last executing test programs: 1m39.967283585s ago: executing program 3 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8003, 0x10a) fcntl$setlease(r2, 0x400, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bind$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x6}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}, 0x48) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}}, 0x0) (async, rerun: 64) lseek(r0, 0x5, 0x0) 1m39.850468536s ago: executing program 3 (id=126): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0x2}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f00000016c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc0fc4111, 0x0) utimensat(r6, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000081000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) syz_clone3(&(0x7f00000004c0)={0x1100, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x6}, &(0x7f0000000300)=""/146, 0x92, &(0x7f0000000240)=""/123, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) r9 = syz_open_procfs(r8, &(0x7f0000000000)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@mpol={'mpol', 0x3d, {'local', '=static'}}}]}) read$msr(r9, &(0x7f0000000180)=""/174, 0xae) 1m39.140547687s ago: executing program 3 (id=135): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet(0x2, 0x80000, 0x5) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x0, 0x2, 0x2080, 0x6ae0}) sendmmsg$sock(r1, &(0x7f0000000c00)=[{{&(0x7f0000000040)=@generic={0x10, "14d73b068268f50626a95ba2ce6cff3b57fe3229864ac4563a184fed8869b95bf0286e967801da47a216ea91c5002c8923e7be7d5edaf6c4582363b6ee53fefe7623fef15005a2963a868af719fbfe8a7f9f7963de7d40d376b3171fcfc82c1676c40a0ca82ccded3f343610c341996afcc0d6986458e7bc792635008759"}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="2609e3fb7466e0910f396dec1a9ba84d86fea34b5989798272c8aac0ff0b5a772caa9b31b60421ae0df61e065b090806adf5a3187a46b3be8fe45c84f608cda5b40db9f06e3f02a3f1ad98f7a083064a546c12c7ebd5e6ed46c20a122aec4fd598604af5", 0x64}, {&(0x7f0000000140)="287629a56887cdefc03771fcadc0cd6804750ef6fbd4947743a110b7dca33c0297607cabdbed0cf2bf8dfcb57bd0ff22af615e2cf27a5544f747104ee0003678901a6d521c45867d6fe9b0aa645c0c04e59e53e3f0ca8dc9c7e6ade17f3dc19212b5f0261f1823892a7f027780d447debd69177556f356a876c83a6cebef7e2b5ca56a8a839e1c5cc4fee5e7bca6445ecf646a824b6e8c8bbfd75ccd9d3d951741e1b92d6c6f64722e9504c37383acd39d92996eec9654ba501b49c3bcd3bc12157341e89225a2b0384cf445343c", 0xce}, {&(0x7f0000000240)="a08904f1546b7f9b6a332f7ac1a29aa479ae4a114324f6d2f8e0d2938d44a624d46fec997f8bd731a06a8164a57c6737124ca1acf47eea714e0a92d82248f6bc12ecfdecab247fccc290727e5a79089c05fde97d8d111b992dea7d4faac85a20b39b7153071b727aab3e3a8b83ca1c61a22ac04b0afd02cd60016d81ac460e8499b7221a055b8e10d6e76fca88ca834dc56b06346d8b78dfd59f3f61584ca856462c84", 0xa3}, {&(0x7f00000003c0)="5e8face7f77da67da3818bd617b0aef189d1fc13ffc32607cd19e40f24e573c78bf33c00bf2f5fbd2fef9464960b6f554b081db25392f660f8ce3034b82be29363647e9ba75aad0937cab68d97f96c36cd1d2e988a973387d332e43b6dfe09eaacbce079c2327471cb0666e2226eed15411700c21aecf3e8d89a2bd2b6b8fc74881ddbdbdc47fa6ed5b55d425c063428d85d2f44b5dbed1ffed900bc0da1b84ff5171bea3c48dc44f703b331f358f6b32b2dc165a8ecc40d3898816182e0855bb6d0a7e7dbeb8fac6b4cce4c9311d70d65c7e6bd05256169b76323ad3deb385ad39a2daaf608ab7a6e84ae3f1faae7", 0xef}], 0x4, &(0x7f0000000600)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x3, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb2}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000006c0)="99391d32b5fe3190548872aebe5654d04f6cbde267f51b7ba28cc7a0e22be38b4f15ac96589b8479155ee3789c6ebf0c1b66aeaaa2c8356976d2403071e92e91fb78d41974cd5f58810b2aba53593e261d6ea21e219e4e5ff4cd0b674fcc2ff25b", 0x61}, {&(0x7f0000000740)="a7f30089970034721be84f33436888410b611e79ddd3e7978db72247c4764f9560f1df6a8f5eb2b147cb73c5047c2daeb0797a683035d040bcbae5129cae3e06316822aba1c8a1caafc55a326923cb22a5bf831850a2368171ab2ccbce66c1de56f450eeaaa08dd4f64539f4ece47ffb046cdc26abf97b98a444450f8dbaa05a2ac6ede692992bcf2f9f03d28f08c049d14fcc9f450723309fa95131c5fa010d5c13b1eee6bfb0683849adc3ec1218f2d2f56089ddfcdfb9da429188c0adfb6aca5f73c2f9450d5276f9dc927cd8e6a8a9575eaa81e278c787c15433d3a659ebab61f89426a5c1d59408f59de74780f1cbc76055", 0xf4}, {&(0x7f0000000840)="5bee0b8421b980d320b9c8f8fb692b98c1f5e6c59b28280ca78c328a34106b3218ae88e7581def2569bbce9392eaa9da4e79af260f5d058e4f577bddd35367f9de84fe846f398d9908898dc175d705eb2e8318c11a3b750b6e4ae7440fcaa0a2a186bd6712825f3ae70ce1085f5c47a5e9b26404227ffa938243fee115fce2390e357825be4fa2b427e2df586bd3174649e438561c1cf281871830eb4f504afc4f7c6c8a3b2d62a3edf4c858781ab48bd170bf533826e1c084e0f04349dfb5b80c259f2376a8ba2c077f4ed8ffe4c105b2abe2b4d8ae6f9987", 0xd9}, {&(0x7f0000000940)="f08c2649ec0a3f8be28566a9c9f39d57574818cafefeb32ac0240a1bfdd2107e34f8c972044dea", 0x27}, {&(0x7f0000000980)="047936f0fc57b4dd2b2897b143dcd38d77623a15d5449a8730cb7bedd97114b1d4bf644211aba093f3e3cf876d9402becb9ac732f0370a642bd94b37a7412287311f021db7d35fde7e214d37c225a1dedbabbba7d7edb542e26d3afab20a1c09b36ab3624b70dc10fe13bd8ad6f1aa7b0aa146482a5ae63244df32a1d4acc898ce8ff47423697073af9480daa93e2a3b7c5165a05d4888a1a4580204ca4af3cb5bf9b3ef3adb8d17f114ac14d79ff45ff88448ad77e0a91a5035fd7d9c8a229fe8c0177931dfede96c8aaf515e930f5b28b630745c74", 0xd6}], 0x5, &(0x7f0000000b00)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xf0}}], 0x2, 0x4000) 1m39.058703145s ago: executing program 3 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400622a80fd872a65ae44b116dd0d000010002104fcffffff0000000000000000", @ANYRES32=r0, @ANYBLOB="0000d259a933fdc0182c3f89c867370035e2b32b176e94d38009000100626f6e640000000014000280080c0b00", @ANYRES32=r2, @ANYBLOB="0500010005000000"], 0x44}}, 0x0) 1m39.05786067s ago: executing program 3 (id=142): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r1 = socket(0x840000000002, 0x3, 0x4) r2 = syz_open_dev$video(&(0x7f0000001840), 0x0, 0x101100) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000001a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)=ANY=[@ANYBLOB="28320013a5398b0c1800", @ANYRES16=r6, @ANYBLOB="00012abd7000fbdbdf25010000001400060000000000000000000000ffffe0000002"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8011) r7 = socket$netlink(0x10, 0x3, 0x6) writev(r7, &(0x7f00000019c0)=[{&(0x7f0000001ac0)="580000001500add427323b470c47b45602067fffffff030000000000000035950000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000100004ffffffe7ee0000000044c60000cd1330ac18037e89b5ab56b283b0d5af6c125cdd4f96847262bb6d11c0945c2fc4d4e55e603c8ae71894130f7e9df47cf3aa4e5fb019026e2be2ce2bcfaa8ecb60175c7f49538cd5bbd68bf2f98bb185785002cf439ae79a222361a02a26f95a0ba6a0e3721549f3be5dde970cd42ad5dd5b2880cb15edda456b249adb903978fadb2143c0cba3e6dff0646362f37102020000000000", 0xffffff2f}], 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20008014) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x9, @sdr={0x50424752, 0x8}}) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_score_adj\x00') write$6lowpan_enable(r9, &(0x7f0000000340)='1', 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006e80)="325dd3e449af4b26d8a093aef75eb476190a9f16401c82f7482b4649d5af4805f313a77dee31d96c54077084b5ea4bc7e3d5695a4d1359de0b3f5eb5720614c295c1f80a82f10660cc9ac42d267c07717bbc1d740965b3b48062ecdd327b5cbd4b93fa4c226e6eb79325934162b0105f2151d405f42010f6fec60343970309bea4fe32b4abb4d216682d8911d59b93ec39b3fc066b452b8c5419a144804f1a5cfeb63c6249e0981da9a310480649c7cb26ea09626a7df3c8a3d8becda1c82b32a199507400a4107247bce003babe98092426ffed71ec30070353bf1162c2009d1fa857cfdd9d33b3f03d0707b9dc1b6df6497b20170b5f625edd4690ceab7d7885b33a02ed6836649a932f8e9a9a1e72af0c43004acd07bec69543799448edb7714c1d29995b83e912827f22d0239e4439c8f94c9c8e68c5dbff7646e7861b06137fe24f4c06d51a4a9cbfa43ca4fc8bd753a2c151c9bd8c32f612dd96dc0e33ae515ad2ebcf0b7db8f78d943f77c5cbaca7088ee425d0188e1e8d5503d269bd42e2c32ec50275802733acec3cbc6a56c47584f96d9c6389ed70084bb4f33584f41bdbf23b96ff24b2c686396c44ffd5a625dcbbfbc60fb6fa1809d145cab0b99fcb5a47019c0ca5cb0c70bc83e5328d6431db1a352d6baf12c85a099a1fc25aacf03a78523bc034958a73bc3195aa7d8708b1f1a90c02c1327b13d2e155b040c0e5fa4c508f07bfb852e1ecdab8e63fcf1f8da030d43df17c5981350d5026bc6c2f9b7a5d9bbc19aad4a429a3b75d470735b71ec3442f2f1fe4646edba88917a07b2b916fd1ae6a60ea007c745b7bfcb1c44dabd52b5947c3380b593e2fe8aa38ec719cef952dc6a4093b4b52273e4d57626eddc934fa52c68da7d599338a6c499ad8e2fa392c419d4308d81ce7a7d2178ff61c0dd042d3359939c1afd27d636147668b59393727b714ed10bc30af53f8fe818fa6bcf8eb02e441e2f7b8d8f921c9934aec6a3eff6310e9620f797a28e465420fe6ae309e5af4c0e864edf6d4d3bf6118366604a754627816da8d19304ce7dfd0e94a0f53af130939c5da9d0840b9a32b63ee15f3c9477df9aba4d8705236b4d0c39d1278911df436181a3f317626a9dd1bcb8160ee7b2b0c97a5c6c360b516e5d3ebd2b4813736d8c07fdbd2f10537b7878bf4ceaef5fb2f957ef4fa0eb5fe9f2c830f6fbf88d55dd22acced3b2bab83b9785ab52a703f38522903c4735b77f1bef1c6dcb67a7497b1451ad3fb83b9e62940a7d539a38784c924df30668a226496cb37576c0177723d354c86251f25b31023188c2f4a044ef0fb436b71d2a453d16c5eb239b0e38f79815abc8484a02a57787043a779c185b1ccec9a245e6782c2b16db37f8a43964e4b35e57fa9dac709544b93284865c93318e02b59c8db3d0a72fc04cb0628ff5046d21806f30cbc8ce5101e0aa92b120b0aa54ec2e085fd72648a22999453edb52e8a0afeb6688feaf9ca7d27a3e64f40b33a018c2216e4566e06429584059ec9c83a7140e7bdc8d77df7d576b3b349aaa2d58b13b1ea3204d81afb8d6747dc1b7037da3addd58c405c584c613be25793df7af3a9a75b46fd171417cfd545e461f6e1600b7b902f0f8236f60bd65ed8058ceda4ea9bffe47798125640998e88003e7f5a2d174e6f0f6bf7919e303983cb7c6535315e0c965000b84553d4544099432281b9c83512309aa15904003e8a6513b4e529cd1f790c52b19d8444bcca5dceb3946d3cee5d9fd082af86b5247d58fe1eb249e0f04052628d82badf5c52d9f049907f52c65cccb12ef4efceeb6ae147feab1227bca0070074fbc20106f42c3c72c1d481747168b064ee3283f7636630566e6f40c54f3d1a972572e78c4a3c37870dc1ed3a4d4a5a155ba40e9bdf2be2f9875920b8a612e6d0a7e880ed782348ab1545b6dc4d201acce4420a61f280f3e08911eead982952d5e96a5672fa72d211f019528577127f770392fae1dc8928b941152260641ae236b72d42ae1f57e15fdfa92253866f6b66c14b3bc92406f5388d102cb77bf31edab619748e0bad9869a060dce1c60fabb6e3b6920ca6699c0795dc30b9f304f67757d37998f0d080e6af68e2b348bab428ea400bc986ee3cfe191f8fa08429d727efb0fd2762b3a48444d26e9401636aefbdccbf2d4c4e1d5bba6223a598c82a6468a5d35e65eb3b03822fb352141977441b758387b7c119d6961f3b043723d563e379761946af9b16d5174a07cfa389aec06dd7b1bf631d63e1d59c2a45bf475ee162cd0deb26fdfbff7a66dd458b2305da511492f883c9976ef5cab34fb2ab3c657896f716210afede3f7a7d9892f4d0fc8d50a5b3adacd49d133036dbe518c10d889898aaa5c399fa29d2ea38e112b7ad6ae08c59c22c6d72909455585e8a67f3289317e4943ecf736be5b8f7d84b6a3bf2fccb21eb278b1248bb23dfdd24c285b8fb766e9d4bfd12116d60c9753aed822d32529d7dbe24d14b68c62be1cd0a6884cf93cac56e972b316efeafef2068c61fe980f3de18dab6a2de05e4011caf429120ffc68f709f14829736d5336a846869e45dc478a0202c504f2d5f66cb14c860324de48574ae44d30d99a307a584e9999df47144cd4e5fb6088a5931310b699fc92a8bafacade2339cf8f6f7ed3b4eb04d38ee3325a80d273706e445ff1fc7dc5708bf35f58a6bef6a3c1b0016996fe86ff95e4778796e1f05c9bbb32a1942e4199ae1eb35ba958b4e7d8136fa74661b2478c48d9e4bf31be179fd1eb2baa02d5859b0a26e42b2286de175722a6eaafe898698d875c7e161197ee14aad35d49164f73df4fc18a565ce32355e5527547f9ad80096578c123471d27babacf11ac5dc52a97fdc9dcdf49eee3697478e56a34df39abffefca858e9e9f2cdcad7823aadf42e8b47b93a9384a5148fb70065d59ec7696396067c453c8b3bccaac157e2f131b3d65e4f890f0498e7138eb655d42ab93c21848ecdd37392c27a2f9434e7c000a716c91121ce4a09eec421efd828cd1578a80a661006d834c1215b56e1210eb3232a37a8d8c1794b205b891b944a630fc9d90c8ca9a7f4a160f064fa13e602b5a8fa5d4e91b827d46d4461ea861a95d9fdff4e169031b5933dc895dcd69dc559f8270520238c0cb4c050dc793adc387ddcbd9421af90e640f6a0a7a3d754075bdeb110d51aa9c3253718a5eac8992bd69caa184e2062b0ed18457dc43052b6e51faab38e63595cfb513514d6ec4f2e6149f74dc0ff3bb6e9ba3287d88e71678d10e1c13d3806c97e06cfe056175a02f6b6638239523cb9614c0d64b460a917eaa5050075b92def8a349f51ec68309af1d63079b41ef73a2468f47eaab8b0c03bd22381e3e2f5b31d68b4dfc0f07fb4ffd32f0a0b736380f92794a5e9481fe9a83cad672ba5c4bfc57fd22bc34b63f828eed9b2eb70527cc69848953e87505fb74097a905744d93b0da73fa7548bd04994380069f50ca8a4f452088aaac31492c2aac8a2b04e38c246c1743c46a96c5fc60dd6c0440ea6964bc7f86d203a6cba2baf7bdaabb1f78563954e71f1c45730d259a643aee5d8eddbf1803dba55e2479531de013c2867ed465dcd21b0f236d985f1cc865480386b55401d882199f779c43bf6a772fa9394070530bfda06fd2810cf12b6e730d982e7644c3dc6ebcbfd029ebc1d861a7bc53394ca3bc4173dd89bc21b1ac67d4f2cbdcde1e2e89352439e00cc7c042749a881803b37da76008aa25c4f04cba65306112964026792b1238a5e8bec20bd9391fc190f73befc4642533777a12ecfda6c09aad168a13d473fdc0d5ed40a1c627a67fd5691acd5523d34a0312d89aa93554b18289c387498b4fa23144278e29f25765bdc99310bc372261ebcee581e5059bd790417a6c43573e488038f620d435cd738658925fad4dbf441ae821a5ce057a0ce24e456eadfe9ae192dec624757723b6bd1751f1358fda0d91e675ef99baa6e4049d5bb9d57c66bf643decf254b74605317b125f521d5459d7e0190715e930e017f6e251a8cbb1331cc745183632cf461b2f8c769a925c7a423ae23b1194d499b610d40ef758fc336faf1406c4cf4401f1b50b7db8976d302dcdc6fcf95e55bba0dc42ee0eee188be602295284e33730f2ec57817b21c99c272110fec53a852c264558e407ae0a2b33ed333fdc87da60eb9a7fbaaec6492d398a0c37dcea909afe8022cb8e90f5f6cbe6f5ce4ec79d0990427a423c695e7ead3fb88b0e221aeb0aa611b2f96574d0c91674a941ab856d02538cde646b4518fa6ba9499c9bce1609c4e0e2be658e57ee1f5d6f387fdfee065797027347411be8312f90aec5bd443e67c4833b62ba8798bcea597cbd27bd27c808f27ed2dd432c697dd65cb874c68b047eb82bf4d74b16829c38806c2384c8371227c4b5f04c9756b6a3a614f2e849f6d4ea9b14e6795b55fc68b9e6f9b06cd21ff87b8fb719fcd5f7178d792446d974ceabf554db2c9aa5fc703639cea8c69d7db2c190fa0ab6557536ebb25a7bf4cf5b13414c4bb45e0083b8bb1973d1d0e286cbc2906b2bdce0550732a764b87e1924b5dfe7a756f5facc81d26503934d7b2783d438b6bae718a15affafda3449b7bba555740e463d6f4891c52ee3aae34696d6171e98ec4adb037250024533848d676151622b1b053b0c6f70421ba37f2392350692af9169c7ba06a48d306277cadf018dc2ea736010c05883062a7a0ed27881ba5ec3a5557e3ed05f1795b7fea2344b49bd1a5d7c2289520c292cfa1f1e632c06eb39f23437276b3efb7805d30da5c0265f96832a5d7b2b1bcacaaf009ae8097a75227760d144952360cafd4ec88bf475e24f1b56e8c74cced37f56c1ebd320c849adb30db4ac125a6619e69ea8ee257d73c317d2fc6dac68baf875aa8045f6a69dc68dee403b944c8fb229e2a5f07e23bfc4dadaf0e61ad776a8556d8a97dc4c4c18d423bcf6c6df2820a370906a3672ecc39dbc106a253e36e0cc20a03837c71e1136684e6e0ecc4a5a0af03c2b9d85224accda7d1bdff92a6231cd044715289b8f65a51173e95a01dd1923a2ef20c6fc887b785f9508ce4296c0a4f10d1b6aec4197b0189cce7a9df23521208571e62f2e8dbcca277f7be585980b8b8099b78fd515c9256c26eeda3f35bfff0022919442281291a760ea1ee97f5d6a0f1908687a7eb55aee2af0d80f0917c41e246b34fcba334a2bc0534b1df2c657ba09c652267b85d4be2305429a0b5a40a4fe15a094c336aaed2d7f7deae21eb1d0b3da6dbf5a6e889f14c05aa3416c7f6ae00a8c1722e3eba9f57b463f1efb019d6c0edbd8c0b0d2087493fcbc82c93c358c302879b37a202c2cffaed0e741ed422bc66df77af2314655d798b2d49c7cb4798312d36f37eb0629273f1c2bec7607ee2ef04e26ac2f854d875ee2e14bf2b926fdcff1845f7292454e5d942b954a26c3587cb6709319b995b7a876e0786097629079327f07f9aa61fd5e48d67cb7f69c907f1c7868c03c7781c119092572edd2fbe2aadb50d695dc68097dbf59513507b44026acefcc984bee1b8061493c6b9ddcf2dbdb8f75b271311b521ddb8f46d9822fda5238711b8bd8e8c92395faa203c7e1afa39e0e26cb4d313db929be6caae94f92c9fb5e152b28f883bdefc472f71371f0eab8e9b4bade8a0aa3dc5489e4552c0477f32781cd5545448ee687f6124f5df72ea9771ed64713527e6e9d5dfed5dddb87682732869219956f902f13bf9f8984c97660deaf10d00d5d54e1725a174aa0c2af728053b8d969fed0dcf42badf2cb2817934a5dc430b3506be2ce057316a414405538726d6f0105bbff8098b01c197280fd3ef7cc97759780b0975e81a1b09bce760777ac57683812a8547bbeda4bf6f683a036a2e4f2e70d6c88156d8a4750edc3bfefde4523a0624972fb033dbb9e0b85d4668e85dc24535758d6891d8a8cf42b442d0e2351743d60012d08b0bc961c60f197705d800da8159359939cf678c90a3514a58c67fcb92ae0fd3e2c78a45aa2be00491277e027ffdd7a5f8ef0a644a714a592ed942168fa79f51952e737c11ee8d41873380ae5a191bd6575d97c02689b2319e11eadbe129b739f6aa111315554b2047cfbb32161e3ed2d5ee4f25216749e09b31279dcbfc17de72e6c83ad5868fb99f8f865006d48030685b37bfb1f07dd5981b27d8da16efe2dedc91e356d8237213e5642f3fd2b4605a7960ca3c753168f7e6c1113352a1b705410e787d59f2eb6c88355ae1996836c0d00f8267cd1279485c53ed9c79385e45e0fa7c280080d4c7270b8eb880cca78b9ad4eb7c41b8c0e04655484eab9e84fbc9d92859f8c418c57f9cd2c34fd91ac2429255659d873588a67a58095e88e3c3d78464f5ee79d1d224cc14eee32943d64d86771f2eead1cca73c11d939cb96c3b697f1bf71845c0e50b6fb1aed3fb24f3a51fa9dca9c0bd1a8fcd0488a4589e1419778b2933e855579b486b2abd85c231339d6f47817daa873aea779358f65f1e489ddc06d053291357efce65a417aaeba560ab2f25bd41dd87dfecf6809760feb45cf21af64ff1acff201beaa044dc0975324568f31450b6ade77206bdcbd089710d6d817664e69ddcc1f2868f41661116c05a0828580820c75331a34443753735188c70d9955848d63120a7cd079b88734ffdfbf3767d4d782cb86b20bce7922b2d4cf6bce724839ce6051c483a8900576c088d163899f58f0c7581b0bc6bf71b1fa9f78f7a574b71741208aa5519848d660a0e4dc5e341c3ae0ac0ea35d1f903e4ed45597c33f8eec618766925d7f7c75daa5f242769115a49d0b2dcdcace18ac27f9b741a1d3e2837e398e238f5948de282c03dd875bd5354734c27fcb13ad68e3f2e48cb8f226862e9550db8844fc48d44f1ab6341bd35bfe9475abd6a9123677e94043d307ae76c807eb3e50d397ab6c48e3e10311059bd33b75d3faf7e1aa788991af791666ace4855f3eb29b57cc424e1207f18f917b880b4037770d394c418c204c2510085c8c07aa64bc929b23137934e33160ac563d38fa6faf565a7a8bd7f3214732d708e2ae4b226647e9ecff4a00c4b659094af1b2f38b98f9ae7df41a7bbcc011c4a3d250c041cc96cef419c7a1f23ff1d894a3ca68e8fb4282c50e6131c9a3854faae37178b62ef7e48baa908d16781984d73b1d25eb9e174894dfc37a0b07e63df867ecd438801d606e11b580ecca485e4a9cccb271e756ddbdc406a5e5bfac27ea142a5e165618aa247812edb649502e385f5860e7af3eecfdf845d376c494d2de66ebd437fb00fb1cd442855c258c048ecf425d652fa26b106dff8769367cc58c5e8f03c2071e21b8aee0917c47fcc36e161a14c5309715258caf5354a936fe8e51e24cbad62153340f43e8045a0d8df72be4112074a050000002ee33fdf152be14e74d382046a97ec10b19383cb62bb0271e7af82b0d68c0b516a04f3e941518735ab719ecaa65a41e76a00c3edc96f7ce16a507a53fe847cb17510776bd54faaf209ae2a172778294bd98999e7b081b21a58d472f51bac95b065eff5eb1d7f528ff90de8b939e191da136f39a60d6f55072e89af801cf5b0d8abd2661816f9f7b2772140a303d3e5eb8e30429dbe7089622cdab35f966e908ddaab0e5d83c9fcfc5fabe572bb4b793fa884a07ea396fd984a9aef613ad23168b843730081f82b84d65dcbe7880934c61dd0ec50ba20cc110feced5b47715ab837d4a6e6e72e20376f5ad1a2cdfe964976587708c92ed22c79e1353e857db2d5f87cb1c0874460f072262041c4344b33893e144f38d35e98abb382001f111f862ba925cf3531045765d2d9382c9ab0ed72ea1cec00fad13b3923e1715f6a7303eb2d51c4739130f788b619a3062fbc1000a82681313923399804a390bfd036a87eee3e6d771cab97cc7e38f194eaa135bdb1558580cd9b82c8b29c83a118223996e07155f04b95610b4a521b705d922bf7ced284a260359e4006d569cf54baf807286997976ca7a1ed8fca31a71e17995e422ca7abf77acf5b198d5afb0848b0e05903045d2a15cadcd39bc5681bed897685e7f8e52ac5f7abf5d339c2654a9f2579cbaecf5c6371f2754d77fe8ff289949c6aa9ca6d24a645ea4dbf71ad83f480e3a2c435b09d8f70f99245f052c1db2abad57108733985c7c52047f3cb1343aa1ca5e1a8fdbb4fd4cc25651ca900299def28f1061793a5a4b8dc4b8a8565a523bc7e8cd5e519f607e685f7a59f5eb18331cd29a3e550710a8f009629ab7beaf340883cad1287970d1b080e27abe1e73c02baa028798d92474f2e0f7da03c0c3ab19a97d7080347f3667c42dee2008d3a59cd3ac56d2d00b1859e51a0ec0f073b6e3aa8d34c533e4c6b1efde2f89f9482a1101a184a87ff756085e5de3dcf7c89542e4a26fd8774dc43d3c63b8de35b2019ff1174b33243548b53b7bb18f4985bdc9dfdf2dcdc3c19ec99d60da850d8cf6716891f06bf904ca5d5b1e68e1ccd34a3faed73c76984512b5c090bebed2b782161465b3349e72a5f5acd1721bb791e9dbb566934f810e293aca85127913113976d6002750fcb3cc2276dd7776138fe44d60f1f264e02ff755baa4a21cedcfe9ac447baa71293d83c250b745775572e34f1546e04d6c2972bd1c5ca74df0428088fc1100bab334b901c272047320c9061d2efd22cd1f36520875baa2d8eaff6579e9a92a9433c6ad4d8dbad51e5ebba8b1d40cbf564b5b6cb29a4815cfc0fb062f06ce1f785ec43f0fbddce18a11e82c00e8736c3e1537eae5119d07f728d2ededaae18c2804f2678c774df5ec7793b916ff05c09153d8ea6a7c3154d43eb672e613