621.976909][T19460] netlink: 248 bytes leftover after parsing attributes in process `syz.8.21631'. [ 622.131020][T19482] overlayfs: conflicting options: userxattr,redirect_dir=on [ 622.685787][T19549] 9p: Unknown access argument u: -22 [ 622.764544][T19553] netlink: 96 bytes leftover after parsing attributes in process `syz.4.21675'. [ 623.113241][T19587] netlink: 9 bytes leftover after parsing attributes in process `syz.1.21691'. [ 623.118286][T19587] z00猉功: entered promiscuous mode [ 623.120809][T19587] z00猉功: left allmulticast mode [ 623.146108][T19589] netlink: 96 bytes leftover after parsing attributes in process `syz.4.21692'. [ 623.281820][ C2] bridge0: port 1(hsr0) entered forwarding state [ 623.283959][ C2] bridge0: topology change detected, propagating [ 623.360801][T19607] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 623.608767][T19628] netlink: 37 bytes leftover after parsing attributes in process `syz.4.21710'. [ 624.007919][T19662] lo speed is unknown, defaulting to 1000 [ 624.103540][T19674] netlink: 40 bytes leftover after parsing attributes in process `syz.6.21734'. [ 624.396901][T19701] SELinux: security_context_str_to_sid (E釁) failed with errno=-22 [ 624.462281][T19708] netlink: 84 bytes leftover after parsing attributes in process `syz.1.21748'. [ 624.466156][T19708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21748'. [ 624.605969][T19721] lo speed is unknown, defaulting to 1000 [ 624.649469][T19725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21757'. [ 625.099734][ C3] [ 625.100849][ C3] ============================================ [ 625.103435][ C3] WARNING: possible recursive locking detected [ 625.106116][ C3] syzkaller #0 Not tainted [ 625.108265][ C3] -------------------------------------------- [ 625.112805][ C3] syz.1.21781/19777 is trying to acquire lock: [ 625.115350][ C3] ffff888057cb6f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x207/0x400 [ 625.119042][ C3] [ 625.119042][ C3] but task is already holding lock: [ 625.122092][ C3] ffff888022a10f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x365/0xc10 [ 625.126960][ C3] [ 625.126960][ C3] other info that might help us debug this: [ 625.130326][ C3] Possible unsafe locking scenario: [ 625.130326][ C3] [ 625.133403][ C3] CPU0 [ 625.134813][ C3] ---- [ 625.136186][ C3] lock(&hsr->seqnr_lock); [ 625.138113][ C3] lock(&hsr->seqnr_lock); [ 625.139954][ C3] [ 625.139954][ C3] *** DEADLOCK *** [ 625.139954][ C3] [ 625.143217][ C3] May be due to missing lock nesting notation [ 625.143217][ C3] [ 625.146624][ C3] 13 locks held by syz.1.21781/19777: [ 625.148964][ C3] #0: ffff888038ca2220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x103/0xb90 [ 625.152774][ C3] #1: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x33/0x4f0 [ 625.156783][ C3] #2: ffff88803f9988b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x10f/0x310 [ 625.161199][ C3] #3: ffffc900006f8ca8 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0x117/0x620 [ 625.165334][ C3] #4: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x88/0x3e0 [ 625.169117][ C3] #5: ffff888022a10f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x365/0xc10 [ 625.173467][ C3] #6: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xa6/0x2910 [ 625.177423][ C3] #7: ffffffff8e3c4700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x276/0x4490 [ 625.181899][ C3] #8: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb7/0x10d0 [ 625.185934][ C3] #9: ffffffff8e3c4700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x276/0x4490 [ 625.189844][ C3] #10: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x18d/0x1880 [ 625.193633][ C3] #11: ffffffff8e3c4700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x276/0x4490 [ 625.197742][ C3] #12: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x35/0x400 [ 625.202016][ C3] [ 625.202016][ C3] stack backtrace: [ 625.204616][ C3] CPU: 3 UID: 0 PID: 19777 Comm: syz.1.21781 Not tainted syzkaller #0 PREEMPT(full) [ 