last executing test programs: 13.797940946s ago: executing program 0 (id=766): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000000)='ext4_fc_replay\x00', r0}, 0x18) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000002ec0)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x862, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 13.730399515s ago: executing program 0 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5b, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74002a5b00", 0x31303553}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r9 = gettid() sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r8, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r9], 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000440)={0x0, @xdp={0x2c, 0x0, r8, 0x37}, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @sco, 0x7, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)='dummy0\x00', 0x1, 0x100000000, 0xd0}) setsockopt$inet6_int(r6, 0x29, 0x9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000003c0007014000000000400000017c00001000fc800c00050008000000000000000c00018006000600ac33aa70844c5736a7ec28e83390facc800a000008000280c4139b781400070042076c1bd3ac9ce328fcfa9108c724598b17ecc96ced3a1e1bf7e360d613e83fd04f799ac5c80ebb8f7918ae1dabb503680677f34cb6640085df"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) listen(r12, 0x1ff) r13 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r13, &(0x7f0000000500)="aa", 0xff04, 0x4000040, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000003, 0x82012, 0xffffffffffffffff, 0x83000000) sendmsg$L2TP_CMD_NOOP(r10, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00022abd70684096d42ead8300fcdbdf03ccf8b5cbc1475500ab0000000600020000", @ANYRES32, @ANYBLOB="0600010008000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1.187980744s ago: executing program 2 (id=779): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @empty, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) r2 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x75, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffde1bba22c3ae4859df02af000cec5ebdef01a5c9a4dc200aeed53ee16bac1ae9108a64270077c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af3"}) mbind(&(0x7f0000d26000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000140)=0x4, 0x6, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x0, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) capset(&(0x7f0000002040)={0x20071026}, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r5, 0xee01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="460000001072ac69d7971c4dae4a2f00fa71881057fd60e6119e44000000", @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c00028008000400010001000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.100347923s ago: executing program 0 (id=781): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz1\x00', {0x0, 0x0, 0x2}, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x87, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x514], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffff7, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x871], [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000780)={'syz1\x00', {0xc, 0x400, 0x4, 0x7}, 0x3a, [0x7, 0x1, 0xfffffff7, 0x8, 0xfffffffa, 0x48, 0x4, 0x5, 0x7, 0x7, 0x5, 0x100, 0x5d65, 0x9, 0x921, 0x0, 0x3, 0xd, 0x80000000, 0xf7cf, 0x4, 0xd, 0x4, 0xfffff996, 0x674d, 0x7, 0x32, 0x4, 0x4, 0xfff, 0xffffff81, 0x5, 0xf, 0x4, 0x9, 0x2, 0x4, 0x4, 0xfffffffd, 0x6, 0x0, 0xf3f, 0x7fffffff, 0x4, 0x5, 0x1, 0x7, 0x9, 0x0, 0xfffffffd, 0x667, 0x8, 0xb, 0x2, 0x9, 0x0, 0x8, 0xfffff000, 0x0, 0xd3, 0x8, 0x7fff, 0x80000000, 0x145a7011], [0x8, 0x9, 0x5, 0x6, 0x8, 0x8, 0xd53, 0x5df, 0x4, 0x68e9, 0x1, 0x1, 0xa, 0x0, 0x3, 0xfffffffe, 0x3, 0x6, 0x2000, 0xfffffff9, 0x7, 0xfffffffc, 0xf17, 0x436a, 0x6, 0xa38, 0x6, 0xc5f2, 0x7f, 0x58d, 0x9, 0x2, 0x1, 0x9, 0xffffffff, 0x9, 0xfffffffd, 0x2, 0x7, 0x3, 0x7b8, 0x8, 0x732c, 0x5, 0x4, 0x8001, 0x0, 0x3, 0x1140, 0x9, 0xe30, 0x2, 0x1ff, 0x6, 0xffff, 0x0, 0x3, 0x10d31ae, 0x0, 0xb64, 0x9, 0x10000, 0x3, 0x5], [0x9, 0x3, 0x4, 0x9, 0x5, 0x7fffffff, 0x7, 0x400, 0x6, 0x0, 0x80000000, 0x6, 0x8, 0x3e, 0xffffffc3, 0xa, 0x800000, 0xd, 0x7, 0x7fff, 0x1, 0x68ba, 0x401, 0xffff21e3, 0x1, 0x0, 0x1, 0x4, 0x8, 0x3e9, 0x6, 0x0, 0xc4a, 0x7, 0x4, 0x9, 0x7020, 0x2, 0x5, 0x9, 0x6, 0x8, 0x0, 0x9, 0xfffffffa, 0xe23, 0x4, 0x400000, 0x6, 0x5, 0x6, 0xfffff801, 0xe0000000, 0x7fff, 0x200, 0x80000001, 0x6, 0x6, 0xfffff4cf, 0x200, 0x8, 0x1000, 0x9, 0x9b], [0x5, 0xfe, 0x6fe8971d, 0x463, 0x8, 0xa, 0x0, 0x0, 0x5, 0x762, 0x81, 0x2, 0x5, 0x7fff, 0x1add190a, 0x8, 0x8, 0x100, 0x9, 0x1, 0xffffff01, 0x4, 0x401, 0x3, 0x3, 0x8, 0x3, 0x21, 0x9, 0x3, 0x5, 0x7, 0x8, 0x8008, 0x9, 0x7c, 0x2, 0x4, 0x9, 0x5, 0x100, 0x6, 0x7, 0x2, 0x30f2c0, 0x1, 0x3, 0x7fff, 0x2, 0xca1, 0x4, 0x101, 0x9, 0xdc, 0x7, 0x2, 0x5, 0x2, 0x6, 0xf61, 0xe, 0xffffffff, 0x126a, 0x2]}, 0x45c) r2 = syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd090, 0x10100, 0x3}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x44c2, 0x0, 0x2, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x3, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x1b) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r6, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000001200000229bd7000fcdbdf2563686163686132302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240000000400000000000000000000080001006d01000008000100060000000800010055090000"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r8, 0x400454cc, 0x3e) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = epoll_create1(0x0) close(r10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'wg1\x00', 0x2}) 886.115966ms ago: executing program 2 (id=785): r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd28, 0x25dfdbfd, 0x80000000, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x5}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 835.358799ms ago: executing program 2 (id=787): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x7, 0x8, 0x34325241, 0x0, 0x0, 0x0, 0xc, 0x7, 0x1, 0x8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r2, 0x80044df9, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 750.742494ms ago: executing program 2 (id=789): r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x6a88c2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000340)={0x6, 0x40000095, 0x0, 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl(r2, 0x4, &(0x7f0000000840)="8f9f95a7741ba81d4aa6ae9c9ae58f4138bd56a5919afc1804865440a5a25aad3bbefb126d33e7ee70e8b74f812b7d5d2900b9679fd096f918a1d53923d7d099f54bd140325c29fffd01cf6b33e10dc9eee539b06f4b554b771ef03c89bbadc77a7e12ac654963215667f0f300ef0ec83c7d593ff1f5e492de7e9ca11ba41d72427afd0d29cc28bf7572d35528e9dcf7da792a510dcd7dffa0e1b03a15879bff5b041cd01282a0f15f3870ff51f9ceb0ce4220a6d65d19441f26db6d913745ca034ce2ebb05ce4bd92a89549b29e5f47a7c796b76aa23f95762beddd14b6da62547af1351e6ae664fac4da2c8b03e39e36be70b22ff6508df04bac70db37f02edd0ce76ccefc781a853507b968116a8bb4ba5aa341e297e1ace63be971cc84ff19feedacf52eee943e497e320b7f77c7e4e05cbfe7cd6888fd7d76ea8d89d87208697488044354fc70eee022dc851283cf945db37fde34db748844a0c5e6dede60bfc1a2352eb1f6ddd0973bd460840284c14890b6bc3b2ecbb0061b5da4816d0e6ddf6732aebf1196536d3196f0c21daeb7ba003be527c652b8dd09e1d5eccf3690ad5701ad85040f7395b7ea42232ec4e901e1a110ef8901cd61a6e99f70a2d1a3f2b78d859752e31ebfb0293258ad6a909d07f2d3b7a6e9f3e198dcce34cea39d5aa853e7f8a4f721cc6a311f36d578dd75e94b70a21189ce472044cf05d7591682ea12220e45e733dd7085bd5f252e189d2de172282ff701d471ffee33fc19caed0a9ca2c86c6bd219c5b6fe1982f218ca010da97827890a9179c2d184616a877f52599121f4e3f16abc968505304c43ebbc3320d0d4143819400b587aa223643cd1cf27fc7e822224de855428179bb764533d3146b67c31113dde2f0dc0c180d4b6c39daaac1683008847db02aa6dc8d57e37c8a7d8b26b8c9109678ab86880f7ec5c65e425c8222310ebef9fdab570411ca357f9fd2300b01f73980a9eacd796662a053246f0f2c16296f868ad1f2ae2e4ac711876d07fc0da5447a59b28679ec6d41a932d19bc480982b9c60f47ceee6875d1e69885a85be1f1cc1e92d994ad886beb610249f9cd99191280d31a7abc59472c662e6cc3a06fa8ca87637211044d89c52fbbd78d4a86105e35dbc4af8157addb373f9758b02d7b90606efde34ee86bf40e73eb63371c7ca570bb20da3aae48a91f123f8f6245f487b3e23c34afbab8ac3a56091bf2825176e42e5c7d087db46608a865bd0c95aa0a54411689635a812cc585fffa641cbd55f6f2a11d3fbc832c26a8298c6d8d111f4d0a13e250dac28cc518c6928d69161cea594cc63377cb904058ad0cc2e8f7c9ce00997612764a544dd6cdbb3c847ff89a8e5ff5674d226533fdf7f70d1e071765761aff9215926c82aec93eb156ca17645452e267d9abfce1e5e5f6c629df6e88fda0f525ef16fbd6f60c1a60462415fbe37cdb754f985b7563cfab9fb73889b551770d314adedf7e4a4c2b73caa10178f1f30f19f721416c19aeb8262655452dd9781e57d53fa57f2f6063c2e14cb265d84b73cd99590d05974233847cec827dc9d1a3c44cd057ef06451d00e70254ade2fbd962912ce0db3257de8df1718572fdf94a87a5207cd3747b7e82c294c48c465ae08a7103fa544f8f907426ee41b760792070994da520099993490412174f994dff9e84fa9260d950e0d299c191bf0ebe8898039ec70fc27bd1ea473d1fe06ab7fdca50a8910ac908dff91ab38db85c0f34ab2bebcd114980f77f54f909c2d33ef07ecadd3944351a56cfbbbe55cfcdd44acfc43f9021a9080906b1197f483e6de112c8470ff9faf7bc3ad3de2eb3a8ba1341a054caa26555910e35b0a037d57c59f1debbf7554fc90d06c711469ca05992d6ed11b46e85d5f6c2a8df1c5475a86787cda7253d04d8bb45b4ae6b443f6df9fb3985bb0f4f9010cc9d8e6c5698438efc0c7837855bc9e68ca9b289b71ff30027ec565c9cb2c0a1649d50a76036ad7ba2348058bb6acc2babfe52f5328a2aa8c9f665126e3fb3c7adf0cc5efdd73ab3ceb9436cb75f99fbd93d8cc6f98bcefdb9573035e86af44263240fa6c01b8bc7064c6aa7707480876795519161f6f31a584c7c6d1609c36cfbb66faa7f597a4ff02f5812753bd5ee8591744613d6b58fca4056a2510bc7a8bfe6d8a8af1c9307c19a557fe9cfb5caf2fd7ae87fe2b57f575c1d94e6c7b53341b9cb79bd139e2260640687c8995d63af154d151751d40f6e834a3ea61f8e7b64d1df769aee83c16c81e9f29a547c9b20a1166819f46bcd579dc97d1c4a1f380169c9a94ec11ae3489494fa1edffb30c7052744becda575d8dbebf781d2873db12eaa2a7baa2f0df7482dc3754a6be6c7bae37e80d9550451e1d9ff871cce8f0df8b0b8cd7efdf74223046ba9b07337439a734a28ce7bffff9e113273fd7c9ae3db9139a8f565308ee6380c683f488234d4a982a3b966136c26c93e1bebf3034afb59ded8bbd77e8c5c47d0bda69a3793e9f8270af879ebe83ed5781c0fce1ff398a8c3e061d65414c5d2b77ba1ec9942807797b76da52b0b5f62644264a1a012301d5b5236e07fcfffee275deea6af4df54784d5cc474a4e4c3218d04891dcb8a91e0fe8564253d94cbd8f73c1755d372226ae436f385285ab120b9ca25d824d3a215fa686d67d969eacc2771306590cdf977d5109d45c839c5e36607471096677a65e193b27965494d341474bdf8d04c27546cbd43d05fa09fc9c484b412d8fa7d637f32840dcd1f807170460d71444bb63f5f83b77f830c7de14ba39c040d5d106cae26c5c770c78d6968d3de30943956548599cf58c1ce543d4be29e1ad20857b09b951350848ec7e85a8e8179e019df08c680264a175f16eb510706d48286048f5ff45ac47a42bab8cd7b50ba75d7f5ea24faf5e8fac44fbbb2170e44fbe512738b34235ac787607d2d9c3ec083564c17f52465138cc4b6d0431215ba166bd9fc6dd501b3879a65ea853a637166e2cf032e69ee60d9430ee0e9a3b6a34440fcad5cbd777faedda2bfbda516d4f80c822a0415c052ddab33293892d464813d8595490f02b35c1892427cfbdd7201fb38dbdb0ee4a961a9fd37a60d5c7435ee43910354e96a987e4fc96f0c4e761cfa610ef2c5ef6987a9b7623622499d97d0d64b2b6131fc08dc5c2fcf4b66a8845fc16c59888e13553f76f5769147a9537eec0e1f388aaedd44aa8b91e2910a8670303fce30f5586ea22ec06a177782497b156be0a65faa6c4795c176583a8b0e29caa70c47a45ace6b55e1e8a5450ee83eeb90797b5e0ed76e45064fa6af2192467d4cbf11956a1d241b422becdc637048f439a3a29c5dd94131c2babcc58ee8b5ee4aabf573b04764e1e7ab722c62aae16f0d194bcf3fad266e76ab086d5acb5bca681427003825a4f3f6e607cf1807f9e2374d621dbd52dc8db90812fdc943d5b5c2e21d83a7981f4a1f570609a8fca3dc37614f24123e2d72e463bd533fe6584927d7f6ea11b5499ef98394d47349bf005b67502dc8d36275ded36697ea5b9158bb6bb8a70a25decfb237065bfd000eb5a2f00bf1f36ca2638b6a348a17f57ac348bb6308ea4f6d1e6f0045f579f503e3bf72424ec277ef139f166788cbce0fba74efa825e2b6ea28e175126c47d82e9668ddc20f25124bc4ceb5c6e5e9384e93713a48c41fdd2b9b80f8ddc17129e9f718e1c26229e8e51c65d0bd56bc8d4f51bac9d9fca3acf02c92c9c1914814fd454e4ef6c9fdf3022dbf630c3c923aa0cb84080f34c9f3fce2209da95d593fedcf45ac4781c7bf8612119314d8527e5411d76ba2859a8209bcd0db1ddd14351dd213a7f3d10b31fdf9cf59ba77708bcba70a914faffd554d1e6c881a60a770e30595e54f6688ef68094caeaa79cc8fcbe9047127b30b64169bae61b7db1917e126a1ba6e6bf322c8113cbe14886de838da90b1d4a5639d59da1998c6a8c006391bc6ad94cda1588f268d6b5ecc12645602d67561bbc66c2f4159b15005209ca45ad5d621943ebf0319f82cdbbae097998aefe15be5645499314b500d603958244ca2b9c4e7916477a72d7399d847f16a29b549d71ad0cc07b5767d483fa037a2ab3261198468fb42c192fb044c9f71df944185e341885958e41664b80b24d1264144ff561e0c28390321d73cdaef9fad2a7e6731a19efbcac84e0e6f88489b728dc589f7f06eebc3dc678d90acc5da23687e192ba4187023d5a541761d2251fad8b056507f5d23c3b3b964f5652bf34b5b29cce5778c2de36eef446dc271c6620326768ee505e7e1cf93c16f811efeddb418cf4e0604026ce76832c7cd8501c4704befe5f6e391004e4dc6ebf69f284f60e3cd87a672faf788aa123fd205d174a17a36a32a8f28d1fe24b0493a50c1f55fb69e7d2bca0d7eb5510e78d8baef5d4c8afbe34f4206c824ab7fea2555b42b7d0805b2af370e72d6b7737903cd5be5199c07989992bfefa6cbee06140dafe2178ada970c3b53242436b5574c24ce08487203951863c42e1799dd4a91436364977b8dc375eb27c3b9fbff98be04c996c60c30d95b8a84083098fb652c0587ed3d479f76abad5f085696392ee8b1b31f61a764d319971aade348a17e1857c32d7ed0cf8b1a734a05e44152c24ea509c280f7714ebd2712400502042cc030c5d8496ed8fc29771f94b2aaa19e73b63cc0e15c0c905948020c2c4122aa384940b8df018b8fd35c20af7cd668279377723dd54623240095eaf43427549c0c51d1ba7912a1e9ae8e95b4706fec9b625241e8971a24fa704e921ebb736596e6c0f3c9fe0e5f9156ecabd0d1bd7218ba2b9ecff21aacc36407c624f042063f8b78235ebb9f0dc35f05b20149582be336a0a1fab7edbc6ec5cb3e7d2c41126047e3ce58f839dde9096cfd056967a74d83e967b00741407564ea62cef13d95d7e0af6ef35c1fe35baa2792398ebde13b0563a8232f9e6113efa6e010ab51aa75be5a915750f79ab65b62effeb457f0aca2e97e14627e36ed8742ac4d27bb8e3da1ee423430e83922eda8f1ea8e03618c656ba3539dc366d95b153aec0c403b4e544dd9a54f0a77a0b8d97be7a16db74fcc9a44197925620add071fe458d1cbcd5386b2dd57a23baab03e7949e38895170dd2c3e4e0ffa186ef8670655831cf6daa513ff5f156583b0e82ab7986ee3b231be8956405dde45684e7fcea1ea8a968a7d27affa3bf9243465eff4edf1281e8455cecd4d8f232284287d7b02609a16643f8a601b1466ad838c349f3ce3ac9fb2b27410ad3e42d2d3b003511b0d951cc933804d4c81d03efac635d497664a699a53c94888f63a87cee5a1739057cb3f538b545bfbe0a357d4f32cb045750a8f6aa8c62e9c9649ca31a2f910798919281f0165e159ff041bcc8af06664927443c327b75083071b194bd61b1228389689d81ed58d09b3d4a1276ba1d9182356f2400175d4b5cb3dd8147d3776f2042ebcf979fb7c2fa48b08c7e270d0425bb940a725d4943d4d8e0e8d1c28e7e5be7a56557d3ab0d53b9fbdb0dff2b330ff9d04323e72211420df6b183008ed7caa998737c5c916475916db7a2a58769b076d03ce02a005045d6d3a2e92143337623ae9e3a271765e77adbe0b6e84c5820029503c885d13d2be640db26cae1f56733c1a0bc2ef13f0933757409e6e116cf22e20bf831f806ef64e067e762984d8b8ca42211c89b40178d26f772a05b5091315ffaa5eab00d9d6a78fb388dafe75569c0e0da68e55b13975da61") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x2b, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async) close_range(r1, 0xffffffffffffffff, 0x0) 429.616891ms ago: executing program 1 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x80) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004000000140001"], 0x2c}}, 0x8004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc010) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r4, 0x5, 0xff7fe, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x80) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x14) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004000000140001"], 0x2c}}, 0x8004) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc010) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r4, 0x5, 0xff7fe, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000800) (async) 259.669731ms ago: executing program 1 (id=801): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RELDISP(r2, 0x5605) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xprt_transmit\x00', r3}, 0x18) mprotect(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f00005b6000/0x2000)=nil, 0x2000}) 259.246513ms ago: executing program 3 (id=802): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x14b080, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x41000) writev(r1, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x1f, 0x7, 0x10408, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x20300, 0xf4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x2, 0xe05, 0xe7, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000480)=""/264, 0x8939ada8307e517e, 0x0, 0x1, 0x2}}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) 258.294806ms ago: executing program 1 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002d00090027bd7000", @ANYRES32=r0, @ANYBLOB="3d2c7359b749aa1774ff88a2903336ae1eef0e3d73377553e2691f6bdc3bcb08d3715aaf885c359f104e9f5ca21b4a930df6d4752dde5840f2cc8817544b7a0082fb80698e95e4ae5fd33e51ae355014d6ac0752aaa16832ac8eca50b09bab2bea1863188831d57b225e992e1a64bc357847511a2605259da365492fb48fec697a56c02af8dbb96c6f1bea5b3b4ba3e5b99d6101a8c4fd3fd1cdd7bd0fcc54536c7c8654873d0967842b56ff7cfe"], 0x1c}}, 0x84) 184.417953ms ago: executing program 1 (id=804): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0xf, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = io_uring_setup(0x4aa8, &(0x7f0000000040)={0x0, 0x28a7, 0x80, 0x2, 