f5e287a1d43ee55682ac7a0570138feadf6c7faac2016d77dd0fd287b10604aa5e5ed96c49ddf855712539ccd847c26bf7070fe25bac525c2e905aa31fe0696a0812f2ba305b5cc6f0d9bc6b7aadf453dbd65e60141893a25fcca00f6d468eda17d44cc94ec4d34cc57cd154fbfa05ffaf75836828d6b82155e35329f1103a6f9c8a7899d88b872c490deb78a21ceea38bfcb5b7fff70f638d02171d0fcb853d80765d275ab416b12e010d3b16b75e37380ab9f4a23efcb7d7b0b03691c87b5c1261b666f45b7625350fc47ef4f399f9d7f698e93084bfe2289afffdd213c613701c45629a3adbdcfb90c8bad3ec875b1b61b0973b6a3baa556dfec01d309cb345d8a0ac7c32df747af24557f5aa2d7348bb267c78861ec3761ca5c22f8115217f77dc76f0ca5fbb5baa07ab1cf3eab71a36c61720870a5c1e5f5afbce7848d9a72a2b452b10d7de1dbdd9d060e9c04887d5d6b448f9e8cda175e74951ec16965967cf533a7163b20b419973499cf556168e6c81ebf49563fb845f88e7120e7ba2d413f61e2e738993619af503dcc5a102dc1b86c313460c3eb2210cb218e2fecadce97974226ddcdaf32596f14d2c872fe5668d2eb06ebb533aeecd14c30bd9e1a923f778749fb40d5f163319e0ddc23c5fcdefd9a177d2dc730006ff8dffaafa92a9cd92324721f6abbbc8f3ff32c3363d2b7bc492b0868fd47bc8204dd63085afa5873488e7e67f63ccba68df049962ac240c192edd179a4ab3406e14a0eb82b119eaab7833fba4f03e9dee3079889dad9d1451e5ebecc352d2da88fa9edc33423bb88ebd0e58520ad6eeb4d5774e9a487e043f858d1922f1ec905346fdb62b0f87bae33e507b7a2b8b675ce1d6e5f2c912915497e930c1edd94a895e4753b4ffeab65fd45a1689354127d0a97e0582b2b66fa2608aa229fe04bae57d36ddb3f5964bd22fda36e5fb2dabaaa67ccec5294d0d8217c4cda97b0282ed7027345b7cbea541f1fd3438248feab72ac2bb5f65115cce3095f5975079074354407a5cb4f9a66b60cdb0d0b7fba213ee218b97b04aa9b4a195d4340db8bb84792cb3498364863fdb53de878d0f927f8e850e4b3fa457c63140cfa73faa5e72e42b26fb190318678f4402275eb9b843f80e78e22baa4a6f5b6a6d26a4fe00a1b443e994d310275f2dc2d78d9c1da6c71055ba4df3d97712ba6753b640cae41f4188cd274ae4ea470f0a080b7849e23a70ba4671518bf0410201d6982fedbaf86213466ddf30135bb45344eac988e64e7415619a7b071b4d6a307865e4310fa02973153fbe07e1708a3e985ff3ce75a4a5b5cea39ab9ef45caed8baccd348f87b13cc636947c777ef5d9d01f32fe4c1fe2d63dc2c7fe9a99e765f8c887bd76fcc596759f636b2f8b41ba395732458ce418f55356683bbcc9b17d0c7301c4bdcb06dcec687129cecc227e60d759a4ba08b1005ca8a00083369e96a719765a24658b5876b77f372ccc55e54e1ecd62c44f50b65786c908ecc9df5210852765b9364393090b8be94c8cb68d6118326de20fe4877a26c05ed4ca0fb442abf9544df49d50db69f38b0df00aa0e6c782fb33b323eafb695b46fe1924269452cec8b7f6db6c4d079b3c277874fda6d6c6bddbeb61faa0f3faf391f9479126a7bd9411d0dd4048a3c62395c84bb282733cc2e5e517780d6dadc237770d93618a4c9421bca26be0de2b459d2da64667a7383491616ea73f9f4925d11f68369bbde88d77aa67368b2dbd8e5e7ef3fdef3e09bf8e107adb192855d31d9005f3e4276bed2afa1af6b948fcb41ddc93e8530790ad6f5447d5a215b58eabd690e017ebd9ec922a2fe55bc96745527523d2dedba961114f2836b7ebc8cc055d625b8cae97c4b6189fdb031c707f644d978032d870d979a767cf3ab95625adee128ab17ed0fde26b2c97c0fd8b468eb01dee4bcfbb9bd3cc79ab9c1b0e4b514f40da581661e17e17ee5ae6146c73ae7d6d264df30c770ca005444e68a1e5ab82e2e1745bc4d76f902f4bdf84142242cfbc1f1eb2c5546b3236979e4c7d4d46403f9f78d33e20e2376dd49f58429809367115aed9d42ece9276e8dd325a2b86af2f7cde8784e32d0384b5051ecf6c818572bd115546cecbebbfc8c0f634c8cbb8af6c53c36f095fb783800ad730374397deae43e7f5d181d0bfe99a43f2dc09d8ca2f95203c103520911e0c46923cfda1a0610f5ada25fc74f05db823b7f1ef39eb2c9b5689106dd6e59dc61b46f84747179ba2bef414a8df1de3217b583d3915ba9403449d2ea480745437abd314f1c05c83621b138af6937b8940710e0e7d2d56c4f7b219dff15f24f0630b522b17b7349ee915892620dede45d1af1d593d7ddf8dab7558c5bd40430e5fda51ee62520043f9b6b9b6d74417a9625fd2f8ec4273fecb18070349088311f191d78b4d50e11666fbde61e41612693dea9f30b12d5d15686da28c259a0eb3e0787e71a40b9cd643a54550ce8efe35a900025155c926a964cef968afa93c087c9729ca91077b31df909654ee772f90fdb89967ae513b3028807c179e343c90b7c5999ff9a02f21c6cd54dd8193d7c0ad556c634c65d83c2ee7d841d063bb7b8b65a21670e327ca6a95161720d8b20ec61bee64885d3afbc31ea00", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x90, 0x0, 0x54, {0x0, 0x2, 0x7, 0x3, 0x8, 0x7e0, {0x0, 0x3d727124, 0x7ff, 0x0, 0x5, 0xd9c, 0x0, 0x1d3, 0x3, 0x6000, 0x8, 0x0, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000001bc0)='\x00', &(0x7f0000001c00)='system.posix_acl_access\x00', &(0x7f0000002140)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x6}], {0x4, 0x1}, [{0x8, 0x3}, {0x8, 0x1}, {0x8, 0x6}], {0x10, 0x5}, {0x20, 0x4}}, 0x64, 0x0) write$6lowpan_enable(r9, &(0x7f00000002c0)='1', 0x1) r10 = syz_open_dev$evdev(&(0x7f00000007c0), 0x0, 0x8000) ioctl$EVIOCGABS3F(r10, 0x8018457f, 0x0) recvmsg(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@caif=@rfm, 0x80, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000300)=""/254, 0xfe}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/248, 0xf8}, {&(0x7f0000001540)=""/133, 0x85}, {&(0x7f0000001600)=""/169, 0xa9}], 0x8, &(0x7f0000001740)=""/68, 0x44}, 0x21) 1m38.969324834s ago: executing program 3 (id=144): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) 1m23.567698693s ago: executing program 32 (id=144): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) 8.409130075s ago: executing program 2 (id=1013): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, 0x0, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) getpgid(0x0) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x29402, &(0x7f0000000040)=ANY=[@ANYBLOB='osd%legate,\x00']) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x52, 0x0, 0x0) (async) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) (async) pipe(&(0x7f0000000040)) (async) io_setup(0x3ff, &(0x7f0000000500)) (async) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) (async) getpgid(0x0) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x29402, &(0x7f0000000040)=ANY=[@ANYBLOB='osd%legate,\x00']) (async) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) (async) 8.238898008s ago: executing program 2 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) close(r2) syz_kvm_add_vcpu$x86(r3, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001dc0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x846, 0x4, 0x7ff}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) r8 = epoll_create1(0x0) r9 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000080)={0xa002a008}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000340)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x4080) socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) close(r2) (async) syz_kvm_add_vcpu$x86(r3, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000001dc0), 0x5, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x846, 0x4, 0x7ff}}) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) (async) epoll_create1(0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000080)={0xa002a008}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000340)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x4080) (async) 8.059873435s ago: executing program 2 (id=1019): syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x24140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8eff, 0x4, 0x2}) 8.059391906s ago: executing program 2 (id=1020): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x100) mmap(&(0x7f000015c000/0x4000)=nil, 0x4000, 0x0, 0x200000005c833, r4, 0xe84e9000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r5, &(0x7f0000000240)='./file0\x00') 5.039587511s ago: executing program 2 (id=1055): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x2a780, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x5, 0x20000000, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r3]) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000500)=[@out_dx={0xaa, 0x28, {0x7c09, 0x4, 0x7}}, @cpuid={0x14, 0x18, {0x7f, 0x80000000}}, @in_dx={0x82, 0x20, {0xbb70}}, @cpuid={0x14, 0x18, {0x6, 0x20}}, @uexit={0x0, 0x18, 0xffff}, @wrmsr={0x1e, 0x20, {0x581, 0x6}}, @out_dx={0xaa, 0x28, {0xdfa2, 0x4, 0x83a8}}, @uexit={0x0, 0x18, 0xe}, @wr_crn={0x46, 0x20, {0x6e434bb4e4877a76, 0x3}}, @out_dx={0xaa, 0x28, {0xc885, 0x5, 0xbf9}}, @in_dx={0x82, 0x20, {0x444a, 0x1}}, @cpuid={0x14, 0x18, {0x8001}}, @out_dx={0xaa, 0x28, {0x8824, 0x4, 0x5}}, @code={0xa, 0x63, {"0f20d835200000000f22d80f098022a4f3430f5c5c767af3440faec8c7442400eb000000c7442402ee440000ff2c240fc7290f01c966baf80cb828fce18aef66bafc0cb800500000ef660f3882a700000000"}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @wr_crn={0x46, 0x20, {0x8, 0xc}}, @wr_drn={0x6e, 0x20, {0x3, 0x2}}, @wr_crn={0x46, 0x20, {0x2}}, @code={0xa, 0x5e, {"66450f3880617c66ba200066ed640f01f82e2ef30f12d9450f01c3b945020000b800300000ba000000000f30c4614972f5fd66baf80cb8b0271a88ef66bafc0cb800000000ef0f1a4f550f01cf"}}, @wrmsr={0x1e, 0x20, {0x87a, 0xa6}}, @in_dx={0x82, 0x20, {0x1e9, 0x7}}, @wrmsr={0x1e, 0x20, {0x199, 0x1}}, @wr_drn={0x6e, 0x20, {0x6, 0xfffffffffffffff7}}, @in_dx={0x82, 0x20, {0x8bbe}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x14, 0x18, {0x5, 0x27c}}, @in_dx={0x82, 0x20, {0x6760, 0x1}}, @wrmsr={0x1e, 0x20, {0xb41, 0x4}}, @wr_drn={0x6e, 0x20, {0x4}}, @code={0xa, 0x61, {"b8010000000f01c1470f07c463b56dd200c4e35d02d77bb92a0a00000f32c4c1f951913e86000048b8fccc0000000000000f23d00f21f835300000030f23f864400f01cb430f32470f6f8c9dbd000000"}}, @uexit={0x0, 0x18, 0x1}], 0x482}) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f00000009c0)=[@rdmsr={0x32, 0x18, {0xae8}}, @rdmsr={0x32, 0x18, {0x938}}, @cpuid={0x14, 0x18, {0xd9f8, 0xfffffffb}}], 0x48}) ioctl$KVM_GET_VCPU_EVENTS(r8, 0xc048aeca, &(0x7f0000000a80)) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IMDELTIMER(r10, 0x80044941, &(0x7f00000001c0)=0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r11 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000240)='%*.b\x0f\xea<\xb5\x7f\x92dE\x99\x14`\xc0_\xb5\x00c\xab\b\x9f\x7f4s\xbe\xa9X\xe8,6\x17\xa9\xfc(\x7f\xbaQ\xdf\x98,\xcef\xe8UxWi\xf4\xc4\xdf? \x979\xb7\xbd\x9d-\xd9\xef\xe0\v\xab\xdc\x98\xde\xf2\xa6\xdf\xfa\xa1j\xb0${\xd5\xecn\xff\x97\x98\xc0\xa61\xeb\xbe \xe0G\xfau\\W6\x02\x7f2B\xb6\xe5(Wy\xb5\xd5$\xda\xb3\xa9\aj\xd1a9\xae\xb2\x12\x88\x83\xfb\xf7\xe5\x8bXO\xf3\xc8\x19\x00\x99[\a\xfe\xe8\b', 0x0) read(r11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002dbdf800ffdbdf27090000000500050008000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 4.529000065s ago: executing program 2 (id=1059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x4, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async, rerun: 32) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="9389a8", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="ea176a152a04b495e7fb0ff9b5f8d09d47ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76159bf0c83004d8ea76704a7139ee965d3827b6317dadc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b032474185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d1baa360b9c4b50596e660e3e2eec6a251e0b5ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="251740f4cdcf13168deac77792adbc6555eef609a91b863c0fbfdc0c10b60e2b6c9cf50a4ca2fce585be8ef3ed8b030dc1ac5dafef2ccf99841337770ed3d23be7ec9d98d666206d5cc498d5b541cd3283b342f5002a29ea5e1ea6b54ef3b4ad039aa3f18e36140de7c31e6740", 0x6d}], 0x1}}], 0x3, 0x40) 4.428476619s ago: executing program 33 (id=1059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x4, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async, rerun: 32) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="9389a8", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="ea176a152a04b495e7fb0ff9b5f8d09d47ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76159bf0c83004d8ea76704a7139ee965d3827b6317dadc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b032474185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d1baa360b9c4b50596e660e3e2eec6a251e0b5ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="251740f4cdcf13168deac77792adbc6555eef609a91b863c0fbfdc0c10b60e2b6c9cf50a4ca2fce585be8ef3ed8b030dc1ac5dafef2ccf99841337770ed3d23be7ec9d98d666206d5cc498d5b541cd3283b342f5002a29ea5e1ea6b54ef3b4ad039aa3f18e36140de7c31e6740", 0x6d}], 0x1}}], 0x3, 0x40) 3.997984315s ago: executing program 4 (id=1065): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x86ff, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x21a3, 0x0, {0x3}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0xa, 0x9, 0xfffe}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d77e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r7 = socket(0x10, 0x3, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r10, 0x1, 0x1a, &(0x7f0000001240)=""/4102, &(0x7f0000000080)=0x1006) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r12, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0}]) io_getevents(0x0, 0x5, 0x5, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x0) io_submit(r12, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r6, 0x0, 0x0, 0x7f, 0x0, 0x2}]) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r14, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x9}) ioctl(r13, 0x8b32, &(0x7f0000000040)) 3.80940327s ago: executing program 1 (id=1067): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x15, 0x5, 0x0) read$alg(r0, &(0x7f0000000000)=""/46, 0x2e) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) pread64(r2, 0x0, 0x0, 0x5) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x33a3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) execve(0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0x4) socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 3.808837414s ago: executing program 4 (id=1068): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r3, r3, 0x0, 0x7f03) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xa}]}}]}, 0x3c}}, 0x480c4) 2.939725314s ago: executing program 1 (id=1069): r0 = creat(0x0, 0x0) write$qrtrtun(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0xf2, 0x0, {{0x2b, 0x4, 0x1, 0x28, 0xac, 0x65, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x54, 0x56, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@multicast2, 0xaa73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010100, 0x400}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x4}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x67}]}, @noop, @lsrr={0x83, 0xf, 0x37, [@local, @rand_addr=0x64010102, @broadcast]}, @noop, @rr={0x7, 0xb, 0xd1, [@rand_addr=0x64010101, @local]}, @lsrr={0x83, 0xb, 0x57, [@dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100]}, @timestamp_addr={0x44, 0x1c, 0xa0, 0x1, 0xb, [{@empty, 0x2}, {@loopback, 0x4}, {@empty, 0x7ff}]}]}}}}}) pipe2(&(0x7f00000001c0), 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', r1, 0x24, r0}, 0x94) 2.818335921s ago: executing program 1 (id=1070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x4008080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000e00)=@ethtool_ringparam={0x12, 0x0, 0x20000004, 0x3, 0x1, 0x40008fd, 0x0, 0x1}}) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f00000000c0)=0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x6, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000f00)={0x0, @reserved}) 1.508297558s ago: executing program 4 (id=1072): r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x7, 0x1, 0x1, 0xa9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x9, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x6, 0x1}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x40, 0x0, 0x2, 0xff, 0x94}, 0x134, &(0x7f00000001c0)={0x5, 0xf, 0x134, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x28, 0x8, 0x0, 0x8000}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x7fffffa, 0xf00, 0x1, [0xc0, 0x0, 0x3f0f, 0xff, 0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x1, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "7f6e5136da01f326b6c9fb06276518c3"}, @generic={0xed, 0x10, 0xb, "712d4d5868bcafe82e2d57f872834f5cebfe8fcacc8fcee20aa7283c06efc37613b54c8c3d407cd5299590417ef1de4244dd5f06810732e25d01c76c8da7a97cf1429358e9259a9132b5da1dae32364bfb20cd19c65792c29f6bb740f3a261c45b069f261f0c7890c8d1b56f87a1cdd91d30738f6a96b6148c5484cdc35b895b6cc8aa3fa7d741bc7ceaea45d7ce5b2db9d35c1d077f6d6b1d1001e0dacd08cc0de52a0f0a817abacb924aa67ceb600706fc01a9da271693966f52c708246f8159dc5a3836ab13fcb8d0c329a1778d09fd656b63f14d311945ca9674036b59b572f67631299224e44715"}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "207f2f251985eaa6cd9d5fcb521fdac1916c57aee7b2934542d006f8bd9afba072bb253a75ca5feb637a3be72354a40425403c7ca7e924771c63d6035e76f47d41aca9780139193ff189defec6b61c85954bd221ce716a4b50e4e37e509956c80c0e3125ac41055e12f2079a21dd460422bcdceb3698db2a0f91aad730ccdb6b5acab73f88ab8e4c6764d065bd66168de3e6969c226616b17ef170aa7cce38f2c93edb6a5be547efea49057be50026c0e0310ec0ba2b07cd4d4babb57f0267058898f6d0a515665a247b9e99381ea6"}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000580)={0x14, &(0x7f0000000340)={0x20, 0x21, 0x1d, {0x1d, 0x10, "e32b630decb2085eaa3d431fa97507afef5f0d5633d42aa3319798"}}, &(0x7f00000004c0)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "e1e349561daca11bc6606ace4635a36d9fb6243ee557c7f0b7a7f70c2baa1263ea0036ca1d81a779e9cabc5a8f0ea2e3b164af941a424152b7e6b9c4f72f2862e4d59903d66492d3b7e05bd0ceb7dc9d0ab028e7536ff340e5b095c8c2bc43eaae0f33e0af5c75ceb26255ab9ef2be85bcf65f53043a78e1614ff398b0a81294f09ee7925fd5e119d308bd8c"}}}, &(0x7f00000008c0)={0x34, &(0x7f00000005c0)={0x40, 0x15, 0xee, "989515c8f49de9d3a359286e61ed0f26221764d00e203503f5212095019cb31aed1772f3ae2b716cfb70ae1007bc1e2886120028bfa25a84eefcf254bbcaabae108eb26b48370c89a07da40a06f8e72addf00ea0a74df73189d6b9d8f6167cc77d861d5a7d1e5814aef8abfda47d023d7b6e1c9bafdba1c3288d7bcd6767cff00fca84324c9391ad5feb5f3900d36764e1bd76e7b9078d46221f07f2c821c6f2ffef15cbaa7a2b8f45acab6c59af3b2859bb87c91caecc06e2698cac4bd502b9d85ccc2fc9aed1f93d91a0b102b5a2834eaf415df6e574f59f46d4ab20efa73f6479abf66b29b2ef9ef31c497247"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xd1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x0, 0xd6, {0xd4, "fa9ac4554fa11aed57df961c446ecb5fa202e368379665073523883ca6befa43d8323049897d4f259315e829bbb6dee2b73ca9f45d2946069b7b8d1a8641d3978a8351ca3fb16b30a7ec52cc571221e13992f6244f8eae4ebe0792ed4f86d431daf41ccb78fb8d95e71cd3dc35bdf73c3ca7ae95dd14a9252561f9a3617da7e408c61465ed41c442fbe8a42b1505860dc7ed658767b90871b3c90e868f76eb097f31c4e9daf4a5b995a5cd5c4a127297cea2ee4f2221dd4e553277444345861f28cb3a9ed0203a5b6d21a8caf77a920aa5277712"}}, &(0x7f0000000840)={0x20, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x3}}) (async) unlink(&(0x7f0000000300)='.