last executing test programs: 1m6.699514033s ago: executing program 0 (id=786): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) read(r0, &(0x7f00000001c0)=""/83, 0x53) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) (async) read(r0, &(0x7f00000001c0)=""/83, 0x53) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) (async) 1m6.500207936s ago: executing program 0 (id=788): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) pwrite64(r0, &(0x7f0000000040)="a5", 0x1, 0x1) 1m6.497994206s ago: executing program 0 (id=790): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000080)={0x2, 0xb7, 0x1, 0x88}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000440)) 1m6.088619577s ago: executing program 0 (id=795): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x130a094, 0xffffffa3) r1 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 1m5.957348675s ago: executing program 0 (id=800): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r2}, './file0\x00'}) open_by_handle_at(r1, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e837282efe0868327a31a705ec978547"}}}, 0x830600) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) 1m5.889035821s ago: executing program 0 (id=803): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1b, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000a80000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001869000001000000000000007d040000185100000b00000000000000000000002913500001000000852000000200000018000000070000000000000009000000182b0000", @ANYRES32=r0, @ANYBLOB="000000000000462aed1b7e05604b3a7c72672020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff853300000600"/84], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000000)=""/106}, 0x94) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 50.266277658s ago: executing program 32 (id=803): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1b, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000a80000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001869000001000000000000007d040000185100000b00000000000000000000002913500001000000852000000200000018000000070000000000000009000000182b0000", @ANYRES32=r0, @ANYBLOB="000000000000462aed1b7e05604b3a7c72672020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff853300000600"/84], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000000)=""/106}, 0x94) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 3.688188172s ago: executing program 1 (id=1651): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000120003040000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000001c0012800b0001006d616373656300000c00028005"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe8800000000000000000000000001016401010000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00000000000000000000000000000050a80000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffffac1414aa000004d53c"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="2c00238006001200000800000600"], 0x48}}, 0x0) 3.59228543s ago: executing program 1 (id=1653): r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x20c42) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000005c0)={0x1, "1898efe12602264e5329ea767c2a971f92c8aa5600000000000000000000e7ff", 0x2, 0x2, 0x3, 0xb700, 0x410, 0x2}) 3.591954144s ago: executing program 1 (id=1654): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800]}) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100027bd7000fcdbdf250000000008000700", @ANYRES32=r3, @ANYBLOB="08000800010000000800040000080005007f000001080007009577507b9757", @ANYRES32=r4, @ANYBLOB="05000d001f000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) 3.527957554s ago: executing program 1 (id=1656): socket$unix(0x1, 0x6, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x100000000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80000000}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket(0x1, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r9}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000180)) 3.399158121s ago: executing program 1 (id=1660): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f9022476f1", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) 2.982770073s ago: executing program 4 (id=1666): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(r2, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0xff}, &(0x7f0000000200)=0x8) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x3, &(0x7f00000024c0)=0xfd, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r3, 0xc}, 0x8) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x20000081}, 0x4008040) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb", 0x4, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000480)={r8, r7, r7}, 0x0, 0x0, 0x0) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0x2, 0x4}, 0x6) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3}, 0xa}], 0x1, 0x0, 0x0) 2.052676879s ago: executing program 4 (id=1670): r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x103000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000077c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="767365014ef84cb2d75352763c761e5d", 0x10}], 0x1, 0x0, 0x0, 0x40810}], 0x1, 0x20000044) (async, rerun: 32) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xec25, 0x800, 0x3, 0x40000333, 0x0, r1}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000002980)=""/4092, 0x42ec86e2}, {&(0x7f0000000100)=""/64}, {&(0x7f0000000140)=""/227}, {&(0x7f0000000240)=""/107}], 0x1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000900)=0x6) 1.933965424s ago: executing program 4 (id=1671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000004165be"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000004165be"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.881083381s ago: executing program 4 (id=1672): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x500, 0xd2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 1.880165177s ago: executing program 3 (id=1674): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x40100, 0xffff, 0x2, 0x9, 0x4000002, 0x0, 0x0, 0x10, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6}) ioctl$TIOCGPTPEER(r2, 0x40480923, 0x200000000005) 1.708886319s ago: executing program 3 (id=1676): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='_\x00\r'], 0x2b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1.571853654s ago: executing program 3 (id=1677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x2, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 1.204865288s ago: executing program 3 (id=1679): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sigaltstack(0x0, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x67, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r2, 0x28543634fae43ad}, 0x14}}, 0x0) 1.204107597s ago: executing program 3 (id=1681): syz_open_procfs$pagemap(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 1.20399411s ago: executing program 2 (id=1682): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.157182625s ago: executing program 3 (id=1683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) shutdown(r0, 0x1) 246.522062ms ago: executing program 2 (id=1684): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0xffffffd0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 246.159312ms ago: executing program 4 (id=1685): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0802, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 245.881174ms ago: executing program 2 (id=1686): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 235.829856ms ago: executing program 4 (id=1687): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) ioctl$BLKRRPART(r1, 0x125f, 0x0) madvise(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x9) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '|^b!'}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b6b000/0x400000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 235.57027ms ago: executing program 1 (id=1688): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 234.474681ms ago: executing program 2 (id=1689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x1, 0x0, [{0x203, 0x0, 0x3}]}) 53.541903ms ago: executing program 2 (id=1690): syz_open_dev$vim2m(0x0, 0xff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 0s ago: executing program 2 (id=1691): lseek(0xffffffffffffffff, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x37, 0x201d}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): hanging to 10 [ 111.409383][ T5990] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.414669][ T5990] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 111.418120][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 111.431159][ T5990] usb 8-1: Product: syz [ 111.432584][ T5990] usb 8-1: SerialNumber: syz [ 111.435776][ T5990] usb 8-1: config 0 descriptor?? [ 111.440504][ T5990] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 111.445996][ T5990] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input10 [ 111.903090][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.907152][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.911268][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.914099][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.917265][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.920091][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.922838][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.925923][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.929731][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.932980][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.935652][ T5990] usb 8-1: USB disconnect, device number 17 [ 111.938065][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 111.994109][ T5990] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 112.019860][ T8624] __nla_validate_parse: 32 callbacks suppressed [ 112.019885][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 112.026957][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 112.031013][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 112.035232][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 112.335304][ T41] audit: type=1400 audit(2000000023.270:7214): avc: denied { bind } for pid=8626 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.343665][ T41] audit: type=1400 audit(2000000023.270:7215): avc: denied { getopt } for pid=8626 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.701284][ T6181] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 112.863008][ T6181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 112.868183][ T6181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.872780][ T6181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 112.877637][ T6181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 112.881871][ T8636] SELinux: security_context_str_to_sid () failed with errno=-22 [ 112.887597][ T6181] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 112.891870][ T6181] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.895734][ T6181] usb 8-1: Product: syz [ 112.897554][ T6181] usb 8-1: Manufacturer: syz [ 112.899557][ T6181] usb 8-1: SerialNumber: syz [ 112.903949][ T6181] usb 8-1: config 0 descriptor?? [ 113.111169][ T6181] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 113.310917][ T8631] usb 8-1: Couldn't submit interrupt_out_urb -90 [ 113.314179][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 113.331223][ T6181] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 113.388057][ T8651] random: crng reseeded on system resumption [ 113.396306][ T8651] Hibernate inconsistent memory map detected! [ 113.398286][ T8651] PM: hibernation: Image mismatch: architecture specific data [ 113.432046][ T8654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.842'. [ 113.436169][ T8654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.842'. [ 113.439818][ T8654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.842'. [ 113.444692][ T8654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.842'. [ 113.448241][ T8654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.842'. [ 113.481261][ T6181] usb 7-1: Using ep0 maxpacket: 8 [ 113.494725][ T6181] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.498493][ T6181] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.503494][ T6181] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.508931][ T6181] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.514644][ T6181] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.518492][ T6181] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.741693][ T6181] usb 7-1: GET_CAPABILITIES returned 0 [ 113.744804][ T6181] usbtmc 7-1:16.0: can't read capabilities [ 113.770592][ T50] usb 8-1: USB disconnect, device number 18 [ 113.950987][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.954772][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.970390][ T24] usb 7-1: USB disconnect, device number 7 [ 114.009833][ T5935] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 114.248734][ T41] audit: type=1400 audit(2000000025.180:7216): avc: denied { nlmsg_read } for pid=8705 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.571706][ T5997] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 114.748814][ T5997] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 114.753081][ T5997] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.757983][ T5997] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.762001][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.765498][ T5997] usb 6-1: Product: syz [ 114.766927][ T5997] usb 6-1: Manufacturer: syz [ 114.768489][ T5997] usb 6-1: SerialNumber: syz [ 114.771848][ T5997] usb 6-1: config 0 descriptor?? [ 114.774110][ T8713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.780834][ T5997] usb 6-1: selecting invalid altsetting 0 [ 115.008338][ T5997] usb 6-1: USB disconnect, device number 9 [ 115.317033][ T8725] netlink: 'syz.2.854': attribute type 8 has an invalid length. [ 115.336792][ T8725] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 115.348328][ T8725] CIFS mount error: No usable UNC path provided in device string! [ 115.348328][ T8725] [ 115.353307][ T8725] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.841161][ T8748] afs: Unknown parameter 'atqoce>U' [ 116.095943][ T8756] tmpfs: Bad value for 'mpol' [ 116.095962][ T41] audit: type=1400 audit(2000000026.911:7217): avc: denied { mounton } for pid=8755 comm="syz.3.867" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 116.146746][ T8763] macvtap1: entered promiscuous mode [ 116.149159][ T8763] macsec0: entered promiscuous mode [ 116.153046][ T8763] team0: Device macvtap1 is up. Set it down before adding it as a team port [ 116.158309][ T8763] macsec0: left promiscuous mode [ 116.306797][ T8768] netlink: 'syz.2.870': attribute type 63 has an invalid length. [ 116.310124][ T8768] /dev/nullb0: Can't open blockdev [ 116.379791][ T41] audit: type=1400 audit(2000000027.183:7218): avc: denied { connect } for pid=8767 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.566322][ T8785] bond0: entered promiscuous mode [ 116.568020][ T8785] bond_slave_0: entered promiscuous mode [ 116.570099][ T8785] bond_slave_1: entered promiscuous mode [ 116.572113][ T8785] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 116.577892][ T8785] batadv0: entered promiscuous mode [ 116.582265][ T8785] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 116.586476][ T8785] bond0: left promiscuous mode [ 116.588085][ T8785] bond_slave_0: left promiscuous mode [ 116.590069][ T8785] bond_slave_1: left promiscuous mode [ 116.593080][ T8785] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 116.596913][ T8785] batadv0: left promiscuous mode [ 116.707508][ T41] audit: type=1400 audit(2000000027.482:7219): avc: denied { remount } for pid=8795 comm="syz.2.878" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.736788][ T8799] kAFS: unable to lookup cell 'syz0' [ 117.116135][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.276163][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 117.279275][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 117.282413][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 117.286266][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 117.290740][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 117.295025][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 117.298573][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.301333][ T9] usb 6-1: Product: syz [ 117.302703][ T9] usb 6-1: Manufacturer: syz [ 117.304240][ T9] usb 6-1: SerialNumber: syz [ 117.307522][ T9] usb 6-1: config 0 descriptor?? [ 117.530451][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input13 [ 117.536465][ T5321] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 117.597281][ T5321] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 117.651347][ T5937] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 117.704240][ T5321] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 117.749188][ T139] usb 6-1: USB disconnect, device number 10 [ 117.775750][ T8819] Bluetooth: MGMT ver 1.23 [ 118.024566][ T8836] netlink: 'syz.2.893': attribute type 3 has an invalid length. [ 118.029386][ T8836] __nla_validate_parse: 70 callbacks suppressed [ 118.029398][ T8836] netlink: 96 bytes leftover after parsing attributes in process `syz.2.893'. [ 118.081001][ T8836] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 118.424088][ T8857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'. [ 118.621238][ T8864] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 118.646879][ T8864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.707730][ T8867] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 118.711252][ T8867] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 118.896405][ T8871] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 119.213654][ T41] audit: type=1400 audit(2000000029.830:7220): avc: denied { map } for pid=8879 comm="syz.3.904" path="/proc/sys/net/ipv4/vs/drop_packet" dev="proc" ino=32828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 119.585366][ T6181] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 119.749274][ T6181] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.753260][ T6181] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.758487][ T6181] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.763031][ T6181] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 119.768751][ T6181] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 119.775920][ T6181] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.780449][ T6181] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.784295][ T6181] usb 7-1: Product: syz [ 119.786251][ T6181] usb 7-1: Manufacturer: syz [ 119.804260][ T6181] cdc_wdm 7-1:1.0: skipping garbage [ 119.806900][ T6181] cdc_wdm 7-1:1.0: skipping garbage [ 119.813320][ T6181] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 119.815882][ T6181] cdc_wdm 7-1:1.0: Unknown control protocol [ 120.021342][ T41] audit: type=1400 audit(2000000030.578:7221): avc: denied { read write } for pid=8909 comm="syz.2.907" name="cdc-wdm0" dev="devtmpfs" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 120.034600][ T41] audit: type=1400 audit(2000000030.587:7222): avc: denied { open } for pid=8909 comm="syz.2.907" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 120.211478][ T8966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.912'. [ 120.215434][ T8966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.912'. [ 120.271421][ T8968] ntfs3(loop3): try to read out of volume at offset 0x0 [ 120.573683][ T41] audit: type=1400 audit(2000000031.102:7223): avc: denied { connect } for pid=8970 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.644504][ T41] audit: type=1400 audit(2000000031.158:7224): avc: denied { write } for pid=8970 comm="syz.3.915" path="socket:[32059]" dev="sockfs" ino=32059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.681489][ T41] audit: type=1400 audit(2000000031.195:7225): avc: denied { setattr } for pid=8972 comm="syz.1.914" path="socket:[32064]" dev="sockfs" ino=32064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.733422][ T8976] netlink: 9 bytes leftover after parsing attributes in process `syz.1.916'. [ 120.736568][ T8976] 0: renamed from hsr0 (while UP) [ 120.742170][ T8976] 0: entered allmulticast mode [ 120.744640][ T8976] hsr_slave_0: entered allmulticast mode [ 120.747140][ T8976] hsr_slave_1: entered allmulticast mode [ 120.750364][ T8976] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 120.806265][ T41] audit: type=1400 audit(2000000031.317:7226): avc: denied { getopt } for pid=8977 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.881226][ T8958] Set syz1 is full, maxelem 65536 reached [ 121.926847][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.931241][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.059031][ T8999] syz.3.922 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.184137][ T5990] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 122.343634][ T5990] usb 6-1: Using ep0 maxpacket: 32 [ 122.355553][ T5990] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 122.359709][ T5990] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 122.364813][ T5990] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 122.372639][ T5990] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 122.379138][ T5990] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.398657][ T5990] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 122.402921][ T5990] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 122.406902][ T5990] usb 6-1: Product: syz [ 122.408727][ T5990] usb 6-1: Manufacturer: syz [ 122.410929][ T5990] usb 6-1: SerialNumber: syz [ 122.415533][ T5990] usb 6-1: config 0 descriptor?? [ 122.421476][ T5990] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 122.427159][ T5990] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 122.617868][ T41] audit: type=1400 audit(2000000033.010:7227): avc: denied { read } for pid=9012 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.626222][ T41] audit: type=1400 audit(2000000033.010:7228): avc: denied { ioctl } for pid=9012 comm="syz.3.927" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.970520][ T9028] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 122.981830][ T9028] cramfs: wrong magic [ 122.986554][ T5997] usb 7-1: USB disconnect, device number 8 [ 122.986599][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 122.991125][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 122.993435][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 122.998281][ T9] usb 6-1: USB disconnect, device number 11 [ 123.018578][ T9] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 123.037038][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 123.042627][ T41] audit: type=1400 audit(2000000033.412:7229): avc: denied { wake_alarm } for pid=9031 comm="syz.1.933" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.104576][ T9028] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 123.195771][ T9035] sctp: [Deprecated]: syz.3.934 (pid 9035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.195771][ T9035] Use struct sctp_sack_info instead [ 123.205240][ T41] audit: type=1400 audit(2000000033.562:7230): avc: denied { getopt } for pid=9034 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.222379][ T41] audit: type=1400 audit(2000000033.581:7231): avc: denied { write } for pid=9034 comm="syz.3.934" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 123.233352][ T41] audit: type=1400 audit(2000000033.581:7232): avc: denied { read } for pid=9038 comm="syz.1.