625.204662][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 625.204675][ C3] Call Trace: [ 625.204683][ C3] [ 625.204691][ C3] dump_stack_lvl+0x116/0x1f0 [ 625.204713][ C3] print_deadlock_bug+0x1e9/0x240 [ 625.204743][ C3] __lock_acquire+0x1106/0x1c90 [ 625.204765][ C3] lock_acquire+0x179/0x350 [ 625.204782][ C3] ? hsr_dev_xmit+0x207/0x400 [ 625.204809][ C3] _raw_spin_lock_bh+0x33/0x40 [ 625.204836][ C3] ? hsr_dev_xmit+0x207/0x400 [ 625.204857][ C3] hsr_dev_xmit+0x207/0x400 [ 625.204885][ C3] dev_hard_start_xmit+0x97/0x740 [ 625.204910][ C3] __dev_queue_xmit+0xa46/0x4490 [ 625.204932][ C3] ? mark_held_locks+0x49/0x80 [ 625.204960][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 625.204983][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 625.204999][ C3] ? ebt_do_table+0x1bcf/0x21a0 [ 625.205019][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 625.205040][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 625.205061][ C3] ? __lock_acquire+0x622/0x1c90 [ 625.205088][ C3] br_dev_queue_push_xmit+0x272/0x8a0 [ 625.205112][ C3] ? __pfx_nf_hook+0x10/0x10 [ 625.205134][ C3] ? __pfx_br_forward_finish+0x10/0x10 [ 625.205159][ C3] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 625.205184][ C3] ? __pfx_br_forward_finish+0x10/0x10 [ 625.205207][ C3] ? nbp_switchdev_allowed_egress+0xd0/0x180 [ 625.205242][ C3] br_forward_finish+0xf5/0x130 [ 625.205266][ C3] __br_forward+0x1e5/0x5b0 [ 625.205289][ C3] br_flood+0x4c4/0x650 [ 625.205314][ C3] br_dev_xmit+0xf70/0x1880 [ 625.205333][ C3] ? __pfx_br_dev_xmit+0x10/0x10 [ 625.205352][ C3] ? __pfx_passthru_features_check+0x10/0x10 [ 625.205372][ C3] ? netif_skb_features+0x439/0x1270 [ 625.205392][ C3] ? __pfx_netif_skb_features+0x10/0x10 [ 625.205414][ C3] dev_hard_start_xmit+0x97/0x740 [ 625.205435][ C3] __dev_queue_xmit+0xa46/0x4490 [ 625.205457][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 625.205476][ C3] ? lock_acquire+0x179/0x350 [ 625.205496][ C3] ? netdev_lower_get_next_private_rcu+0xa3/0x100 [ 625.205527][ C3] bond_dev_queue_xmit+0xc9/0x180 [ 625.205555][ C3] bond_start_xmit+0x3ba/0x10d0 [ 625.205572][ C3] ? __pfx_passthru_features_check+0x10/0x10 [ 625.205593][ C3] ? __pfx_bond_start_xmit+0x10/0x10 [ 625.205613][ C3] ? __pfx_netif_skb_features+0x10/0x10 [ 625.205635][ C3] dev_hard_start_xmit+0x97/0x740 [ 625.205658][ C3] __dev_queue_xmit+0xa46/0x4490 [ 625.205683][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 625.205708][ C3] ? __asan_memcpy+0x3c/0x60 [ 625.205736][ C3] ? __asan_memcpy+0x3c/0x60 [ 625.205762][ C3] ? __skb_clone+0x570/0x760 [ 625.205787][ C3] ? hsr_addr_subst_dest+0xe6/0x750 [ 625.205810][ C3] hsr_forward_skb+0xcd3/0x2910 [ 625.205834][ C3] ? __pfx_hsr_drop_frame+0x10/0x10 [ 625.205860][ C3] ? __pfx_hsr_forward_skb+0x10/0x10 [ 625.205891][ C3] ? __asan_memset+0x23/0x50 [ 625.205918][ C3] ? __skb_pad+0x253/0x600 [ 625.205946][ C3] send_hsr_supervision_frame+0x653/0xc10 [ 625.205971][ C3] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 625.205994][ C3] hsr_announce+0x169/0x3e0 [ 625.206015][ C3] ? __pfx_hsr_announce+0x10/0x10 [ 625.206038][ C3] ? __pfx_hsr_announce+0x10/0x10 [ 625.206059][ C3] call_timer_fn+0x19a/0x620 [ 625.206076][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 625.206096][ C3] ? mark_held_locks+0x49/0x80 [ 625.206122][ C3] ? __pfx_hsr_announce+0x10/0x10 [ 625.206144][ C3] __run_timers+0x6ef/0x960 [ 625.206164][ C3] ? __pfx___run_timers+0x10/0x10 [ 625.206187][ C3] run_timer_base+0x114/0x190 [ 625.206204][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 625.206222][ C3] run_timer_softirq+0x1a/0x40 [ 625.206237][ C3] handle_softirqs+0x219/0x8e0 [ 625.206261][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 625.206285][ C3] __irq_exit_rcu+0x109/0x170 [ 625.206306][ C3] irq_exit_rcu+0x9/0x30 [ 625.206327][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 625.206356][ C3] [ 625.206362][ C3] [ 625.206370][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 625.206391][ C3] RIP: 0010:unmap_page_range+0x134c/0x41b0 [ 625.206414][ C3] Code: 