\x00') (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x60004040) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) 1.506861768s ago: executing program 1 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv6_newrule={0x28, 0x20, 0x1, 0x0, 0x27dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r1, r3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600"], 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x9, 0x5, 0x0, 0x0, {0x13f744b6fd765bb1, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x2004c8b4) 1.42795225s ago: executing program 1 (id=1076): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) (async) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f00000001c0)="4e970fef", 0x4}, {&(0x7f0000000640)="ebaa0290b964011f9fb7e501825f7ef0744095a829a37e3864b11db6b19286ea6d90a9b466174fa26ecdf92b343b4c17bb64f3afffe8d8581d5bb18f4e51b7d55d3479f18a6eb71829d56655dc3062309232b42f2e7ee8b8236ebf4d1517d8729ac7", 0x62}, {&(0x7f0000001a80)="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", 0x19a}], 0x3}, 0x20000800) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (rerun: 64) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x74, r7, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x3c}}}}, [@NL80211_ATTR_MAC={0xffffffffffffff7e, 0x6, @random="f4061f00"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xb}, @NL80211_ATTR_SSID={0x0, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "f59dd8c3036c0f70d01686da67f75b90"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="cb9418e2d2c42e3b0251eee0dea0910bbfa0c635a7b9f5e6f64f564fb6e9"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040881}, 0xc040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x64}, 0x28) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000c61cae96000000"]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001800)=ANY=[@ANYRES64=r1, @ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x4}, 0x10}, 0x94) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) 1.337309503s ago: executing program 0 (id=1077): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000001600)=[{&(0x7f0000000400)="d66e5d498785fd28a6353e6e14eb61bce44a27e9752e4151b2ba8b9c3cc1b833d2fa3831c24cce93d9", 0x29}], 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000001540)) 1.336771271s ago: executing program 1 (id=1078): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001040200"/20, @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6161766c616e00100002800a000900000000990000000008000500", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x800) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$vga_arbiter(r5, &(0x7f00000000c0)=@other={'trylock', ' ', 'io+mem'}, 0xf) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.239990028s ago: executing program 0 (id=1079): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'geneve1\x00', &(0x7f0000000400)=@ethtool_cmd={0x48, 0x7, 0x3, 0x7, 0xa1, 0x40, 0x6, 0x1, 0xb, 0xfd, 0x101, 0x3d, 0x74, 0x9, 0x1, 0x5, [0x1ff, 0x9]}}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) write$P9_RREADLINK(r0, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="21e76a55a037", 0x6}], 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000340)={0x1, 0x8}) 1.089937702s ago: executing program 0 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x1c0, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x190, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb988, 0x0, 0x1, 0xe149, 0xa, 0x8, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x51}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x3b}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18a}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x800) 1.009157026s ago: executing program 0 (id=1081): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x6c2def3743fa0709, r0}, 0x18) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x2694, 0x63d}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$getsig(0x4202, r2, 0x4, &(0x7f0000000500)) r3 = syz_open_dev$usbfs(&(0x7f0000000580), 0xffffffffffffffff, 0xc400) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x10, r3, 0x63) r4 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x7, 0x200001) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000640)={{0x2, 0x6, 0x5, 0x3, 'syz0\x00', 0x6}, 0x0, 0x1, 0xfffffff8, r2, 0x2, 0x3, 'syz0\x00', &(0x7f0000000600)=['/dev/bus/usb/00#/00#\x00', '/selinux/create\x00'], 0x25}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x5, 0x40) r5 = socket(0xa, 0x80006, 0x73a) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000780)=0x0) rt_sigqueueinfo(r6, 0x1a, &(0x7f00000007c0)={0x10, 0x5, 0x65}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000840)={0x0, @in={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2f, 0x2, 0x2, 0x6f, 0x9}, &(0x7f0000000900)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000940)={r7, 0x4}, &(0x7f0000000980)=0x8) move_pages(r6, 0x7, &(0x7f00000009c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r8 = syz_open_dev$swradio(&(0x7f0000000a40), 0x1, 0x2) ioctl$VIDIOC_QUERYSTD(r8, 0x8008563f, &(0x7f0000000a80)) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000ac0)) r9 = syz_open_pts(0xffffffffffffffff, 0x10000) ioctl$VT_WAITACTIVE(r9, 0x5607) rt_sigtimedwait(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000bc0), 0x8) r10 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000c00), 0x103, 0x0) ioctl$PTP_CLOCK_GETCAPS(r10, 0x80503d01, &(0x7f0000000c40)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d40)={'hsr0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, r12, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000e80)={{0x0, 0x7}}, 0x10) 1.008415905s ago: executing program 0 (id=1082): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) (async, rerun: 64) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r1, &(0x7f0000000140)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20000000) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', r0, 0x4000, r3}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc008aeba, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) (async) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002480), 0x40, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002580)={0x0, 0x2e67}, &(0x7f0000002500)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000002540)=@assoc_id=r8, 0x4) (async) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) (async, rerun: 64) r9 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000003c0)={0x84, @multicast1, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6f}, 0x2c) (async) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000080)) (async) writev(r10, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}], 0x2) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) read$watch_queue(r12, &(0x7f00000004c0)=""/143, 0x8f) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x38}, {@rand_addr=0x64010500, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000400)={0x3, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) (async, rerun: 32) r13 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r13, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 839.4364ms ago: executing program 0 (id=1083): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) (async, rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (rerun: 32) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000000c0)=0xffff) 85.506937ms ago: executing program 4 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x200, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x3503}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x38}}, 0x0) 84.3194ms ago: executing program 4 (id=1085): r0 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x101000) syz_emit_ethernet(0x33, &(0x7f0000000040)={@multicast, @random='\x00\x00\x00 \x00', @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x3d, 0x25, 0x0, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @multicast1, {[@ra={0x94, 0x4}]}}, {0x11, 0x7c, 0x0, @multicast1, "73f3000062"}}}}}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}]}) 0s ago: executing program 4 (id=1086): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x394000, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0xffffffffffffffb6) 0s ago: executing program 4 (id=1087): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) (async) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x1) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="07000000400200000900000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="04000040010000f795ba833790c93600a2b6c6e317f93defdb9f85617c2a382e80da601539a6c149fd64ead88b72894c490315fceb51292263e03dd57f1da01816371a5338a45be49b7e1dc1d0da4526a04104fa924624a897609cd6b6a1c53c34937f98a4a45fede2befd352ab35cef2f3d36b0220d8e3f4d3f8f256dc4869b52d0bd"], 0x48}}, 0x20000080) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x20000a, 0x0) kernel console output (not intermixed with test programs): T7912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.325748][ T7912] RSP: 002b:00007f50b944c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.325767][ T7912] RAX: ffffffffffffffda RBX: 00007f50b87e6090 RCX: 00007f50b858eec9 [ 118.325780][ T7912] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 118.325807][ T7912] RBP: 00007f50b944c090 R08: 0000000000000000 R09: 0000000000000000 [ 118.325838][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.325847][ T7912] R13: 00007f50b87e6128 R14: 00007f50b87e6090 R15: 00007fff3a806ba8 [ 118.325872][ T7912] [ 118.342330][ T7827] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 118.494384][ T7827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 118.497391][ T7827] usb 5-1: Product: syz [ 118.499145][ T7827] usb 5-1: Manufacturer: syz [ 118.500977][ T7827] usb 5-1: SerialNumber: syz [ 118.505466][ T7827] usb 5-1: config 0 descriptor?? [ 118.512320][ T7827] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 118.515012][ T7827] dvb-usb: bulk message failed: -22 (2/0) [ 118.519475][ T7827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.523097][ T7827] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 118.527022][ T7827] usb 5-1: media controller created [ 118.541128][ T7827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.616118][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 118.619576][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 118.712598][ T7921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65534 sclass=netlink_route_socket pid=7921 comm=syz.2.509 [ 118.713122][ T7898] dvb-usb: bulk message failed: -22 (3/0) [ 118.724719][ T7827] cxusb: set interface failed [ 118.727015][ T7827] dvb-usb: bulk message failed: -22 (1/0) [ 118.758487][ T7827] DVB: Unable to find symbol mt352_attach() [ 118.760606][ T7827] dvb-usb: bulk message failed: -22 (5/0) [ 118.763328][ T7827] zl10353_read_register: readreg error (reg=127, ret==-121) [ 118.765722][ T7827] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 118.816091][ T6034] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 118.826178][ T7827] rc_core: IR keymap rc-dvico-mce not found [ 118.828933][ T7827] Registered IR keymap rc-empty [ 118.833514][ T7827] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 118.839497][ T7827] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input15 [ 118.850589][ T7827] dvb-usb: schedule remote query interval to 100 msecs. [ 118.853356][ T7827] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 118.862332][ T7827] usb 5-1: USB disconnect, device number 4 [ 118.924541][ T7827] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 118.977501][ T6034] usb 6-1: Using ep0 maxpacket: 32 [ 118.981870][ T6034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.987603][ T6034] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 118.992074][ T6034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.998820][ T6034] usb 6-1: config 0 descriptor?? [ 119.005432][ T6034] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.010983][ T6034] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 119.041640][ T40] kauditd_printk_skb: 18029 callbacks suppressed [ 119.041660][ T40] audit: type=1400 audit(1759429800.902:38734): avc: denied { wake_alarm } for pid=7937 comm="syz.2.512" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.190070][ T40] audit: type=1400 audit(1759429801.052:38735): avc: denied { bind } for pid=7941 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.212114][ T6071] usb 6-1: USB disconnect, device number 5 [ 119.220895][ T6071] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 119.311496][ T7948] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.316654][ T7948] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 119.322420][ T7948] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 119.328049][ T7948] overlayfs: missing 'lowerdir' [ 119.403585][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 119.447231][ T7955] bridge_slave_1: left allmulticast mode [ 119.449960][ T7955] bridge_slave_1: left promiscuous mode [ 119.452737][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.459633][ T7955] bridge_slave_0: left allmulticast mode [ 119.462233][ T7955] bridge_slave_0: left promiscuous mode [ 119.465498][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.832938][ T40] audit: type=1400 audit(1759429801.692:38736): avc: denied { write } for pid=7962 comm="syz.0.521" name="/" dev="9p" ino=71827649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.845071][ T40] audit: type=1400 audit(1759429801.692:38737): avc: denied { mounton } for pid=7962 comm="syz.0.521" path="/149/file0" dev="9p" ino=71827649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.008912][ T40] audit: type=1400 audit(1759429801.872:38738): avc: denied { mounton } for pid=7983 comm="syz.1.528" path="/proc/459/task/460/net/rpc" dev="proc" ino=4026533203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 120.079431][ T7985] block nbd2: shutting down sockets [ 120.122661][ T7996] netlink: 'syz.4.532': attribute type 20 has an invalid length. [ 120.124072][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 120.134266][ T40] audit: type=1400 audit(1759429801.982:38739): avc: denied { watch } for pid=7989 comm="syz.0.530" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 120.137346][ T7992] 9pnet_fd: p9_fd_create_tcp (7992): problem connecting socket to 127.0.0.1 [ 120.147993][ T40] audit: type=1400 audit(1759429801.992:38740): avc: denied { setopt } for pid=7995 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.156657][ T40] audit: type=1400 audit(1759429801.992:38741): avc: denied { mounton } for pid=7989 comm="syz.0.530" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 120.295946][ T40] audit: type=1400 audit(1759429802.152:38742): avc: denied { write } for pid=8005 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.367783][ T8030] fuse: Unknown parameter 'g ' [ 120.414282][ T40] audit: type=1400 audit(1759429802.272:38743): avc: denied { getopt } for pid=8033 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.420032][ T8035] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20002 [ 120.445981][ T835] vhci_hcd: vhci_device speed not set [ 120.491468][ T8041] FAULT_INJECTION: forcing a failure. [ 120.491468][ T8041] name failslab, interval 1, probability 0, space 0, times 0 [ 120.498376][ T8041] CPU: 2 UID: 0 PID: 8041 Comm: syz.4.543 Not tainted syzkaller #0 PREEMPT(full) [ 120.498394][ T8041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.498401][ T8041] Call Trace: [ 120.498405][ T8041] [ 120.498409][ T8041] dump_stack_lvl+0x16c/0x1f0 [ 120.498458][ T8041] should_fail_ex+0x512/0x640 [ 120.498479][ T8041] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 120.498499][ T8041] ? __pfx_fuse_inode_set+0x10/0x10 [ 120.498515][ T8041] should_failslab+0xc2/0x120 [ 120.498526][ T8041] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 120.498545][ T8041] ? fuse_alloc_inode+0x2c/0x350 [ 120.498562][ T8041] ? __pfx_fuse_inode_eq+0x10/0x10 [ 120.498578][ T8041] ? __pfx_fuse_inode_set+0x10/0x10 [ 120.498593][ T8041] fuse_alloc_inode+0x2c/0x350 [ 120.498610][ T8041] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 120.498627][ T8041] alloc_inode+0x61/0x240 [ 120.498642][ T8041] iget5_locked+0x67/0xb0 [ 120.498657][ T8041] fuse_iget+0x165/0x8e0 [ 120.498678][ T8041] ? __pfx_fuse_iget+0x10/0x10 [ 120.498697][ T8041] ? __fuse_simple_request+0x465/0xcb0 [ 120.498715][ T8041] fuse_lookup_name+0x481/0x780 [ 120.498735][ T8041] ? __pfx_fuse_lookup_name+0x10/0x10 [ 120.498753][ T8041] ? __lock_acquire+0x62e/0x1ce0 [ 120.498773][ T8041] ? find_held_lock+0x2b/0x80 [ 120.498793][ T8041] fuse_lookup+0x26a/0x560 [ 120.498812][ T8041] ? __pfx_fuse_lookup+0x10/0x10 [ 120.498838][ T8041] ? do_raw_spin_unlock+0x172/0x230 [ 120.498853][ T8041] ? _raw_spin_unlock+0x28/0x50 [ 120.498869][ T8041] lookup_one_qstr_excl+0x1ce/0x250 [ 120.498884][ T8041] ? mnt_want_write+0x161/0x450 [ 120.498902][ T8041] do_renameat2+0x575/0xc20 [ 120.498919][ T8041] ? __pfx_do_renameat2+0x10/0x10 [ 120.498933][ T8041] ? find_held_lock+0x2b/0x80 [ 120.498948][ T8041] ? __might_fault+0xe3/0x190 [ 120.498965][ T8041] ? __might_fault+0x13b/0x190 [ 120.498989][ T8041] ? getname_flags.part.0+0x1c5/0x550 [ 120.499007][ T8041] __x64_sys_rename+0x7d/0xa0 [ 120.499020][ T8041] do_syscall_64+0xcd/0x4e0 [ 120.499039][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.499051][ T8041] RIP: 0033:0x7f50b858eec9 [ 120.499061][ T8041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.499072][ T8041] RSP: 002b:00007f50b942c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 120.499084][ T8041] RAX: ffffffffffffffda RBX: 00007f50b87e6180 RCX: 00007f50b858eec9 [ 120.499091][ T8041] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 120.499098][ T8041] RBP: 00007f50b942c090 R08: 0000000000000000 R09: 0000000000000000 [ 120.499105][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.499111][ T8041] R13: 00007f50b87e6218 R14: 00007f50b87e6180 R15: 00007fff3a806ba8 [ 120.499126][ T8041] [ 120.860444][ T8058] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.550'. [ 121.017914][ T8071] fuse: Unknown parameter 'rootmnĀ^de' [ 121.105705][ T8074] FAULT_INJECTION: forcing a failure. [ 121.105705][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 121.112157][ T8074] CPU: 2 UID: 0 PID: 8074 Comm: syz.1.555 Not tainted syzkaller #0 PREEMPT(full) [ 121.112204][ T8074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.112220][ T8074] Call Trace: [ 121.112228][ T8074] [ 121.112238][ T8074] dump_stack_lvl+0x16c/0x1f0 [ 121.112280][ T8074] should_fail_ex+0x512/0x640 [ 121.112309][ T8074] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 121.112346][ T8074] ? __pfx_fuse_inode_set+0x10/0x10 [ 121.112377][ T8074] should_failslab+0xc2/0x120 [ 121.112401][ T8074] __kmalloc_cache_noprof+0x6a/0x3e0 [ 121.112432][ T8074] ? lockdep_init_map_type+0x5c/0x280 [ 121.112457][ T8074] ? fuse_alloc_inode+0x21f/0x350 [ 121.112493][ T8074] ? __pfx_fuse_inode_eq+0x10/0x10 [ 121.112524][ T8074] ? __pfx_fuse_inode_set+0x10/0x10 [ 121.112553][ T8074] fuse_alloc_inode+0x21f/0x350 [ 121.112586][ T8074] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 121.112619][ T8074] alloc_inode+0x61/0x240 [ 121.112649][ T8074] iget5_locked+0x67/0xb0 [ 121.112683][ T8074] fuse_iget+0x165/0x8e0 [ 121.112725][ T8074] ? __pfx_fuse_iget+0x10/0x10 [ 121.112765][ T8074] ? __fuse_simple_request+0x465/0xcb0 [ 121.112803][ T8074] fuse_lookup_name+0x481/0x780 [ 121.112847][ T8074] ? __pfx_fuse_lookup_name+0x10/0x10 [ 121.112883][ T8074] ? __lock_acquire+0x62e/0x1ce0 [ 121.112927][ T8074] ? find_held_lock+0x2b/0x80 [ 121.112971][ T8074] fuse_lookup+0x26a/0x560 [ 121.113009][ T8074] ? __pfx_fuse_lookup+0x10/0x10 [ 121.113065][ T8074] ? do_raw_spin_unlock+0x172/0x230 [ 121.113097][ T8074] ? _raw_spin_unlock+0x28/0x50 [ 121.113131][ T8074] lookup_one_qstr_excl+0x1ce/0x250 [ 121.113160][ T8074] ? mnt_want_write+0x161/0x450 [ 121.113210][ T8074] do_renameat2+0x575/0xc20 [ 121.113249][ T8074] ? __pfx_do_renameat2+0x10/0x10 [ 121.113279][ T8074] ? find_held_lock+0x2b/0x80 [ 121.113310][ T8074] ? __might_fault+0xe3/0x190 [ 121.113345][ T8074] ? __might_fault+0x13b/0x190 [ 121.113399][ T8074] ? getname_flags.part.0+0x1c5/0x550 [ 121.113441][ T8074] __x64_sys_rename+0x7d/0xa0 [ 121.113469][ T8074] do_syscall_64+0xcd/0x4e0 [ 121.113508][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.113532][ T8074] RIP: 0033:0x7fee4678eec9 [ 121.113553][ T8074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.113577][ T8074] RSP: 002b:00007fee47540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 121.113602][ T8074] RAX: ffffffffffffffda RBX: 00007fee469e6180 RCX: 00007fee4678eec9 [ 121.113618][ T8074] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 121.113633][ T8074] RBP: 00007fee47540090 R08: 0000000000000000 R09: 0000000000000000 [ 121.113660][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.113674][ T8074] R13: 00007fee469e6218 R14: 00007fee469e6180 R15: 00007fffd1e7dd08 [ 121.113711][ T8074] [ 121.156360][ T6071] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 121.283229][ T8076] program syz.1.