0x111}) syz_io_uring_setup(0x3e96, &(0x7f0000001680)={0x0, 0x4627, 0x20, 0x3, 0x326, 0x0, r5}, &(0x7f0000001700), &(0x7f0000001740)) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 184.016373ms ago: executing program 3 (id=805): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) (async) 130.4574ms ago: executing program 1 (id=806): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbf4, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) socket$inet6(0xa, 0x1, 0x4c48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getrandom(&(0x7f0000000000)=""/121, 0x79, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r3, 0x403, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0xd, 0x2, 0x200, &(0x7f0000000980)="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"}) 130.017273ms ago: executing program 3 (id=807): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x24003b, 0x0) 129.562ms ago: executing program 0 (id=808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)="1c00000033000b17d25a80648cffff4003050000452300030e099450", 0x1c}], 0x1}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000500), 0x5, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='rxrpc_connect_call\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1f8, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0xffffff00, 0xffffffff], 'bridge_slave_0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2, 0x24}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x68e], 0x3}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x376a, 0xdf8, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000000000a28000000000a0101000000005e09ffd5020000000900010073797a300000000008000240000000032c0000000000000000320000000014000000110001cc31db00f97707e894e76f6300000000000000d6e61210e413adfc47d73bada315dcbba64f69ecfee5b219e3187183dfe6e573e8874074ca3dcb43a68835a69d6599b6dfa2974fe6522be08699a71c76f388421e4a5792fe0aa25500e3aaf8d1f8d0f9ed4f657d6a3b1684dbae74062109c2e34f88090641ffb6aae743a062561ab4c0102ffd24c051a0dd45366ca35a59196a5bfba1b688e6c8fb5620f0696727a853acfc034c8a4e0e33c3481ed40e79a05698585d95002b38a1b89132533d825daa434c2f764b9685130baae376bca04d235964bced1b82a4fbffffffffffffff477ff3254ae2abf9696681e6faa851d5329c1b2880b54939a5f600000000", @ANYBLOB="32b7d710c47ba3bb66e8a6791a80d53f71d62cdabd5311437033ab427159161ed4e9038d6c15597a503a17ae290a02db6a6b9d5148553d5a17fcbf591d22fb611ae9bd05fa6902990e5b243c5fe49018a0d2d0d71794f65bbad0309bafc53d4121ef6d26340be5621b0b356f01b220853966613461e55696099f119e17f9990562f0fcde32d2ca48c85d569af443edea9852b7899d79b5ef3303bf64322a80c037168359f493d77ffca1460802291890e8a6ff6d010b055292a3b9477ef0fbae", @ANYRES64=r3], 0x7c}}, 0x2004c090) r5 = syz_open_dev$vcsa(&(0x7f0000000400), 0x6, 0x400001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r5}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x2a, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2560fd88e8572489a6af51f448f1b8c88352df41df82e0d87ddae68da645d0df09786e3953583ef703001d11d087abb5ac70b094"], 0x9c}, 0x1, 0x0, 0x0, 0x801}, 0x4000010) 79.176076ms ago: executing program 3 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000900010000800800070001000000140035006d6163766c616e30"], 0x58}}, 0x24044891) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2a, 0xd, 0x40, {0x5, @hdata="957b184797cb02ee9c27d7bbff099d30b73b79588c359527a55a5ffb82149c5f6ed07b3de8a9a920a7835ca94964bd59107588ce", {0x0, @broadcast, 0x9, 0x81, [0x7f, 0x60]}, @ah_ip4_spec={@loopback, @broadcast, 0x1, 0x2}, {0x0, @multicast, 0x7, 0x101, [0x2, 0x1]}, 0x2, 0x4}, 0x2, [0x8000, 0x2]}}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x400, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x4c}}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000200)={0x0, 0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[{}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500), 0x2, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, r8, 0x0, r9, r11, r12], 0x6, 0x80800}) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x0, 0x28c000, 0x8}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r14, 0x4) 74.29502ms ago: executing program 0 (id=810): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000180)={'trans=virtio,', {[{@access_user}]}}) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xff, r1}) 587.852µs ago: executing program 3 (id=811): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) sendfile(r0, r4, &(0x7f00000001c0)=0x255bd197, 0x99) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303178010"], 0x328}}, 0x84) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0xc001) sendfile(r0, r0, 0x0, 0x3fffff) r5 = accept$netrom(r0, 0x0, &(0x7f0000000200)) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000240)=0xc0, 0x4) 312.776µs ago: executing program 3 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000500", @ANYRES32=r0, @ANYBLOB="3d2c7359b749aa1774ff88a2903336ae1eef0e3d73377553e2691f6bdc3bcb08d3715aaf885c359f104e9f5ca21b4a930df6d4752dde5840f2cc8817544b7a0082fb80698e95e4ae5fd33e51ae355014d6ac0752aaa16832ac8eca50b09bab2bea1863188831d57b225e992e1a64bc357847511a2605259da365492fb48fec697a56c02af8dbb96c6f1bea5b3b4ba3e5b99d6101a8c4fd3fd1cdd7bd0fcc54536c7c8654873d0967842b56ff7cfe"], 0x1c}}, 0x84) 0s ago: executing program 0 (id=813): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x9401}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) ioctl$BTRFS_IOC_ADD_DEV(r0, 0xb701, 0x0) r1 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063019c000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x65, 0x0, 0x1e6f543f2ea2a26, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=814): syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3, 0x4, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff603094927b0000"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={0xffffffffffffffff, 0x0, 0x7d, 0xfa, &(0x7f0000000000)="49f7bcbdb6f4d51997da5a52ab6bd5dddaf8b3c3a89d3e62116bfe220bfdb951af114451509bb735304a2d1a4fb9c4263c8a7cd0c717fe78e57ccd1841caf057b1b53a1f5d0fa9a2fb965060ece9a5687f9ac117c8e80bb09c4d72f1cf89a7460dd0f8b398291d3aa465320fb6a8a5b78e8d3e41ba3d96e634fd072e01", &(0x7f0000000180)=""/250, 0x4986, 0x0, 0x1000, 0x6, &(0x7f0000000280)="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", &(0x7f0000000080)="93206ac45d48", 0x5, 0x0, 0x101}, 0x50) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) getpeername$packet(r0, 0x0, &(0x7f0000000040)) syz_extract_tcp_res(&(0x7f0000001300), 0x8000, 0x5) kernel console output (not intermixed with test programs): [ 43.581994][ T40] audit: type=1400 audit(1749347441.873:60): avc: denied { rlimitinh } for pid=5863 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.588783][ T40] audit: type=1400 audit(1749347441.873:61): avc: denied { siginh } for pid=5863 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:27352' (ED25519) to the list of known hosts. [ 44.577395][ T40] audit: type=1400 audit(1749347442.893:62): avc: denied { name_bind } for pid=5907 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.595977][ T40] audit: type=1400 audit(1749347442.913:63): avc: denied { write } for pid=5908 comm="sh" path="pipe:[4808]" dev="pipefs" ino=4808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.608301][ T40] audit: type=1400 audit(1749347442.923:64): avc: denied { execute } for pid=5908 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.615217][ T40] audit: type=1400 audit(1749347442.923:65): avc: denied { execute_no_trans } for pid=5908 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.532045][ T40] audit: type=1400 audit(1749347444.843:66): avc: denied { mounton } for pid=5908 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.534996][ T5908] cgroup: Unknown subsys name 'net' [ 46.688384][ T5908] cgroup: Unknown subsys name 'cpuset' [ 46.694217][ T5908] cgroup: Unknown subsys name 'rlimit' [ 46.896563][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.574989][ T5908] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.760076][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 50.760086][ T40] audit: type=1400 audit(1749347449.073:80): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.977809][ T40] audit: type=1400 audit(1749347449.293:81): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.986087][ T40] audit: type=1400 audit(1749347449.293:82): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.993734][ T40] audit: type=1400 audit(1749347449.293:83): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.003260][ T40] audit: type=1400 audit(1749347449.293:84): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.016094][ T40] audit: type=1400 audit(1749347449.293:85): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.023240][ T40] audit: type=1400 audit(1749347449.303:86): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[2656]" dev="sockfs" ino=2656 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.032319][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.036619][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.036782][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.039066][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.042441][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.045017][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.046615][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.048718][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.053386][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.056149][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.058784][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.060835][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.062221][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.064791][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.070141][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.071640][ T40] audit: type=1400 audit(1749347449.383:87): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.071914][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.072723][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.084938][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.087234][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.087948][ T40] audit: type=1400 audit(1749347449.383:88): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.089309][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.100683][ T40] audit: type=1400 audit(1749347449.383:89): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.374085][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 51.391404][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 51.423439][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 51.428859][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 51.572884][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.576049][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.578514][ T5937] bridge_slave_0: entered allmulticast mode [ 51.581351][ T5937] bridge_slave_0: entered promiscuous mode [ 51.585876][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.588773][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.591650][ T5937] bridge_slave_1: entered allmulticast mode [ 51.594199][ T5937] bridge_slave_1: entered promiscuous mode [ 51.685836][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.702078][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.705186][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.707500][ T5938] bridge_slave_0: entered allmulticast mode [ 51.710116][ T5938] bridge_slave_0: entered promiscuous mode [ 51.714075][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.716644][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.718838][ T5938] bridge_slave_1: entered allmulticast mode [ 51.721507][ T5938] bridge_slave_1: entered promiscuous mode [ 51.762606][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.781477][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.783721][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.786063][ T5951] bridge_slave_0: entered allmulticast mode [ 51.788663][ T5951] bridge_slave_0: entered promiscuous mode [ 51.809038][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.811500][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.813652][ T5947] bridge_slave_0: entered allmulticast mode [ 51.818405][ T5947] bridge_slave_0: entered promiscuous mode [ 51.847405][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.850417][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.852924][ T5951] bridge_slave_1: entered allmulticast mode [ 51.856620][ T5951] bridge_slave_1: entered promiscuous mode [ 51.891407][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.893642][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.896070][ T5947] bridge_slave_1: entered allmulticast mode [ 51.898705][ T5947] bridge_slave_1: entered promiscuous mode [ 51.903292][ T5937] team0: Port device team_slave_0 added [ 51.924018][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.949932][ T5937] team0: Port device team_slave_1 added [ 51.953717][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.958205][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.008913][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.041070][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.078944][ T5938] team0: Port device team_slave_0 added [ 52.083095][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.087751][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.089838][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.098186][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.119399][ T5938] team0: Port device team_slave_1 added [ 52.159710][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.161766][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.170312][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.175261][ T5951] team0: Port device team_slave_0 added [ 52.220121][ T5947] team0: Port device team_slave_0 added [ 52.225180][ T5951] team0: Port device team_slave_1 added [ 52.228200][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.230141][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.238197][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.244937][ T5947] team0: Port device team_slave_1 added [ 52.273952][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.276659][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.285264][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.391477][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.394526][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.409596][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.438541][ T5937] hsr_slave_0: entered promiscuous mode [ 52.440875][ T5937] hsr_slave_1: entered promiscuous mode [ 52.462035][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.464958][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.475459][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.480734][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.483576][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.494129][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.517911][ T5938] hsr_slave_0: entered promiscuous mode [ 52.521050][ T5938] hsr_slave_1: entered promiscuous mode [ 52.523815][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.526480][ T5938] Cannot create hsr debugfs directory [ 52.529020][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.531961][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.541609][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.703462][ T5951] hsr_slave_0: entered promiscuous mode [ 52.706529][ T5951] hsr_slave_1: entered promiscuous mode [ 52.709156][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.711759][ T5951] Cannot create hsr debugfs directory [ 52.739970][ T5947] hsr_slave_0: entered promiscuous mode [ 52.742371][ T5947] hsr_slave_1: entered promiscuous mode [ 52.744547][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.746924][ T5947] Cannot create hsr debugfs directory [ 53.021651][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.030198][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.042045][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.052390][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.091035][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.096123][ T5946] Bluetooth: hci3: command tx timeout [ 53.098642][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.104439][ T5946] Bluetooth: hci2: command tx timeout [ 53.104505][ T5943] Bluetooth: hci1: command tx timeout [ 53.106322][ T5946] Bluetooth: hci0: command tx timeout [ 