40 20 89 c3 88 84 24 90 00 00 00 83 e3 01 e8 4b ce b2 ff 45 84 ff 0f 85 ae 06 00 00 e8 5d d3 b2 ff 31 ff 89 de e8 34 ce b2 ff <84> db 0f 84 c3 0a 00 00 e8 47 d3 b2 ff 4c 89 e8 48 c1 e8 03 42 80 [ 625.206432][ C3] RSP: 0018:ffffc90007cef5f8 EFLAGS: 00000293 [ 625.206448][ C3] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff820a155c [ 625.206460][ C3] RDX: ffff8880313a8000 RSI: 0000000000000000 RDI: 0000000000000001 [ 625.206471][ C3] RBP: ffff888038ca2040 R08: 0000000000000001 R09: 0000000000000000 [ 625.206482][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: 00007f8954cc1000 [ 625.206493][ C3] R13: ffff888013210608 R14: dffffc0000000000 R15: 0000000000000000 [ 625.206508][ C3] ? unmap_page_range+0x134c/0x41b0 [ 625.206530][ C3] ? unmap_page_range+0x134c/0x41b0 [ 625.206558][ C3] ? __pfx_unmap_page_range+0x10/0x10 [ 625.206577][ C3] ? mas_next_slot+0x12d3/0x1cb0 [ 625.206597][ C3] ? uprobe_munmap+0x93/0x600 [ 625.206614][ C3] unmap_single_vma.constprop.0+0x153/0x240 [ 625.206635][ C3] unmap_vmas+0x218/0x470 [ 625.206654][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 625.206681][ C3] exit_mmap+0x1b2/0xb90 [ 625.206704][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 625.206733][ C3] ? arch_uprobe_clear_state+0x16/0x150 [ 625.206755][ C3] __mmput+0x12a/0x410 [ 625.206778][ C3] mmput+0x62/0x70 [ 625.206799][ C3] do_exit+0x7c7/0x2bf0 [ 625.206827][ C3] ? __pfx_do_exit+0x10/0x10 [ 625.206853][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 625.206877][ C3] ? find_held_lock+0x2b/0x80 [ 625.206901][ C3] do_group_exit+0xd3/0x2a0 [ 625.206928][ C3] get_signal+0x2671/0x26d0 [ 625.206956][ C3] ? __pfx_get_signal+0x10/0x10 [ 625.206978][ C3] ? do_futex+0x122/0x350 [ 625.206996][ C3] ? __pfx_do_futex+0x10/0x10 [ 625.207013][ C3] arch_do_signal_or_restart+0x8f/0x7c0 [ 625.207037][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 625.207063][ C3] ? xfd_validate_state+0x61/0x180 [ 625.207094][ C3] exit_to_user_mode_loop+0x85/0x130 [ 625.207114][ C3] do_syscall_64+0x426/0xfa0 [ 625.207133][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.207151][ C3] RIP: 0033:0x7f8955f8f6c9 [ 625.207165][ C3] Code: Unable to access opcode bytes at 0x7f8955f8f69f. [ 625.207175][ C3] RSP: 002b:00007f8956ef30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 625.207192][ C3] RAX: fffffffffffffe00 RBX: 00007f89561e5fa8 RCX: 00007f8955f8f6c9 [ 625.207206][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f89561e5fa8 [ 625.207217][ C3] RBP: 00007f89561e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 625.207229][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.207242][ C3] R13: 00007f89561e6038 R14: 00007ffe3cfbf690 R15: 00007ffe3cfbf778 [ 625.207261][ C3] VM DIAGNOSIS: 01:18:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a740320 RCX=ffffffff81b0dbf1 RDX=ffff888059c7c900 RSI=ffffffff81b0dbcb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000dd7f668 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4e8065 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81b0dbd2 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555910dc500 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1015f156c0 CR3=00000000639da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff65949670 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1015213050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f101521305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1015213057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f101521306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10152130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10152131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=800000004b58e007 RCX=ffffffff8209f674 RDX=ffff888055e3a480 RSI=0000000000000000 RDI=0000000000000005 RBP=1ffff92001b3aebb RSP=ffffc9000d9d75c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=1ffffffff1c79ec9 R12=000000000004b58e R13=000800000004b58e R14=ffff888055f0b540 R15=0000000000000000 RIP=ffffffff81bce272 