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.386322][ T6071] usb 5-1: device descriptor read/64, error -71 [ 121.395665][ T8083] tipc: Enabling of bearer rejected, failed to enable media [ 121.516377][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 121.599063][ T8096] tipc: Started in network mode [ 121.601918][ T8096] tipc: Node identity , cluster identity 4711 [ 121.605001][ T8096] tipc: Failed to obtain node identity [ 121.607576][ T8096] tipc: Enabling of bearer rejected, failed to enable media [ 121.635956][ T6071] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 121.694587][ T8103] netlink: 72 bytes leftover after parsing attributes in process `syz.4.566'. [ 121.776247][ T6071] usb 5-1: device descriptor read/64, error -71 [ 121.887627][ T6071] usb usb5-port1: attempt power cycle [ 121.910270][ T8110] netlink: 'syz.2.568': attribute type 11 has an invalid length. [ 122.086890][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.571'. [ 122.091773][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 122.127372][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'. [ 122.246058][ T6071] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 122.266910][ T6071] usb 5-1: device descriptor read/8, error -71 [ 122.480520][ T8159] overlay: Unknown parameter './file0' [ 122.526316][ T6071] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 122.559820][ T6071] usb 5-1: device descriptor read/8, error -71 [ 122.667775][ T6071] usb usb5-port1: unable to enumerate USB device [ 122.757353][ T8182] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 122.765079][ T8182] nbd: couldn't find device at index -2140663184 [ 122.812727][ T8184] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 123.465300][ T8190] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 123.661906][ T8204] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 123.898468][ T8218] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 123.910817][ T8225] sctp: [Deprecated]: syz.2.603 (pid 8225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.910817][ T8225] Use struct sctp_sack_info instead [ 123.957528][ T8235] FAULT_INJECTION: forcing a failure. [ 123.957528][ T8235] name failslab, interval 1, probability 0, space 0, times 0 [ 123.963780][ T8235] CPU: 0 UID: 0 PID: 8235 Comm: syz.2.606 Not tainted syzkaller #0 PREEMPT(full) [ 123.963805][ T8235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.963816][ T8235] Call Trace: [ 123.963826][ T8235] [ 123.963834][ T8235] dump_stack_lvl+0x16c/0x1f0 [ 123.963864][ T8235] should_fail_ex+0x512/0x640 [ 123.963886][ T8235] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 123.963910][ T8235] should_failslab+0xc2/0x120 [ 123.963926][ T8235] __kmalloc_cache_noprof+0x6a/0x3e0 [ 123.963946][ T8235] ? __genradix_ptr_alloc+0x340/0x5f0 [ 123.963967][ T8235] ? sctp_auth_shkey_create+0x9e/0x210 [ 123.964007][ T8235] sctp_auth_shkey_create+0x9e/0x210 [ 123.964034][ T8235] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 123.964060][ T8235] sctp_association_new+0x19ad/0x2a00 [ 123.964090][ T8235] sctp_connect_new_asoc+0x1a8/0x770 [ 123.964117][ T8235] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 123.964142][ T8235] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 123.964167][ T8235] sctp_sendmsg+0x1560/0x1e10 [ 123.964187][ T8235] ? __pfx_sctp_sendmsg+0x10/0x10 [ 123.964205][ T8235] ? __pfx_sock_has_perm+0x10/0x10 [ 123.964231][ T8235] ? __pfx_sctp_sendmsg+0x10/0x10 [ 123.964246][ T8235] inet_sendmsg+0x119/0x140 [ 123.964266][ T8235] __sys_sendto+0x43c/0x520 [ 123.964288][ T8235] ? __pfx___sys_sendto+0x10/0x10 [ 123.964326][ T8235] ? ksys_write+0x1ac/0x250 [ 123.964355][ T8235] ? __pfx_ksys_write+0x10/0x10 [ 123.964380][ T8235] __x64_sys_sendto+0xe0/0x1c0 [ 123.964397][ T8235] ? do_syscall_64+0x91/0x4e0 [ 123.964419][ T8235] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.964440][ T8235] do_syscall_64+0xcd/0x4e0 [ 123.964464][ T8235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.964481][ T8235] RIP: 0033:0x7fcb0838eec9 [ 123.964495][ T8235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.964510][ T8235] RSP: 002b:00007fcb091ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 123.964527][ T8235] RAX: ffffffffffffffda RBX: 00007fcb085e5fa0 RCX: 00007fcb0838eec9 [ 123.964538][ T8235] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 123.964547][ T8235] RBP: 00007fcb091ee090 R08: 0000200000000140 R09: 000000000000001c [ 123.964557][ T8235] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 123.964566][ T8235] R13: 00007fcb085e6038 R14: 00007fcb085e5fa0 R15: 00007fff9fce0d38 [ 123.964586][ T8235] [ 124.072058][ T8239] binfmt_misc: register: failed to install interpreter file ./file0 [ 124.123771][ T8237] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 124.890068][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 124.890086][ T40] audit: type=1400 audit(1759429806.752:38755): avc: denied { read write } for pid=8265 comm="syz.4.615" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 124.892804][ T8266] __nla_validate_parse: 12 callbacks suppressed [ 124.892816][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 124.902253][ T40] audit: type=1400 audit(1759429806.752:38756): avc: denied { open } for pid=8265 comm="syz.4.615" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 124.919988][ T40] audit: type=1400 audit(1759429806.752:38757): avc: denied { ioctl } for pid=8265 comm="syz.4.615" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 124.923515][ T8268] FAULT_INJECTION: forcing a failure. [ 124.923515][ T8268] name failslab, interval 1, probability 0, space 0, times 0 [ 124.936544][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.1.616 Not tainted syzkaller #0 PREEMPT(full) [ 124.936562][ T8268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.936569][ T8268] Call Trace: [ 124.936573][ T8268] [ 124.936577][ T8268] dump_stack_lvl+0x16c/0x1f0 [ 124.936599][ T8268] should_fail_ex+0x512/0x640 [ 124.936614][ T8268] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 124.936632][ T8268] should_failslab+0xc2/0x120 [ 124.936643][ T8268] __kmalloc_cache_noprof+0x6a/0x3e0 [ 124.936658][ T8268] ? sctp_add_bind_addr+0xae/0x3f0 [ 124.936674][ T8268] sctp_add_bind_addr+0xae/0x3f0 [ 124.936689][ T8268] sctp_copy_one_addr.part.0+0xd6/0x120 [ 124.936704][ T8268] sctp_bind_addr_copy+0x1b4/0x530 [ 124.936721][ T8268] sctp_connect_new_asoc+0x1c9/0x770 [ 124.936740][ T8268] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 124.936759][ T8268] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 124.936778][ T8268] sctp_sendmsg+0x1560/0x1e10 [ 124.936792][ T8268] ? __pfx_sctp_sendmsg+0x10/0x10 [ 124.936805][ T8268] ? __pfx_sock_has_perm+0x10/0x10 [ 124.936823][ T8268] ? __pfx_sctp_sendmsg+0x10/0x10 [ 124.936833][ T8268] inet_sendmsg+0x119/0x140 [ 124.936848][ T8268] __sys_sendto+0x43c/0x520 [ 124.936864][ T8268] ? __pfx___sys_sendto+0x10/0x10 [ 124.936888][ T8268] ? ksys_write+0x1ac/0x250 [ 124.936906][ T8268] ? __pfx_ksys_write+0x10/0x10 [ 124.936924][ T8268] __x64_sys_sendto+0xe0/0x1c0 [ 124.936937][ T8268] ? do_syscall_64+0x91/0x4e0 [ 124.936954][ T8268] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.936969][ T8268] do_syscall_64+0xcd/0x4e0 [ 124.936986][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.936998][ T8268] RIP: 0033:0x7fee4678eec9 [ 124.937008][ T8268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.937018][ T8268] RSP: 002b:00007fee47582038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 124.937030][ T8268] RAX: ffffffffffffffda RBX: 00007fee469e5fa0 RCX: 00007fee4678eec9 [ 124.937037][ T8268] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 124.937043][ T8268] RBP: 00007fee47582090 R08: 0000200000000140 R09: 000000000000001c [ 124.937050][ T8268] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 124.937056][ T8268] R13: 00007fee469e6038 R14: 00007fee469e5fa0 R15: 00007fffd1e7dd08 [ 124.937070][ T8268] [ 125.139240][ T8282] ceph: Path missing in source [ 125.141392][ T8283] random: crng reseeded on system resumption [ 125.147672][ T8282] Restarting kernel threads ... [ 125.152003][ T8282] Done restarting kernel threads. [ 125.235427][ T8291] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 125.336109][ T8298] FAULT_INJECTION: forcing a failure. [ 125.336109][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 125.342131][ T8298] CPU: 3 UID: 0 PID: 8298 Comm: syz.4.625 Not tainted syzkaller #0 PREEMPT(full) [ 125.342155][ T8298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.342165][ T8298] Call Trace: [ 125.342170][ T8298] [ 125.342177][ T8298] dump_stack_lvl+0x16c/0x1f0 [ 125.342206][ T8298] should_fail_ex+0x512/0x640 [ 125.342225][ T8298] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 125.342250][ T8298] should_failslab+0xc2/0x120 [ 125.342265][ T8298] __kmalloc_cache_noprof+0x6a/0x3e0 [ 125.342285][ T8298] ? __genradix_ptr_alloc+0x340/0x5f0 [ 125.342307][ T8298] ? sctp_auth_shkey_create+0x9e/0x210 [ 125.342333][ T8298] sctp_auth_shkey_create+0x9e/0x210 [ 125.342356][ T8298] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 125.342383][ T8298] sctp_association_new+0x19ad/0x2a00 [ 125.342421][ T8298] sctp_connect_new_asoc+0x1a8/0x770 [ 125.342450][ T8298] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 125.342484][ T8298] sctp_sendmsg+0x1560/0x1e10 [ 125.342508][ T8298] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.342530][ T8298] ? __pfx_sock_has_perm+0x10/0x10 [ 125.342563][ T8298] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.342581][ T8298] inet_sendmsg+0x119/0x140 [ 125.342603][ T8298] __sys_sendto+0x43c/0x520 [ 125.342626][ T8298] ? __pfx___sys_sendto+0x10/0x10 [ 125.342669][ T8298] ? ksys_write+0x1ac/0x250 [ 125.342695][ T8298] ? __pfx_ksys_write+0x10/0x10 [ 125.342723][ T8298] __x64_sys_sendto+0xe0/0x1c0 [ 125.342744][ T8298] ? do_syscall_64+0x91/0x4e0 [ 125.342769][ T8298] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.342791][ T8298] do_syscall_64+0xcd/0x4e0 [ 125.342818][ T8298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.342836][ T8298] RIP: 0033:0x7f50b858eec9 [ 125.342851][ T8298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.342868][ T8298] RSP: 002b:00007f50b946e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.342886][ T8298] RAX: ffffffffffffffda RBX: 00007f50b87e5fa0 RCX: 00007f50b858eec9 [ 125.342898][ T8298] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 125.342909][ T8298] RBP: 00007f50b946e090 R08: 0000200000000140 R09: 000000000000001c [ 125.342921][ T8298] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 125.342931][ T8298] R13: 00007f50b87e6038 R14: 00007f50b87e5fa0 R15: 00007fff3a806ba8 [ 125.342955][ T8298] [ 125.506001][ T1329] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.583559][ T8302] FAULT_INJECTION: forcing a failure. [ 125.583559][ T8302] name failslab, interval 1, probability 0, space 0, times 0 [ 125.590518][ T8302] CPU: 2 UID: 0 PID: 8302 Comm: syz.4.626 Not tainted syzkaller #0 PREEMPT(full) [ 125.590546][ T8302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.590561][ T8302] Call Trace: [ 125.590568][ T8302] [ 125.590575][ T8302] dump_stack_lvl+0x16c/0x1f0 [ 125.590606][ T8302] should_fail_ex+0x512/0x640 [ 125.590630][ T8302] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 125.590665][ T8302] should_failslab+0xc2/0x120 [ 125.590686][ T8302] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.590725][ T8302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.590745][ T8302] ? fuse_request_alloc+0x22/0x200 [ 125.590772][ T8302] fuse_request_alloc+0x22/0x200 [ 125.590795][ T8302] fuse_get_req+0x748/0xfd0 [ 125.590824][ T8302] ? __pfx_fuse_get_req+0x10/0x10 [ 125.590857][ T8302] __fuse_simple_request+0xb8/0xcb0 [ 125.590882][ T8302] ? __asan_memset+0x23/0x50 [ 125.590912][ T8302] fuse_dentry_revalidate+0x406/0xb90 [ 125.590942][ T8302] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 125.590970][ T8302] ? __lock_acquire+0xb97/0x1ce0 [ 125.591013][ T8302] ? __d_lookup+0x266/0x4a0 [ 125.591043][ T8302] lookup_dcache+0xf2/0x170 [ 125.591070][ T8302] lookup_one_qstr_excl+0x2a/0x250 [ 125.591094][ T8302] ? mnt_want_write+0x161/0x450 [ 125.591119][ T8302] do_renameat2+0x5b2/0xc20 [ 125.591148][ T8302] ? __pfx_do_renameat2+0x10/0x10 [ 125.591167][ T8302] ? find_held_lock+0x2b/0x80 [ 125.591190][ T8302] ? __might_fault+0xe3/0x190 [ 125.591221][ T8302] ? __might_fault+0x13b/0x190 [ 125.591270][ T8302] ? getname_flags.part.0+0x1c5/0x550 [ 125.591302][ T8302] __x64_sys_rename+0x7d/0xa0 [ 125.591324][ T8302] do_syscall_64+0xcd/0x4e0 [ 125.591356][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.591375][ T8302] RIP: 0033:0x7f50b858eec9 [ 125.591393][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.591412][ T8302] RSP: 002b:00007f50b942c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 125.591432][ T8302] RAX: ffffffffffffffda RBX: 00007f50b87e6180 RCX: 00007f50b858eec9 [ 125.591444][ T8302] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 125.591456][ T8302] RBP: 00007f50b942c090 R08: 0000000000000000 R09: 0000000000000000 [ 125.591470][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.591480][ T8302] R13: 00007f50b87e6218 R14: 00007f50b87e6180 R15: 00007fff3a806ba8 [ 125.591509][ T8302] [ 125.704509][ C2] vkms_vblank_simulate: vblank timer overrun [ 125.707388][ C2] hrtimer: interrupt took 111563070 ns [ 125.709239][ T1329] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.713625][ T1329] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.718832][ T1329] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.722132][ T1329] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.726264][ T1329] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.731097][ T1329] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.734374][ T1329] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.737589][ T1329] usb 6-1: Product: syz [ 125.739033][ T1329] usb 6-1: Manufacturer: syz [ 125.746816][ T1329] cdc_wdm 6-1:1.0: skipping garbage [ 125.749353][ T1329] cdc_wdm 6-1:1.0: skipping garbage [ 125.753692][ T1329] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 125.756571][ T1329] cdc_wdm 6-1:1.0: Unknown control protocol [ 125.807456][ C2] vkms_vblank_simulate: vblank timer overrun [ 125.946160][ T40] audit: type=1400 audit(1759429807.802:38758): avc: denied { read write } for pid=8280 comm="syz.1.621" name="cdc-wdm0" dev="devtmpfs" ino=2948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 125.946549][ T8282] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 125.957311][ T40] audit: type=1400 audit(1759429807.812:38759): avc: denied { open } for pid=8280 comm="syz.1.621" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 125.979931][ T835] usb 6-1: USB disconnect, device number 6 [ 126.197871][ T8304] netem: incorrect gi model size [ 126.200394][ T8304] netem: change failed [ 126.657883][ T8332] mmap: syz.0.635 (8332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.845108][ T8344] FAULT_INJECTION: forcing a failure. [ 126.845108][ T8344] name failslab, interval 1, probability 0, space 0, times 0 [ 126.853894][ T8344] CPU: 0 UID: 0 PID: 8344 Comm: syz.0.637 Not tainted syzkaller #0 PREEMPT(full) [ 126.853920][ T8344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.853930][ T8344] Call Trace: [ 126.853936][ T8344] [ 126.853943][ T8344] dump_stack_lvl+0x16c/0x1f0 [ 126.853973][ T8344] should_fail_ex+0x512/0x640 [ 126.854009][ T8344] ? fs_reclaim_acquire+0xae/0x150 [ 126.854031][ T8344] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 126.854053][ T8344] should_failslab+0xc2/0x120 [ 126.854069][ T8344] __kmalloc_noprof+0xd2/0x510 [ 126.854098][ T8344] tomoyo_realpath_from_path+0xc2/0x6e0 [ 126.854121][ T8344] ? tomoyo_profile+0x47/0x60 [ 126.854147][ T8344] tomoyo_path2_perm+0x2a1/0x710 [ 126.854163][ T8344] ? tomoyo_path2_perm+0x293/0x710 [ 126.854181][ T8344] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 126.854200][ T8344] ? fuse_dentry_settime+0x12a/0x280 [ 126.854224][ T8344] ? fuse_dentry_revalidate+0x5c7/0xb90 [ 126.854276][ T8344] tomoyo_path_rename+0xfc/0x1a0 [ 126.854298][ T8344] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 126.854330][ T8344] security_path_rename+0x18e/0x3c0 [ 126.854353][ T8344] do_renameat2+0x73d/0xc20 [ 126.854378][ T8344] ? __pfx_do_renameat2+0x10/0x10 [ 126.854396][ T8344] ? find_held_lock+0x2b/0x80 [ 126.854417][ T8344] ? __might_fault+0xe3/0x190 [ 126.854446][ T8344] ? __might_fault+0x13b/0x190 [ 126.854480][ T8344] ? getname_flags.part.0+0x1c5/0x550 [ 126.854505][ T8344] __x64_sys_rename+0x7d/0xa0 [ 126.854522][ T8344] do_syscall_64+0xcd/0x4e0 [ 126.854546][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.854562][ T8344] RIP: 0033:0x7f7359d8eec9 [ 126.854575][ T8344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.854591][ T8344] RSP: 002b:00007f735abdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 126.854608][ T8344] RAX: ffffffffffffffda RBX: 00007f7359fe6180 RCX: 00007f7359d8eec9 [ 126.854618][ T8344] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 126.854628][ T8344] RBP: 00007f735abdf090 R08: 0000000000000000 R09: 0000000000000000 [ 126.854638][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.854648][ T8344] R13: 00007f7359fe6218 R14: 00007f7359fe6180 R15: 00007ffdc6170818 [ 126.854670][ T8344] [ 126.854712][ T8344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.993993][ T8349] netlink: 10 bytes leftover after parsing attributes in process `syz.0.640'. [ 127.112467][ T40] audit: type=1400 audit(1759429808.972:38760): avc: denied { write } for pid=8353 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.119704][ T8357] sp0: Synchronizing with TNC [ 127.127325][ T8358] macvtap1: entered allmulticast mode [ 127.128035][ T8357] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 127.129716][ T8358] veth0_macvtap: entered allmulticast mode [ 127.143159][ T8357] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.308167][ T8372] FAULT_INJECTION: forcing a failure. [ 127.308167][ T8372] name failslab, interval 1, probability 0, space 0, times 0 [ 127.313984][ T8372] CPU: 2 UID: 0 PID: 8372 Comm: syz.1.648 Not tainted syzkaller #0 PREEMPT(full) [ 127.314003][ T8372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.314010][ T8372] Call Trace: [ 127.314015][ T8372] [ 127.314021][ T8372] dump_stack_lvl+0x16c/0x1f0 [ 127.314047][ T8372] should_fail_ex+0x512/0x640 [ 127.314069][ T8372] should_failslab+0xc2/0x120 [ 127.314082][ T8372] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 127.314107][ T8372] ? __alloc_skb+0x2b2/0x380 [ 127.314125][ T8372] __alloc_skb+0x2b2/0x380 [ 127.314209][ T8372] ? __pfx___alloc_skb+0x10/0x10 [ 127.314229][ T8372] ? sctp_bind_addrs_to_raw+0x2c9/0x3e0 [ 127.314251][ T8372] ? __lock_acquire+0x62e/0x1ce0 [ 127.314279][ T8372] _sctp_make_chunk+0x51/0x270 [ 127.314299][ T8372] sctp_make_control+0x2f/0x2d0 [ 127.314321][ T8372] sctp_make_init+0x6f0/0xdc0 [ 127.314348][ T8372] ? __pfx_sctp_make_init+0x10/0x10 [ 127.314364][ T8372] ? kernel_text_address+0x8d/0x100 [ 127.314380][ T8372] ? unwind_get_return_address+0x59/0xa0 [ 127.314395][ T8372] ? arch_stack_walk+0xa6/0x100 [ 127.314413][ T8372] ? sctp_sm_lookup_event+0x15b/0x570 [ 127.314426][ T8372] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 127.314441][ T8372] sctp_sf_do_prm_asoc+0xbf/0x360 [ 127.314459][ T8372] ? __pfx_sctp_pname+0x10/0x10 [ 127.314472][ T8372] sctp_do_sm+0x181/0x5c80 [ 