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.355302][ T9044] 9pnet_virtio: no channels available for device syz [ 123.392135][ T5997] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 123.565176][ T5997] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.568769][ T5997] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.571683][ T5997] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 123.576120][ T5997] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 123.579893][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.585494][ T9030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.589329][ T5997] hub 7-1:1.0: bad descriptor, ignoring hub [ 123.591593][ T5997] hub 7-1:1.0: probe with driver hub failed with error -5 [ 123.594204][ T5997] cdc_wdm 7-1:1.0: skipping garbage [ 123.596317][ T5997] cdc_wdm 7-1:1.0: skipping garbage [ 123.601032][ T5997] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 123.603380][ T5997] cdc_wdm 7-1:1.0: Unknown control protocol [ 123.694769][ T9054] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 123.736896][ T41] audit: type=1400 audit(2000000034.058:7233): avc: denied { execute } for pid=9058 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 123.746953][ T41] audit: type=1400 audit(2000000034.058:7234): avc: denied { execute_no_trans } for pid=9058 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 123.831366][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.837632][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.851276][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.857139][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.863718][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.867230][ T41] audit: type=1400 audit(2000000034.179:7235): avc: denied { append } for pid=9061 comm="syz.3.943" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.016571][ T9068] usb usb8: usbfs: process 9068 (syz.3.945) did not claim interface 0 before use [ 124.031757][ T9068] dummy0: entered promiscuous mode [ 124.037367][ T9068] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 124.042538][ T9068] hsr1: entered allmulticast mode [ 124.044428][ T9068] dummy0: entered allmulticast mode [ 124.046161][ T9068] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 124.059365][ T9059] chnl_net:caif_netlink_parms(): no params data found [ 124.148918][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.152284][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.155395][ T9059] bridge_slave_0: entered allmulticast mode [ 124.158870][ T9059] bridge_slave_0: entered promiscuous mode [ 124.163553][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.166141][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.169232][ T9059] bridge_slave_1: entered allmulticast mode [ 124.173846][ T9059] bridge_slave_1: entered promiscuous mode [ 124.202639][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.210719][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.235363][ T9059] team0: Port device team_slave_0 added [ 124.240598][ T9059] team0: Port device team_slave_1 added [ 124.252444][ T9077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.264847][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.268419][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.280136][ T9059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.286781][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.290482][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.301925][ T9059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.332431][ T9059] hsr_slave_0: entered promiscuous mode [ 124.335558][ T9059] hsr_slave_1: entered promiscuous mode [ 124.338362][ T9059] debugfs: 'hsr0' already exists in 'hsr' [ 124.340982][ T9059] Cannot create hsr debugfs directory [ 124.445126][ T9030] usb 7-1: reset low-speed USB device number 9 using dummy_hcd [ 124.484922][ T9059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.489780][ T9059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.496108][ T9059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.501392][ T9059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.562085][ T41] audit: type=1400 audit(2000000034.834:7236): avc: denied { watch } for pid=9088 comm="syz.3.949" path="/233/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 124.563932][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.584862][ T9059] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.593648][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.597098][ T8937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.611245][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.614676][ T8940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.722199][ T9097] orangefs_devreq_write_iter: failed to copy head. [ 124.764508][ T9062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.778559][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 124.782053][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 124.785470][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 124.787878][ T9059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.842954][ T9108] netlink: 'syz.1.952': attribute type 1 has an invalid length. [ 124.862855][ T9108] bond3: entered promiscuous mode [ 124.864890][ T9111] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 124.865494][ T9108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.911826][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 124.915066][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 124.917937][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 124.920875][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 124.924624][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 125.001336][ T9059] veth0_vlan: entered promiscuous mode [ 125.005536][ T9123] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.954'. [ 125.011300][ T9059] veth1_vlan: entered promiscuous mode [ 125.042301][ T9059] veth0_macvtap: entered promiscuous mode [ 125.049351][ T9059] veth1_macvtap: entered promiscuous mode [ 125.065879][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.077692][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.090348][ T8940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.093620][ T5997] usb 7-1: USB disconnect, device number 9 [ 125.097553][ T8940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.107663][ T8940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.111239][ T8940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.185346][ T8936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.188785][ T8936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.224663][ T8944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.227782][ T8944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.240858][ T9130] tmpfs: Bad value for 'mpol' [ 125.707707][ T9142] fuse: Bad value for 'fd' [ 126.027950][ T9129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.032083][ T9129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.037113][ T9129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.039776][ T9129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.042301][ T9129] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.048994][ T9129] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.056726][ T9129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.205757][ T9153] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.209327][ T9153] block device autoloading is deprecated and will be removed. [ 126.359171][ T9166] macsec1: entered promiscuous mode [ 126.361124][ T9166] macsec1: entered allmulticast mode [ 126.370518][ T9166] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 126.375097][ T9166] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 126.380167][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 126.429734][ T9169] tmpfs: Bad value for 'mpol' [ 126.432450][ T9169] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 127.258891][ T9210] FAULT_INJECTION: forcing a failure. [ 127.258891][ T9210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.271998][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.3.979 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.272021][ T9210] Tainted: [L]=SOFTLOCKUP [ 127.272025][ T9210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.272032][ T9210] Call Trace: [ 127.272037][ T9210] [ 127.272041][ T9210] dump_stack_lvl+0x100/0x190 [ 127.272090][ T9210] should_fail_ex.cold+0x5/0xa [ 127.272105][ T9210] _copy_to_user+0x32/0xd0 [ 127.272124][ T9210] md_ioctl+0xc11/0x37b0 [ 127.272149][ T9210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.272196][ T9210] ? __pfx_md_ioctl+0x10/0x10 [ 127.272218][ T9210] ? do_vfs_ioctl+0x226/0x13e0 [ 127.272241][ T9210] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 127.272264][ T9210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 127.272286][ T9210] ? __fget_files+0x215/0x3d0 [ 127.272299][ T9210] ? __pfx_md_ioctl+0x10/0x10 [ 127.272317][ T9210] blkdev_ioctl+0x5ad/0x6f0 [ 127.272332][ T9210] ? __pfx_blkdev_ioctl+0x10/0x10 [ 127.272346][ T9210] ? selinux_file_ioctl+0x139/0x290 [ 127.272362][ T9210] ? selinux_file_ioctl+0xb4/0x290 [ 127.272380][ T9210] ? __pfx_blkdev_ioctl+0x10/0x10 [ 127.272395][ T9210] __x64_sys_ioctl+0x18e/0x210 [ 127.272414][ T9210] do_syscall_64+0x106/0xf80 [ 127.272430][ T9210] ? clear_bhb_loop+0x40/0x90 [ 127.272445][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.272458][ T9210] RIP: 0033:0x7f167959c799 [ 127.272468][ T9210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.272480][ T9210] RSP: 002b:00007f167a3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.272492][ T9210] RAX: ffffffffffffffda RBX: 00007f1679815fa0 RCX: 00007f167959c799 [ 127.272499][ T9210] RDX: 0000200000000005 RSI: 00000000800c0910 RDI: 0000000000000004 [ 127.272506][ T9210] RBP: 00007f167a3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 127.272520][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.272526][ T9210] R13: 00007f1679816038 R14: 00007f1679815fa0 R15: 00007fff3d0243b8 [ 127.272542][ T9210] [ 127.421690][ T5935] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.599483][ T9237] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 127.663698][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 127.668932][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 127.742314][ T6181] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 127.908425][ T9242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.911870][ T9242] block device autoloading is deprecated and will be removed. [ 127.925869][ T6181] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 127.929869][ T6181] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.935385][ T6181] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 127.941587][ T6181] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.944949][ T6181] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 127.949155][ T6181] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.953754][ T6181] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 127.958421][ T6181] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.962576][ T6181] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 127.968103][ T6181] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.972842][ T6181] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 127.977011][ T6181] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.981593][ T6181] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 127.985954][ T6181] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.989915][ T6181] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 127.995176][ T6181] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.000846][ T6181] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 128.006216][ T6181] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 128.007154][ T9258] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 128.009862][ T6181] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 128.017009][ T6181] usb 6-1: Product: syz [ 128.018702][ T6181] usb 6-1: Manufacturer: syz [ 128.020597][ T6181] usb 6-1: SerialNumber: syz [ 128.024905][ T6181] usb 6-1: config 0 descriptor?? [ 128.090290][ T9269] comedi comedi0: pcl812: I/O port conflict (0x8,16) [ 128.092866][ T9269] comedi comedi0: comedi_config --init_data is deprecated [ 128.100064][ T9269] comedi comedi0: pcl812: I/O port conflict (0x8,16) [ 128.102621][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.996'. [ 128.105783][ T9270] comedi comedi0: comedi_config --init_data is deprecated [ 128.122558][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'. [ 128.130858][ T9273] loop6: detected capacity change from 0 to 2640 [ 128.141153][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.146135][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.151412][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.154952][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.159405][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.163161][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.166925][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.167544][ T41] kauditd_printk_skb: 13 callbacks suppressed [ 128.167553][ T41] audit: type=1400 audit(2000000038.202:7250): avc: denied { setopt } for pid=9276 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.170884][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.180969][ T5930] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.182992][ T6348] ldm_validate_partition_table(): Disk read failed. [ 128.184388][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 128.188481][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.189638][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.193253][ T6348] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.200764][ T6348] Dev loop6: unable to read RDB block 0 [ 128.203758][ T6348] loop6: unable to read partition table [ 128.211599][ T9273] ldm_validate_partition_table(): Disk read failed. [ 128.215030][ T9273] Dev loop6: unable to read RDB block 0 [ 128.217882][ T9273] loop6: unable to read partition table [ 128.220661][ T9273] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 128.307967][ T24] usb 6-1: USB disconnect, device number 12 [ 128.396816][ T41] audit: type=1400 audit(2000000038.417:7251): avc: denied { relabelfrom } for pid=9285 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 128.397479][ T9286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9286 comm=syz.3.1003 [ 128.405756][ T41] audit: type=1400 audit(2000000038.417:7252): avc: denied { relabelto } for pid=9285 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 128.854284][ T5967] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 128.993356][ T5967] usb 8-1: device descriptor read/64, error -71 [ 128.998634][ T41] audit: type=1400 audit(2000000038.978:7253): avc: denied { map } for pid=9302 comm="syz.1.1009" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.042392][ T9305] input: syz1 as /devices/virtual/input/input16 [ 129.045289][ T9305] input: failed to attach handler leds to device input16, error: -6 [ 129.257888][ T5967] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 129.382922][ T41] audit: type=1400 audit(2000000039.343:7254): avc: denied { setopt } for pid=9324 comm="syz.1.