53.112188][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.119554][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.174919][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.186717][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.191051][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.204208][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.244101][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.262912][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.269675][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.276530][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.292291][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.304716][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.313713][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.316230][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.329147][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.331681][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.392119][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.402801][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.411971][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.428940][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.435847][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.441524][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.444087][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.456099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.458809][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.468639][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.470865][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.478402][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.483667][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.485867][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.530371][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.549000][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.554069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.557082][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.585799][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.588799][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.618573][ T5937] veth0_vlan: entered promiscuous mode [ 53.630450][ T5937] veth1_vlan: entered promiscuous mode [ 53.658220][ T5937] veth0_macvtap: entered promiscuous mode [ 53.662295][ T5937] veth1_macvtap: entered promiscuous mode [ 53.675292][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.682446][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.686609][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.691999][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.694936][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.697671][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.700349][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.730216][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.768343][ T5951] veth0_vlan: entered promiscuous mode [ 53.772508][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.776671][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.779160][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.781371][ T5951] veth1_vlan: entered promiscuous mode [ 53.805961][ T5947] veth0_vlan: entered promiscuous mode [ 53.810120][ T5951] veth0_macvtap: entered promiscuous mode [ 53.821927][ T5951] veth1_macvtap: entered promiscuous mode [ 53.825307][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.828587][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.828908][ T5947] veth1_vlan: entered promiscuous mode [ 53.845332][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.857490][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.864269][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.867673][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.870214][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.870426][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.878243][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.905747][ T5938] veth0_vlan: entered promiscuous mode [ 53.908892][ T5947] veth0_macvtap: entered promiscuous mode [ 53.926018][ T5947] veth1_macvtap: entered promiscuous mode [ 53.932403][ T5938] veth1_vlan: entered promiscuous mode [ 53.951212][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.953244][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.954325][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.965634][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.978530][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.981330][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.984033][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.988240][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.005019][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.008151][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.017833][ T5938] veth0_macvtap: entered promiscuous mode [ 54.028214][ T5938] veth1_macvtap: entered promiscuous mode [ 54.055570][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.065449][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.066015][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.067995][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.071704][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.076292][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.079076][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.081793][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.092095][ T6028] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 54.094978][ T6028] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.103222][ T6028] vhci_hcd vhci_hcd.0: Device attached [ 54.113428][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.118985][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.132398][ T6028] Cannot find add_set index 0 as target [ 54.138959][ T6029] vhci_hcd: connection closed [ 54.140713][ T46] vhci_hcd: stop threads [ 54.142787][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.143708][ T46] vhci_hcd: release socket [ 54.147920][ T46] vhci_hcd: disconnect device [ 54.149514][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.172294][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.176888][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.237353][ T6036] tap0: tun_chr_ioctl cmd 1074025678 [ 54.239528][ T6036] tap0: group set to 6 [ 54.244821][ T6010] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.271713][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'. [ 54.426220][ T6010] usb 6-1: Using ep0 maxpacket: 16 [ 54.433112][ T6010] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 54.439311][ T6010] usb 6-1: config 1 interface 0 has no altsetting 0 [ 54.447353][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.447799][ T6010] usb 6-1: string descriptor 0 read error: -22 [ 54.453795][ T6010] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.40 [ 54.458033][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.656948][ T6050] warning: `syz.3.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.662059][ T6049] block nbd3: shutting down sockets [ 54.668278][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 54.669373][ T6052] dlm: no local IP address has been set [ 54.673531][ T6052] dlm: cannot start dlm midcomms -107 [ 54.698498][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 54.722761][ T6010] usbhid 6-1:1.0: can't add hid device: -71 [ 54.732146][ T6010] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 54.744282][ T6056] bridge_slave_0: left allmulticast mode [ 54.745955][ T6010] usb 6-1: USB disconnect, device number 2 [ 54.748152][ T6056] bridge_slave_0: left promiscuous mode [ 54.750704][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.757868][ T6056] bridge_slave_1: left allmulticast mode [ 54.759775][ T6056] bridge_slave_1: left promiscuous mode [ 54.762314][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.778746][ T6056] bond0: (slave bond_slave_0): Releasing backup interface [ 54.787607][ T6056] bond0: (slave bond_slave_1): Releasing backup interface [ 54.809873][ T6056] team0: Port device team_slave_0 removed [ 54.822993][ T6056] team0: Port device team_slave_1 removed [ 54.829626][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.831952][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.836078][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.838501][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.897072][ T6056] bridge0: port 1(vlan2) entered blocking state [ 54.899188][ T6056] bridge0: port 1(vlan2) entered disabled state [ 54.901242][ T6056] vlan2: entered allmulticast mode [ 54.902950][ T6056] bond0: entered allmulticast mode [ 54.948601][ T6071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.952060][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 54.963897][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 54.967282][ T6071] netlink: 'syz.2.13': attribute type 11 has an invalid length. [ 54.967392][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 55.032758][ T6076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17'. [ 55.036619][ T6076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17'. [ 55.083389][ T6081] bridge_slave_0: left allmulticast mode [ 55.085416][ T6081] bridge_slave_0: left promiscuous mode [ 55.087608][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.093590][ T6081] bridge_slave_1: left allmulticast mode [ 55.096388][ T6081] bridge_slave_1: left promiscuous mode [ 55.098295][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.103297][ T6081] bond0: (slave bond_slave_0): Releasing backup interface [ 55.109557][ T6081] bond0: (slave bond_slave_1): Releasing backup interface [ 55.120068][ T6081] team0: Port device team_slave_0 removed [ 55.125647][ T6081] team0: Port device team_slave_1 removed [ 55.128973][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.132325][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.137491][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.140623][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.175631][ T5946] Bluetooth: hci1: command tx timeout [ 55.175668][ T5943] Bluetooth: hci0: command tx timeout [ 55.175691][ T5944] Bluetooth: hci2: command tx timeout [ 55.206164][ T6081] bridge0: port 1(vlan2) entered blocking state [ 55.208292][ T6081] bridge0: port 1(vlan2) entered disabled state [ 55.210334][ T6081] vlan2: entered allmulticast mode [ 55.211964][ T6081] bond0: entered allmulticast mode [ 55.223437][ T6084] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 55.226101][ T6084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 55.231196][ T6084] vhci_hcd vhci_hcd.0: Device attached [ 55.264615][ T6084] Cannot find add_set index 0 as target [ 55.269170][ T6085] vhci_hcd: connection closed [ 55.270507][ T13] vhci_hcd: stop threads [ 55.274156][ T13] vhci_hcd: release socket [ 55.281691][ T13] vhci_hcd: disconnect device [ 55.395921][ T6089] block nbd1: shutting down sockets [ 55.489930][ T6100] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 55.584293][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 55.589009][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 55.592550][ T6105] netlink: 'syz.1.26': attribute type 12 has an invalid length. [ 55.674077][ T6109] bridge0: port 3(syz_tun) entered blocking state [ 55.677476][ T6109] bridge0: port 3(syz_tun) entered disabled state [ 55.679691][ T6109] syz_tun: entered allmulticast mode [ 55.682423][ T6109] syz_tun: entered promiscuous mode [ 55.686474][ T6109] bridge0: port 3(syz_tun) entered blocking state [ 55.688663][ T6109] bridge0: port 3(syz_tun) entered forwarding state [ 55.798086][ T6118] trusted_key: syz.3.31 sent an empty control message without MSG_MORE. [ 55.801590][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 55.801599][ T40] audit: type=1400 audit(1749347454.113:188): avc: denied { write } for pid=6117 comm="syz.3.31" name="001" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.886252][ T40] audit: type=1400 audit(1749347454.203:189): avc: denied { checkpoint_restore } for pid=6121 comm="syz.0.33" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.899047][ T40] audit: type=1400 audit(1749347454.213:190): avc: denied { getopt } for pid=6121 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.910911][ T40] audit: type=1400 audit(1749347454.213:191): avc: denied { execute } for pid=6121 comm="syz.0.33" name="file1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.925790][ T6124] Zero length message leads to an empty skb [ 55.932177][ T40] audit: type=1400 audit(1749347454.243:192): avc: denied { create } for pid=6130 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.940087][ T6133] FAULT_INJECTION: forcing a failure. [ 55.940087][ T6133] name failslab, interval 1, probability 0, space 0, times 1 [ 55.943988][ T6133] CPU: 2 UID: 0 PID: 6133 Comm: syz.0.35 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 55.944003][ T6133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.944010][ T6133] Call Trace: [ 55.944014][ T6133] [ 55.944018][ T6133] dump_stack_lvl+0x16c/0x1f0 [ 55.944039][ T6133] should_fail_ex+0x512/0x640 [ 55.944056][ T6133] ? fs_reclaim_acquire+0xae/0x150 [ 55.944068][ T6133] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 55.944084][ T6133] should_failslab+0xc2/0x120 [ 55.944102][ T6133] __kmalloc_noprof+0xd2/0x510 [ 55.944119][ T6133] tomoyo_realpath_from_path+0xc2/0x6e0 [ 55.944136][ T6133] ? tomoyo_profile+0x47/0x60 [ 55.944147][ T6133] tomoyo_path_number_perm+0x245/0x580 [ 55.944160][ T6133] ? tomoyo_path_number_perm+0x237/0x580 [ 55.944175][ T6133] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 55.944189][ T6133] ? find_held_lock+0x2b/0x80 [ 55.944214][ T6133] ? find_held_lock+0x2b/0x80 [ 55.944226][ T6133] ? hook_file_ioctl_common+0x145/0x410 [ 55.944239][ T6133] ? __fget_files+0x20e/0x3c0 [ 55.944257][ T6133] security_file_ioctl+0x9b/0x240 [ 55.944274][ T6133] __x64_sys_ioctl+0xb7/0x210 [ 55.944287][ T6133] do_syscall_64+0xcd/0x4c0 [ 55.944298][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.944309][ T6133] RIP: 0033:0x7fa1d498e929 [ 55.944318][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.944340][ T6133] RSP: 002b:00007fa1d57d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.944352][ T6133] RAX: ffffffffffffffda RBX: 00007fa1d4bb5fa0 RCX: 00007fa1d498e929 [ 55.944358][ T6133] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 55.944365][ T6133] RBP: 00007fa1d57d4090 R08: 0000000000000000 R09: 0000000000000000 [ 55.944371][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.944377][ T6133] R13: 0000000000000000 R14: 00007fa1d4bb5fa0 R15: 00007ffd38ef3ab8 [ 55.944390][ T6133] [ 55.973660][ T40] audit: type=1400 audit(1749347454.283:193): avc: denied { create } for pid=6135 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.977528][ T6133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.978771][ T40] audit: type=1400 audit(1749347454.283:194): avc: denied { write } for pid=6135 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.984547][ T6005] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.072886][ T40] audit: type=1400 audit(1749347454.383:195): avc: denied { search } for pid=5653 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.084168][ T40] audit: type=1400 audit(1749347454.383:196): avc: denied { search } for pid=5653 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.092570][ T40] audit: type=1400 audit(1749347454.383:197): avc: denied { search } for pid=5653 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.134700][ T5946] Bluetooth: hci3: command tx timeout [ 56.141921][ T6147] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.152821][ T6147] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.175624][ T836] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.194459][ T6005] usb 7-1: Using ep0 maxpacket: 16 [ 56.198605][ T6005] usb 7-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 56.202097][ T6005] usb 7-1: config 1 interface 0 has no altsetting 0 [ 56.210051][ T6005] usb 7-1: string descriptor 0 read error: -22 [ 56.212077][ T6005] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.40 [ 56.216805][ T6005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.336813][ T836] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 56.350097][ T836] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.353774][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.359407][ T836] usb 6-1: Product: syz [ 56.360855][ T836] usb 6-1: Manufacturer: syz [ 56.362363][ T836] usb 6-1: SerialNumber: syz [ 56.379973][ T836] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 56.436356][ T6010] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 56.452540][ T6168] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 56.457310][ T6168] xt_l2tp: wrong L2TP version: 0 [ 56.487915][ T6005] usbhid 7-1:1.0: can't add hid device: -71 [ 56.489933][ T6005] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 56.496139][ T6173] FAULT_INJECTION: forcing a failure. [ 56.496139][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 56.496403][ T6005] usb 7-1: USB disconnect, device number 2 [ 56.500638][ T6173] CPU: 3 UID: 0 PID: 6173 Comm: syz.0.45 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 56.500654][ T6173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.500661][ T6173] Call Trace: [ 56.500665][ T6173] [ 56.500668][ T6173] dump_stack_lvl+0x16c/0x1f0 [ 56.500690][ T6173] should_fail_ex+0x512/0x640 [ 56.500707][ T6173] ? fs_reclaim_acquire+0xae/0x150 [ 56.500719][ T6173] ? tomoyo_encode2+0x100/0x3e0 [ 56.500734][ T6173] should_failslab+0xc2/0x120 [ 56.500751][ T6173] __kmalloc_noprof+0xd2/0x510 [ 56.500765][ T6173] ? d_absolute_path+0x136/0x1a0 [ 56.500779][ T6173] tomoyo_encode2+0x100/0x3e0 [ 56.500796][ T6173] tomoyo_encode+0x29/0x50 [ 56.500811][ T6173] tomoyo_realpath_from_path+0x18f/0x6e0 [ 56.500831][ T6173] tomoyo_path_number_perm+0x245/0x580 [ 56.500844][ T6173] ? tomoyo_path_number_perm+0x237/0x580 [ 56.500858][ T6173] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.500873][ T6173] ? find_held_lock+0x2b/0x80 [ 56.500898][ T6173] ? find_held_lock+0x2b/0x80 [ 56.500910][ T6173] ? hook_file_ioctl_common+0x145/0x410 [ 56.500924][ T6173] ? __fget_files+0x20e/0x3c0 [ 56.500942][ T6173] security_file_ioctl+0x9b/0x240 [ 56.500959][ T6173] __x64_sys_ioctl+0xb7/0x210 [ 56.500973][ T6173] do_syscall_64+0xcd/0x4c0 [ 56.500984][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.500994][ T6173] RIP: 0033:0x7fa1d498e929 [ 56.501003][ T6173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.501013][ T6173] RSP: 002b:00007fa1d57d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.501024][ T6173] RAX: ffffffffffffffda RBX: 00007fa1d4bb5fa0 RCX: 00007fa1d498e929 [ 56.501030][ T6173] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 56.501037][ T6173] RBP: 00007fa1d57d4090 R08: 0000000000000000 R09: 0000000000000000 [ 56.501042][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.501048][ T6173] R13: 0000000000000000 R14: 00007fa1d4bb5fa0 R15: 00007ffd38ef3ab8 [ 56.501061][ T6173] [ 56.501070][ T6173] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.633120][ T6178] capability: warning: `syz.0.47' uses deprecated v2 capabilities in a way that may be insecure [ 56.698033][ T6183] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 56.741934][ T6185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.802065][ T6185] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 56.876292][ T5946] Bluetooth: hci3: Invalid handle: 0x9c00 > 0x0eff [ 57.255154][ T5943] Bluetooth: hci1: command tx timeout [ 57.265142][ T5943] Bluetooth: hci2: command tx timeout [ 57.334581][ T5943] Bluetooth: hci0: command tx timeout [ 57.495690][ T6010] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 57.499436][ T6010] ath9k_htc: Failed to initialize the device [ 57.531147][ T6010] usb 6-1: ath9k_htc: USB layer deinitialized [ 57.549565][ T6010] usb 6-1: USB disconnect, device number 3 [ 57.575263][ T6223] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 57.580370][ T6223] binder: Binderfs stats mode cannot be changed during a remount [ 57.670012][ T6229] FAULT_INJECTION: forcing a failure. [ 57.670012][ T6229] name failslab, interval 1, probability 0, space 0, times 0 [ 57.673992][ T6229] CPU: 0 UID: 0 PID: 6229 Comm: syz.2.66 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 57.674006][ T6229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.674013][ T6229] Call Trace: [ 57.674017][ T6229] [ 57.674021][ T6229] dump_stack_lvl+0x16c/0x1f0 [ 57.674042][ T6229] should_fail_ex+0x512/0x640 [ 57.674058][ T6229] ? __kmalloc_noprof+0xbf/0x510 [ 57.674074][ T6229] ? drm_atomic_state_init+0xe4/0x320 [ 57.674086][ T6229] should_failslab+0xc2/0x120 [ 57.674102][ T6229] __kmalloc_noprof+0xd2/0x510 [ 57.674120][ T6229] drm_atomic_state_init+0xe4/0x320 [ 57.674131][ T6229] ? __kasan_kmalloc+0xaa/0xb0 [ 57.674146][ T6229] drm_atomic_state_alloc+0xd3/0x120 [ 57.674158][ T6229] drm_mode_atomic_ioctl+0x393/0x25f0 [ 57.674173][ T6229] ? avc_has_extended_perms+0x33a/0x1090 [ 57.674186][ T6229] ? avc_has_extended_perms+0x47c/0x1090 [ 57.674199][ T6229] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 57.674211][ T6229] ? __lock_acquire+0xb8a/0x1c90 [ 57.674236][ T6229] ? drm_is_current_master+0x2c/0x40 [ 57.674249][ T6229] ? do_raw_spin_unlock+0x172/0x230 [ 57.674263][ T6229] drm_ioctl_kernel+0x1f4/0x3e0 [ 57.674279][ T6229] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 57.674292][ T6229] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 57.674312][ T6229] drm_ioctl+0x5c9/0xc30 [ 57.674350][ T6229] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 57.674370][ T6229] ? __pfx_drm_ioctl+0x10/0x10 [ 57.674404][ T6229] ? selinux_file_ioctl+0x180/0x270 [ 57.674426][ T6229] ? selinux_file_ioctl+0xb4/0x270 [ 57.674449][ T6229] ? __pfx_drm_ioctl+0x10/0x10 [ 57.674473][ T6229] __x64_sys_ioctl+0x18b/0x210 [ 57.674494][ T6229] do_syscall_64+0xcd/0x4c0 [ 57.674510][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.674527][ T6229] RIP: 0033:0x7f2fa498e929 [ 57.674540][ T6229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.674555][ T6229] RSP: 002b:00007f2fa579a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.674571][ T6229] RAX: ffffffffffffffda RBX: 00007f2fa4bb5fa0 RCX: 00007f2fa498e929 [ 57.674581][ T6229] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 57.674592][ T6229] RBP: 00007f2fa579a090 R08: 0000000000000000 R09: 0000000000000000 [ 57.674601][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.674610][ T6229] R13: 0000000000000000 R14: 00007f2fa4bb5fa0 R15: 00007ffc6f8a0548 [ 57.674631][ T6229] [ 57.751541][ C0] vkms_vblank_simulate: vblank timer overrun [ 57.887390][ T6237] dlm: non-version read from control device 0 [ 58.164455][ T1460] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.214674][ T5943] Bluetooth: hci3: command tx timeout [ 58.324464][ T1460] usb 7-1: Using ep0 maxpacket: 8 [ 58.327884][ T1460] usb 7-1: config index 0 descriptor too short (expected 5138, got 18) [ 58.330651][ T1460] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.333967][ T1460] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 58.338988][ T1460] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 58.341918][ T1460] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.344600][ T1460] usb 7-1: Product: syz [ 58.346071][ T1460] usb 7-1: Manufacturer: syz [ 58.347670][ T1460] usb 7-1: SerialNumber: syz [ 58.350782][ T1460] usb 7-1: config 0 descriptor?? [ 58.455524][ T13] wlan1: Trigger new scan to find an IBSS to join [ 58.849063][ T6267] FAULT_INJECTION: forcing a failure. [ 58.849063][ T6267] name failslab, interval 1, probability 0, space 0, times 0 [ 58.853020][ T6267] CPU: 0 UID: 0 PID: 6267 Comm: syz.1.75 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 58.853035][ T6267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.853042][ T6267] Call Trace: [ 58.853047][ T6267] [ 58.853051][ T6267] dump_stack_lvl+0x16c/0x1f0 [ 58.853071][ T6267] should_fail_ex+0x512/0x640 [ 58.853088][ T6267] ? __kmalloc_noprof+0xbf/0x510 [ 58.853104][ T6267] ? drm_atomic_state_init+0x17b/0x320 [ 58.853116][ T6267] should_failslab+0xc2/0x120 [ 58.853133][ T6267] __kmalloc_noprof+0xd2/0x510 [ 58.853150][ T6267] drm_atomic_state_init+0x17b/0x320 [ 58.853161][ T6267] ? __kasan_kmalloc+0xaa/0xb0 [ 58.853176][ T6267] drm_atomic_state_alloc+0xd3/0x120 [ 58.853188][ T6267] drm_mode_atomic_ioctl+0x393/0x25f0 [ 58.853202][ T6267] ? avc_has_extended_perms+0x33a/0x1090 [ 58.853216][ T6267] ? avc_has_extended_perms+0x47c/0x1090 [ 58.853228][ T6267] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 58.853241][ T6267] ? __lock_acquire+0xb8a/0x1c90 [ 58.853265][ T6267] ? drm_is_current_master+0x2c/0x40 [ 58.853279][ T6267] ? do_raw_spin_unlock+0x172/0x230 [ 58.853292][ T6267] drm_ioctl_kernel+0x1f4/0x3e0 [ 58.853308][ T6267] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 58.853321][ T6267] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 58.853341][ T6267] drm_ioctl+0x5c9/0xc30 [ 58.853359][ T6267] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 58.853372][ T6267] ? __pfx_drm_ioctl+0x10/0x10 [ 58.853393][ T6267] ? selinux_file_ioctl+0x180/0x270 [ 58.853408][ T6267] ? selinux_file_ioctl+0xb4/0x270 [ 58.853430][ T6267] ? __pfx_drm_ioctl+0x10/0x10 [ 58.853450][ T6267] __x64_sys_ioctl+0x18b/0x210 [ 58.853464][ T6267] do_syscall_64+0xcd/0x4c0 [ 58.853475][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.853486][ T6267] RIP: 0033:0x7f843bb8e929 [ 58.853495][ T6267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.853506][ T6267] RSP: 002b:00007f843ca42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.853516][ T6267] RAX: ffffffffffffffda RBX: 00007f843bdb5fa0 RCX: 00007f843bb8e929 [ 58.853523][ T6267] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 58.853529][ T6267] RBP: 00007f843ca42090 R08: 0000000000000000 R09: 0000000000000000 [ 58.853535][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.853541][ T6267] R13: 0000000000000000 R14: 00007f843bdb5fa0 R15: 00007ffd8a9f2648 [ 58.853558][ T6267] [ 58.935818][ C0] vkms_vblank_simulate: vblank timer overrun [ 59.334838][ T5943] Bluetooth: hci2: command tx timeout [ 59.334870][ T5946] Bluetooth: hci1: command tx timeout [ 59.408671][ T29] usb 7-1: USB disconnect, device number 3 [ 59.435965][ T6299] fuse: Bad value for 'user_id' [ 59.437584][ T6299] fuse: Bad value for 'user_id' [ 59.441547][ T6299] syz_tun: entered allmulticast mode [ 59.448749][ T6298] syz_tun: left allmulticast mode [ 59.464577][ T6010] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 59.619749][ T6306] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.623013][ T6306] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.627110][ T6306] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.627686][ T6010] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 59.630575][ T6306] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.633059][ T6010] usb 5-1: config 0 has no interface number 0 [ 59.639720][ T6010] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.643432][ T6010] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 59.646890][ T6010] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 59.651053][ T6010] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 59.655187][ T6010] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 59.659183][ T6010] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.663602][ T6010] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 59.666839][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.670870][ T6010] usb 5-1: config 0 descriptor?? [ 59.672953][ T6291] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 59.675658][ T6291] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 59.682838][ T6010] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 59.734247][ T6319] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 59.818041][ T6330] __nla_validate_parse: 11 callbacks suppressed [ 59.818053][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 59.823126][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 59.824004][ T6329] netlink: 'syz.3.99': attribute type 4 has an invalid length. [ 59.826187][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 59.931326][ T6344] netlink: 'syz.1.104': attribute type 3 has an invalid length. [ 59.934055][ T6344] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 59.937436][ T6344] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.104'. [ 59.939081][ T6346] xt_HMARK: spi-set and port-set can't be combined [ 59.988864][ T6352] netlink: 36 bytes leftover after parsing attributes in process `syz.2.106'. [ 59.996002][ T52] usb 5-1: USB disconnect, device number 2 [ 59.999687][ T52] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 60.498270][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 60.554483][ T6388] netlink: 72 bytes leftover after parsing attributes in process `syz.0.117'. [ 60.726785][ T6395] block nbd1: shutting down sockets [ 60.753707][ T6403] FAULT_INJECTION: forcing a failure. [ 60.753707][ T6403] name failslab, interval 1, probability 0, space 0, times 0 [ 60.757769][ T6403] CPU: 3 UID: 0 PID: 6403 Comm: syz.1.121 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 60.757783][ T6403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.757790][ T6403] Call Trace: [ 60.757794][ T6403] [ 60.757798][ T6403] dump_stack_lvl+0x16c/0x1f0 [ 60.757818][ T6403] should_fail_ex+0x512/0x640 [ 60.757835][ T6403] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 60.757851][ T6403] should_failslab+0xc2/0x120 [ 60.757868][ T6403] __kmalloc_cache_noprof+0x6a/0x3e0 [ 60.757880][ T6403] ? drm_atomic_helper_setup_commit+0x73c/0x15d0 [ 60.757898][ T6403] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 60.757917][ T6403] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 60.757939][ T6403] drm_atomic_helper_commit+0xa9/0x380 [ 60.757957][ T6403] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 60.757974][ T6403] drm_atomic_commit+0x231/0x300 [ 60.757987][ T6403] ? __pfx_drm_atomic_commit+0x10/0x10 [ 60.757998][ T6403] ? __pfx___drm_printfn_info+0x10/0x10 [ 60.758016][ T6403] drm_mode_atomic_ioctl+0x1c4e/0x25f0 [ 60.758034][ T6403] ? avc_has_extended_perms+0x47c/0x1090 [ 60.758047][ T6403] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 60.758060][ T6403] ? __lock_acquire+0xb8a/0x1c90 [ 60.758085][ T6403] ? drm_is_current_master+0x2c/0x40 [ 60.758099][ T6403] ? do_raw_spin_unlock+0x172/0x230 [ 60.758112][ T6403] drm_ioctl_kernel+0x1f4/0x3e0 [ 60.758128][ T6403] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 60.758141][ T6403] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 60.758161][ T6403] drm_ioctl+0x5c9/0xc30 [ 60.758179][ T6403] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 60.758192][ T6403] ? __pfx_drm_ioctl+0x10/0x10 [ 60.758213][ T6403] ? selinux_file_ioctl+0x180/0x270 [ 60.758228][ T6403] ? selinux_file_ioctl+0xb4/0x270 [ 60.758244][ T6403] ? __pfx_drm_ioctl+0x10/0x10 [ 60.758260][ T6403] __x64_sys_ioctl+0x18b/0x210 [ 60.758274][ T6403] do_syscall_64+0xcd/0x4c0 [ 60.758285][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.758296][ T6403] RIP: 0033:0x7f843bb8e929 [ 60.758305][ T6403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.758315][ T6403] RSP: 002b:00007f843ca42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.758325][ T6403] RAX: ffffffffffffffda RBX: 00007f843bdb5fa0 RCX: 00007f843bb8e929 [ 60.758332][ T6403] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 60.758338][ T6403] RBP: 00007f843ca42090 R08: 0000000000000000 R09: 0000000000000000 [ 60.758344][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.758350][ T6403] R13: 0000000000000000 R14: 00007f843bdb5fa0 R15: 00007ffd8a9f2648 [ 60.758362][ T6403] [ 60.897780][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 60.897791][ T40] audit: type=1400 audit(1749347459.213:290): avc: denied { bind } for pid=6409 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.907020][ T40] audit: type=1400 audit(1749347459.213:291): avc: denied { node_bind } for pid=6409 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.913185][ T40] audit: type=1400 audit(1749347459.213:292): avc: denied { connect } for pid=6409 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.954050][ T40] audit: type=1400 audit(1749347459.263:293): avc: denied { ioctl } for pid=6413 comm="syz.1.124" path="socket:[11523]" dev="sockfs" ino=11523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.962938][ T40] audit: type=1400 audit(1749347459.263:294): avc: denied { bind } for pid=6413 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.998326][ T6414] CUSE: DEVNAME unspecified [ 61.087784][ T40] audit: type=1400 audit(1749347459.403:295): avc: denied { execute } for pid=6422 comm="syz.2.127" path="/29/cpu.stat" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.123564][ T40] audit: type=1400 audit(1749347459.433:296): avc: denied { mounton } for pid=6429 comm="syz.2.128" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 61.130028][ T6430] qnx4: no qnx4 filesystem (no root dir). [ 61.141150][ T6430] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 61.143940][ T6430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.128'. [ 61.147800][ T6430] dummy0: entered promiscuous mode [ 61.150298][ T6430] bridge0: port 3(dummy0) entered blocking state [ 61.152382][ T6430] bridge0: port 3(dummy0) entered disabled state [ 61.155905][ T6430] dummy0: entered allmulticast mode [ 61.158784][ T6430] bridge0: port 3(dummy0) entered blocking state [ 61.161007][ T6430] bridge0: port 3(dummy0) entered forwarding state [ 61.189381][ T40] audit: type=1400 audit(1749347459.503:297): avc: denied { read } for pid=6438 comm="syz.2.132" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 61.198624][ T40] audit: type=1400 audit(1749347459.503:298): avc: denied { open } for pid=6438 comm="syz.2.132" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 61.229593][ T40] audit: type=1400 audit(1749347459.543:299): avc: denied { ioctl } for pid=6440 comm="syz.2.133" path="socket:[11558]" dev="sockfs" ino=11558 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.234238][ T6444] overlay: ./file0 is not a directory [ 61.574917][ T12] wlan1: Trigger new scan to find an IBSS to join [ 61.694567][ T1460] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 61.876949][ T1460] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.880360][ T1460] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.883207][ T1460] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.887697][ T1460] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.890725][ T1460] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 61.893602][ T1460] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.903871][ T1460] hub 7-1:1.0: bad descriptor, ignoring hub [ 61.909673][ T1460] hub 7-1:1.0: probe with driver hub failed with error -5 [ 61.913843][ T1460] cdc_wdm 7-1:1.0: skipping garbage [ 61.916766][ T1460] cdc_wdm 7-1:1.0: skipping garbage [ 61.920110][ T1460] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 61.922024][ T1460] cdc_wdm 7-1:1.0: Unknown control protocol [ 62.023513][ T6473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.064897][ T6476] netlink: 'syz.1.147': attribute type 29 has an invalid length. [ 62.231847][ T6492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.246874][ T6461] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 62.435230][ T34] usb 7-1: USB disconnect, device number 4 [ 62.992556][ T6526] ======================================================= [ 62.992556][ T6526] WARNING: The mand mount option has been deprecated and [ 62.992556][ T6526] and is ignored by this kernel. Remove the mand [ 62.992556][ T6526] option from the mount to silence this warning. [ 62.992556][ T6526] ======================================================= [ 63.008809][ T6530] capability: warning: `syz.0.158' uses 32-bit capabilities (legacy support in use) [ 63.361260][ T6553] hfs: can't find a HFS filesystem on dev sr0 [ 63.367912][ T6553] hfs: can't find a HFS filesystem on dev sr0 [ 63.376764][ T6553] hfs: can't find a HFS filesystem on dev sr0 [ 63.431587][ T6558] rdma_op ffff88802ad201f0 conn xmit_rdma 0000000000000000 [ 63.601565][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.171'. [ 63.665606][ T6566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6566 comm=syz.0.171 [ 63.889717][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.176'. [ 64.542329][ T6609] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 64.614500][ T73] wlan1: Trigger new scan to find an IBSS to join [ 64.996987][ T6613] block nbd1: shutting down sockets [ 65.072880][ T6618] efs: device does not support 512 byte blocks [ 65.075874][ T6618] device does not support 512 byte blocks [ 65.075874][ T6618] [ 65.083466][ T6618] netlink: 'syz.1.189': attribute type 39 has an invalid length. [ 65.088348][ T6618] bridge0: port 3(syz_tun) entered disabled state [ 65.098279][ T6618] syz_tun (unregistering): left allmulticast mode [ 65.100478][ T6618] syz_tun (unregistering): left promiscuous mode [ 65.102711][ T6618] bridge0: port 3(syz_tun) entered disabled state [ 65.587303][ T13] wlan1: Creating new IBSS network, BSSID 36:e4:39:0c:62:22 [ 65.644490][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.704470][ T24] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 65.726160][ T6634] block nbd1: shutting down sockets [ 65.751939][ T6637] xt_hashlimit: size too large, truncated to 1048576 [ 65.804523][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 65.808762][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.812370][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.815597][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 65.819033][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 65.823322][ T29] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 65.827296][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.849318][ T6642] FAULT_INJECTION: forcing a failure. [ 65.849318][ T6642] name failslab, interval 1, probability 0, space 0, times 0 [ 65.851018][ T29] hub 5-1:1.0: bad descriptor, ignoring hub [ 65.853507][ T6642] CPU: 2 UID: 0 PID: 6642 Comm: syz.1.198 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 65.853523][ T6642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.853529][ T6642] Call Trace: [ 65.853534][ T6642] [ 65.853538][ T6642] dump_stack_lvl+0x16c/0x1f0 [ 65.853559][ T6642] should_fail_ex+0x512/0x640 [ 65.853576][ T6642] ? fs_reclaim_acquire+0xae/0x150 [ 65.853588][ T6642] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.853604][ T6642] should_failslab+0xc2/0x120 [ 65.853621][ T6642] __kmalloc_noprof+0xd2/0x510 [ 65.853638][ T6642] tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.853660][ T6642] ? tomoyo_profile+0x47/0x60 [ 65.853672][ T6642] tomoyo_path_number_perm+0x245/0x580 [ 65.853685][ T6642] ? tomoyo_path_number_perm+0x237/0x580 [ 65.853700][ T6642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 65.853714][ T6642] ? find_held_lock+0x2b/0x80 [ 65.853740][ T6642] ? find_held_lock+0x2b/0x80 [ 65.853752][ T6642] ? hook_file_ioctl_common+0x145/0x410 [ 65.853772][ T6642] ? __fget_files+0x20e/0x3c0 [ 65.853797][ T6642] security_file_ioctl+0x9b/0x240 [ 65.853825][ T6642] __x64_sys_ioctl+0xb7/0x210 [ 65.853849][ T6642] do_syscall_64+0xcd/0x4c0 [ 65.853864][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.853876][ T6642] RIP: 0033:0x7f843bb8e929 [ 65.853885][ T6642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.853896][ T6642] RSP: 002b:00007f843ca42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.853906][ T6642] RAX: ffffffffffffffda RBX: 00007f843bdb5fa0 RCX: 00007f843bb8e929 [ 65.853913][ T6642] RDX: 0000200000000040 RSI: 00000000c0386105 RDI: 0000000000000003 [ 65.853919][ T6642] RBP: 00007f843ca42090 R08: 0000000000000000 R09: 0000000000000000 [ 65.853925][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.853931][ T6642] R13: 0000000000000000 R14: 00007f843bdb5fa0 R15: 00007ffd8a9f2648 [ 65.853944][ T6642] [ 65.853948][ T6642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.855952][ T29] hub 5-1:1.0: probe with driver hub failed with error -5 [ 65.856321][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 65.859911][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 65.863864][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 65.867790][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 65.885945][ T6644] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.887755][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 65.940995][ T6644] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 65.943890][ T6644] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.946365][ T6644] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 65.947885][ T6645] No source specified [ 66.004450][ T24] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 66.164529][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 66.167261][ T24] usb usb7-port1: attempt power cycle [ 66.204511][ T6005] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.357469][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.361545][ T6005] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.365093][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.370501][ T6005] usb 6-1: config 0 descriptor?? [ 66.514427][ T24] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 66.535121][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 66.576801][ T6005] usbhid 6-1:0.0: can't add hid device: -71 [ 66.578919][ T6005] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 66.583102][ T6005] usb 6-1: USB disconnect, device number 4 [ 66.664520][ T24] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 66.684847][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 66.687593][ T24] usb usb7-port1: unable to enumerate USB device [ 66.736708][ T6629] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 66.885538][ T6629] usb 5-1: device firmware changed [ 66.888582][ T6629] cdc_wdm 5-1:1.0: Error autopm - -16 [ 66.889485][ T29] usb 5-1: USB disconnect, device number 3 [ 67.024628][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.084537][ T1460] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.184616][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 67.187414][ T29] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 67.190550][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.193312][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.197449][ T29] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 67.200263][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.206145][ T29] hub 5-1:1.0: bad descriptor, ignoring hub [ 67.208041][ T29] hub 5-1:1.0: probe with driver hub failed with error -5 [ 67.210407][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 67.212070][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 67.213713][ T29] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 67.234853][ T1460] usb 6-1: Using ep0 maxpacket: 32 [ 67.241281][ T1460] usb 6-1: config index 0 descriptor too short (expected 36, got 27) [ 67.243905][ T1460] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.247966][ T1460] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 67.250780][ T1460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.257383][ T1460] usb 6-1: config 0 descriptor?? [ 67.261434][ T1460] ldusb 6-1:0.0: Interrupt in endpoint not found [ 67.264139][ T1460] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 67.361140][ T6661] netlink: 48 bytes leftover after parsing attributes in process `syz.3.203'. [ 67.461161][ T1460] usb 6-1: USB disconnect, device number 5 [ 67.515816][ T6010] usb 5-1: USB disconnect, device number 4 [ 67.629442][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 67.629453][ T40] audit: type=1400 audit(1749347465.943:352): avc: denied { mount } for pid=6683 comm="syz.3.211" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.630878][ T5943] Bluetooth: hci0: Malformed HCI Event [ 67.653200][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 67.822064][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 67.874548][ T40] audit: type=1400 audit(1749347466.183:353): avc: denied { create } for pid=6694 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 67.880583][ T40] audit: type=1400 audit(1749347466.183:354): avc: denied { read } for pid=6694 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 67.954270][ T40] audit: type=1400 audit(1749347466.263:355): avc: denied { mount } for pid=6705 comm="syz.0.217" name="/" dev="ramfs" ino=14435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 67.976009][ T6708] 9pnet_fd: Insufficient options for proto=fd [ 67.984413][ T40] audit: type=1400 audit(1749347466.293:356): avc: denied { name_bind } for pid=6707 comm="syz.3.218" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 68.015664][ T6713] process 'syz.3.220' launched '/dev/fd/10' with NULL argv: empty string added [ 68.018712][ T40] audit: type=1400 audit(1749347466.333:357): avc: denied { execute_no_trans } for pid=6712 comm="syz.3.220" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.070285][ T40] audit: type=1400 audit(1749347466.383:358): avc: denied { setattr } for pid=6718 comm="syz.0.222" name="v4l-subdev5" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.127748][ T40] audit: type=1400 audit(1749347466.443:359): avc: denied { ioctl } for pid=6723 comm="syz.0.224" path="socket:[11984]" dev="sockfs" ino=11984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.143285][ T40] audit: type=1400 audit(1749347466.453:360): avc: denied { getopt } for pid=6723 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.185728][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 68.188598][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 68.191498][ T6728] netlink: 'syz.0.225': attribute type 12 has an invalid length. [ 68.294569][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.344239][ T40] audit: type=1400 audit(1749347466.653:361): avc: denied { connect } for pid=6732 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.464554][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 68.511425][ T6715] QAT: failed to copy from user cfg_data. [ 68.513900][ T6743] Bluetooth: MGMT ver 1.23 [ 68.517038][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 68.519274][ T29] usb 6-1: too many configurations: 109, using maximum allowed: 8 [ 68.524905][ T6744] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 68.525312][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 68.529883][ T29] usb 6-1: can't read configurations, error -71 [ 68.908554][ T6775] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$êñsXJOŒÏ [ 69.017464][ T6791] netlink: 68 bytes leftover after parsing attributes in process `syz.2.244'. [ 69.020177][ T6791] netlink: 68 bytes leftover after parsing attributes in process `syz.2.244'. [ 69.059223][ T6796] openvswitch: netlink: IPv4 tun info is not correct [ 69.061984][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 69.134154][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.248'. [ 69.224391][ T6825] fuse: Bad value for 'fd' [ 69.404869][ T29] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 69.534412][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 69.555701][ T29] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 69.558492][ T29] usb 6-1: config 0 has no interface number 0 [ 69.560541][ T29] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 69.565218][ T29] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 69.571992][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 69.575899][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.579205][ T29] usb 6-1: Product: syz [ 69.580992][ T29] usb 6-1: Manufacturer: syz [ 69.582944][ T29] usb 6-1: SerialNumber: syz [ 69.587264][ T29] usb 6-1: config 0 descriptor?? [ 69.590110][ T6806] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.596975][ T29] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 69.716491][ T34] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.719981][ T34] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 69.722975][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 69.726256][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.730501][ T6831] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 69.735893][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.795858][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 69.801456][ T6806] veth0_to_team: entered promiscuous mode [ 69.803985][ T6806] batadv_slave_1: entered promiscuous mode [ 69.809696][ T34] usb 6-1: USB disconnect, device number 7 [ 69.816034][ T34] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 69.993293][ T34] usb 7-1: USB disconnect, device number 9 [ 70.188139][ T6838] dvmrp1: entered allmulticast mode [ 70.365513][ T6855] openvswitch: netlink: IP tunnel dst address not specified [ 70.365515][ T6856] openvswitch: netlink: IP tunnel dst address not specified [ 70.585419][ T6005] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.724851][ T6005] usb 5-1: device descriptor read/64, error -71 [ 70.790756][ T5943] Bluetooth: hci2: command tx timeout [ 70.984558][ T6005] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.096241][ T6934] netlink: 'syz.3.289': attribute type 7 has an invalid length. [ 71.099624][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.099640][ T6934] netlink: 'syz.3.289': attribute type 8 has an invalid length. [ 71.101768][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.135476][ T6005] usb 5-1: device descriptor read/64, error -71 [ 71.244609][ T6005] usb usb5-port1: attempt power cycle [ 71.585536][ T6005] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 71.605066][ T6005] usb 5-1: device descriptor read/8, error -71 [ 71.844619][ T6005] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 71.865197][ T6005] usb 5-1: device descriptor read/8, error -71 [ 71.974695][ T6005] usb usb5-port1: unable to enumerate USB device [ 72.988543][ T6954] __nla_validate_parse: 7 callbacks suppressed [ 72.988554][ T6954] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.296'. [ 73.032530][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 73.032547][ T40] audit: type=1400 audit(1749347471.343:389): avc: denied { append } for pid=6957 comm="syz.1.297" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.122428][ T40] audit: type=1400 audit(1749347471.433:390): avc: denied { mount } for pid=6963 comm="syz.1.299" name="/" dev="autofs" ino=15452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 73.373011][ T40] audit: type=1400 audit(1749347471.683:391): avc: denied { map } for pid=6967 comm="syz.0.300" path="socket:[15521]" dev="sockfs" ino=15521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.458786][ T40] audit: type=1400 audit(1749347471.773:392): avc: denied { watch } for pid=6972 comm="syz.0.302" path="/70" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.467979][ T40] audit: type=1400 audit(1749347471.773:393): avc: denied { watch_sb } for pid=6972 comm="syz.0.302" path="/70" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.017358][ T40] audit: type=1400 audit(1749347472.333:394): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 74.083965][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 74.142478][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 74.231226][ T40] audit: type=1400 audit(1749347472.543:395): avc: denied { map } for pid=7005 comm="syz.1.312" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.238524][ T40] audit: type=1400 audit(1749347472.543:396): avc: denied { execute } for pid=7005 