127.314486][ T8372] ? kasan_save_stack+0x42/0x60 [ 127.314502][ T8372] ? kasan_save_stack+0x33/0x60 [ 127.314569][ T8372] ? kasan_save_track+0x14/0x30 [ 127.314596][ T8372] ? __pfx_sctp_do_sm+0x10/0x10 [ 127.314612][ T8372] ? sctp_sendmsg+0xea2/0x1e10 [ 127.314622][ T8372] ? __sys_sendto+0x43c/0x520 [ 127.314637][ T8372] ? __x64_sys_sendto+0xe0/0x1c0 [ 127.314650][ T8372] ? do_syscall_64+0xcd/0x4e0 [ 127.314667][ T8372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.314693][ T8372] ? sk_leave_memory_pressure+0xdd/0x130 [ 127.314705][ T8372] ? __sk_mem_raise_allocated+0x94d/0x1670 [ 127.314725][ T8372] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 127.314739][ T8372] sctp_sendmsg_to_asoc+0xa44/0x1bf0 [ 127.314757][ T8372] ? sctp_assoc_set_primary+0x177/0x300 [ 127.314773][ T8372] ? sctp_assoc_add_peer+0x252/0x1550 [ 127.314794][ T8372] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 127.314810][ T8372] ? sctp_connect_new_asoc+0x41e/0x770 [ 127.314830][ T8372] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 127.314848][ T8372] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 127.314867][ T8372] sctp_sendmsg+0xea2/0x1e10 [ 127.314881][ T8372] ? __pfx_sctp_sendmsg+0x10/0x10 [ 127.314894][ T8372] ? __pfx_sock_has_perm+0x10/0x10 [ 127.314915][ T8372] ? __pfx_sctp_sendmsg+0x10/0x10 [ 127.314929][ T8372] inet_sendmsg+0x119/0x140 [ 127.314951][ T8372] __sys_sendto+0x43c/0x520 [ 127.314969][ T8372] ? __pfx___sys_sendto+0x10/0x10 [ 127.315003][ T8372] ? ksys_write+0x1ac/0x250 [ 127.315026][ T8372] ? __pfx_ksys_write+0x10/0x10 [ 127.315053][ T8372] __x64_sys_sendto+0xe0/0x1c0 [ 127.315070][ T8372] ? do_syscall_64+0x91/0x4e0 [ 127.315090][ T8372] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.315111][ T8372] do_syscall_64+0xcd/0x4e0 [ 127.315133][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.315148][ T8372] RIP: 0033:0x7fee4678eec9 [ 127.315164][ T8372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.315183][ T8372] RSP: 002b:00007fee47582038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 127.315199][ T8372] RAX: ffffffffffffffda RBX: 00007fee469e5fa0 RCX: 00007fee4678eec9 [ 127.315210][ T8372] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 127.315222][ T8372] RBP: 00007fee47582090 R08: 0000200000000140 R09: 000000000000001c [ 127.315232][ T8372] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 127.315241][ T8372] R13: 00007fee469e6038 R14: 00007fee469e5fa0 R15: 00007fffd1e7dd08 [ 127.315263][ T8372] [ 127.471989][ C2] vkms_vblank_simulate: vblank timer overrun [ 127.600871][ T8383] FAULT_INJECTION: forcing a failure. [ 127.600871][ T8383] name failslab, interval 1, probability 0, space 0, times 0 [ 127.604963][ T8383] CPU: 3 UID: 0 PID: 8383 Comm: syz.4.649 Not tainted syzkaller #0 PREEMPT(full) [ 127.604979][ T8383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.604987][ T8383] Call Trace: [ 127.604992][ T8383] [ 127.604997][ T8383] dump_stack_lvl+0x16c/0x1f0 [ 127.605018][ T8383] should_fail_ex+0x512/0x640 [ 127.605033][ T8383] ? fs_reclaim_acquire+0xae/0x150 [ 127.605048][ T8383] ? tomoyo_encode2+0x100/0x3e0 [ 127.605063][ T8383] should_failslab+0xc2/0x120 [ 127.605075][ T8383] __kmalloc_noprof+0xd2/0x510 [ 127.605091][ T8383] ? d_absolute_path+0x136/0x1a0 [ 127.605108][ T8383] tomoyo_encode2+0x100/0x3e0 [ 127.605124][ T8383] tomoyo_encode+0x29/0x50 [ 127.605138][ T8383] tomoyo_realpath_from_path+0x18f/0x6e0 [ 127.605157][ T8383] tomoyo_path2_perm+0x2a1/0x710 [ 127.605168][ T8383] ? tomoyo_path2_perm+0x293/0x710 [ 127.605182][ T8383] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 127.605195][ T8383] ? fuse_dentry_settime+0x12a/0x280 [ 127.605212][ T8383] ? fuse_dentry_revalidate+0x5c7/0xb90 [ 127.605246][ T8383] tomoyo_path_rename+0xfc/0x1a0 [ 127.605262][ T8383] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 127.605283][ T8383] security_path_rename+0x18e/0x3c0 [ 127.605299][ T8383] do_renameat2+0x73d/0xc20 [ 127.605315][ T8383] ? __pfx_do_renameat2+0x10/0x10 [ 127.605328][ T8383] ? find_held_lock+0x2b/0x80 [ 127.605343][ T8383] ? __might_fault+0xe3/0x190 [ 127.605360][ T8383] ? __might_fault+0x13b/0x190 [ 127.605382][ T8383] ? getname_flags.part.0+0x1c5/0x550 [ 127.605400][ T8383] __x64_sys_rename+0x7d/0xa0 [ 127.605413][ T8383] do_syscall_64+0xcd/0x4e0 [ 127.605437][ T8383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.605449][ T8383] RIP: 0033:0x7f50b858eec9 [ 127.605459][ T8383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.605470][ T8383] RSP: 002b:00007f50b942c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 127.605481][ T8383] RAX: ffffffffffffffda RBX: 00007f50b87e6180 RCX: 00007f50b858eec9 [ 127.605488][ T8383] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 127.605494][ T8383] RBP: 00007f50b942c090 R08: 0000000000000000 R09: 0000000000000000 [ 127.605504][ T8383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.605513][ T8383] R13: 00007f50b87e6218 R14: 00007f50b87e6180 R15: 00007fff3a806ba8 [ 127.605536][ T8383] [ 127.605585][ T8383] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.678905][ T40] audit: type=1400 audit(1759429809.542:38761): avc: denied { listen } for pid=8384 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.692485][ T8386] nbd: couldn't find a device at index 252 [ 127.694193][ T40] audit: type=1400 audit(1759429809.542:38762): avc: denied { accept } for pid=8384 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.764468][ T40] audit: type=1400 audit(1759429809.622:38763): avc: denied { write } for pid=8396 comm="syz.4.653" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 127.774606][ T40] audit: type=1400 audit(1759429809.632:38764): avc: denied { ioctl } for pid=8396 comm="syz.4.653" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 127.849448][ T8411] net_ratelimit: 10 callbacks suppressed [ 127.849468][ T8411] openvswitch: netlink: Missing key (keys=40, expected=100) [ 127.915187][ T8417] 9pnet_fd: p9_fd_create_tcp (8417): problem connecting socket to 127.0.0.1 [ 127.917451][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 128.087583][ T8433] FAULT_INJECTION: forcing a failure. [ 128.087583][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 128.092255][ T8433] CPU: 0 UID: 0 PID: 8433 Comm: syz.4.662 Not tainted syzkaller #0 PREEMPT(full) [ 128.092271][ T8433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.092278][ T8433] Call Trace: [ 128.092283][ T8433] [ 128.092288][ T8433] dump_stack_lvl+0x16c/0x1f0 [ 128.092309][ T8433] should_fail_ex+0x512/0x640 [ 128.092325][ T8433] ? fs_reclaim_acquire+0xae/0x150 [ 128.092339][ T8433] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.092355][ T8433] should_failslab+0xc2/0x120 [ 128.092370][ T8433] __kmalloc_noprof+0xd2/0x510 [ 128.092385][ T8433] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 128.092403][ T8433] tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.092419][ T8433] ? tomoyo_fill_path_info+0x233/0x420 [ 128.092432][ T8433] tomoyo_path2_perm+0x36a/0x710 [ 128.092445][ T8433] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 128.092457][ T8433] ? fuse_dentry_settime+0x12a/0x280 [ 128.092474][ T8433] ? fuse_dentry_revalidate+0x5c7/0xb90 [ 128.092524][ T8433] tomoyo_path_rename+0xfc/0x1a0 [ 128.092550][ T8433] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 128.092585][ T8433] security_path_rename+0x18e/0x3c0 [ 128.092609][ T8433] do_renameat2+0x73d/0xc20 [ 128.092636][ T8433] ? __pfx_do_renameat2+0x10/0x10 [ 128.092657][ T8433] ? find_held_lock+0x2b/0x80 [ 128.092677][ T8433] ? __might_fault+0xe3/0x190 [ 128.092694][ T8433] ? __might_fault+0x13b/0x190 [ 128.092716][ T8433] ? getname_flags.part.0+0x1c5/0x550 [ 128.092733][ T8433] __x64_sys_rename+0x7d/0xa0 [ 128.092746][ T8433] do_syscall_64+0xcd/0x4e0 [ 128.092763][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.092775][ T8433] RIP: 0033:0x7f50b858eec9 [ 128.092785][ T8433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.092796][ T8433] RSP: 002b:00007f50b942c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 128.092808][ T8433] RAX: ffffffffffffffda RBX: 00007f50b87e6180 RCX: 00007f50b858eec9 [ 128.092814][ T8433] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 128.092821][ T8433] RBP: 00007f50b942c090 R08: 0000000000000000 R09: 0000000000000000 [ 128.092827][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.092834][ T8433] R13: 00007f50b87e6218 R14: 00007f50b87e6180 R15: 00007fff3a806ba8 [ 128.092848][ T8433] [ 128.092853][ T8433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.130864][ T8435] FAULT_INJECTION: forcing a failure. [ 128.130864][ T8435] name failslab, interval 1, probability 0, space 0, times 0 [ 128.206012][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.2.664 Not tainted syzkaller #0 PREEMPT(full) [ 128.206042][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.206056][ T8435] Call Trace: [ 128.206063][ T8435] [ 128.206071][ T8435] dump_stack_lvl+0x16c/0x1f0 [ 128.206106][ T8435] should_fail_ex+0x512/0x640 [ 128.206137][ T8435] should_failslab+0xc2/0x120 [ 128.206159][ T8435] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 128.206189][ T8435] ? sctp_bind_addrs_to_raw+0x2c9/0x3e0 [ 128.206214][ T8435] ? sctp_chunkify+0x51/0x2d0 [ 128.206240][ T8435] sctp_chunkify+0x51/0x2d0 [ 128.206265][ T8435] _sctp_make_chunk+0x148/0x270 [ 128.206291][ T8435] sctp_make_control+0x2f/0x2d0 [ 128.206316][ T8435] sctp_make_init+0x6f0/0xdc0 [ 128.206359][ T8435] ? __pfx_sctp_make_init+0x10/0x10 [ 128.206385][ T8435] ? kernel_text_address+0x8d/0x100 [ 128.206412][ T8435] ? unwind_get_return_address+0x59/0xa0 [ 128.206439][ T8435] ? arch_stack_walk+0xa6/0x100 [ 128.206466][ T8435] ? sctp_sm_lookup_event+0x15b/0x570 [ 128.206489][ T8435] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 128.206516][ T8435] sctp_sf_do_prm_asoc+0xbf/0x360 [ 128.206547][ T8435] ? __pfx_sctp_pname+0x10/0x10 [ 128.206572][ T8435] sctp_do_sm+0x181/0x5c80 [ 128.206599][ T8435] ? kasan_save_stack+0x42/0x60 [ 128.206627][ T8435] ? kasan_save_stack+0x33/0x60 [ 128.206654][ T8435] ? kasan_save_track+0x14/0x30 [ 128.206683][ T8435] ? __pfx_sctp_do_sm+0x10/0x10 [ 128.206702][ T8435] ? sctp_sendmsg+0xea2/0x1e10 [ 128.206720][ T8435] ? __sys_sendto+0x43c/0x520 [ 128.206742][ T8435] ? __x64_sys_sendto+0xe0/0x1c0 [ 128.206760][ T8435] ? do_syscall_64+0xcd/0x4e0 [ 128.206786][ T8435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.206834][ T8435] ? sk_leave_memory_pressure+0xdd/0x130 [ 128.206856][ T8435] ? __sk_mem_raise_allocated+0x94d/0x1670 [ 128.206891][ T8435] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 128.206916][ T8435] sctp_sendmsg_to_asoc+0xa44/0x1bf0 [ 128.206944][ T8435] ? sctp_assoc_set_primary+0x177/0x300 [ 128.206977][ T8435] ? sctp_assoc_add_peer+0x252/0x1550 [ 128.207017][ T8435] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 128.207051][ T8435] ? sctp_connect_new_asoc+0x41e/0x770 [ 128.207090][ T8435] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 128.207122][ T8435] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 128.207158][ T8435] sctp_sendmsg+0xea2/0x1e10 [ 128.207188][ T8435] ? __pfx_sctp_sendmsg+0x10/0x10 [ 128.207216][ T8435] ? __pfx_sock_has_perm+0x10/0x10 [ 128.207256][ T8435] ? __pfx_sctp_sendmsg+0x10/0x10 [ 128.207280][ T8435] inet_sendmsg+0x119/0x140 [ 128.207309][ T8435] __sys_sendto+0x43c/0x520 [ 128.207338][ T8435] ? __pfx___sys_sendto+0x10/0x10 [ 128.207403][ T8435] ? ksys_write+0x1ac/0x250 [ 128.207438][ T8435] ? __pfx_ksys_write+0x10/0x10 [ 128.207475][ T8435] __x64_sys_sendto+0xe0/0x1c0 [ 128.207502][ T8435] ? do_syscall_64+0x91/0x4e0 [ 128.207533][ T8435] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.207562][ T8435] do_syscall_64+0xcd/0x4e0 [ 128.207595][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.207616][ T8435] RIP: 0033:0x7fcb0838eec9 [ 128.207638][ T8435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.207657][ T8435] RSP: 002b:00007fcb091ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 128.207682][ T8435] RAX: ffffffffffffffda RBX: 00007fcb085e5fa0 RCX: 00007fcb0838eec9 [ 128.207697][ T8435] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 128.207711][ T8435] RBP: 00007fcb091ee090 R08: 0000200000000140 R09: 000000000000001c [ 128.207727][ T8435] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000002 [ 128.207741][ T8435] R13: 00007fcb085e6038 R14: 00007fcb085e5fa0 R15: 00007fff9fce0d38 [ 128.207772][ T8435] [ 128.472955][ T8449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.668'. [ 128.478935][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 128.490771][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 128.507663][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 128.532359][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 128.541437][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 128.556949][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 128.699550][ T8458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.709957][ T8457] block nbd4: shutting down sockets [ 128.839181][ T8474] FAULT_INJECTION: forcing a failure. [ 128.839181][ T8474] name failslab, interval 1, probability 0, space 0, times 0 [ 128.843774][ T8474] CPU: 2 UID: 0 PID: 8474 Comm: syz.0.673 Not tainted syzkaller #0 PREEMPT(full) [ 128.843799][ T8474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.843811][ T8474] Call Trace: [ 128.843818][ T8474] [ 128.843825][ T8474] dump_stack_lvl+0x16c/0x1f0 [ 128.843858][ T8474] should_fail_ex+0x512/0x640 [ 128.843880][ T8474] ? fs_reclaim_acquire+0xae/0x150 [ 128.843902][ T8474] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.843925][ T8474] should_failslab+0xc2/0x120 [ 128.843941][ T8474] __kmalloc_noprof+0xd2/0x510 [ 128.843962][ T8474] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 128.843987][ T8474] tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.844005][ T8474] ? tomoyo_fill_path_info+0x233/0x420 [ 128.844018][ T8474] tomoyo_path2_perm+0x36a/0x710 [ 128.844033][ T8474] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 128.844045][ T8474] ? fuse_dentry_settime+0x12a/0x280 [ 128.844063][ T8474] ? fuse_dentry_revalidate+0x5c7/0xb90 [ 128.844098][ T8474] tomoyo_path_rename+0xfc/0x1a0 [ 128.844115][ T8474] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 128.844137][ T8474] security_path_rename+0x18e/0x3c0 [ 128.844154][ T8474] do_renameat2+0x73d/0xc20 [ 128.844173][ T8474] ? __pfx_do_renameat2+0x10/0x10 [ 128.844186][ T8474] ? find_held_lock+0x2b/0x80 [ 128.844203][ T8474] ? __might_fault+0xe3/0x190 [ 128.844220][ T8474] ? __might_fault+0x13b/0x190 [ 128.844262][ T8474] ? getname_flags.part.0+0x1c5/0x550 [ 128.844281][ T8474] __x64_sys_rename+0x7d/0xa0 [ 128.844295][ T8474] do_syscall_64+0xcd/0x4e0 [ 128.844314][ T8474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.844327][ T8474] RIP: 0033:0x7f7359d8eec9 [ 128.844339][ T8474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.844352][ T8474] RSP: 002b:00007f735abdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 128.844364][ T8474] RAX: ffffffffffffffda RBX: 00007f7359fe6180 RCX: 00007f7359d8eec9 [ 128.844371][ T8474] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 128.844378][ T8474] RBP: 00007f735abdf090 R08: 0000000000000000 R09: 0000000000000000 [ 128.844385][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.844391][ T8474] R13: 00007f7359fe6218 R14: 00007f7359fe6180 R15: 00007ffdc6170818 [ 128.844406][ T8474] [ 128.844412][ T8474] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.036326][ T8480] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.043492][ T8480] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(68) [ 129.046085][ T8480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.049624][ T8480] vhci_hcd vhci_hcd.0: Device attached [ 129.178130][ T8499] Bluetooth: MGMT ver 1.23 [ 129.221346][ T8503] overlayfs: missing 'lowerdir' [ 129.282736][ T8514] hfs: can't find a HFS filesystem on dev sr0 [ 129.298968][ T55] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 129.336122][ T8516] cgroup: Need name or subsystem set [ 129.450906][ T8533] cgroup2: Unknown parameter 'euid' [ 129.454811][ T8527] can0: slcan on ptm0. [ 129.522337][ T8540] netdevsim netdevsim1: Direct firmware load for . [ 129.522337][ T8540] failed with error -2 [ 129.530369][ T8540] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 129.530369][ T8540] [ 129.540130][ T8526] can0 (unregistered): slcan off ptm0. [ 129.575346][ T8488] vhci_hcd: connection reset by peer [ 129.587274][ T1192] vhci_hcd: stop threads [ 129.588625][ T1192] vhci_hcd: release socket [ 129.591306][ T1192] vhci_hcd: disconnect device [ 129.644465][ T8558] tipc: Enabling of bearer rejected, media not registered [ 129.783741][ T8573] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.802794][ T8573] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.825172][ T8575] vlan2: entered promiscuous mode [ 129.828361][ T8575] vlan2: entered allmulticast mode [ 129.836200][ T8575] hsr_slave_1: entered allmulticast mode [ 129.900661][ T8579] io-wq is not configured for unbound workers [ 129.914196][ T8577] kvm: kvm [8576]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 129.952588][ T8582] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 129.964871][ T8584] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.995392][ T8582] Driver unsupported XDP return value 0 on prog (id 123) dev N/A, expect packet loss! [ 129.996751][ T8582] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 130.024591][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 130.024606][ T40] audit: type=1400 audit(1759429811.872:38774): avc: denied { setopt } for pid=8576 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.037124][ T8583] cgroup: Invalid name [ 130.037237][ T40] audit: type=1400 audit(1759429811.892:38775): avc: denied { mounton } for pid=8581 comm="syz.0.708" path="/184/file3" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 130.189450][ T40] audit: type=1400 audit(1759429812.052:38776): avc: denied { ioctl } for pid=8588 comm="syz.0.709" path="socket:[27654]" dev="sockfs" ino=27654 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.251469][ T8594] netlink: ct family unspecified [ 130.253842][ T8594] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.445993][ T55] vhci_hcd: vhci_device speed not set [ 138.219436][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.222257][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.636284][ T40] audit: type=1400 audit(1759429832.502:38777): avc: denied { ioctl } for pid=8597 comm="syz.4.715" path="socket:[25240]" dev="sockfs" ino=25240 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 150.642179][ T8600] __nla_validate_parse: 31 callbacks suppressed [ 150.642191][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 150.654168][ T8603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.714'. [ 150.658481][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 150.664102][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 150.711458][ T8617] 9pnet_virtio: no channels available for device ! [ 150.792834][ T8634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8634 comm=syz.2.714 [ 150.798563][ T8634] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 150.802541][ T40] audit: type=1400 audit(1759429832.662:38778): avc: denied { relabelto } for pid=8601 comm="syz.2.714" name="175" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 150.814739][ T40] audit: type=1400 audit(1759429832.662:38779): avc: denied { associate } for pid=8601 comm="syz.2.714" name="175" dev="tmpfs" ino=952 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 