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 129.388301][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 129.399693][ T5967] usb 8-1: device descriptor read/64, error -71 [ 129.441043][ T9331] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1019'. [ 129.517428][ T5967] usb usb8-port1: attempt power cycle [ 129.543349][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 129.553313][ T9342] vlan3: entered allmulticast mode [ 129.556128][ T9342] vlan0: entered allmulticast mode [ 129.558714][ T9342] veth0_vlan: entered allmulticast mode [ 129.645554][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.659670][ T9352] xt_hashlimit: size too large, truncated to 1048576 [ 129.832264][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1027'. [ 129.880525][ T5967] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 129.884776][ T9362] netlink: 'syz.2.1028': attribute type 1 has an invalid length. [ 129.911427][ T5967] usb 8-1: device descriptor read/8, error -71 [ 130.042267][ T41] audit: type=1400 audit(2000000039.960:7255): avc: denied { ioctl } for pid=9366 comm="syz.4.1030" path="socket:[35291]" dev="sockfs" ino=35291 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.170489][ T5967] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 130.191225][ T5967] usb 8-1: device descriptor read/8, error -71 [ 130.308306][ T5967] usb usb8-port1: unable to enumerate USB device [ 130.373216][ T9377] xt_time: unknown flags 0xf4 [ 130.405956][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 130.467381][ T9382] 9p: Bad value for 'rfdno' [ 130.482545][ T9384] overlay: ./file0 is not a directory [ 130.902100][ T9393] netlink: 'syz.2.1040': attribute type 4 has an invalid length. [ 130.904587][ T9393] __nla_validate_parse: 3 callbacks suppressed [ 130.904596][ T9393] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1040'. [ 130.915172][ T9393] `: renamed from bond0 (while UP) [ 131.022587][ T9397] md: md2 stopped. [ 131.215661][ T9403] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 131.345828][ T41] audit: type=1400 audit(2000000041.176:7256): avc: denied { getopt } for pid=9405 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.377373][ T5967] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 131.391913][ T9404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.395247][ T9404] block device autoloading is deprecated and will be removed. [ 131.407649][ T9409] sctp: [Deprecated]: syz.4.1045 (pid 9409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.407649][ T9409] Use struct sctp_sack_info instead [ 131.537483][ T5967] usb 6-1: Using ep0 maxpacket: 32 [ 131.541517][ T5967] usb 6-1: config 2 has an invalid interface number: 120 but max is 0 [ 131.545635][ T5967] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 131.550366][ T5967] usb 6-1: config 2 has an invalid interface number: 160 but max is 0 [ 131.553932][ T5967] usb 6-1: config 2 has an invalid interface number: 42 but max is 0 [ 131.557625][ T5967] usb 6-1: config 2 has an invalid interface number: 3 but max is 0 [ 131.566844][ T5967] usb 6-1: config 2 has 4 interfaces, different from the descriptor's value: 1 [ 131.570952][ T5967] usb 6-1: config 2 has no interface number 0 [ 131.573720][ T5967] usb 6-1: config 2 has no interface number 1 [ 131.576937][ T5967] usb 6-1: config 2 has no interface number 2 [ 131.580306][ T5967] usb 6-1: config 2 interface 120 altsetting 106 endpoint 0x2 has an invalid bInterval 124, changing to 10 [ 131.585365][ T5967] usb 6-1: config 2 interface 120 altsetting 106 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 131.590448][ T5967] usb 6-1: config 2 interface 120 altsetting 106 has a duplicate endpoint with address 0x9, skipping [ 131.596370][ T5967] usb 6-1: config 2 interface 120 altsetting 106 endpoint 0xB has an invalid bInterval 164, changing to 7 [ 131.601462][ T5967] usb 6-1: config 2 interface 120 altsetting 106 endpoint 0xB has invalid maxpacket 1967, setting to 1024 [ 131.606920][ T5967] usb 6-1: config 2 interface 120 altsetting 106 has an invalid descriptor for endpoint zero, skipping [ 131.612630][ T5967] usb 6-1: config 2 interface 120 altsetting 106 has an invalid descriptor for endpoint zero, skipping [ 131.617745][ T5967] usb 6-1: config 2 interface 120 altsetting 106 has 7 endpoint descriptors, different from the interface descriptor's value: 16 [ 131.623868][ T5967] usb 6-1: too many endpoints for config 2 interface 160 altsetting 64: 39, using maximum allowed: 30 [ 131.629630][ T5967] usb 6-1: config 2 interface 160 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 131.634938][ T5967] usb 6-1: config 2 interface 160 altsetting 64 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 131.639674][ T5967] usb 6-1: config 2 interface 160 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 131.645097][ T5967] usb 6-1: config 2 interface 160 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 131.650188][ T5967] usb 6-1: config 2 interface 160 altsetting 64 has 6 endpoint descriptors, different from the interface descriptor's value: 39 [ 131.656549][ T5967] usb 6-1: config 2 interface 42 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 131.660813][ T5967] usb 6-1: config 2 interface 42 altsetting 113 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 131.665535][ T5967] usb 6-1: config 2 interface 3 altsetting 94 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.671746][ T5967] usb 6-1: config 2 interface 120 has no altsetting 0 [ 131.674405][ T5967] usb 6-1: config 2 interface 160 has no altsetting 0 [ 131.676929][ T5967] usb 6-1: config 2 interface 42 has no altsetting 0 [ 131.679364][ T5967] usb 6-1: config 2 interface 3 has no altsetting 0 [ 131.683847][ T5967] usb 6-1: New USB device found, idVendor=04e8, idProduct=662e, bcdDevice=f7.a6 [ 131.687604][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.690530][ T5967] usb 6-1: Product: й [ 131.691941][ T5967] usb 6-1: Manufacturer: 係뭝颋鏊浶뛩썂ꝙ녵翋ᡶ뒸ﳱ떺潓涧୼㈵鞖㹩アΩⱤ奕밝ﱠ䔩ኳ糾藅ꃒ怣ヒ솧缃殾蠥⃐ᒚꂹ塍ꃰ割⽼똱渫폣嬎ሢ蟀ퟻ沙朓峏籖츐쟻尼摟ۇഝ긂륆畴ẻઌ䭊尭梴黇ﲨ锴姳ꜰ짷ᗚજ湓윔튎✙胃䖊픫ڪ⎌絢ᷟ焭枅ᄳ [ 131.703217][ T5967] usb 6-1: SerialNumber: 尴ણ᷻讠ԛ뿉㴬媮僼쨃莾魾⼬暐荚爯西ﯘ茀 [ 131.819080][ T9423] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.890710][ T9428] sp0: Synchronizing with TNC [ 131.960928][ T5967] usb 6-1: USB disconnect, device number 13 [ 132.025027][ T9428] block nbd2: not configured, cannot reconfigure [ 132.081913][ T41] audit: type=1400 audit(2000000041.859:7257): avc: denied { add_name } for pid=9431 comm="syz.3.1052" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.093792][ T41] audit: type=1400 audit(2000000041.868:7258): avc: denied { create } for pid=9431 comm="syz.3.1052" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.105612][ T41] audit: type=1400 audit(2000000041.868:7259): avc: denied { associate } for pid=9431 comm="syz.3.1052" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 132.578369][ T9469] syzkaller0: entered promiscuous mode [ 132.580939][ T9469] syzkaller0: entered allmulticast mode [ 132.638699][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 133.401718][ T9500] /dev/nullb0: Can't open blockdev [ 134.119611][ T9502] vlan2: entered allmulticast mode [ 134.121799][ T9502] bond0: entered allmulticast mode [ 134.123663][ T9502] bond_slave_0: entered allmulticast mode [ 134.129169][ T9502] bond_slave_1: entered allmulticast mode [ 134.131217][ T9502] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 134.233364][ T9513] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.237650][ T9513] block device autoloading is deprecated and will be removed. [ 134.351379][ T9519] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 134.441211][ T9534] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 134.465021][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1083'. [ 134.472470][ T9538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1083'. [ 134.482367][ T41] kauditd_printk_skb: 10 callbacks suppressed [ 134.482385][ T41] audit: type=1400 audit(2000000044.113:7270): avc: denied { execute } for pid=9537 comm="syz.4.1083" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.551345][ T9547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1085'. [ 134.756771][ T9549] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 134.819681][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 134.851784][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 134.985257][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 134.989226][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 134.994198][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.998709][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.005648][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 135.011218][ T10] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 135.015503][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.022194][ T10] usb 9-1: config 0 descriptor?? [ 135.269535][ T9586] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 135.282382][ T41] audit: type=1400 audit(2000000044.862:7271): avc: denied { write } for pid=9585 comm="syz.1.1098" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.458485][ T9547] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 135.461376][ T9547] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1085'. [ 135.504746][ T9600] f2fs: Unknown parameter 'usrquota' [ 135.542901][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 135.544969][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 135.554575][ T10] usb 9-1: USB disconnect, device number 2 [ 135.615589][ T9609] bond0: option downdelay: invalid value (18446744073709551615) [ 135.618299][ T9609] bond0: option downdelay: allowed values 0 - 2147483647 [ 135.625010][ T9609] bond0 (unregistering): Released all slaves [ 135.628962][ T41] audit: type=1400 audit(2000000045.180:7272): avc: denied { audit_read } for pid=9614 comm="syz.3.1107" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.631641][ T9615] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 135.637795][ T41] audit: type=1400 audit(2000000045.180:7273): avc: denied { getopt } for pid=9614 comm="syz.3.