comm="syz.1.312" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.338825][ T40] audit: type=1326 audit(1749347472.653:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.1.317" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f843bb8e929 code=0x0 [ 74.341031][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 74.402841][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 74.460056][ T7035] netlink: 100 bytes leftover after parsing attributes in process `syz.3.323'. [ 74.502523][ T40] audit: type=1400 audit(1749347472.813:398): avc: denied { write } for pid=7032 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.662602][ T7045] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 74.894928][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 75.106379][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.337'. [ 75.111872][ T7070] overlayfs: failed to clone upperpath [ 75.193327][ T7078] fuse: Bad value for 'fd' [ 75.196358][ T7078] fuse: Bad value for 'fd' [ 75.197869][ T7078] fuse: Bad value for 'fd' [ 75.199406][ T7078] fuse: Bad value for 'fd' [ 75.201002][ T7078] fuse: Bad value for 'fd' [ 75.202502][ T7078] fuse: Bad value for 'fd' [ 75.204241][ T7078] fuse: Bad value for 'fd' [ 75.205834][ T7078] fuse: Bad value for 'fd' [ 75.207410][ T7078] fuse: Bad value for 'fd' [ 75.208938][ T7078] fuse: Bad value for 'fd' [ 75.210465][ T7078] fuse: Bad value for 'fd' [ 75.212072][ T7078] fuse: Bad value for 'fd' [ 75.213649][ T7078] fuse: Bad value for 'fd' [ 75.215707][ T7078] fuse: Bad value for 'fd' [ 75.217626][ T7078] fuse: Bad value for 'fd' [ 75.219121][ T7078] fuse: Bad value for 'fd' [ 75.220672][ T7078] fuse: Bad value for 'fd' [ 75.222201][ T7078] fuse: Bad value for 'fd' [ 75.223763][ T7078] fuse: Bad value for 'fd' [ 75.225585][ T7078] fuse: Bad value for 'fd' [ 75.227085][ T7078] fuse: Bad value for 'fd' [ 75.228553][ T7078] fuse: Bad value for 'fd' [ 75.230008][ T7078] fuse: Bad value for 'fd' [ 75.231745][ T7078] fuse: Bad value for 'fd' [ 75.233414][ T7078] fuse: Bad value for 'fd' [ 75.235779][ T7078] fuse: Bad value for 'fd' [ 75.237763][ T7078] fuse: Bad value for 'fd' [ 75.239422][ T7078] fuse: Bad value for 'fd' [ 75.278565][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 75.344226][ T7090] binfmt_misc: register: failed to install interpreter file ./file0 [ 75.470796][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 75.502789][ T7109] netlink: 'syz.1.350': attribute type 10 has an invalid length. [ 75.505979][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.508423][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.516563][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.518828][ T7109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.521963][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.524203][ T7109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.527238][ T7111] overlayfs: missing 'lowerdir' [ 75.528476][ T7109] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 75.533087][ T7109] bridge_slave_1: left allmulticast mode [ 75.534964][ T7109] bridge_slave_1: left promiscuous mode [ 75.536860][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.540278][ T7109] bridge_slave_0: left allmulticast mode [ 75.542111][ T7109] bridge_slave_0: left promiscuous mode [ 75.544014][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.563973][ T7109] bond0: (slave bridge0): Releasing backup interface [ 75.574271][ T7113] overlayfs: missing 'workdir' [ 75.587102][ T7114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=7114 comm=syz.1.350 [ 75.712267][ T7128] syzkaller1: entered promiscuous mode [ 75.714467][ T7128] syzkaller1: entered allmulticast mode [ 75.808775][ T7139] x_tables: duplicate underflow at hook 1 [ 75.981470][ T7158] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 76.129116][ T7173] overlayfs: failed to clone upperpath [ 76.158636][ T7175] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 76.239135][ T7182] overlay: Unknown parameter 'euid<00000000000000000000' [ 76.415269][ T7193] pimreg: entered allmulticast mode [ 76.462731][ T7196] syz.1.379 uses obsolete (PF_INET,SOCK_PACKET) [ 76.841177][ T7222] binder: 7221:7222 ioctl c0046209 100000000000000 returned -22 [ 76.844867][ T7222] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 76.860299][ T7225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.078004][ T7243] input: syz0 as /devices/virtual/input/input6 [ 77.263368][ T7260] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 77.481550][ T7299] vlan2: left allmulticast mode [ 77.483224][ T7299] bond0: left allmulticast mode [ 77.485525][ T7299] bridge0: port 1(vlan2) entered disabled state [ 77.508312][ T7297] netlink: 'syz.0.404': attribute type 64 has an invalid length. [ 77.510829][ T7297] netlink: 'syz.0.404': attribute type 4 has an invalid length. [ 78.253970][ T7359] (unnamed net_device) (uninitialized): peer notification delay (7) is not a multiple of miimon (256), value rounded to 0 ms [ 78.310480][ T7367] __nla_validate_parse: 11 callbacks suppressed [ 78.310492][ T7367] netlink: 7364 bytes leftover after parsing attributes in process `syz.0.416'. [ 78.320854][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.416'. [ 78.393499][ T7373] syzkaller1: entered promiscuous mode [ 78.398624][ T7373] syzkaller1: entered allmulticast mode [ 78.407950][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.410976][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.415815][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.415945][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 78.415954][ T40] audit: type=1400 audit(1749347476.733:432): avc: denied { ioctl } for pid=7376 comm="syz.3.419" path="socket:[15263]" dev="sockfs" ino=15263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.420008][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.434629][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.438149][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.441824][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.444823][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.450165][ T40] audit: type=1400 audit(1749347476.763:433): avc: denied { read } for pid=7380 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.657917][ T40] audit: type=1400 audit(1749347476.973:434): avc: denied { getopt } for pid=7396 comm="syz.0.425" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.659357][ T7397] SELinux: policydb magic number 0x272803bc does not match expected magic number 0xf97cff8c [ 78.665259][ T40] audit: type=1400 audit(1749347476.973:435): avc: denied { load_policy } for pid=7396 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 78.670860][ T7397] SELinux: failed to load policy [ 78.680989][ T7397] SELinux: policydb magic number 0xba1a6cf2 does not match expected magic number 0xf97cff8c [ 78.684198][ T7397] SELinux: failed to load policy [ 79.118501][ T40] audit: type=1400 audit(1749347477.433:436): avc: denied { create } for pid=7402 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.252131][ T7417] dlm: non-version read from control device 0 [ 79.320496][ T7421] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 79.330772][ T7421] CIFS mount error: No usable UNC path provided in device string! [ 79.330772][ T7421] [ 79.334443][ T7421] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 79.420515][ T40] audit: type=1400 audit(1749347477.733:437): avc: denied { setopt } for pid=7420 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.681590][ T7457] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 79.694574][ T6648] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 79.742238][ T40] audit: type=1400 audit(1749347478.053:438): avc: denied { ioctl } for pid=7455 comm="syz.3.444" path="socket:[16655]" dev="sockfs" ino=16655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.864446][ T6648] usb 6-1: Using ep0 maxpacket: 32 [ 79.870714][ T6648] usb 6-1: config 4 has an invalid interface number: 203 but max is 3 [ 79.877189][ T6648] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 79.880370][ T6648] usb 6-1: config 4 has an invalid interface number: 141 but max is 3 [ 79.882957][ T6648] usb 6-1: config 4 has an invalid interface number: 233 but max is 3 [ 79.888692][ T6648] usb 6-1: config 4 has an invalid interface number: 211 but max is 3 [ 79.891259][ T6648] usb 6-1: config 4 has an invalid interface number: 95 but max is 3 [ 79.894271][ T6648] usb 6-1: config 4 has an invalid interface descriptor of length 5, skipping [ 79.897330][ T6648] usb 6-1: config 4 has an invalid descriptor of length 240, skipping remainder of the config [ 79.900513][ T6648] usb 6-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 79.903487][ T6648] usb 6-1: config 4 has no interface number 0 [ 79.905796][ T6648] usb 6-1: config 4 has no interface number 1 [ 79.908523][ T6648] usb 6-1: config 4 has no interface number 2 [ 79.910522][ T6648] usb 6-1: config 4 has no interface number 3 [ 79.912510][ T6648] usb 6-1: config 4 has no interface number 4 [ 79.914574][ T6648] usb 6-1: config 4 interface 203 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 79.917942][ T6648] usb 6-1: config 4 interface 203 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 79.921897][ T6648] usb 6-1: too many endpoints for config 4 interface 141 altsetting 202: 31, using maximum allowed: 30 [ 79.926025][ T6648] usb 6-1: config 4 interface 141 altsetting 202 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 79.929408][ T6648] usb 6-1: config 4 interface 141 altsetting 202 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 79.933022][ T6648] usb 6-1: config 4 interface 141 altsetting 202 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 79.936618][ T6648] usb 6-1: config 4 interface 141 altsetting 202 has 4 endpoint descriptors, different from the interface descriptor's value: 31 [ 79.940665][ T6648] usb 6-1: config 4 interface 233 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 79.944032][ T6648] usb 6-1: config 4 interface 233 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 79.947466][ T6648] usb 6-1: config 4 interface 233 altsetting 64 bulk endpoint 0x2 has invalid maxpacket 8 [ 79.950485][ T6648] usb 6-1: config 4 interface 211 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 79.954387][ T6648] usb 6-1: config 4 interface 211 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 79.957641][ T6648] usb 6-1: config 4 interface 95 altsetting 198 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 79.961680][ T6648] usb 6-1: config 4 interface 203 has no altsetting 0 [ 79.963794][ T6648] usb 6-1: config 4 interface 141 has no altsetting 0 [ 79.966783][ T6648] usb 6-1: config 4 interface 233 has no altsetting 0 [ 79.968907][ T6648] usb 6-1: config 4 interface 211 has no altsetting 0 [ 79.971001][ T6648] usb 6-1: config 4 interface 95 has no altsetting 0 [ 79.975205][ T6648] usb 6-1: New USB device found, idVendor=0c45, idProduct=6148, bcdDevice=54.bc [ 79.978009][ T6648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.980482][ T6648] usb 6-1: Product: ᇠ[ 79.981982][ T6648] usb 6-1: Manufacturer: à¡ [ 79.983833][ T6648] usb 6-1: SerialNumber: à š [ 80.034459][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.174493][ T29] usb 5-1: device descriptor read/64, error -71 [ 80.205929][ T6648] usb 6-1: USB disconnect, device number 8 [ 80.325741][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 80.327806][ T1112] ata1: failed to read log page 10h (errno=-5) [ 80.329755][ T1112] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 80.332099][ T1112] ata1.00: irq_stat 0x40000000 [ 80.333599][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 80.335621][ T1112] ata1.00: cmd 61/18:70:36:06:10/00:00:00:00:00/40 tag 14 ncq dma 12288 out [ 80.335621][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 80.340794][ T1112] ata1.00: status: { DRDY } [ 80.342220][ T1112] ata1.00: error: { ABRT } [ 80.346334][ T1112] ata1.00: configured for UDMA/100 [ 80.348189][ T1112] ata1: EH complete [ 80.424494][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 80.554463][ T29] usb 5-1: device descriptor read/64, error -71 [ 80.674566][ T29] usb usb5-port1: attempt power cycle [ 80.820114][ T7490] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.824971][ T7490] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.838403][ T40] audit: type=1400 audit(1749347479.153:439): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.024478][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 81.046248][ T29] usb 5-1: device descriptor read/8, error -71 [ 81.090060][ T40] audit: type=1400 audit(1749347479.403:440): avc: denied { read } for pid=7508 comm="syz.2.462" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.097662][ T40] audit: type=1400 audit(1749347479.403:441): avc: denied { open } for pid=7508 comm="syz.2.462" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.284435][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 81.305170][ T29] usb 5-1: device descriptor read/8, error -71 [ 81.337543][ T10] cfg80211: failed to load regulatory.db [ 81.394580][ T5985] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 81.414606][ T29] usb usb5-port1: unable to enumerate USB device [ 81.499714][ T7524] netlink: 'syz.3.468': attribute type 17 has an invalid length. [ 81.502150][ T7524] macvtap0: entered allmulticast mode [ 81.503841][ T7524] veth0_macvtap: entered allmulticast mode [ 81.506823][ T7524] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 81.525553][ T5985] usb 7-1: device descriptor read/64, error -71 [ 81.625024][ T7530] mmap: syz.3.469 (7530): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 81.774734][ T5985] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 81.904491][ T5985] usb 7-1: device descriptor read/64, error -71 [ 81.954451][ T6005] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 82.015086][ T5985] usb usb7-port1: attempt power cycle [ 82.104398][ T6005] usb 6-1: Invalid ep0 maxpacket: 32 [ 82.244400][ T6005] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 82.354457][ T5985] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 82.375427][ T5985] usb 7-1: device descriptor read/8, error -71 [ 82.405452][ T6005] usb 6-1: Invalid ep0 maxpacket: 32 [ 82.407556][ T6005] usb usb6-port1: attempt power cycle [ 82.626816][ T5985] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 82.628426][ T7545] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 82.642843][ T7545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.647210][ T5985] usb 7-1: device descriptor read/8, error -71 [ 82.662213][ T7545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.665713][ T7545] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 82.670483][ T7545] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 82.754692][ T6005] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 82.755701][ T5985] usb usb7-port1: unable to enumerate USB device [ 82.758470][ T7548] bond1: (slave dummy0): making interface the new active one [ 82.763077][ T7548] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 82.775034][ T6005] usb 6-1: Invalid ep0 maxpacket: 32 [ 82.914418][ T6005] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 82.934907][ T6005] usb 6-1: Invalid ep0 maxpacket: 32 [ 82.936851][ T6005] usb usb6-port1: unable to enumerate USB device [ 83.816030][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 83.816047][ T40] audit: type=1400 audit(1749347482.133:443): avc: denied { nlmsg_write } for pid=7567 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 83.834716][ T7570] fuse: Bad value for 'fd' [ 83.868221][ T7577] __nla_validate_parse: 27 callbacks suppressed [ 83.868233][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 83.891260][ T7577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.903168][ T7581] team0: Device gtp0 is up. Set it down before adding it as a team port [ 83.919676][ T7577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.921978][ T7577] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 83.925926][ T7577] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 84.044243][ T40] audit: type=1400 audit(1749347482.353:444): avc: denied { listen } for pid=7584 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.054678][ T40] audit: type=1400 audit(1749347482.353:445): avc: denied { accept } for pid=7584 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.228385][ T7597] cgroup: release_agent respecified [ 84.358961][ T40] audit: type=1400 audit(1749347482.673:446): avc: denied { setattr } for pid=7600 comm="syz.2.495" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.609418][ T7608] netlink: 'syz.3.497': attribute type 8 has an invalid length. [ 84.611910][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 84.642043][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 84.757235][ T7624] netlink: 'syz.3.501': attribute type 21 has an invalid length. [ 84.759835][ T7624] netlink: 128 bytes leftover after parsing attributes in process `syz.3.501'. [ 84.762779][ T7624] netlink: 'syz.3.501': attribute type 4 has an