150.884022][ T8643] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.907078][ T8644] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 150.917074][ T8644] FAULT_INJECTION: forcing a failure. [ 150.917074][ T8644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 150.922701][ T8644] CPU: 1 UID: 0 PID: 8644 Comm: syz.0.724 Not tainted syzkaller #0 PREEMPT(full) [ 150.922727][ T8644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.922738][ T8644] Call Trace: [ 150.922746][ T8644] [ 150.922754][ T8644] dump_stack_lvl+0x16c/0x1f0 [ 150.922788][ T8644] should_fail_ex+0x512/0x640 [ 150.922816][ T8644] should_fail_alloc_page+0xe7/0x130 [ 150.922839][ T8644] prepare_alloc_pages+0x3c2/0x610 [ 150.922861][ T8644] ? rcu_is_watching+0x12/0xc0 [ 150.922890][ T8644] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 150.922925][ T8644] ? kasan_save_stack+0x42/0x60 [ 150.922951][ T8644] ? kasan_save_stack+0x33/0x60 [ 150.922975][ T8644] ? kasan_save_track+0x14/0x30 [ 150.922999][ T8644] ? __kasan_kmalloc+0xaa/0xb0 [ 150.923023][ T8644] ? __kvmalloc_node_noprof+0x27b/0x620 [ 150.923048][ T8644] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 150.923078][ T8644] ? mmu_topup_memory_caches+0xbc/0x170 [ 150.923098][ T8644] ? kvm_mmu_load+0xd6/0x23c0 [ 150.923116][ T8644] ? vcpu_run+0x359e/0x5590 [ 150.923139][ T8644] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 150.923164][ T8644] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 150.923188][ T8644] ? __x64_sys_ioctl+0x18b/0x210 [ 150.923210][ T8644] ? do_syscall_64+0xcd/0x4e0 [ 150.923236][ T8644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.923259][ T8644] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 150.923304][ T8644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.923332][ T8644] ? policy_nodemask+0xea/0x4e0 [ 150.923353][ T8644] alloc_pages_mpol+0x1fb/0x550 [ 150.923375][ T8644] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 150.923391][ T8644] ? rcu_is_watching+0x12/0xc0 [ 150.923416][ T8644] ? trace_kmalloc+0x2b/0xd0 [ 150.923434][ T8644] ? __kvmalloc_node_noprof+0x298/0x620 [ 150.923459][ T8644] ? trace_kmem_cache_alloc+0x28/0xc0 [ 150.923485][ T8644] alloc_pages_noprof+0x131/0x390 [ 150.923505][ T8644] get_free_pages_noprof+0x10/0xb0 [ 150.923525][ T8644] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 150.923562][ T8644] mmu_topup_memory_caches+0xbc/0x170 [ 150.923586][ T8644] kvm_mmu_load+0xd6/0x23c0 [ 150.923608][ T8644] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 150.923632][ T8644] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 150.923662][ T8644] ? __pfx_kvm_mmu_load+0x10/0x10 [ 150.923687][ T8644] ? vmx_update_cr8_intercept+0x1fd/0x370 [ 150.923716][ T8644] vcpu_run+0x359e/0x5590 [ 150.923745][ T8644] ? __lock_acquire+0xb97/0x1ce0 [ 150.923773][ T8644] ? __pfx_vcpu_run+0x10/0x10 [ 150.923805][ T8644] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 150.923831][ T8644] ? __local_bh_enable_ip+0xa4/0x120 [ 150.923861][ T8644] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 150.923889][ T8644] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 150.923930][ T8644] kvm_vcpu_ioctl+0x5eb/0x1690 [ 150.923959][ T8644] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 150.923986][ T8644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.924013][ T8644] ? do_vfs_ioctl+0x128/0x14f0 [ 150.924038][ T8644] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 150.924063][ T8644] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 150.924098][ T8644] ? hook_file_ioctl_common+0x145/0x410 [ 150.924135][ T8644] ? selinux_file_ioctl+0x180/0x270 [ 150.924157][ T8644] ? selinux_file_ioctl+0xb4/0x270 [ 150.924181][ T8644] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 150.924209][ T8644] __x64_sys_ioctl+0x18b/0x210 [ 150.924236][ T8644] do_syscall_64+0xcd/0x4e0 [ 150.924265][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.924284][ T8644] RIP: 0033:0x7f7359d8eec9 [ 150.924302][ T8644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.924321][ T8644] RSP: 002b:00007f735abff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.924341][ T8644] RAX: ffffffffffffffda RBX: 00007f7359fe6090 RCX: 00007f7359d8eec9 [ 150.924354][ T8644] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 150.924365][ T8644] RBP: 00007f735abff090 R08: 0000000000000000 R09: 0000000000000000 [ 150.924378][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.924389][ T8644] R13: 00007f7359fe6128 R14: 00007f7359fe6090 R15: 00007ffdc6170818 [ 150.924416][ T8644] [ 150.933914][ T40] audit: type=1400 audit(1759430088.795:38780): avc: denied { ioctl } for pid=8646 comm="syz.1.727" path="pid:[4026532866]" dev="nsfs" ino=4026532866 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 150.934200][ T8647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.122365][ T8649] tty tty1: ldisc open failed (-12), clearing slot 0 [ 151.126349][ T8650] tty tty1: ldisc open failed (-12), clearing slot 0 [ 151.483617][ T40] audit: type=1400 audit(1759430089.335:38781): avc: denied { append } for pid=8664 comm="syz.1.731" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.506650][ T8665] program syz.1.731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.566817][ T5951] Bluetooth: hci4: link tx timeout [ 151.569862][ T5951] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.792462][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 152.165629][ T8714] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 152.504828][ T40] audit: type=1400 audit(1759430090.355:38782): avc: denied { getopt } for pid=8744 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.509740][ T8745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.752'. [ 152.518452][ T8745] netlink: 43 bytes leftover after parsing attributes in process `syz.2.752'. [ 152.522165][ T8745] netlink: 43 bytes leftover after parsing attributes in process `syz.2.752'. [ 152.524392][ T8746] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 152.783231][ T40] audit: type=1400 audit(1759430090.635:38783): avc: denied { bind } for pid=8763 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.804263][ T40] audit: type=1400 audit(1759430090.645:38784): avc: denied { connect } for pid=8763 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.805279][ T8768] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.757'. [ 153.106103][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 153.194809][ T40] audit: type=1400 audit(1759430091.045:38785): avc: denied { accept } for pid=8787 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.206176][ T8790] program syz.2.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.396370][ T8801] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 153.581535][ T8816] netlink: 'syz.1.770': attribute type 2 has an invalid length. [ 153.584728][ T8816] nbd: must specify a device to reconfigure [ 153.604730][ T8812] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 153.656480][ T5951] Bluetooth: hci4: command 0x0406 tx timeout [ 153.924551][ T8826] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 153.928811][ T8826] netlink: 'syz.2.774': attribute type 2 has an invalid length. [ 153.933243][ T8826] netlink: 'syz.2.774': attribute type 3 has an invalid length. [ 154.030046][ T8827] kvm: MWAIT instruction emulated as NOP! [ 154.136943][ T8832] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 154.585619][ T40] audit: type=1400 audit(1759430092.435:38786): avc: denied { ioctl } for pid=8837 comm="syz.4.778" path="socket:[28048]" dev="sockfs" ino=28048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.737307][ T8846] netlink: 'syz.4.779': attribute type 6 has an invalid length. [ 154.897571][ T8857] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 154.906557][ T8857] FAULT_INJECTION: forcing a failure. [ 154.906557][ T8857] name failslab, interval 1, probability 0, space 0, times 0 [ 154.912681][ T8857] CPU: 2 UID: 0 PID: 8857 Comm: syz.2.782 Not tainted syzkaller #0 PREEMPT(full) [ 154.912707][ T8857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.912718][ T8857] Call Trace: [ 154.912726][ T8857] [ 154.912734][ T8857] dump_stack_lvl+0x16c/0x1f0 [ 154.912796][ T8857] should_fail_ex+0x512/0x640 [ 154.912828][ T8857] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 154.912864][ T8857] should_failslab+0xc2/0x120 [ 154.912884][ T8857] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 154.912909][ T8857] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 154.912941][ T8857] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 154.912974][ T8857] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 154.913012][ T8857] mmu_topup_memory_caches+0x25/0x170 [ 154.913036][ T8857] kvm_mmu_load+0xd6/0x23c0 [ 154.913058][ T8857] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 154.913082][ T8857] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 154.913111][ T8857] ? __pfx_kvm_mmu_load+0x10/0x10 [ 154.913134][ T8857] ? vmx_update_cr8_intercept+0x1fd/0x370 [ 154.913164][ T8857] vcpu_run+0x359e/0x5590 [ 154.913193][ T8857] ? __lock_acquire+0xb97/0x1ce0 [ 154.913221][ T8857] ? __pfx_vcpu_run+0x10/0x10 [ 154.913252][ T8857] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 154.913277][ T8857] ? __local_bh_enable_ip+0xa4/0x120 [ 154.913307][ T8857] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 154.913333][ T8857] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 154.913369][ T8857] kvm_vcpu_ioctl+0x5eb/0x1690 [ 154.913398][ T8857] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.913425][ T8857] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.913452][ T8857] ? do_vfs_ioctl+0x128/0x14f0 [ 154.913506][ T8857] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.913531][ T8857] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.913564][ T8857] ? hook_file_ioctl_common+0x145/0x410 [ 154.913597][ T8857] ? selinux_file_ioctl+0x180/0x270 [ 154.913618][ T8857] ? selinux_file_ioctl+0xb4/0x270 [ 154.913640][ T8857] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.913666][ T8857] __x64_sys_ioctl+0x18b/0x210 [ 154.913704][ T8857] do_syscall_64+0xcd/0x4e0 [ 154.913734][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.913752][ T8857] RIP: 0033:0x7fcb0838eec9 [ 154.913767][ T8857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.913784][ T8857] RSP: 002b:00007fcb091cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.913801][ T8857] RAX: ffffffffffffffda RBX: 00007fcb085e6090 RCX: 00007fcb0838eec9 [ 154.913813][ T8857] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 154.913824][ T8857] RBP: 00007fcb091cc090 R08: 0000000000000000 R09: 0000000000000000 [ 154.913834][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.913845][ T8857] R13: 00007fcb085e6128 R14: 00007fcb085e6090 R15: 00007fff9fce0d38 [ 154.913875][ T8857] [ 154.974162][ T8860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=782 sclass=netlink_route_socket pid=8860 comm=syz.4.783 [ 155.027333][ T8861] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 155.081438][ T8860] bond1: (slave bridge1): making interface the new active one [ 155.084518][ T8860] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 155.149249][ T1144] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.211205][ T8868] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.322448][ T8875] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 155.429717][ T8879] syz_tun: entered allmulticast mode [ 155.565631][ T8898] netlink: 'syz.0.793': attribute type 2 has an invalid length. [ 155.790304][ T8918] netlink: 'syz.2.799': attribute type 8 has an invalid length. [ 155.822132][ T8921] __nla_validate_parse: 72 callbacks suppressed [ 155.822147][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 155.829861][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 155.834226][ T8921] netlink: 'syz.1.800': attribute type 18 has an invalid length. [ 155.845671][ T79] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 155.845879][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 155.851392][ T79] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.853624][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 155.853655][ T8921] netlink: 'syz.1.800': attribute type 18 has an invalid length. [ 155.865600][ T79] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.869458][ T79] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.943665][ T8933] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 155.949141][ T8930] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 156.371771][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 156.376036][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 156.465057][ T8962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.544408][ T8969] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 156.577505][ T8972] netlink: 96 bytes leftover after parsing attributes in process `syz.0.815'. [ 156.709425][ T8976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.715597][ T8976] bond3: (slave bond4): making interface the new active one [ 156.720920][ T8976] bond3: (slave bond4): Enslaving as an active interface with an up link [ 156.781664][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.817'. [ 156.786444][ T8981] bond3: entered promiscuous mode [ 156.788625][ T8981] bond4: entered promiscuous mode [ 156.791249][ T8981] bond3: entered allmulticast mode [ 156.793617][ T8981] bond4: entered allmulticast mode [ 156.799522][ T8981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.833097][ T8983] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 156.842252][ T8983] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 157.025708][ T8992] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 157.176339][ T5951] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.179896][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 157.179919][ T40] audit: type=1400 audit(1759430095.035:38794): avc: denied { ioctl } for pid=8999 comm="syz.2.823" path="socket:[29736]" dev="sockfs" ino=29736 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.229387][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 157.494094][ T9023] qnx6: unable to read the first superblock [ 157.496725][ T9023] qnx6: unable to read the first superblock [ 157.499632][ T9023] qnx6: unable to read the first superblock [ 157.578383][ T9028] usb usb9: usbfs: process 9028 (syz.1.831) did not claim interface 16 before use [ 157.736200][ T7827] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 157.907861][ T7827] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 157.911510][ T7827] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 157.914323][ T7827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 157.918873][ T7827] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 157.923079][ T7827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 157.930764][ T7827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.937646][ T7827] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 157.945516][ T7827] usb 7-1: string descriptor 0 read error: -22 [ 157.948985][ T7827] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 157.952501][ T7827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.957733][ T7827] usb 7-1: config 0 descriptor?? [ 157.961110][ T7827] hub 7-1:0.0: bad descriptor, ignoring hub [ 157.963082][ T7827] hub 7-1:0.0: probe with driver hub failed with error -5 [ 157.970392][ T7827] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input17 [ 158.162491][ T40] audit: type=1400 audit(1759430096.015:38795): avc: denied { read } for pid=9022 comm="syz.2.829" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 158.173755][ T40] audit: type=1400 audit(1759430096.015:38796): avc: denied { open } for pid=9022 comm="syz.2.829" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 158.273672][ T7827] usb 7-1: USB disconnect, device number 5 [ 158.321481][ T40] audit: type=1400 audit(1759430096.175:38797): avc: denied { firmware_load } for pid=9049 comm="syz.4.838" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 158.365302][ T9050] syz.4.838 (9050) used greatest stack depth: 19576 bytes left [ 158.452253][ T9061] tipc: Started in network mode [ 158.454689][ T9061] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 158.459842][ T9061] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 158.468778][ T9061] tipc: Enabled bearer , priority 10 [ 158.642752][ T9069] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 158.695309][ T40] audit: type=1400 audit(1759430096.545:38798): avc: denied { ioctl } for pid=9071 comm="syz.1.846" path="socket:[28407]" dev="sockfs" ino=28407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.731733][ T9074] MTD: Couldn't look up '/dev/sg0': -15 [ 158.733792][ T9074] /dev/sg0: Can't lookup blockdev [ 158.737909][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 158.755200][ T40] audit: type=1400 audit(1759430096.605:38799): avc: denied { accept } for pid=9075 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.940825][ T40] audit: type=1800 audit(1759430096.795:38800): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.855" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 158.955961][ T54] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 159.128776][ T54] usb 9-1: not running at top speed; connect to a high speed hub [ 159.132547][ T54] usb 9-1: too many configurations: 204, using maximum allowed: 8 [ 159.140079][ T54] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.143516][ T54] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.149314][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.152320][ T54] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.155905][ T54] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.160158][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.163572][ T54] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.168158][ T54] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.172477][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.175444][ T54] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.179328][ T54] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.184116][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.187795][ T54] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.190992][ T54] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.195510][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.198562][ T54] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.201780][ T54] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.206548][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.210957][ T54] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.214392][ T54] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.218690][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.222739][ T54] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 159.226706][ T54] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.230994][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.234962][ T54] usb 9-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.40 [ 159.238403][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=200 [ 159.241348][ T54] usb 9-1: Product: syz [ 159.242949][ T54] usb 9-1: Manufacturer: Н [ 159.244532][ T54] usb 9-1: SerialNumber: syz [ 159.248425][ T9059] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.457363][ T29] tipc: Node number set to 1 [ 159.513046][ T54] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 159.516547][ T54] usb 9-1: USB disconnect, device number 3 [ 159.823670][ T9140] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 159.874036][ T9144] syz.1.871: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 159.880200][ T9144] CPU: 2 UID: 0 PID: 9144 Comm: syz.1.871 Not tainted syzkaller #0 PREEMPT(full) [ 159.880222][ T9144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.880230][ T9144] Call Trace: [ 159.880236][ T9144] [ 159.880242][ T9144] dump_stack_lvl+0x16c/0x1f0 [ 159.880319][ T9144] warn_alloc+0x248/0x3a0 [ 159.880343][ T9144] ? __pfx_warn_alloc+0x10/0x10 [ 159.880362][ T9144] ? __pfx_stack_trace_save+0x10/0x10 [ 159.880386][ T9144] ? kasan_save_stack+0x42/0x60 [ 159.880403][ T9144] ? kasan_save_stack+0x33/0x60 [ 159.880419][ T9144] ? kasan_save_track+0x14/0x30 [ 159.880435][ T9144] ? xskq_create+0x52/0x1d0 [ 159.880452][ T9144] ? xsk_setsockopt+0x792/0x9a0 [ 159.880466][ T9144] ? do_sock_setsockopt+0xf3/0x1d0 [ 159.880487][ T9144] ? xskq_create+0xfb/0x1d0 [ 159.880501][ T9144] __vmalloc_node_range_noprof+0xff3/0x14b0 [ 159.880520][ T9144] ? xskq_create+0xfb/0x1d0 [ 159.880536][ T9144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 159.880555][ T9144] ? xskq_create+0xfb/0x1d0 [ 159.880569][ T9144] vmalloc_user_noprof+0x9e/0xe0 [ 159.880582][ T9144] ? xskq_create+0xfb/0x1d0 [ 159.880596][ T9144] xskq_create+0xfb/0x1d0 [ 159.880610][ T9144] xsk_setsockopt+0x792/0x9a0 [ 159.880624][ T9144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 159.880663][ T9144] ? find_held_lock+0x2b/0x80 [ 159.880693][ T9144] ? selinux_socket_setsockopt+0x6a/0x80 [ 159.880720][ T9144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 159.880736][ T9144] do_sock_setsockopt+0xf3/0x1d0 [ 159.880761][ T9144] __sys_setsockopt+0x1a0/0x230 [ 159.880785][ T9144] __x64_sys_setsockopt+0xbd/0x160 [ 159.880803][ T9144] ? do_syscall_64+0x91/0x4e0 [ 159.880824][ T9144] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.880847][ T9144] do_syscall_64+0xcd/0x4e0 [ 159.880869][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.880888][ T9144] RIP: 0033:0x7fee4678eec9 [ 159.880906][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.880925][ T9144] RSP: 002b:00007fee47582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.880946][ T9144] RAX: ffffffffffffffda RBX: 00007fee469e5fa0 RCX: 00007fee4678eec9 [ 159.881035][ T9144] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 159.881043][ T9144] RBP: 00007fee46811f91 R08: 0000000000000004 R09: 0000000000000000 [ 159.881051][ T9144] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 159.881059][ T9144] R13: 00007fee469e6038 R14: 00007fee469e5fa0 R15: 00007fffd1e7dd08 [ 159.881076][ T9144] [ 159.881083][ T9144] Mem-Info: [ 159.883902][ T40] audit: type=1400 audit(1759430097.735:38801): avc: denied { ioctl } for pid=9145 comm="syz.2.872" path="socket:[28554]" dev="sockfs" ino=28554 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 159.884402][ T9144] active_anon:31028 inactive_anon:0 isolated_anon:0 [ 159.884402][ T9144] active_file:6642 inactive_file:50908 isolated_file:0 [ 159.884402][ T9144] unevictable:1769 dirty:59 writeback:0 [ 159.884402][ T9144] slab_reclaimable:12604 slab_unreclaimable:71662 [ 159.884402][ T9144] mapped:27673 shmem:20694 pagetables:1590 [ 159.884402][ T9144] sec_pagetables:319 bounce:0 [ 159.884402][ T9144] kernel_misc_reclaimable:0 [ 159.884402][ T9144] free:418779 free_pcp:25625 free_cma:0 [ 160.025310][ T9144] Node 0 active_anon:124112kB inactive_anon:0kB active_file:26568kB inactive_file:203400kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:99136kB dirty:236kB writeback:0kB shmem:79240kB shmem_thp:10240kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13584kB pagetables:6024kB sec_pagetables:1276kB all_unreclaimable? no Balloon:0kB [ 160.037732][ T9144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.048270][ T9144] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.058385][ T9144] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 160.060272][ T9144] Node 0 DMA32 free:104060kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112576kB inactive_anon:0kB active_file:26568kB inactive_file:203400kB unevictable:3540kB writepending:236kB present:2080628kB managed:1270580kB mlocked:0kB bounce:0kB free_pcp:52864kB local_pcp:19328kB free_cma:0kB [ 160.070960][ T9144] lowmem_reserve[]: 0 0 0 0 0 [ 160.072720][ T9144] Node 1 Normal free:1594592kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:21876kB local_pcp:7820kB free_cma:0kB [ 160.076218][ T6001] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.084752][ T9144] lowmem_reserve[]: 0 0 0 0 0 [ 160.090350][ T9144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.095982][ T9144] Node 0 DMA32: 307*4kB (UME) 419*8kB (UME) 142*16kB (UME) 531*32kB (UME) 256*64kB (UM) 39*128kB (UME) 18*256kB (UME) 7*512kB (UME) 13*1024kB (UM) 12*2048kB (UME) 3*4096kB (U) = 103588kB [ 160.102588][ T9144] Node 1 Normal: 44*4kB (UME) 38*8kB (UME) 20*16kB (UME) 44*32kB (UME) 17*64kB (UME) 12*128kB (UME) 6*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 3*2048kB (UME) 384*4096kB (M) = 1594592kB [ 160.111525][ T9144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.115350][ T9144] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 160.119024][ T9144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.123123][ T9144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.126588][ T9153] bridge_slave_0: left allmulticast mode [ 160.126932][ T9144] 75373 total pagecache pages [ 160.128823][ T9153] bridge_slave_0: left promiscuous mode [ 160.130262][ T9144] 0 pages in swap cache [ 160.132981][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.134662][ T9144] Free swap = 124996kB [ 160.141073][ T9144] Total swap = 124996kB [ 160.142761][ T9144] 1048443 pages RAM [ 160.144188][ T9144] 0 pages HighMem/MovableOnly [ 160.148191][ T9144] 281485 pages reserved [ 160.149663][ T9144] 0 pages cma reserved [ 160.150368][ T9153] bridge_slave_1: left allmulticast mode [ 160.153225][ T9153] bridge_slave_1: left promiscuous mode [ 160.155591][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.161596][ T9155] kernel profiling enabled (shift: 6) [ 160.167279][ T9153] bond0: (slave bond_slave_0): Releasing backup interface [ 160.172198][ T9153] bond0: (slave bond_slave_1): Releasing backup interface [ 160.178475][ T9157] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 160.182058][ T9157] PKCS7: Only support pkcs7_signedData type [ 160.185527][ T9153] team0: Port device team_slave_0 removed [ 160.192122][ T9153] team0: Port device team_slave_1 removed [ 160.194945][ T9153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.199442][ T9153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.204471][ T9153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.207651][ T9153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.232222][ T9153] bond1: (slave bridge1): Releasing active interface [ 160.268215][ T6001] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.273091][ T6001] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.278065][ T6001] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.282744][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.293550][ T9134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.305005][ T6001] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.467628][ T9177] veth0_vlan: left promiscuous mode [ 160.470058][ T9177] veth0_vlan: entered promiscuous mode [ 160.479295][ T9177] SELinux: policydb string length 14080 does not match expected length 8 [ 160.479495][ T40] audit: type=1400 audit(1759430098.335:38802): avc: denied { load_policy } for pid=9176 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 160.483586][ T9177] SELinux: failed to load policy [ 160.492924][ T40] audit: type=1400 audit(1759430098.345:38803): avc: denied { append } for pid=9178 comm="syz.4.882" name="fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 160.500621][ T6001] usb 5-1: USB disconnect, device number 9 [ 160.601412][ T9186] validate_nla: 2 callbacks suppressed [ 160.601476][ T9186] netlink: 'syz.2.884': attribute type 5 has an invalid length. [ 160.842411][ T9200] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 160.967267][ T9209] __nla_validate_parse: 81 callbacks suppressed [ 160.967287][ T9209] netlink: 52 bytes leftover after parsing attributes in process `syz.4.891'. [ 161.184353][ T9220] netlink: 52 bytes leftover after parsing attributes in process `syz.1.896'. [ 161.270509][ T9223] random: crng reseeded on system resumption [ 161.281049][ T9223] netlink: 'syz.1.897': attribute type 4 has an invalid length. [ 161.497074][ T9192] 9pnet_fd: p9_fd_create_tcp (9192): problem connecting socket to 127.0.0.1 [ 161.610479][ T9241] macsec0: mtu less than device minimum [ 161.706548][ T9244] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 161.947965][ T9249] netlink: 'syz.4.903': attribute type 4 has an invalid length. [ 161.950985][ T9249] netlink: 152 bytes leftover after parsing attributes in process `syz.4.903'. [ 161.958606][ T9249] .`: renamed from bond0 (while UP) [ 161.964626][ T9249] openvswitch: netlink: Key type 7457 is out of range max 32 [ 162.190850][ T9256] bond0: entered promiscuous mode [ 162.249872][ T9259] overlay: ./file0 is not a directory [ 162.342114][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 162.342127][ T40] audit: type=1400 audit(1759430100.195:38813): avc: denied { ioctl } for pid=9266 comm="syz.1.909" path="socket:[29489]" dev="sockfs" ino=29489 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.353852][ T40] audit: type=1400 audit(1759430100.195:38814): avc: denied { map } for pid=9266 comm="syz.1.909" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 162.599645][ T9275] tipc: Can't bind to reserved service type 1 [ 162.701490][ T40] audit: type=1400 audit(1759430100.555:38815): avc: denied { map } for pid=9282 comm="syz.1.914" path="socket:[31112]" dev="sockfs" ino=31112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.907239][ T9305] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 162.978194][ T9312] netlink: 68 bytes leftover after parsing attributes in process `syz.2.925'. [ 162.978544][ T40] audit: type=1400 audit(1759430100.835:38816): avc: denied { read } for pid=5339 comm="acpid" name="event6" dev="devtmpfs" ino=3126 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 162.990879][ T40] audit: type=1400 audit(1759430100.835:38817): avc: denied { open } for pid=5339 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3126 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 162.999426][ T40] audit: type=1400 audit(1759430100.835:38818): avc: denied { ioctl } for pid=5339 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3126 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 163.025991][ T40] audit: type=1400 audit(1759430100.875:38819): avc: denied { ioctl } for pid=9317 comm="syz.0.926" path="socket:[29570]" dev="sockfs" ino=29570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.119180][ T9332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.124765][ T9331] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 163.128791][ T9331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.223536][ T40] audit: type=1400 audit(1759430101.075:38820): avc: denied { bind } for pid=9344 comm="syz.4.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 163.294808][ T9352] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 163.300281][ T54] IPVS: starting estimator thread 0... [ 163.395984][ T9358] IPVS: using max 45 ests per chain, 108000 per kthread [ 163.510673][ T9366] erofs (device nbd4): cannot find valid erofs superblock [ 163.727615][ T9387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.946'. [ 163.731706][ T40] audit: type=1400 audit(1759430101.585:38821): avc: denied { mount } for pid=9386 comm="syz.1.946" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 163.773639][ T9391] mkiss: ax0: crc mode is auto. [ 163.786416][ T55] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 163.862477][ T9397] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 163.898421][ T9401] netlink: 'syz.1.950': attribute type 4 has an invalid length. [ 163.901419][ T9401] netlink: 'syz.1.950': attribute type 4 has an invalid length. [ 163.927445][ T9403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9403 comm=syz.2.951 [ 163.928862][ T40] audit: type=1400 audit(1759430101.785:38822): avc: denied { read } for pid=9402 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.936158][ T55] usb 5-1: device descriptor read/64, error -71 [ 164.038849][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 164.042873][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.955'. [ 164.048186][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 164.051195][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.955'. [ 164.177002][ T55] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 164.216374][ T9427] tipc: Started in network mode [ 164.219598][ T9427] tipc: Node identity ee3f9b23d492, cluster identity 4711 [ 164.222591][ T9427] tipc: Enabled bearer , priority 0 [ 164.246928][ T9426] tipc: Disabling bearer [ 164.306177][ T55] usb 5-1: device descriptor read/64, error -71 [ 164.390419][ T9434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3098 sclass=netlink_route_socket pid=9434 comm=syz.4.961 [ 164.395279][ T9434] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.961'. [ 164.418346][ T55] usb usb5-port1: attempt power cycle [ 164.493508][ T9440] loop3: detected capacity change from 0 to 7 [ 164.500875][ T9440] Dev loop3: unable to read RDB block 7 [ 164.502755][ T9440] loop3: unable to read partition table [ 164.505093][ T9440] loop3: partition table beyond EOD, truncated [ 164.509469][ T9440] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 164.720028][ T9452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.722695][ T9452] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.740688][ T9452] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.747778][ T9452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.750610][ T9452] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.755078][ T9452] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.760572][ T9452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.762757][ T9452] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.767284][ T9452] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.775472][ T9452] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.777911][ T9452] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.785888][ T55] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 164.806791][ T55] usb 5-1: device descriptor read/8, error -71 [ 164.939837][ T9472] SELinux: policydb magic number 0x78756e69 does not match expected magic number 0xf97cff8c [ 164.944169][ T9472] SELinux: failed to load policy [ 164.987394][ T9481] overlayfs: conflicting lowerdir path [ 165.030398][ T9487] random: crng reseeded on system resumption [ 165.056841][ T55] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 165.082141][ T55] usb 5-1: device descriptor read/8, error -71 [ 165.165637][ T9495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=9495 comm=syz.1.982 [ 165.174289][ T9495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41488 sclass=netlink_route_socket pid=9495 comm=syz.1.982 [ 165.186661][ T55] usb usb5-port1: unable to enumerate USB device [ 165.275983][ T7827] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 165.372395][ T9504] bond0: entered promiscuous mode [ 165.374538][ T9504] bond_slave_0: entered promiscuous mode [ 165.377315][ T9504] bond_slave_1: entered promiscuous mode [ 165.384875][ T9508] netlink: 'syz.2.986': attribute type 29 has an invalid length. [ 165.390544][ T9508] netlink: 'syz.2.986': attribute type 29 has an invalid length. [ 165.426668][ T7827] usb 9-1: Using ep0 maxpacket: 8 [ 165.437849][ T7827] usb 9-1: config 64 has an invalid interface number: 184 but max is 0 [ 165.440905][ T7827] usb 9-1: config 64 has 2 interfaces, different from the descriptor's value: 1 [ 165.443969][ T7827] usb 9-1: config 64 has no interface number 1 [ 165.447146][ T7827] usb 9-1: config 64 interface 0 altsetting 2 endpoint 0xE has an invalid bInterval 139, changing to 11 [ 165.452326][ T7827] usb 9-1: too many endpoints for config 64 interface 184 altsetting 139: 106, using maximum allowed: 30 [ 165.457644][ T7827] usb 9-1: config 64 interface 184 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 165.461921][ T7827] usb 9-1: config 64 interface 0 has no altsetting 0 [ 165.464047][ T7827] usb 9-1: config 64 interface 184 has no altsetting 0 [ 165.469031][ T7827] usb 9-1: New USB device found, idVendor=1199, idProduct=9011, bcdDevice=72.8a [ 165.473035][ T7827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.476349][ T7827] usb 9-1: Product: syz [ 165.478046][ T7827] usb 9-1: Manufacturer: syz [ 165.479872][ T7827] usb 9-1: SerialNumber: syz [ 165.554476][ T9518] netlink: 'syz.2.989': attribute type 11 has an invalid length. [ 165.760399][ T9537] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 165.843411][ T9541] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 165.843998][ T9546] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 165.961721][ T9550] erspan0: entered promiscuous mode [ 166.069737][ T9558] validate_nla: 1 callbacks suppressed [ 166.069754][ T9558] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 166.081644][ T9558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.087801][ T55] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 166.089614][ T9558] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 166.170038][ T9560] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 166.173283][ T9560] __nla_validate_parse: 9 callbacks suppressed [ 166.173298][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1001'. [ 166.179932][ T9560] batadv0: entered promiscuous mode [ 166.181971][ T9560] batadv0: entered allmulticast mode [ 166.185524][ T9560] bond0: (slave batadv0): Releasing backup interface [ 166.190826][ T9560] bridge0: port 3(batadv0) entered blocking state [ 166.194371][ T9560] bridge0: port 3(batadv0) entered disabled state [ 166.235950][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 166.239948][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.244760][ T55] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.249200][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.254414][ T55] usb 6-1: config 0 descriptor?? [ 166.267185][ T1148] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 166.271096][ T1148] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 166.463044][ T55] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 166.614753][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 166.776256][ T5951] Bluetooth: hci4: command 0x0406 tx timeout [ 166.776519][ T5958] Bluetooth: hci1: command 0x0401 tx timeout [ 166.776664][ T5961] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.786029][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.886355][ T9] usb 6-1: USB disconnect, device number 7 [ 166.961568][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 167.203494][ T1144] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.206961][ T1144] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.209749][ T1144] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.212689][ T1144] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.418150][ T9575] sctp: [Deprecated]: syz.1.1006 (pid 9575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.418150][ T9575] Use struct sctp_sack_info instead [ 167.543118][ T9579] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1007'. [ 167.585523][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1008'. [ 167.687331][ T9592] trusted_key: syz.1.1010 sent an empty control message without MSG_MORE. [ 167.828384][ T9594] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 167.828384][ T9594] program syz.2.1011 not setting count and/or reply_len properly [ 167.969675][ T9598] digital: digital_start_poll: Unknown protocol [ 168.026253][ T9603] digital: digital_start_poll: Unknown protocol [ 168.103806][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 168.135085][ T9610] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 168.159408][ T9610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.171769][ T9610] bond5: (slave macvlan0): making interface the new active one [ 168.175111][ T9610] bond5: (slave macvlan0): Enslaving as an active interface with an up link [ 168.384188][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 168.384201][ T40] audit: type=1400 audit(1759430106.235:38836): avc: denied { accept } for pid=9623 comm="syz.0.