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.640194][ T9615] /dev/sr0: Can't open blockdev [ 135.683089][ T1127] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 135.691550][ T1127] sr 2:0:0:0: [sr0] tag#15 Sense Key : Illegal Request [current] [ 135.694377][ T1127] sr 2:0:0:0: [sr0] tag#15 Add. Sense: Invalid command operation code [ 135.697725][ T1127] sr 2:0:0:0: [sr0] tag#15 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 135.700992][ T1127] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 135.704780][ T1127] buffer_io_error: 27 callbacks suppressed [ 135.704790][ T1127] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 135.759467][ T9618] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 135.767335][ T9618] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 135.773985][ T9621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.781975][ T9618] Option ''MO' to dns_resolver key: bad/missing value [ 135.879806][ T41] audit: type=1400 audit(2000000045.423:7274): avc: denied { setopt } for pid=9637 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.951516][ T9646] vcan1: entered allmulticast mode [ 136.053421][ T9656] bridge_slave_0: Device is already in use. [ 136.062211][ T9656] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.066821][ T9656] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 136.152498][ T41] audit: type=1400 audit(2000000045.666:7275): avc: denied { ioctl } for pid=9670 comm="syz.1.1125" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.195754][ T9674] kvm: user requested TSC rate below hardware speed [ 136.205406][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 136.225091][ T9669] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 136.332324][ T41] audit: type=1326 audit(2000000045.844:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c2d9c799 code=0x7ffc0000 [ 136.349714][ T41] audit: type=1326 audit(2000000045.844:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c2d9c799 code=0x7ffc0000 [ 136.358846][ T41] audit: type=1326 audit(2000000045.844:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c2d9c799 code=0x7ffc0000 [ 136.367768][ T41] audit: type=1326 audit(2000000045.844:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c2d9c799 code=0x7ffc0000 [ 136.438959][ T9686] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1130'. [ 136.578759][ T9696] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.607720][ T9685] proc: Unknown parameter 'usrquota' [ 136.612411][ T9685] [U] zͻi[27| [ 136.614691][ T9685] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 136.621175][ T9685] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 136.647079][ T9685] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 136.665282][ T9685] [U] 8)X)YvxRĻbmbN@ox;JD, [ 136.669592][ T9685] [U] *Cn3v7KEXgt_3 [ 136.675891][ T9685] [U] D/QazҬEHgE1$_ks=R@ [ 136.678613][ T9685] [U] ϼcEv @ [ 136.680362][ T9685] [U] a% [ 136.686081][ T9685] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 136.701081][ T5971] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 136.705273][ T9685] [U] f1p3 [ 136.707179][ T9685] [U] N0[L;a_l&kMC [ 136.723808][ T9685] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 137.033498][ T9683] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4, priority 0 [ 147.917347][T10240] syzkaller0: entered promiscuous mode [ 147.919234][T10240] syzkaller0: entered allmulticast mode [ 147.935247][T10240] tipc: Resetting bearer [ 147.943219][T10239] tipc: Resetting bearer [ 147.956064][T10239] tipc: Disabling bearer [ 148.254991][T10251] fuse: Bad value for 'fd' [ 148.357712][T10253] md: md2 stopped. [ 148.463829][T10260] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.543614][T10265] bridge0: entered promiscuous mode [ 148.545933][T10265] macvlan3: entered promiscuous mode [ 148.825068][T10264] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 148.890603][ T5935] Bluetooth: hci4: command 0x041b tx timeout [ 148.891739][ T6181] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 148.895445][ T6181] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 148.986774][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 148.987112][ T5939] usb 6-1: USB disconnect, device number 16 [ 148.988999][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 148.993753][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 149.142346][ T41] audit: type=1400 audit(2000000057.817:7471): avc: denied { bind } for pid=10277 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.144284][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 149.167732][T10282] autofs: Unknown parameter '' [ 149.213707][T10285] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1304'. [ 149.265937][ T41] audit: type=1400 audit(2000000057.939:7472): avc: denied { accept } for pid=10289 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 149.271721][T10292] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 149.281796][T10292] netlink: 'syz.2.1306': attribute type 4 has an invalid length. [ 149.314439][T10297] trusted_key: encrypted_key: insufficient parameters specified [ 149.360465][T10297] hub 2-0:1.0: USB hub found [ 149.363253][T10297] hub 2-0:1.0: 2 ports detected [ 149.378664][T10297] trusted_key: encrypted_key: insufficient parameters specified [ 149.422665][T10299] QAT: failed to copy from user cfg_data. [ 149.501079][T10299] nfs: Unknown parameter '00000000000000000000006' [ 149.549281][T10307] netlink: 'syz.2.1311': attribute type 21 has an invalid length. [ 149.552812][T10307] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1311'. [ 149.555939][T10308] netlink: 'syz.2.1311': attribute type 21 has an invalid length. [ 149.556606][T10307] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1311'. [ 149.559975][T10308] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1311'. [ 149.568537][T10308] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1311'. [ 149.717568][T10321] fuse: Unknown parameter '' [ 149.868999][T10346] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1317'. [ 149.908579][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 149.912633][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 150.042746][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 150.054316][T10358] bridge_slave_1: left allmulticast mode [ 150.056746][T10358] bridge_slave_1: left promiscuous mode [ 150.059594][T10358] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.068512][T10358] bridge_slave_0: left allmulticast mode [ 150.071564][T10358] bridge_slave_0: left promiscuous mode [ 150.074150][T10358] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.306400][T10374] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 150.311807][T10374] bond3 (unregistering): Released all slaves [ 150.471306][T10359] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 150.478551][ T5939] IPVS: starting estimator thread 0... [ 150.546878][T10393] bridge0: port 3(ipvlan2) entered blocking state [ 150.549301][T10393] bridge0: port 3(ipvlan2) entered disabled state [ 150.551661][T10393] ipvlan2: entered allmulticast mode [ 150.553581][T10393] bridge0: entered allmulticast mode [ 150.557303][T10393] ipvlan2: left allmulticast mode [ 150.559118][T10393] bridge0: left allmulticast mode [ 150.588319][T10389] IPVS: using max 44 ests per chain, 105600 per kthread [ 150.600487][ T41] audit: type=1400 audit(2000000059.192:7473): avc: denied { ioctl } for pid=10394 comm="syz.2.1334" path="socket:[38661]" dev="sockfs" ino=38661 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.691568][ T41] audit: type=1400 audit(2000000059.267:7474): avc: denied { append } for pid=10404 comm="syz.3.1336" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 150.699332][ T41] audit: type=1400 audit(2000000059.267:7475): avc: denied { map } for pid=10404 comm="syz.3.1336" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 150.707904][ T41] audit: type=1400 audit(2000000059.267:7476): avc: denied { execute } for pid=10404 comm="syz.3.1336" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 150.720425][T10405] vcan1: entered allmulticast mode [ 150.734382][T10407] ipvlan2: entered allmulticast mode [ 150.736656][T10407] batadv_slave_1: entered allmulticast mode [ 150.789049][ T41] audit: type=1400 audit(2000000059.360:7477): avc: denied { map } for pid=10409 comm="syz.1.1338" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.864309][T10424] macvtap0: entered allmulticast mode [ 150.866773][T10424] veth0_macvtap: entered allmulticast mode [ 150.931447][T10428] netlink: 'syz.1.1343': attribute type 8 has an invalid length. [ 151.063035][ T41] audit: type=1400 audit(2000000059.622:7478): avc: denied { read } for pid=10454 comm="syz.4.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.234126][T10468] tipc: Started in network mode [ 151.238029][T10468] tipc: Node identity 4004, cluster identity 4711 [ 151.245626][T10468] tipc: Node number set to 16388 [ 151.317435][T10481] overlayfs: missing 'lowerdir' [ 151.317438][T10480] overlayfs: missing 'lowerdir' [ 151.391291][T10486] kernel profiling enabled (shift: 5) [ 151.415912][T10486] netlink: 'syz.1.1358': attribute type 1 has an invalid length. [ 151.427858][ T41] audit: type=1400 audit(2000000059.959:7479): avc: denied { ioctl } for pid=10483 comm="syz.4.1357" path="socket:[38860]" dev="sockfs" ino=38860 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.428640][T10486] bond6: entered promiscuous mode [ 151.439167][T10486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 151.899937][T10502] netlink: 'syz.1.1362': attribute type 11 has an invalid length. [ 151.924562][T10495] syz.2.1360 (10495) used greatest stack depth: 19104 bytes left [ 152.075589][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 152.075605][ T41] audit: type=1400 audit(2000000060.567:7482): avc: denied { write } for pid=10522 comm="syz.1.1369" lport=48278 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 152.091018][ T41] audit: type=1400 audit(2000000060.576:7483): avc: denied { ioctl } for pid=10522 comm="syz.1.1369" path="socket:[41012]" dev="sockfs" ino=41012 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 152.267976][T10548] PM: Enabling pm_trace changes system date and time during resume. [ 152.267976][T10548] PM: Correct system time has to be restored manually after resume. [ 152.300251][T10552] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 152.309494][ T41] audit: type=1400 audit(2000000060.782:7484): avc: denied { map } for pid=10545 comm="syz.3.1379" path="/330/file0/cpu.stat" dev="9p" ino=71827931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.311260][T10551] : renamed from vlan0 (while UP) [ 152.321947][T10546] netfs: Couldn't get user pages (rc=-14) [ 152.324217][T10546] netfs: Zero-sized read [R=2] [ 152.324508][T10556] PM: Enabling pm_trace changes system date and time during resume. [ 152.324508][T10556] PM: Correct system time has to be restored manually after resume. [ 152.386126][T10560] /dev/nullb0: Can't open blockdev [ 152.389641][T10560] /dev/nullb0: Can't open blockdev [ 152.434864][T10564] dummy0: entered allmulticast mode [ 152.437671][ T6181] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 152.587501][ T6181] usb 7-1: device descriptor read/64, error -71 [ 152.630779][T10568] dummy0: left allmulticast mode [ 152.690892][T10577] ksmbd: Unknown IPC event: 1, ignore. [ 152.764847][T10579] ufs: You didn't specify the type of your ufs filesystem [ 152.764847][T10579] [ 152.764847][T10579] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 152.764847][T10579] [ 152.764847][T10579] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 152.865242][ T6181] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 152.944301][T10581] SELinux: policydb string length 0 does not match expected length 8 [ 152.947996][T10581] SELinux: failed to load policy [ 153.015053][ T6181] usb 7-1: device descriptor read/64, error -71 [ 153.132803][ T6181] usb usb7-port1: attempt power cycle [ 153.141616][T10590] sctp: [Deprecated]: syz.1.1392 (pid 10590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.141616][T10590] Use struct sctp_sack_info instead [ 153.184974][ T41] audit: type=1400 audit(2000000061.596:7485): avc: denied { watch } for pid=10591 comm="syz.4.1393" path="/128/file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.193301][ T41] audit: type=1400 audit(2000000061.596:7486): avc: denied { watch_sb } for pid=10591 comm="syz.4.1393" path="/128/file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.208881][T10593] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 153.211892][T10593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.215697][T10593] vhci_hcd vhci_hcd.0: Device attached [ 153.265055][T10592] nfs4: Unknown parameter 'usrqmota' [ 153.276933][T10594] vhci_hcd: unknown pdu 1 [ 153.279512][ T8947] vhci_hcd vhci_hcd.1: stop threads [ 153.289054][ T8947] vhci_hcd vhci_hcd.1: release socket [ 153.291040][ T8947] vhci_hcd vhci_hcd.1: disconnect device [ 153.339780][ T41] audit: type=1400 audit(2000000061.746:7487): avc: denied { execute } for pid=10598 comm="syz.4.1394" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 153.496098][ T6181] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 153.528777][ T6181] usb 7-1: device descriptor read/8, error -71 [ 