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558f490500 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f596ab156c0 CR3=0000000059065000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555951b020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555595304e1 00005555595302e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559527404 0000555559527400 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555595280c2 0000555559527ee0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559528e18 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f46f2fa0a4eae0f dee20f4066c86e19 ef41c4d100ca4a08 0003000406800316 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080001f09003 0fffffffffffff04 01f0800300040880 c5bab80800010000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0030fffffffffff ff0401f0c0030010 0001f0b0030fffff ffffffff0401f0a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f080040100000008 060801598e000800 01f0f00300080001 f0e00300100001f0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff04010000040806 0c0168fa00080002 1000041000060471 8208100002100001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010810000680040a 0800020800010000 0608060a016fd61a 0800068003000800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0410000410000606 70cc0010000fffff ffffffff04208a10 000010000fffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0401000004 08060c0168fa0008 0002100004100006 0471820810000210 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001f08004010000 0008060801598e00 080001f0f0030008 0001f0e003001000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea00015073c0 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8dcd5ef0 RBP=ffffffff8dccd540 RSP=ffffc90007677560 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=1ffffffff1c79ec9 R12=ffffea00015073c0 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8198c9e1 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556f34500 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c4240a8 CR3=000000004deb6000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcc0f800 Opmask01=000000000000ffff Opmask02=00000000ff7fefbf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=9fd1065c3de021d5 ca5eae6407b5c353 9fd1065c3de021d5 ca5eae6407b5c353 9fd1065c3de021d5 ca5eae6407b5c353 9fd1065c3de021d5 ca5eae6407b5c353 ZMM18=6856e6466c8d572b 3cfea4c19ded997c 6856e6466c8d572b 3cfea4c19ded997c 6856e6466c8d572b 3cfea4c19ded997c 6856e6466c8d572b 3cfea4c19ded997c ZMM19=9829000000000000 0000000000000005 9829000000000000 0000000000000004 9829000000000000 0000000000000003 9829000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 774effffffff8435 77b1000000060300 000000000008ffff ff12000003e60000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000400000008 0008000000140000 005c000000700000 00880000009c0000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00c0000000d80000 00ec000001000000 0114000001340000 000b000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000019 0000000c0000000a 00040008000f0010 000a000000000000 ZMM25=e1deca09e1deca09 e1deca09e1deca09 e1deca09e1deca09 e1deca09e1deca09 e1deca09e1deca09 e1deca09e1deca09 e1deca09e1deca09 e1deca09e1deca09 ZMM26=aa10610eaa10610e aa10610eaa10610e aa10610eaa10610e aa10610eaa10610e aa10610eaa10610e aa10610eaa10610e aa10610eaa10610e aa10610eaa10610e ZMM27=fcf6f60afcf6f60a fcf6f60afcf6f60a fcf6f60afcf6f60a fcf6f60afcf6f60a fcf6f60afcf6f60a fcf6f60afcf6f60a fcf6f60afcf6f60a fcf6f60afcf6f60a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fc190000fc190000 fc190000fc190000 fc190000fc190000 fc190000fc190000 fc190000fc190000 fc190000fc190000 fc190000fc190000 fc190000fc190000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85296795 RDI=ffffffff9addb780 RBP=ffffffff9addb740 RSP=ffffc900006f76f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9addb740 R15=ffffffff85296730 RIP=ffffffff852967bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6f57156c0 CR3=000000004c455000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000