invalid length. [ 84.765797][ T7624] netlink: 'syz.3.501': attribute type 5 has an invalid length. [ 84.768339][ T7624] netlink: 3 bytes leftover after parsing attributes in process `syz.3.501'. [ 84.880252][ T7634] tmpfs: Bad value for 'mpol' [ 84.921672][ T40] audit: type=1400 audit(1749347483.233:447): avc: denied { read } for pid=7635 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.167526][ T40] audit: type=1400 audit(1749347483.483:448): avc: denied { create } for pid=7643 comm="syz.2.508" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.334993][ T7655] No control pipe specified [ 85.341206][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 85.469768][ T7675] netlink: 830 bytes leftover after parsing attributes in process `syz.3.514'. [ 85.529122][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 85.532893][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 85.546813][ T7683] vlan0: entered promiscuous mode [ 85.548604][ T7683] bridge0: entered promiscuous mode [ 85.550567][ T7683] bridge0: port 1(vlan0) entered blocking state [ 85.552751][ T7683] bridge0: port 1(vlan0) entered disabled state [ 85.556286][ T7683] vlan0: entered allmulticast mode [ 85.558055][ T7683] bridge0: entered allmulticast mode [ 85.560815][ T7683] vlan0: left allmulticast mode [ 85.562450][ T7683] bridge0: left allmulticast mode [ 85.607861][ T7687] netlink: 'syz.1.519': attribute type 27 has an invalid length. [ 85.681844][ T7692] serio: Serial port ptm0 [ 85.716758][ T7687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.723092][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 85.723687][ T7687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.784854][ T7709] xt_cgroup: invalid path, errno=-2 [ 85.844448][ T7687] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.847588][ T7687] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.850419][ T7687] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.853197][ T7687] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.961966][ T40] audit: type=1400 audit(1749347484.273:449): avc: denied { validate_trans } for pid=7718 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.028918][ T40] audit: type=1400 audit(1749347484.343:450): avc: denied { append } for pid=7720 comm="syz.2.526" name="event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.032212][ T7721] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 86.143343][ T40] audit: type=1326 audit(1749347484.453:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.2.531" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fa498e929 code=0x0 [ 87.012272][ T7743] input: syz0 as /devices/virtual/input/input7 [ 87.097250][ T40] audit: type=1400 audit(1749347485.413:452): avc: denied { write } for pid=7747 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.584451][ T6648] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 87.767722][ T6648] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.770539][ T6648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.772989][ T6648] usb 5-1: Product: syz [ 87.774321][ T6648] usb 5-1: Manufacturer: syz [ 87.775942][ T6648] usb 5-1: SerialNumber: syz [ 87.782800][ T6648] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.800561][ T52] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.007483][ T10] usb 5-1: USB disconnect, device number 13 [ 88.400236][ T7807] sctp: [Deprecated]: syz.2.555 (pid 7807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.400236][ T7807] Use struct sctp_sack_info instead [ 88.648686][ T6648] IPVS: starting estimator thread 0... [ 88.680305][ T7828] syz.0.560: attempt to access beyond end of device [ 88.680305][ T7828] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.684086][ T7828] SQUASHFS error: Failed to read block 0x0: -5 [ 88.686939][ T7828] unable to read squashfs_super_block [ 88.734570][ T7826] IPVS: using max 42 ests per chain, 100800 per kthread [ 88.780157][ T7839] vlan2: left allmulticast mode [ 88.781772][ T7839] bond0: left allmulticast mode [ 88.783396][ T7839] bridge0: port 1(vlan2) entered disabled state [ 88.789834][ T7840] team0: Mode "Vroadcast" not found [ 88.824867][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 88.824879][ T40] audit: type=1326 audit(1749347487.133:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.834046][ T40] audit: type=1326 audit(1749347487.143:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.841383][ T40] audit: type=1326 audit(1749347487.143:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.849247][ T40] audit: type=1326 audit(1749347487.143:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.854496][ T52] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 88.856823][ T40] audit: type=1326 audit(1749347487.143:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.860290][ T52] ath9k_htc: Failed to initialize the device [ 88.867336][ T40] audit: type=1326 audit(1749347487.143:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.877887][ T40] audit: type=1326 audit(1749347487.143:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.878339][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 88.884854][ T40] audit: type=1326 audit(1749347487.143:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.885594][ T40] audit: type=1326 audit(1749347487.143:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.901173][ T40] audit: type=1326 audit(1749347487.143:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d498e929 code=0x7ff00000 [ 88.943857][ T7856] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.947369][ T7856] SELinux: failed to load policy [ 88.997385][ T7858] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 88.999963][ T7858] overlayfs: missing 'lowerdir' [ 89.260131][ T7867] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 89.262493][ T7867] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.266421][ T7867] vhci_hcd vhci_hcd.0: Device attached [ 89.271444][ T7867] __nla_validate_parse: 4 callbacks suppressed [ 89.271453][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 89.279176][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'. [ 89.317967][ T7867] vhci_hcd vhci_hcd.0: port 0 already used [ 89.320188][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 89.320366][ T7868] vhci_hcd: connection closed [ 89.323910][ T101] vhci_hcd: stop threads [ 89.324475][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 89.331860][ T101] vhci_hcd: release socket [ 89.333295][ T101] vhci_hcd: disconnect device [ 89.366086][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 89.657062][ T7890] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 89.705386][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.580'. [ 89.761891][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 89.765548][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 89.950850][ T7912] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.001395][ T7915] mmap: syz.2.587 (7915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.055568][ T5943] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 90.058310][ T5943] Bluetooth: hci2: Injecting HCI hardware error event [ 90.061260][ T5946] Bluetooth: hci2: hardware error 0x00 [ 90.138047][ T7917] Sensor A: ================= START STATUS ================= [ 90.140521][ T7917] Sensor A: Test Pattern: 75% Colorbar [ 90.142932][ T7917] Sensor A: Show Information: All [ 90.147355][ T7917] Sensor A: Vertical Flip: false [ 90.149016][ T7917] Sensor A: Horizontal Flip: false [ 90.150705][ T7917] Sensor A: Brightness: 128 [ 90.152204][ T7917] Sensor A: Contrast: 128 [ 90.153643][ T7917] Sensor A: Hue: 0 [ 90.156245][ T7917] Sensor A: Saturation: 128 [ 90.157738][ T7917] Sensor A: ================== END STATUS ================== [ 90.161866][ T7918] Sensor A: ================= START STATUS ================= [ 90.168948][ T7918] Sensor A: Test Pattern: 75% Colorbar [ 90.172920][ T7918] Sensor A: Show Information: All [ 90.177164][ T7918] Sensor A: Vertical Flip: false [ 90.181000][ T7918] Sensor A: Horizontal Flip: false [ 90.184859][ T7918] Sensor A: Brightness: 128 [ 90.188561][ T7918] Sensor A: Contrast: 128 [ 90.192199][ T7918] Sensor A: Hue: 0 [ 90.194417][ T7918] Sensor A: Saturation: 128 [ 90.200863][ T7918] Sensor A: ================== END STATUS ================== [ 90.325953][ T7928] fuse: Bad value for 'fd' [ 91.270154][ T7964] tipc: Started in network mode [ 91.272209][ T7964] tipc: Node identity ac14140f, cluster identity 4711 [ 91.275734][ T7964] tipc: New replicast peer: 255.255.255.255 [ 91.278433][ T7964] tipc: Enabled bearer , priority 10 [ 91.280947][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 91.283782][ T7965] tipc: Disabling bearer [ 91.290775][ T7964] tipc: New replicast peer: 255.255.255.255 [ 91.293499][ T7964] tipc: Enabled bearer , priority 10 [ 91.296559][ T7964] tipc: Enabling of bearer rejected, already enabled [ 91.299698][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 91.302552][ T7965] tipc: Disabling bearer [ 91.310868][ T7964] tipc: New replicast peer: 255.255.255.255 [ 91.313177][ T7964] tipc: Enabled bearer , priority 10 [ 91.315739][ T7965] tipc: Disabling bearer [ 91.316522][ T7966] tls_set_device_offload: netdev not found [ 91.317727][ T7964] tipc: New replicast peer: 255.255.255.255 [ 91.323545][ T7964] tipc: Enabled bearer , priority 10 [ 91.325698][ T7965] tipc: Disabling bearer [ 91.888686][ T7999] use of bytesused == 0 is deprecated and will be removed in the future, [ 91.892076][ T7999] use the actual size instead. [ 92.134448][ T5946] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 92.195722][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 92.276444][ T8019] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 92.279434][ T8019] bond0: (slave wlan1): Opening slave failed [ 92.345588][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.348987][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.352095][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.356370][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.359212][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.364321][ T10] usb 5-1: config 0 descriptor?? [ 92.598579][ T8029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.777861][ T10] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 13/15 [ 92.780851][ T10] plantronics 0003:047F:FFFF.0002: parse failed [ 92.782846][ T10] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 92.975066][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.979988][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.986517][ T7697] usb 5-1: USB disconnect, device number 14 [ 93.014622][ T5946] Bluetooth: hci0: command tx timeout [ 93.085976][ T8052] libceph: resolve '4' (ret=-3): failed [ 93.166413][ T8060] can0: slcan on ttyS3. [ 93.254576][ T8060] can0 (unregistered): slcan off ttyS3. [ 93.357601][ T8070] netlink: 'syz.2.642': attribute type 29 has an invalid length. [ 93.361650][ T8070] netlink: 'syz.2.642': attribute type 29 has an invalid length. [ 93.367555][ T8070] ocfs2: Unknown parameter 'usrquotaÀ' [ 93.612403][ T8073] netlink: 'syz.0.643': attribute type 23 has an invalid length. [ 94.326262][ T8120] team0: Device gtp0 is of different type [ 94.378508][ T8122] omfs: Invalid superblock (0) [ 94.402616][ T8124] __nla_validate_parse: 17 callbacks suppressed [ 94.402628][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'. [ 94.515977][ T40] kauditd_printk_skb: 32553 callbacks suppressed [ 94.515988][ T40] audit: type=1400 audit(1749347492.823:33041): avc: denied { connect } for pid=8131 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.573039][ T40] audit: type=1400 audit(1749347492.883:33042): avc: denied { watch_mount } for pid=8138 comm="syz.3.663" path="/211" dev="tmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.613368][ T8143] netlink: 'syz.2.662': attribute type 39 has an invalid length. [ 94.710810][ T8147] openvswitch: netlink: Duplicate key (type 0). [ 94.763857][ T40] audit: type=1400 audit(1749347493.073:33043): avc: denied { bind } for pid=8150 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.999212][ T40] audit: type=1400 audit(1749347493.313:33044): avc: denied { setopt } for pid=8153 comm="syz.1.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 95.000825][ T8153] delete_channel: no stack [ 95.067260][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 95.116671][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 95.128306][ T40] audit: type=1400 audit(1749347493.443:33045): avc: denied { ioctl } for pid=8164 comm="syz.1.671" path="net:[4026532918]" dev="nsfs" ino=4026532918 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.139272][ T8164] ALSA: mixer_oss: invalid OSS volume '' [ 95.190184][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'. [ 95.193806][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 95.447757][ T8185] delete_channel: no stack [ 95.448708][ T8192] SELinux: ebitmap: high bit 1536 is not equal to the expected value 1152 [ 95.455600][ T8192] SELinux: failed to load policy [ 95.457720][ T8192] netlink: 68 bytes leftover after parsing attributes in process `syz.0.679'. [ 95.595638][ T8206] ip6tnl1: entered promiscuous mode [ 95.597309][ T8206] ip6tnl1: entered allmulticast mode [ 95.600506][ T8206] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 95.759456][ T8226] ip6t_REJECT: ECHOREPLY is not supported [ 95.814281][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 95.922323][ T8245] netlink: 292 bytes leftover after parsing attributes in process `syz.0.699'. [ 96.112949][ T8266] netlink: 56 bytes leftover after parsing attributes in process `syz.2.708'. [ 96.254292][ T8285] 9pnet_fd: Insufficient options for proto=fd [ 96.261031][ T8290] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 96.268418][ T8290] ip6erspan0: entered promiscuous mode [ 96.479891][ T8311] kAFS: Can only specify source 'none' with -o dyn [ 96.593707][ T8315] tmpfs: Unknown parameter 'mpG¾w€¡«*' [ 96.651512][ T8324] netlink: 'syz.3.724': attribute type 2 has an invalid length. [ 96.691042][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 96.825785][ T7698] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 96.984443][ T7698] usb 5-1: Using ep0 maxpacket: 32 [ 96.991277][ T40] audit: type=1400 audit(2000000000.290:33046): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 96.998105][ T7698] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 97.001715][ T7698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.007022][ T7698] usb 5-1: config 0 descriptor?? [ 97.013489][ T7698] as10x_usb: device has been detected [ 97.016362][ T7698] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 97.033802][ T7698] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 97.048767][ T7698] as10x_usb: error during firmware upload part1 [ 97.051287][ T7698] Registered device nBox DVB-T Dongle [ 97.383265][ T8373] SELinux: failed to load policy [ 97.413658][ T8376] @: renamed from vlan0 (while UP) [ 97.542540][ T8380] netlink: 'syz.1.745': attribute type 5 has an invalid length. [ 97.589297][ T40] audit: type=1400 audit(2000000000.890:33047): avc: denied { getopt } for pid=8394 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.656336][ T34] usb 5-1: USB disconnect, device number 15 [ 97.668110][ T34] Unregistered device nBox DVB-T Dongle [ 97.669528][ T34] as10x_usb: device has been disconnected [ 97.691926][ T40] audit: type=1400 audit(2000000000.990:33048): avc: denied { create } for pid=8402 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.800593][ T40] audit: type=1400 audit(2000000001.099:33049): avc: denied { write } for pid=8410 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.809201][ T40] audit: type=1400 audit(2000000001.099:33050): avc: denied { nlmsg_write } for pid=8410 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.937470][ T8420] bridge1: entered promiscuous mode [ 98.298166][ T8439] netlink: 'syz.0.767': attribute type 5 has an invalid length. [ 98.894761][ T8459] loop2: detected capacity change from 0 to 7 [ 98.899804][ T8459] Dev loop2: unable to read RDB block 7 [ 98.901699][ T8459] loop2: AHDI p1 p2 p3 [ 98.903499][ T8459] loop2: partition table partially beyond EOD, truncated [ 98.906186][ T8459] loop2: p1 start 1601398130 is beyond EOD, truncated [ 98.908463][ T8459] loop2: p2 start 1702059890 is beyond EOD, truncated [ 99.202450][ T1190] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.254601][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 101.257446][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 101.564484][ T6010] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 101.716671][ T6010] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.720022][ T6010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.723569][ T6010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.726758][ T6010] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.732237][ T6010] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.735610][ T6010] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.738263][ T6010] usb 6-1: Manufacturer: syz [ 101.741881][ T6010] usb 6-1: config 0 descriptor?? [ 101.948301][ T6010] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 101.951655][ T6010] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 101.967808][ T6010] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 101.973878][ T6010] usb 6-1: USB disconnect, device number 13 [ 102.027807][ T8470] fido_id[8470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 110.811335][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 110.811351][ T40] audit: type=1400 audit(2000000014.109:33057): avc: denied { map } for pid=8478 comm="syz.2.779" path="socket:[23644]" dev="sockfs" ino=23644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 110.825269][ T40] audit: type=1400 audit(2000000014.109:33058): avc: denied { execmem } for pid=8478 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.838907][ T40] audit: type=1400 audit(2000000014.109:33059): avc: denied { create } for pid=8478 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.849919][ T40] audit: type=1400 audit(2000000014.109:33060): avc: denied { ioctl } for pid=8478 comm="syz.2.779" path="socket:[22099]" dev="sockfs" ino=22099 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.879667][ T8481] __nla_validate_parse: 6 callbacks suppressed [ 110.879683][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.780'. [ 110.901340][ T8484] input: syz1 as /devices/virtual/input/input8 [ 110.935514][ T40] audit: type=1400 audit(2000000014.229:33061): avc: granted { setsecparam } for pid=8483 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 110.943127][ T40] audit: type=1400 audit(2000000014.239:33062): avc: denied { append } for pid=8487 comm="syz.1.782" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.029309][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 111.032558][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 111.035855][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 111.038943][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 111.144423][ T8495] input: syz0 as /devices/virtual/input/input9 [ 111.418834][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'. [ 111.611374][ T8541] netlink: 'syz.1.799': attribute type 1 has an invalid length. [ 111.668771][ T8546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37392 sclass=netlink_route_socket pid=8546 comm=syz.3.800 [ 111.675563][ T40] audit: type=1400 audit(2000000014.979:33063): avc: denied { create } for pid=8545 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.809409][ T8560] netlink: 'syz.3.805': attribute type 3 has an invalid length. [ 111.811886][ T8560] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 111.814287][ T8560] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.805'. [ 111.821128][ T8562] netlink: 'syz.3.805': attribute type 3 has an invalid length. [ 111.823593][ T8562] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 111.831426][ T8562] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.805'. [ 111.901733][ T8568] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 111.964717][ T40] audit: type=1400 audit(2000000015.259:33064): avc: denied { lock } for pid=8573 comm="syz.0.810" path="socket:[24652]" dev="sockfs" ino=24652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 111.977412][ T8576] netlink: 'syz.3.811': attribute type 23 has an invalid length. [ 112.003120][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 112.039721][ T8580] ------------[ cut here ]------------ [ 112.041597][ T8580] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:34 [ 112.044058][ T8580] index 20 is out of range for type '__u8 [16]' [ 112.047033][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.3.814 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 112.047049][ T8580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.047057][ T8580] Call Trace: [ 112.047061][ T8580] [ 112.047066][ T8580] dump_stack_lvl+0x16c/0x1f0 [ 112.047123][ T8580] __ubsan_handle_out_of_bounds+0x11c/0x160 [ 112.047166][ T8580] ipv6_addr_prefix+0xf2/0x110 [ 112.047194][ T8580] ip6_route_info_create+0x4b6/0x870 [ 112.047214][ T8580] ip6_route_add+0x26/0x1d0 [ 112.047230][ T8580] addrconf_prefix_route+0x2fd/0x510 [ 112.047250][ T8580] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 112.047279][ T8580] ? lock_acquire+0x179/0x350 [ 112.047297][ T8580] ? __pfx_addrconf_get_prefix_route+0x10/0x10 [ 112.047314][ T8580] ? find_held_lock+0x2b/0x80 [ 112.047329][ T8580] ? addrconf_prefix_rcv+0xa7e/0x1f70 [ 112.047345][ T8580] addrconf_prefix_rcv+0x1808/0x1f70 [ 112.047365][ T8580] ? __pfx_addrconf_prefix_rcv+0x10/0x10 [ 112.047380][ T8580] ? __pfx_rt6_route_rcv+0x10/0x10 [ 112.047400][ T8580] ? ndisc_router_discovery+0x1c49/0x3550 [ 112.047416][ T8580] ndisc_router_discovery+0x1c49/0x3550 [ 112.047436][ T8580] ? ip6t_do_table+0xbf5/0x1c30 [ 112.047450][ T8580] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 112.047467][ T8580] ? __lock_acquire+0x622/0x1c90 [ 112.047491][ T8580] ? skb_checksum+0x81f/0x980 [ 112.047512][ T8580] ndisc_rcv+0x3fa/0x620 [ 112.047528][ T8580] icmpv6_rcv+0x17c6/0x1c50 [ 112.047544][ T8580] ? __pfx_icmpv6_rcv+0x10/0x10 [ 112.047557][ T8580] ip6_protocol_deliver_rcu+0xf89/0x1520 [ 112.047580][ T8580] ip6_input_finish+0x102/0x180 [ 112.047596][ T8580] ip6_input+0x105/0x2f0 [ 112.047610][ T8580] ip6_mc_input+0x465/0xfd0 [ 112.047627][ T8580] ? __pfx_ip6_mc_input+0x10/0x10 [ 112.047643][ T8580] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 112.047660][ T8580] ? __pfx_ip6_mc_input+0x10/0x10 [ 112.047676][ T8580] ipv6_rcv+0x45d/0x680 [ 112.047690][ T8580] ? __pfx_ipv6_rcv+0x10/0x10 [ 112.047704][ T8580] __netif_receive_skb_one_core+0x12d/0x1e0 [ 112.047721][ T8580] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 112.047737][ T8580] ? lock_acquire+0x179/0x350 [ 112.047755][ T8580] ? __phys_addr+0xe8/0x180 [ 112.047769][ T8580] __netif_receive_skb+0x1d/0x160 [ 112.047784][ T8580] netif_receive_skb+0x137/0x7b0 [ 112.047799][ T8580] ? __pfx_netif_receive_skb+0x10/0x10 [ 112.047820][ T8580] tun_rx_batched.isra.0+0x3ee/0x740 [ 112.047838][ T8580] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 112.047858][ T8580] ? tun_get_user+0x1c0d/0x3b80 [ 112.047875][ T8580] ? rcu_is_watching+0x12/0xc0 [ 112.047891][ T8580] tun_get_user+0x28a2/0x3b80 [ 112.047914][ T8580] ? __pfx_tun_get_user+0x10/0x10 [ 112.047930][ T8580] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 112.047951][ T8580] ? find_held_lock+0x2b/0x80 [ 112.047964][ T8580] ? tun_get+0x191/0x370 [ 112.047984][ T8580] tun_chr_write_iter+0xdc/0x210 [ 112.048002][ T8580] vfs_write+0x6c4/0x1150 [ 112.048020][ T8580] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 112.048039][ T8580] ? __pfx_vfs_write+0x10/0x10 [ 112.048052][ T8580] ? find_held_lock+0x2b/0x80 [ 112.048074][ T8580] ksys_write+0x12a/0x250 [ 112.048088][ T8580] ? __pfx_ksys_write+0x10/0x10 [ 112.048106][ T8580] do_syscall_64+0xcd/0x4c0 [ 112.048118][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.048129][ T8580] RIP: 0033:0x7fa4d198d3df [ 112.048139][ T8580] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 112.048150][ T8580] RSP: 002b:00007fa4d28c2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 112.048161][ T8580] RAX: ffffffffffffffda RBX: 00007fa4d1bb5fa0 RCX: 00007fa4d198d3df [ 112.048168][ T8580] RDX: 00000000000000a6 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 112.048175][ T8580] RBP: 00007fa4d1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.048181][ T8580] R10: 00000000000000a6 R11: 0000000000000293 R12: 0000000000000000 [ 112.048187][ T8580] R13: 0000000000000001 R14: 00007fa4d1bb5fa0 R15: 00007ffee3ee8268 [ 112.048202][ T8580] [ 112.048269][ T8580] ---[ end trace ]--- [ 112.108294][ T8583] tmpfs: Bad value for 'mpol' [ 112.109036][ T8580] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 112.109047][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.3.814 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 112.109062][ T8580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.109070][ T8580] Call Trace: [ 112.109076][ T8580] [ 112.109081][ T8580] dump_stack_lvl+0x3d/0x1f0 [ 112.109102][ T8580] panic+0x71c/0x800 [ 112.109120][ T8580] ? __pfx_panic+0x10/0x10 [ 112.109140][ T8580] ? __pfx__printk+0x10/0x10 [ 112.109157][ T8580] check_panic_on_warn+0xab/0xb0 [ 112.109174][ T8580] __ubsan_handle_out_of_bounds+0x143/0x160 [ 112.109196][ T8580] ipv6_addr_prefix+0xf2/0x110 [ 112.109230][ T8580] ip6_route_info_create+0x4b6/0x870 [ 112.109249][ T8580] ip6_route_add+0x26/0x1d0 [ 112.109271][ T8580] addrconf_prefix_route+0x2fd/0x510 [ 112.109291][ T8580] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 112.109316][ T8580] ? lock_acquire+0x179/0x350 [ 112.109335][ T8580] ? __pfx_addrconf_get_prefix_route+0x10/0x10 [ 112.109355][ T8580] ? find_held_lock+0x2b/0x80 [ 112.109370][ T8580] ? addrconf_prefix_rcv+0xa7e/0x1f70 [ 112.109388][ T8580] addrconf_prefix_rcv+0x1808/0x1f70 [ 112.109408][ T8580] ? __pfx_addrconf_prefix_rcv+0x10/0x10 [ 112.109424][ T8580] ? __pfx_rt6_route_rcv+0x10/0x10 [ 112.109443][ T8580] ? ndisc_router_discovery+0x1c49/0x3550 [ 112.109459][ T8580] ndisc_router_discovery+0x1c49/0x3550 [ 112.109479][ T8580] ? ip6t_do_table+0xbf5/0x1c30 [ 112.109494][ T8580] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 112.109511][ T8580] ? __lock_acquire+0x622/0x1c90 [ 112.109536][ T8580] ? skb_checksum+0x81f/0x980 [ 112.109555][ T8580] ndisc_rcv+0x3fa/0x620 [ 112.109572][ T8580] icmpv6_rcv+0x17c6/0x1c50 [ 112.109589][ T8580] ? __pfx_icmpv6_rcv+0x10/0x10 [ 112.109603][ T8580] ip6_protocol_deliver_rcu+0xf89/0x1520 [ 112.109626][ T8580] ip6_input_finish+0x102/0x180 [ 112.109642][ T8580] ip6_input+0x105/0x2f0 [ 112.109657][ T8580] ip6_mc_input+0x465/0xfd0 [ 112.109675][ T8580] ? __pfx_ip6_mc_input+0x10/0x10 [ 112.109692][ T8580] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 112.109709][ T8580] ? __pfx_ip6_mc_input+0x10/0x10 [ 112.109725][ T8580] ipv6_rcv+0x45d/0x680 [ 112.109741][ T8580] ? __pfx_ipv6_rcv+0x10/0x10 [ 112.109756][ T8580] __netif_receive_skb_one_core+0x12d/0x1e0 [ 112.109773][ T8580] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 112.109790][ T8580] ? lock_acquire+0x179/0x350 [ 112.109810][ T8580] ? __phys_addr+0xe8/0x180 [ 112.109824][ T8580] __netif_receive_skb+0x1d/0x160 [ 112.109840][ T8580] netif_receive_skb+0x137/0x7b0 [ 112.109856][ T8580] ? __pfx_netif_receive_skb+0x10/0x10 [ 112.109877][ T8580] tun_rx_batched.isra.0+0x3ee/0x740 [ 112.109896][ T8580] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 112.109917][ T8580] ? tun_get_user+0x1c0d/0x3b80 [ 112.109934][ T8580] ? rcu_is_watching+0x12/0xc0 [ 112.109950][ T8580] tun_get_user+0x28a2/0x3b80 [ 112.109973][ T8580] ? __pfx_tun_get_user+0x10/0x10 [ 112.109991][ T8580] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 112.110012][ T8580] ? find_held_lock+0x2b/0x80 [ 112.110027][ T8580] ? tun_get+0x191/0x370 [ 112.110046][ T8580] tun_chr_write_iter+0xdc/0x210 [ 112.110065][ T8580] vfs_write+0x6c4/0x1150 [ 112.110081][ T8580] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 112.110101][ T8580] ? __pfx_vfs_write+0x10/0x10 [ 112.110114][ T8580] ? find_held_lock+0x2b/0x80 [ 112.110136][ T8580] ksys_write+0x12a/0x250 [ 112.110151][ T8580] ? __pfx_ksys_write+0x10/0x10 [ 112.110170][ T8580] do_syscall_64+0xcd/0x4c0 [ 112.110183][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.110195][ T8580] RIP: 0033:0x7fa4d198d3df [ 112.110205][ T8580] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 112.110216][ T8580] RSP: 002b:00007fa4d28c2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 112.110228][ T8580] RAX: ffffffffffffffda RBX: 00007fa4d1bb5fa0 RCX: 00007fa4d198d3df [ 112.110236][ T8580] RDX: 00000000000000a6 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 112.110243][ T8580] RBP: 00007fa4d1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.110251][ T8580] R10: 00000000000000a6 R11: 0000000000000293 R12: 0000000000000000 [ 112.110264][ T8580] R13: 0000000000000001 R14: 00007fa4d1bb5fa0 R15: 00007ffee3ee8268 [ 112.110279][ T8580] [ 112.110984][ T8580] Kernel Offset: disabled VM DIAGNOSIS: 01:51:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b5305 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc90020f26ac0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b088360 R15=ffffffff855b52a0 RIP=ffffffff855b532f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa4d28c26c0 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa4d28c1f98 CR3=000000006594a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d1a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d1a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d1a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d1a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d1a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d1a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d1b84488 00007fa4d1b84480 00007fa4d1b84478 00007fa4d1b84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d26ed100 00007fa4d1b84440 00007fa4d1b84458 00007fa4d1b844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4d1b84498 00007fa4d1b84490 00007fa4d1b84488 00007fa4d1b84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000de6ab RBX=0000000000000001 RCX=ffffffff8b7fbc99 RDX=0000000000000000 RSI=ffffffff8de19768 RDI=ffffffff8c156fe0 RBP=ffffed1003c55488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801e2aa440 R14=ffffffff90a81c50 R15=0000000000000000 RIP=ffffffff8b7fa7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa4d1bb7bac CR3=0000000065a3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 07dea102000000ff e50000008dcd0018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fa4a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fa4a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fa4a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fa4a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fa4a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fa4a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 207465735f79656b 700074616d726f66 207972616e690004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 055140565f5c404e 5500514448574a43 055c57444b4c4705 4b524a4b4e4b5000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000040 RCX=0000000000000040 RDX=fffff520040b0fbb RSI=ffffc90020587d98 RDI=00002000006ef000 RBP=00002000006ef000 RSP=ffffc90020587b90 R8 =0000000000000000 R9 =fffff520040b0fba R10=ffffc90020587dd7 R11=0000000000000001 R12=ffffc90020587e88 R13=00002000006ef040 R14=ffffc90020587d98 R15=00007ffffffff000 RIP=ffffffff81001280 RFL=00040046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f843ca426c0 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000006ef000 CR3=0000000025f37000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000020400004 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31322d70392f6964 622f6c6175747269 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005565ad800270 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fefbf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fefbf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 841652b79199ccf0 7373261388a9a313 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fefbf1c30 00007f5fefbf1c30 0000000000000121 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005565ad5b82c0 00000000000001d1 2f6f6900d080ca76 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005565ad7fac94 00005565ad7fac90 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000194 00005500ad7fac76 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000bd349 RBX=0000000000000003 RCX=ffffffff8b7fbc99 RDX=0000000000000000 RSI=ffffffff8de19768 RDI=ffffffff8c156fe0 RBP=ffffed1003c58000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2c0000 R14=ffffffff90a81c50 R15=0000000000000000 RIP=ffffffff8b7fa7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f01dff8 CR3=0000000025f37000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000090 DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f843bc11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f843bc11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f843bc11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f843bc11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f843bc11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f843bc11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e0d4e369b7951cae db42408d38865758 7fdbce53951a9954 ba8db12d1b9376f1 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bd4a283586e9901b fd22a1c52504e6fe 8e1ffda12c150004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a771c2dfeb01c29 a7480199145130d7 47cc0995d7c954b3 642acb199e7d219f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 622492afd5c4bf4a 92d84589c52c96d5 a02c4ce52a074d53 2ca64ae06ab66466 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f800000000 0000000000000000 000000370b8b67a6 7974c1f2d8307450 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 622492afd5c4bf4a 92d84589c52c96d5 a02c4ce52a074d53 2ca64ae06ab66466 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000