153.673359][T10607] netlink: 'syz.3.1397': attribute type 6 has an invalid length. [ 153.677534][T10607] netlink: 'syz.3.1397': attribute type 5 has an invalid length. [ 153.682184][T10607] netlink: 'syz.3.1397': attribute type 4 has an invalid length. [ 153.806140][ T6181] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 153.828253][ T6181] usb 7-1: device descriptor read/8, error -71 [ 153.957074][ T6181] usb usb7-port1: unable to enumerate USB device [ 154.386770][T10619] netlink: 'syz.3.1400': attribute type 29 has an invalid length. [ 154.389451][T10619] netlink: 'syz.3.1400': attribute type 3 has an invalid length. [ 154.630420][ T41] audit: type=1400 audit(2000000062.962:7488): avc: denied { nlmsg_write } for pid=10620 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 154.640869][ T41] audit: type=1107 audit(2000000062.962:7489): pid=10620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 154.993980][T10633] openvswitch: netlink: IP tunnel TTL not specified. [ 155.041445][ T41] audit: type=1400 audit(2000000063.336:7490): avc: denied { write } for pid=10631 comm="syz.1.1404" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.052595][T10632] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 155.058420][T10632] netlink: 'syz.1.1404': attribute type 4 has an invalid length. [ 155.198410][T10637] __nla_validate_parse: 13 callbacks suppressed [ 155.198433][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1406'. [ 155.282306][T10640] bond7: Removing last arp target with arp_interval on [ 155.321698][ T41] audit: type=1400 audit(2000000063.598:7491): avc: denied { connect } for pid=10645 comm="syz.1.1409" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.350417][T10646] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.355006][T10646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.486192][T10659] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1408'. [ 155.490330][T10662] random: crng reseeded on system resumption [ 155.495482][T10662] Unrecognized hibernate image header format! [ 155.496606][T10659] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 155.498097][T10662] PM: hibernation: Image mismatch: architecture specific data [ 155.534319][T10664] usb 1-1: USB disconnect, device number 2 [ 155.857122][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 155.886197][T10681] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.326583][T10698] netlink: 'syz.3.1423': attribute type 6 has an invalid length. [ 156.376030][T10698] syzkaller0: entered promiscuous mode [ 156.378727][T10698] syzkaller0: entered allmulticast mode [ 156.387831][T10700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.067343][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 157.162453][T10749] wg1: entered promiscuous mode [ 157.165792][T10749] wg1: entered allmulticast mode [ 157.200722][T10749] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 157.381240][T10762] xt_TCPMSS: Only works on TCP SYN packets [ 157.498429][ T41] kauditd_printk_skb: 4 callbacks suppressed [ 157.498448][ T41] audit: type=1400 audit(2000000065.637:7496): avc: denied { unmount } for pid=9059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 157.508530][ T41] audit: type=1400 audit(2000000065.637:7497): avc: denied { search } for pid=10773 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.516210][ T41] audit: type=1400 audit(2000000065.637:7498): avc: denied { read write } for pid=10773 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 157.525909][ T41] audit: type=1400 audit(2000000065.637:7499): avc: denied { open } for pid=10773 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 157.536475][ T41] audit: type=1400 audit(2000000065.637:7500): avc: denied { lock } for pid=10773 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 157.546865][ T41] audit: type=1400 audit(2000000065.637:7501): avc: denied { read } for pid=10773 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 157.568722][T10778] bridge_slave_1: default FDB implementation only supports local addresses [ 157.579835][ T10] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 157.609895][T10784] syzkaller0: entered promiscuous mode [ 157.613342][T10784] syzkaller0: entered allmulticast mode syzkaller syzkaller login: [ 157.627284][T10784] tipc: Started in network mode [ 157.629513][T10784] tipc: Node identity d6310ac50ce6, cluster identity 4711 [ 157.633530][T10784] tipc: Enabled bearer , priority 0 [ 157.636204][T10785] tipc: Enabling of bearer rejected, already enabled [ 157.641572][T10783] tipc: Resetting bearer [ 157.659870][T10783] tipc: Disabling bearer [ 157.761948][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 157.766059][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 157.770204][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.773518][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.776554][ T10] usb 7-1: Product: syz [ 157.778057][ T10] usb 7-1: Manufacturer: syz [ 157.779834][ T10] usb 7-1: SerialNumber: syz [ 157.783882][ T10] usb 7-1: config 0 descriptor?? [ 157.793084][ T10] usb 7-1: selecting invalid altsetting 0 [ 157.854521][T10792] ntfs3(loop3): try to read out of volume at offset 0x0 [ 157.973261][T10794] tmpfs: Bad value for 'mpol' [ 158.038393][ T39] usb 7-1: USB disconnect, device number 19 [ 158.157912][T10796] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 158.625094][ T41] audit: type=1400 audit(2000000066.694:7502): avc: denied { append } for pid=10828 comm="syz.2.1462" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 158.630129][T10829] program syz.2.1462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.693401][T10834] bond1 (unregistering): Released all slaves [ 158.706468][ T41] audit: type=1400 audit(2000000066.769:7503): avc: denied { mount } for pid=10836 comm="syz.2.1465" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 158.726364][ T41] audit: type=1400 audit(2000000066.787:7504): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 158.749901][T10818] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 158.755901][ T39] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 158.767121][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 158.785607][T10840] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1466'. [ 158.839444][T10847] syzkaller0: entered promiscuous mode [ 158.928482][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 158.933098][ T39] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 158.941451][ T39] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.946317][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.950486][ T39] usb 6-1: Product: სᤗ퓔텟긕넛娏毪惘뒥蠉蜹 [ 158.953988][ T39] usb 6-1: Manufacturer: 鯩浦㬩ꭤ鸪堻뚥担⫮ [ 158.957564][ T39] usb 6-1: SerialNumber: 麅獥ጋꪗ쒅ണ뵊찋둤緩耺ꮴ踕槿腧ᯯ祜✭欎嶽蔂šꞍ䱁㣺钶᪰艡⢻꯲ﵾ䁹࿕ꍴ䛇绒鄪倵㵨஁便렲틼뫴쥽︂ﰔ邗⬈퀘᠐呟讪㩾Ὅ邝﫷떫宒꣤囇핢쑐鼮≜큷 [ 158.976112][T10824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.001372][T10858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1470'. [ 159.043674][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1471'. [ 159.111954][ T41] audit: type=1400 audit(2000000067.152:7505): avc: denied { write } for pid=10865 comm="syz.4.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 159.254752][ T39] cdc_ncm 6-1:1.0: bind() failure [ 159.259461][ T39] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 159.262254][ T39] cdc_ncm 6-1:1.1: bind() failure [ 159.267276][ T39] usb 6-1: USB disconnect, device number 17 [ 159.432003][ T5935] block nbd0: Receive control failed (result -32) [ 159.442997][T10894] kvm: emulating exchange as write [ 159.494126][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 159.498308][T10908] SELinux: policydb magic number 0xad469d8c does not match expected magic number 0xf97cff8c [ 159.502118][T10908] SELinux: failed to load policy [ 159.583458][T10919] netlink: 'syz.3.1484': attribute type 13 has an invalid length. [ 159.645202][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 159.674648][T10922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.677245][T10922] IPv6: NLM_F_CREATE should be set when creating new route [ 159.683605][T10925] nbd: socks must be embedded in a SOCK_ITEM attr [ 159.730749][T10931] JFS: discard option not supported on device [ 159.733963][T10931] Mount JFS Failure: -5 [ 159.801069][ T6348] udevd[6348]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 159.901213][T10949] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 159.908553][T10951] tipc: Enabling of bearer rejected, failed to enable media [ 160.019502][T10960] xt_limit: Overflow, try lower: 271964/0 [ 160.376111][T10975] veth0_to_bond: entered allmulticast mode [ 160.439113][T10979] bond0: entered promiscuous mode [ 160.442254][T10979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.236097][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 161.385678][ T39] usb 9-1: device descriptor read/64, error -71 [ 161.642227][ T39] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 161.802645][ T39] usb 9-1: device descriptor read/64, error -71 [ 161.844134][T11002] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 161.920326][ T39] usb usb9-port1: attempt power cycle [ 162.049822][T11006] __nla_validate_parse: 3 callbacks suppressed [ 162.049844][T11006] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1511'. [ 162.056460][T11006] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1511'. [ 162.195211][T11014] xt_SECMARK: invalid mode: 2 [ 162.283824][ T39] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 162.316564][ T39] usb 9-1: device descriptor read/8, error -71 [ 162.542074][T11018] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1515'. [ 162.593749][ T39] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 162.626890][ T39] usb 9-1: device descriptor read/8, error -71 [ 162.744210][ T39] usb usb9-port1: unable to enumerate USB device [ 162.864850][T11024] binder: 11023:11024 ioctl c0306201 2000000003c0 returned -14 [ 162.871227][ T832] IPVS: starting estimator thread 0... [ 162.876031][T11024] netlink: 'syz.2.1516': attribute type 4 has an invalid length. [ 162.891716][T11024] tmpfs: Cannot change global quota limit on remount [ 162.931670][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 162.931683][ T41] audit: type=1400 audit(2000000070.716:7508): avc: denied { setopt } for pid=11026 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.953392][T11027] nvme_fabrics: missing parameter 'transport=%s' [ 162.956494][T11027] nvme_fabrics: missing parameter 'nqn=%s' [ 162.978613][T11025] IPVS: using max 46 ests per chain, 110400 per kthread [ 163.123428][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 163.161573][T11049] i2c i2c-1: Invalid block write size 34 [ 163.271030][T11053] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 163.271030][T11053] program syz.2.1525 not setting count and/or reply_len properly [ 163.292915][T11055] netlink: 'syz.1.1526': attribute type 16 has an invalid length. [ 163.295749][T11055] netlink: 'syz.1.1526': attribute type 17 has an invalid length. [ 163.308647][T11057] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 163.312907][T11057] netlink: 'syz.2.1527': attribute type 3 has an invalid length. [ 163.316024][T11057] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1527'. [ 163.342776][T11055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.578048][T11078] program syz.2.1535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.582796][ C0] sr 2:0:0:0: [sr0] tag#28 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 163.586801][ C0] sr 2:0:0:0: [sr0] tag#28 CDB: opcode=0x95 95 ff ff ff 7f 00 00 00 01 00 00 00 00 00 00 00 [ 163.705053][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1539'. [ 163.711267][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1539'. [ 163.798271][T11096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'. [ 163.897307][T11107] tmpfs: Unknown parameter 'g' [ 163.990841][T11117] loop4: detected capacity change from 0 to 7 [ 164.001610][ T6348] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 164.003859][ T6348] loop4: partition table partially beyond EOD, truncated [ 164.008695][ T6348] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 164.037021][T11117] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 164.038899][T11117] loop4: partition table partially beyond EOD, truncated [ 164.042101][T11117] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 164.063573][ T6348] udevd[6348]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 164.076489][ T6348] udevd[6348]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 164.094311][T11133] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 164.123738][T11135] 9p: Bad value for 'rfdno' [ 164.129950][T11135] netlink: 'syz.2.1555': attribute type 2 has an invalid length. [ 164.132939][T11135] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 164.136171][T11135] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 164.148109][T11141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1552'. [ 164.192304][ T41] audit: type=1400 audit(2000000071.904:7509): avc: denied { setopt } for pid=11142 comm="syz.2.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.339406][ T41] audit: type=1400 audit(2000000072.035:7510): avc: denied { mounton } for pid=11160 comm="syz.4.1561" path="/161/file0/file0" dev="9p" ino=71827759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.375025][T11161] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.1561'. [ 164.383504][T11161] netfs: Couldn't get user pages (rc=-14) [ 164.386089][T11161] netfs: Zero-sized read [R=3] [ 164.514512][T11165] SELinux: failed to load policy [ 164.516989][T11166] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 164.521249][T11166] SELinux: failed to load policy [ 164.681627][T11176] 9pnet_fd: p9_fd_create_tcp (11176): problem connecting socket to 127.0.0.1 [ 164.773952][T11183] netlink: 'syz.4.1570': attribute type 63 has an invalid length. [ 164.859114][ T41] audit: type=1400 audit(2000000072.521:7511): avc: denied { map } for pid=11196 comm="syz.1.1573" path="socket:[44311]" dev="sockfs" ino=44311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.077465][T11210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11210 comm=syz.2.1578 [ 165.117338][ T832] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 165.118216][T11215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.124100][T11215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.255900][ T41] audit: type=1400 audit(2000000072.886:7512): avc: denied { connect } for pid=11222 comm="syz.3.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.257845][ T832] usb 6-1: device descriptor read/64, error -71 [ 165.281669][T11227] openvswitch: netlink: Flow key attribute not present in set flow. [ 165.358060][T11230] input: syz0 as /devices/virtual/input/input21 [ 165.403842][T11232] 9p: Unknown Cache mode or invalid value fscache [ 165.440001][ T41] audit: type=1400 audit(2000000073.073:7513): avc: denied { write } for pid=11234 comm="syz.2.1586" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 165.454270][T11235] loop5: detected capacity change from 0 to 7 [ 165.462714][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.467166][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.471771][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.476880][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.481231][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.484579][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.487922][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.491729][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.495574][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.498935][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.502421][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.506355][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.510186][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.513551][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.516550][ T6348] ldm_validate_partition_table(): Disk read failed. [ 165.519333][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.522909][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.525988][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.529151][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.532710][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.537111][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.541197][ T6348] Dev loop5: unable to read RDB block 0 [ 165.544995][ T832] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 165.547993][ T6348] loop5: unable to read partition table [ 165.548159][ T6348] loop5: partition table beyond EOD, truncated [ 165.566683][T11235] ldm_validate_partition_table(): Disk read failed. [ 165.570019][T11235] Dev loop5: unable to read RDB block 0 [ 165.572284][T11235] loop5: unable to read partition table [ 165.574590][T11235] loop5: partition table beyond EOD, truncated [ 165.579023][T11235] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 165.634251][ T41] audit: type=1326 audit(2000000073.251:7514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 165.644491][ T41] audit: type=1326 audit(2000000073.251:7515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 165.654608][ T41] audit: type=1326 audit(2000000073.251:7516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 165.663278][ T41] audit: type=1326 audit(2000000073.251:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 165.694837][ T832] usb 6-1: device descriptor read/64, error -71 [ 165.816467][ T832] usb usb6-port1: attempt power cycle [ 166.175258][ T832] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 166.196949][ T832] usb 6-1: device descriptor read/8, error -71 [ 166.300554][T11278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.452990][ T832] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 166.474774][ T832] usb 6-1: device descriptor read/8, error -71 [ 166.592143][ T832] usb usb6-port1: unable to enumerate USB device [ 167.867513][T11281] bridge2: entered promiscuous mode [ 167.869485][T11281] bridge2: entered allmulticast mode [ 167.873501][T11281] team0: Port device bridge2 added [ 168.146636][T11311] __nla_validate_parse: 37 callbacks suppressed [ 168.146648][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 168.218594][T11312] /dev/nullb0: Can't open blockdev [ 168.281622][ T41] kauditd_printk_skb: 20815 callbacks suppressed [ 168.281637][ T41] audit: type=1326 audit(2000000075.720:28333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.295914][ T41] audit: type=1326 audit(2000000075.730:28334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.305143][ T41] audit: type=1326 audit(2000000075.730:28335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.312995][ T41] audit: type=1326 audit(2000000075.730:28336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.322317][ T41] audit: type=1326 audit(2000000075.730:28337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.331284][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 168.342270][ T41] audit: type=1326 audit(2000000075.730:28338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.351137][ T41] audit: type=1326 audit(2000000075.730:28339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.359352][ T41] audit: type=1326 audit(2000000075.730:28340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.367216][ T41] audit: type=1326 audit(2000000075.730:28341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.374920][ T41] audit: type=1326 audit(2000000075.730:28342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908879c799 code=0x50000 [ 168.398514][T11328] validate_nla: 1 callbacks suppressed [ 168.398527][T11328] netlink: 'syz.3.1614': attribute type 5 has an invalid length. [ 168.994821][T11352] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 168.999364][T11352] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1623'. [ 169.010339][T11354] xt_hashlimit: size too large, truncated to 1048576 [ 169.164413][ T832] IPVS: starting estimator thread 0... [ 169.167663][T11363] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 169.169525][T11361] mkiss: ax0: crc mode is auto. [ 169.254098][T11364] IPVS: using max 47 ests per chain, 112800 per kthread [ 169.275479][ T39] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 169.383799][T11373] blkio.reset_stats is deprecated [ 169.430433][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 169.449392][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 169.453740][ T39] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 169.456723][ T39] usb 6-1: config 0 has no interface number 0 [ 169.459874][ T39] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.464139][ T39] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 169.469073][ T39] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.472756][ T39] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.480336][ T39] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 169.490638][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.496302][ T39] usb 6-1: config 0 descriptor?? [ 169.521339][ T39] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 169.523810][T11386] netlink: 'syz.2.1635': attribute type 20 has an invalid length. [ 169.538243][T11390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1107 sclass=netlink_tcpdiag_socket pid=11390 comm=syz.4.1636 [ 169.683582][T11395] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1638'. [ 169.768275][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 169.863540][T11352] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 169.866853][T11352] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 169.967820][T11416] raw_sendmsg: syz.2.1644 forgot to set AF_INET. Fix it! [ 170.172165][T11429] "syz.1.1649" (11429) uses obsolete ecb(arc4) skcipher [ 170.179416][T11429] netlink: 'syz.1.1649': attribute type 11 has an invalid length. [ 170.417256][T11453] netlink: 'syz.3.1655': attribute type 13 has an invalid length. [ 170.469496][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 170.480242][T11455] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 170.483619][T11455] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 170.521127][T11459] sctp: [Deprecated]: syz.3.1658 (pid 11459) Use of int in maxseg socket option. [ 170.521127][T11459] Use struct sctp_assoc_value instead [ 170.577911][T11461] openvswitch: netlink: Missing key (keys=40, expected=100) [ 170.584353][T11461] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.650879][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 170.728374][T11468] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 170.793629][T11472] netlink: 'syz.4.1663': attribute type 178 has an invalid length. [ 171.500992][T11486] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 171.916719][T11492] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.920406][T11492] block device autoloading is deprecated and will be removed. [ 172.144286][T11503] bridge0: port 3(syz_tun) entered blocking state [ 172.147292][T11503] bridge0: port 3(syz_tun) entered disabled state [ 172.149779][T11503] syz_tun: entered allmulticast mode [ 172.154357][T11503] syz_tun: entered promiscuous mode [ 172.157762][T11503] bridge0: port 3(syz_tun) entered blocking state [ 172.160825][T11503] bridge0: port 3(syz_tun) entered forwarding state [ 172.315091][T11509] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 172.425586][T11519] syzkaller0: entered promiscuous mode [ 172.793137][ T832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 173.787429][ T41] kauditd_printk_skb: 4120 callbacks suppressed [ 173.787441][ T41] audit: type=1400 audit(2000000080.884:32463): avc: denied { read write } for pid=11545 comm="syz.4.1687" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.798619][ T41] audit: type=1400 audit(2000000080.884:32464): avc: denied { open } for pid=11545 comm="syz.4.1687" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.806988][ T41] audit: type=1400 audit(2000000080.884:32465): avc: denied { create } for pid=11543 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.815330][ T41] audit: type=1400 audit(2000000080.884:32466): avc: denied { connect } for pid=11543 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.822258][ T41] audit: type=1400 audit(2000000080.893:32467): avc: denied { ioctl } for pid=11545 comm="syz.4.1687" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.846813][ T41] audit: type=1400 audit(2000000080.931:32468): avc: denied { bind } for pid=11543 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.856803][ T41] audit: type=1400 audit(2000000080.940:32469): avc: denied { listen } for pid=11543 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.863942][ T41] audit: type=1400 audit(2000000080.940:32470): avc: denied { accept } for pid=11543 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.865108][T11550] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888032bc0000 pfn:0x32bc0 [ 173.871176][ T41] audit: type=1400 audit(2000000080.940:32471): avc: denied { map } for pid=11545 comm="syz.4.1687" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.887137][T11550] memcg:ffff88806615ea00 [ 173.889391][T11550] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 173.893026][T11550] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 173.897028][T11550] raw: ffff888032bc0000 0000000000000000 00000001ffffffff ffff88806615ea00 [ 173.903164][T11550] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 173.910659][ T41] audit: type=1400 audit(2000000080.987:32472): avc: denied { connect } for pid=11543 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 173.910761][T11550] page_owner tracks the page as allocated [ 173.921804][T11550] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11550, tgid 11545 (syz.4.1687), ts 173865073944, free_ts 173626559564 [ 173.932358][T11550] post_alloc_hook+0x153/0x170 [ 173.934715][T11550] get_page_from_freelist+0x111d/0x3140 [ 173.937227][T11550] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 173.939821][T11550] alloc_pages_mpol+0x1fb/0x550 [ 173.941940][T11550] folio_alloc_noprof+0x22/0x330 [ 173.944778][T11550] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 173.950006][T11550] filemap_alloc_folio_noprof+0x5e/0x80 [ 173.952608][T11550] page_cache_ra_order+0x54b/0xf30 [ 173.955192][T11550] filemap_fault+0x191a/0x2eb0 [ 173.957939][T11550] __do_fault+0x10d/0x550 [ 173.960427][T11550] do_fault+0xabb/0x1990 [ 173.962362][T11550] __handle_mm_fault+0x180f/0x2b60 [ 173.964839][T11550] handle_mm_fault+0x36d/0xa20 [ 173.967123][T11550] __get_user_pages+0xf9c/0x34d0 [ 173.969977][T11550] populate_vma_page_range+0x267/0x3f0 [ 173.972305][T11550] __mm_populate+0x107/0x3a0 [ 173.974278][T11550] page last free pid 832 tgid 832 stack trace: [ 173.977669][T11550] __free_frozen_pages+0x7e1/0x10d0 [ 173.980748][T11550] qlist_free_all+0x47/0xe0 [ 173.983252][T11550] kasan_quarantine_reduce+0x1a0/0x1f0 [ 173.986105][T11550] __kasan_slab_alloc+0x69/0x90 [ 173.988399][T11550] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 173.991727][T11550] __alloc_skb+0x140/0x710 [ 173.993694][T11550] mld_newpack.isra.0+0x18e/0xa20 [ 173.995864][T11550] add_grhead+0x299/0x340 [ 173.997751][T11550] add_grec+0x1380/0x1920 [ 173.999625][T11550] mld_ifc_work+0x3c5/0xc10 [ 174.003407][T11550] process_one_work+0xa23/0x19a0 [ 174.006174][T11550] worker_thread+0x5ef/0xe50 [ 174.008900][T11550] kthread+0x370/0x450 [ 174.010770][T11550] ret_from_fork+0x754/0xd80 [ 174.012826][T11550] ret_from_fork_asm+0x1a/0x30 [ 174.016538][T11550] ------------[ cut here ]------------ [ 174.018932][T11550] kernel BUG at mm/filemap.c:858! [ 174.021175][T11550] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 174.025448][T11550] CPU: 1 UID: 0 PID: 11550 Comm: syz.4.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.031577][T11550] Tainted: [L]=SOFTLOCKUP [ 174.033419][T11550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.037609][T11550] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 174.040304][T11550] Code: 35 c5 ff 48 c7 c6 20 37 bd 8b 4c 89 ef e8 e9 3f 12 00 90 0f 0b e8 e1 35 c5 ff 48 c7 c6 80 37 bd 8b 4c 89 ef e8 d2 3f 12 00 90 <0f> 0b e8 ca 35 c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 bc 35 c5 ff 90 [ 174.048936][T11550] RSP: 0018:ffffc9000379f3f8 EFLAGS: 00010246 [ 174.051513][T11550] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90030aa9000 [ 174.055073][T11550] RDX: 0000000000080000 RSI: ffffffff8255da88 RDI: ffff88805db0a984 [ 174.059581][T11550] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 174.063407][T11550] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 174.066937][T11550] R13: ffffea0000caf000 R14: 0000000000000000 R15: 1ffff920006f3ea9 [ 174.070383][T11550] FS: 00007f255e7896c0(0000) GS:ffff8880d6442000(0000) knlGS:0000000000000000 [ 174.074132][T11550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.076932][T11550] CR2: 00007f22c2de9e80 CR3: 000000003e619000 CR4: 0000000000352ef0 [ 174.080287][T11550] Call Trace: [ 174.081789][T11550] [ 174.083173][T11550] ? __pfx___filemap_add_folio+0x10/0x10 [ 174.085871][T11550] filemap_add_folio+0x1d8/0x690 [ 174.088109][T11550] ? __lock_acquire+0x4a5/0x2630 [ 174.090339][T11550] ? __pfx_filemap_add_folio+0x10/0x10 [ 174.092761][T11550] ? css_rstat_updated+0x1ce/0x5a0 [ 174.095141][T11550] page_cache_ra_order+0x614/0xf30 [ 174.097920][T11550] filemap_fault+0x191a/0x2eb0 [ 174.100526][T11550] ? __pfx_filemap_fault+0x10/0x10 [ 174.102731][T11550] ? __pfx_filemap_map_pages+0x10/0x10 [ 174.105008][T11550] __do_fault+0x10d/0x550 [ 174.106454][T11550] do_fault+0xabb/0x1990 [ 174.107867][T11550] __handle_mm_fault+0x180f/0x2b60 [ 174.109680][T11550] ? mt_find+0x45e/0x8e0 [ 174.111159][T11550] ? __pfx___handle_mm_fault+0x10/0x10 [ 174.113327][T11550] ? __pfx_mt_find+0x10/0x10 [ 174.115003][T11550] handle_mm_fault+0x36d/0xa20 [ 174.116583][T11550] __get_user_pages+0xf9c/0x34d0 [ 174.118246][T11550] ? __pfx___get_user_pages+0x10/0x10 [ 174.120163][T11550] populate_vma_page_range+0x267/0x3f0 [ 174.121912][T11550] ? __pfx_populate_vma_page_range+0x10/0x10 [ 174.123851][T11550] ? __pfx_find_vma_intersection+0x10/0x10 [ 174.125747][T11550] ? do_mmap+0x93f/0x12f0 [ 174.127170][T11550] __mm_populate+0x107/0x3a0 [ 174.128730][T11550] ? __pfx___mm_populate+0x10/0x10 [ 174.130439][T11550] ? up_write+0x290/0x4f0 [ 174.131848][T11550] vm_mmap_pgoff+0x37f/0x470 [ 174.133372][T11550] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 174.135064][T11550] ? __fget_files+0x215/0x3d0 [ 174.136627][T11550] ? __fget_files+0x21f/0x3d0 [ 174.138177][T11550] ksys_mmap_pgoff+0x3c8/0x650 [ 174.139912][T11550] ? kcov_ioctl+0x16a/0x720 [ 174.141970][T11550] ? kfree+0x2ec/0x6b0 [ 174.143697][T11550] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 174.146029][T11550] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 174.148942][T11550] __x64_sys_mmap+0x125/0x190 [ 174.151292][T11550] do_syscall_64+0x106/0xf80 [ 174.153029][T11550] ? clear_bhb_loop+0x40/0x90 [ 174.154704][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.156655][T11550] RIP: 0033:0x7f255d99c799 [ 174.158114][T11550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.164995][T11550] RSP: 002b:00007f255e789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.167730][T11550] RAX: ffffffffffffffda RBX: 00007f255dc16090 RCX: 00007f255d99c799 [ 174.170277][T11550] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 174.172751][T11550] RBP: 00007f255da32c99 R08: 0000000000000004 R09: 000000002c93a000 [ 174.175402][T11550] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 174.177988][T11550] R13: 00007f255dc16128 R14: 00007f255dc16090 R15: 00007ffc580fccd8 [ 174.180614][T11550] [ 174.181646][T11550] Modules linked in: [ 174.185013][T11550] ---[ end trace 0000000000000000 ]--- [ 174.187300][T11550] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 174.189216][T11550] Code: 35 c5 ff 48 c7 c6 20 37 bd 8b 4c 89 ef e8 e9 3f 12 00 90 0f 0b e8 e1 35 c5 ff 48 c7 c6 80 37 bd 8b 4c 89 ef e8 d2 3f 12 00 90 <0f> 0b e8 ca 35 c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 bc 35 c5 ff 90 [ 174.195849][T11550] RSP: 0018:ffffc9000379f3f8 EFLAGS: 00010246 [ 174.197984][T11550] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90030aa9000 [ 174.200935][T11550] RDX: 0000000000080000 RSI: ffffffff8255da88 RDI: ffff88805db0a984 [ 174.203466][T11550] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 174.206102][T11550] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 174.208643][T11550] R13: ffffea0000caf000 R14: 0000000000000000 R15: 1ffff920006f3ea9 [ 174.211790][T11550] FS: 00007f255e7896c0(0000) GS:ffff8880d6442000(0000) knlGS:0000000000000000 [ 174.215687][T11550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.217907][T11550] CR2: 00007f22c2de9e80 CR3: 000000003e619000 CR4: 0000000000352ef0 [ 174.220505][T11550] Kernel panic - not syncing: Fatal exception [ 174.223069][T11550] Kernel Offset: disabled [ 174.224494][T11550] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:29:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000012afc4 RBX=ffffffff8e4975c0 RCX=ffffffff8b902c75 RDX=0000000000000001 RSI=ffffffff8c1b0aa0 RDI=ffffffff81de9514 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000000 R9 =ffffed100d486795 R10=ffff88806a433cab R11=0000000000000000 R12=0000000000000000 R13=fffffbfff1c92eb8 R14=0000000000000000 R15=ffffffff90d99610 RIP=ffffffff8b9015df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6342000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c26952b CR3=000000003372b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c3b4d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c1d70f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c1d70f6 00007ffc4c1d70fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2e3327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2e332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2e33420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2e332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2fec600 00007f22c2fec5e0 00007f22c2fec5e8 00007f22c2fec618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2fec5f8 00007f22c2fec5c8 00007f22c2fec600 00007f22c2fec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 000000000000041c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857a0295 RDI=ffffffff9b4a3b40 RBP=ffffffff9b4a3b00 RSP=ffffc9000379ecd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=000000000000002e R14=0000000000000010 R15=ffffffff857a0230 RIP=ffffffff857a02bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f255e7896c0 ffffffff 00c00000 GS =0000 ffff8880d6442000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f22c2de9e80 CR3=000000003e619000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=00000000000c0000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fbdf81d600 000055fbdf81d600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1b48bb70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7266207473616c20 65676170205d3035 353131545b5d3837 323437392e333731 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c29373836312e34 2e7a797328203534 3531312064696774 202c303535313120 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646970202c294c4c 4157445241485f50 46475f5f7c504d4f 435f5046475f5f7c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 59525445524f4e5f 5046475f5f7c4e52 41574f4e5f504647 5f5f7c53464f4e5f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000018a87c RBX=ffff88801eaf4980 RCX=ffffffff8b902c75 RDX=0000000000000001 RSI=ffffffff8c1b0aa0 RDI=ffffffff81de9514 RBP=0000000000000000 RSP=ffffc90000187df0 R8 =0000000000000000 R9 =ffffed100d4c6795 R10=ffff88806a633cab R11=0000000000000002 R12=0000000000000002 R13=ffffed1003d5e930 R14=0000000000000002 R15=ffffffff90d99610 RIP=ffffffff8b9015df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6542000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f908884eddd CR3=00000000263ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c1d70f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c1d70f6 00007ffc4c1d70fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2e3327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2e332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2e33420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22c2e332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000041c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 000000000000041c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000006ab1b21ec4 RBX=ffff88806a723f80 RCX=00000000000006e0 RDX=000000000000006a RSI=ffff88806a723f80 RDI=0000000000009164 RBP=0000000000009164 RSP=ffffc900006f8ed0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffc900006f8ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a7284c0 RIP=ffffffff81b553a5 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6642000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=0000000023957000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe773e4c26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe773e4c26 00007ffe773e4c2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908883327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90888332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9088833420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90888332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000