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.605574][ T9631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1023'. [ 168.856038][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.856084][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.856273][ T5961] Bluetooth: hci4: command 0x0406 tx timeout [ 168.856325][ T5961] Bluetooth: hci1: command 0x0401 tx timeout [ 169.204075][ T9639] vxcan1: tx address claim with dlc 0 [ 169.368314][ T40] audit: type=1326 audit(1759430107.225:38837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.0.1027" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7359d8eec9 code=0x0 [ 169.473372][ T9655] ufs: You didn't specify the type of your ufs filesystem [ 169.473372][ T9655] [ 169.473372][ T9655] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 169.473372][ T9655] [ 169.473372][ T9655] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 169.486338][ T9655] ufs: ufstype=old is supported read-only [ 169.495742][ T9655] overlay: ./file0 is not a directory [ 170.194539][ T40] audit: type=1400 audit(1759430108.045:38838): avc: denied { connect } for pid=9660 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 170.294673][ T40] audit: type=1400 audit(1759430108.145:38839): avc: denied { setopt } for pid=9669 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.303282][ T9670] SELinux: policydb version 1939059819 does not match my version range 15-35 [ 170.304284][ T40] audit: type=1400 audit(1759430108.145:38840): avc: denied { accept } for pid=9669 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.307370][ T9670] SELinux: failed to load policy [ 170.317798][ T40] audit: type=1400 audit(1759430108.155:38841): avc: denied { nlmsg_read } for pid=9669 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 170.326561][ T40] audit: type=1400 audit(1759430108.155:38842): avc: denied { getopt } for pid=9669 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.559532][ T29] usb 9-1: USB disconnect, device number 4 [ 170.622036][ T9677] futex_wake_op: syz.4.1034 tries to shift op by 32; fix this program [ 170.706682][ T40] audit: type=1400 audit(1759430108.555:38843): avc: denied { bind } for pid=9682 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 170.812932][ T9690] block nbd0: NBD_DISCONNECT [ 170.936143][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.938200][ T5958] Bluetooth: hci1: command 0x0401 tx timeout [ 170.940601][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.955359][ T9698] tipc: Enabling of bearer rejected, failed to enable media [ 171.062817][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 171.066275][ T6071] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 171.182724][ T9723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 171.195922][ T6071] usb 5-1: device descriptor read/64, error -71 [ 171.437023][ T6071] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 171.498092][ T9740] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 171.504213][ T40] audit: type=1400 audit(1759430109.355:38844): avc: denied { relabelto } for pid=9739 comm="syz.1.1057" name="syz0" dev="cgroup" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 171.511712][ T9741] veth1_to_batadv: entered promiscuous mode [ 171.517880][ T40] audit: type=1400 audit(1759430109.355:38845): avc: denied { associate } for pid=9739 comm="syz.1.1057" name="syz0" dev="cgroup" ino=320 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 171.578153][ T6071] usb 5-1: device descriptor read/64, error -71 [ 171.624661][ T9743] syz.1.1058: vmalloc error: size 5898240, failed to allocated page array size 11520, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 171.633191][ T9743] CPU: 3 UID: 0 PID: 9743 Comm: syz.1.1058 Not tainted syzkaller #0 PREEMPT(full) [ 171.633212][ T9743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.633222][ T9743] Call Trace: [ 171.633227][ T9743] [ 171.633233][ T9743] dump_stack_lvl+0x16c/0x1f0 [ 171.633287][ T9743] warn_alloc+0x248/0x3a0 [ 171.633335][ T9743] ? __pfx_warn_alloc+0x10/0x10 [ 171.633370][ T9743] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 171.633393][ T9743] ? __vmalloc_node_noprof+0xad/0xf0 [ 171.633417][ T9743] __vmalloc_node_range_noprof+0x1019/0x14b0 [ 171.633444][ T9743] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 171.633485][ T9743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 171.633511][ T9743] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 171.633534][ T9743] vmalloc_user_noprof+0x9e/0xe0 [ 171.633552][ T9743] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 171.633575][ T9743] vb2_vmalloc_alloc+0x135/0x3f0 [ 171.633599][ T9743] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 171.633621][ T9743] __vb2_queue_alloc+0x8c6/0x1280 [ 171.633655][ T9743] vb2_core_reqbufs+0xa90/0xfe0 [ 171.633681][ T9743] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 171.633716][ T9743] __vb2_init_fileio+0x3f1/0x1100 [ 171.633737][ T9743] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.633757][ T9743] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 171.633778][ T9743] ? __pollwait+0x271/0x490 [ 171.633802][ T9743] vb2_core_poll+0x5ec/0x700 [ 171.633825][ T9743] vb2_poll+0x33/0x150 [ 171.633846][ T9743] vb2_fop_poll+0x10f/0x2c0 [ 171.633868][ T9743] ? __pfx_vb2_fop_poll+0x10/0x10 [ 171.633887][ T9743] v4l2_poll+0x160/0x320 [ 171.633904][ T9743] ? __pfx_v4l2_poll+0x10/0x10 [ 171.633919][ T9743] do_sys_poll+0x559/0xdf0 [ 171.633948][ T9743] ? __pfx_do_sys_poll+0x10/0x10 [ 171.633997][ T9743] ? futex_unqueue+0x13d/0x2c0 [ 171.634012][ T9743] ? __pfx___pollwait+0x10/0x10 [ 171.634036][ T9743] ? __pfx_pollwake+0x10/0x10 [ 171.634091][ T9743] ? do_futex+0x122/0x350 [ 171.634107][ T9743] ? __pfx_do_futex+0x10/0x10 [ 171.634120][ T9743] ? set_user_sigmask+0x21b/0x2b0 [ 171.634140][ T9743] ? __pfx_set_user_sigmask+0x10/0x10 [ 171.634156][ T9743] ? fd_install+0x244/0x750 [ 171.634183][ T9743] __x64_sys_ppoll+0x254/0x2d0 [ 171.634206][ T9743] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 171.634236][ T9743] do_syscall_64+0xcd/0x4e0 [ 171.634260][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.634275][ T9743] RIP: 0033:0x7fee4678eec9 [ 171.634289][ T9743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.634304][ T9743] RSP: 002b:00007fee47582038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 171.634321][ T9743] RAX: ffffffffffffffda RBX: 00007fee469e5fa0 RCX: 00007fee4678eec9 [ 171.634332][ T9743] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 171.634341][ T9743] RBP: 00007fee46811f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.634350][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.634359][ T9743] R13: 00007fee469e6038 R14: 00007fee469e5fa0 R15: 00007fffd1e7dd08 [ 171.634380][ T9743] [ 171.634386][ T9743] Mem-Info: [ 171.764101][ T9743] active_anon:28166 inactive_anon:0 isolated_anon:0 [ 171.764101][ T9743] active_file:6706 inactive_file:50914 isolated_file:0 [ 171.764101][ T9743] unevictable:1768 dirty:60 writeback:0 [ 171.764101][ T9743] slab_reclaimable:12648 slab_unreclaimable:72467 [ 171.764101][ T9743] mapped:24939 shmem:17761 pagetables:1485 [ 171.764101][ T9743] sec_pagetables:319 bounce:0 [ 171.764101][ T9743] kernel_misc_reclaimable:0 [ 171.764101][ T9743] free:418239 free_pcp:26151 free_cma:0 [ 171.765640][ T6071] usb usb5-port1: attempt power cycle [ 171.781385][ T9743] Node 0 active_anon:112788kB inactive_anon:0kB active_file:26824kB inactive_file:203424kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99724kB dirty:240kB writeback:0kB shmem:67632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13584kB pagetables:5728kB sec_pagetables:1276kB all_unreclaimable? no Balloon:0kB [ 171.781476][ T9743] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:3412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.806821][ T9743] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.817653][ T9743] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 171.820043][ T9743] Node 0 DMA32 free:90128kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112788kB inactive_anon:0kB active_file:26824kB inactive_file:203424kB unevictable:3536kB writepending:240kB present:2080628kB managed:1270580kB mlocked:0kB bounce:0kB free_pcp:55500kB local_pcp:11632kB free_cma:0kB [ 171.834442][ T9743] lowmem_reserve[]: 0 0 0 0 0 [ 171.839332][ T9743] Node 1 Normal free:1567468kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:49064kB local_pcp:2584kB free_cma:0kB [ 171.856828][ T9743] lowmem_reserve[]: 0 0 0 0 0 [ 171.858993][ T9743] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 171.864842][ T9743] Node 0 DMA32: 1470*4kB (UME) 258*8kB (UME) 91*16kB (UME) 275*32kB (UME) 86*64kB (UME) 41*128kB (UME) 14*256kB (UM) 13*512kB (UME) 17*1024kB (UM) 12*2048kB (UME) 3*4096kB (U) = 93464kB [ 171.872382][ T9743] Node 1 Normal: 3*4kB (ME) 27*8kB (UE) 23*16kB (UE) 58*32kB (UME) 14*64kB (UE) 7*128kB (UME) 6*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 378*4096kB (M) = 1567380kB [ 171.881570][ T9743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.885254][ T9743] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 171.888879][ T9743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.892828][ T9743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.898543][ T9743] 75377 total pagecache pages [ 171.900352][ T9743] 0 pages in swap cache [ 171.902149][ T9743] Free swap = 124996kB [ 171.903907][ T9743] Total swap = 124996kB [ 171.905667][ T9743] 1048443 pages RAM [ 171.907451][ T9743] 0 pages HighMem/MovableOnly [ 171.909402][ T9743] 281485 pages reserved [ 171.910827][ T9743] 0 pages cma reserved [ 171.924236][ T1148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.044234][ T1148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.115942][ T6071] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 172.137009][ T6071] usb 5-1: device descriptor read/8, error -71 [ 172.195079][ T1148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.203911][ T5304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.208478][ T5304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.212562][ T5304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.220922][ T5304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.224425][ T5304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.279415][ T9753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48418 sclass=netlink_route_socket pid=9753 comm=syz.1.1062 [ 172.330080][ T1148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.386198][ T6071] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 172.410923][ T6071] usb 5-1: device descriptor read/8, error -71 [ 172.438089][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 172.516185][ T6071] usb usb5-port1: unable to enumerate USB device [ 172.523342][ T1148] bridge0: port 3(batadv0) entered disabled state [ 172.528864][ T1148] bridge_slave_1: left allmulticast mode [ 172.531173][ T1148] bridge_slave_1: left promiscuous mode [ 172.533217][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.541578][ T1148] bridge_slave_0: left allmulticast mode [ 172.543385][ T1148] bridge_slave_0: left promiscuous mode [ 172.545942][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.476992][ T1109] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 173.479371][ T1109] ata1: failed to read log page 10h (errno=-5) [ 173.481867][ T1109] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 173.484982][ T1109] ata1.00: irq_stat 0x40000000 [ 173.487511][ T1109] ata1.00: failed command: WRITE FPDMA QUEUED [ 173.490339][ T1109] ata1.00: cmd 61/50:58:8e:08:10/00:00:00:00:00/40 tag 11 ncq dma 40960 out [ 173.490339][ T1109] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 173.497227][ T1109] ata1.00: status: { DRDY } [ 173.499130][ T1109] ata1.00: error: { ABRT } [ 173.506481][ T1109] ata1.00: configured for UDMA/100 [ 173.508975][ T1109] ata1: EH complete [ 173.556089][ T9779] netlink: 'syz.1.1070': attribute type 8 has an invalid length. [ 173.845452][ T9783] netlink: 'syz.0.1071': attribute type 2 has an invalid length. [ 173.846696][ T5951] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 173.849179][ T9783] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1071'. [ 174.296078][ T5951] Bluetooth: hci0: command tx timeout [ 174.771479][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.777412][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.788858][ T1148] bond0 (unregistering): Released all slaves [ 174.807172][ T1148] bond1 (unregistering): Released all slaves [ 174.853016][ T9] infiniband syz1: ib_query_port failed (-19) [ 174.891482][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.894012][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.897957][ T9750] bridge_slave_0: entered allmulticast mode [ 174.903114][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1074'. [ 174.904439][ T9750] bridge_slave_0: entered promiscuous mode [ 174.924945][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.927896][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.930325][ T9750] bridge_slave_1: entered allmulticast mode [ 174.941991][ T9750] bridge_slave_1: entered promiscuous mode [ 174.982852][ T8120] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.989759][ T8120] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.993827][ T1148] : left promiscuous mode [ 175.007544][ T6071] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.030392][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 175.030405][ T40] audit: type=1400 audit(1759430112.885:38854): avc: denied { mounton } for pid=9803 comm="syz.0.1077" path="/261/file0" dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 175.062404][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.066195][ T40] audit: type=1400 audit(1759430112.915:38855): avc: denied { read write } for pid=9803 comm="syz.0.1077" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.073939][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.087589][ T40] audit: type=1400 audit(1759430112.915:38856): avc: denied { open } for pid=9803 comm="syz.0.1077" path="/261/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.106346][ T6071] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.125916][ T6001] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 175.167148][ T9750] team0: Port device team_slave_0 added [ 175.172172][ T9750] team0: Port device team_slave_1 added [ 175.223319][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.227980][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.239653][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.247503][ T40] audit: type=1400 audit(1759430113.105:38857): avc: denied { bind } for pid=9807 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 175.256958][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.259287][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.269055][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.278062][ T6001] usb 9-1: config 1 interface 0 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 16 [ 175.281499][ T6001] usb 9-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 16 [ 175.284896][ T6001] usb 9-1: config 1 interface 0 has no altsetting 0 [ 175.289121][ T6001] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 175.292705][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.299027][ T6001] usb 9-1: Product: syz [ 175.300509][ T6001] usb 9-1: Manufacturer: 缠┯蔙ꛪ鷍쭟ὒ쇚沑깗닧䖓큂骽ꃻ뭲㨥쩵穣吣Ҥ䀥簼眤挜ϖ癞練걁碩㤁㼙觱ﻞ뛆蔜䮕⇒燎䭪绣饐졖ฌ┱䆬帅騇ц밢頶⫛鄏힪찰毛쩚㾷ꮈ䲎摧旐暽贖鲖昢넖ꩰ칼㻉櫛䧪笅å쀦㇠쀎⮺촇䭍떫ɿէ颈탶ᖥ婦笤馞Ḹ [ 175.314761][ T6001] usb 9-1: SerialNumber: syz [ 175.327113][ T9788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.331895][ T9788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.336135][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 175.388158][ T9750] hsr_slave_0: entered promiscuous mode [ 175.392900][ T9750] hsr_slave_1: entered promiscuous mode [ 175.406814][ T55] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.419674][ T9815] IPVS: set_ctl: invalid protocol: 25647 47.100.115.112:21 [ 175.498105][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.501784][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.504935][ T54] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.508420][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.517080][ T54] usb 6-1: config 0 descriptor?? [ 175.548378][ T9820] team0: Device gtp1 is of different type [ 175.625067][ T9820] team0: Device gtp1 is of different type [ 175.680954][ T1148] hsr_slave_0: left promiscuous mode [ 175.684425][ T1148] hsr_slave_1: left promiscuous mode [ 175.688542][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.693790][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.696996][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.699448][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.727203][ T54] usbhid 6-1:0.0: can't add hid device: -71 [ 175.730180][ T54] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 175.735633][ T1148] veth1_macvtap: left promiscuous mode [ 175.737228][ T54] usb 6-1: USB disconnect, device number 8 [ 175.738806][ T1148] veth0_macvtap: left promiscuous mode [ 175.742547][ T1148] veth1_vlan: left promiscuous mode [ 175.744295][ T1148] veth0_vlan: left promiscuous mode [ 175.754359][ T6001] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 11 proto 1 vid 0x0525 pid 0xA4A8 [ 175.761083][ T6001] usb 9-1: USB disconnect, device number 5 [ 175.766236][ T6001] usblp0: removed [ 175.941318][ T40] audit: type=1400 audit(1759430113.805:38858): avc: denied { map } for pid=9805 comm="syz.1.1078" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.256214][ T54] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 176.376148][ T5951] Bluetooth: hci0: command tx timeout [ 176.402781][ T9834] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 176.407269][ T54] usb 6-1: device descriptor read/64, error -71 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.409754][ T9834] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 176.418865][ T9834] CPU: 3 UID: 0 PID: 9834 Comm: syz.4.1087 Not tainted syzkaller #0 PREEMPT(full) [ 176.422795][ T9834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.427662][ T9834] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 176.430279][ T9834] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 1a eb 84 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 176.439147][ T9834] RSP: 0018:ffffc900043efbf0 EFLAGS: 00010293 [ 176.441759][ T9834] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff88362d9a [ 176.445244][ T9834] RDX: ffff888025b0c900 RSI: ffffffff88362de6 RDI: 0000000000000005 [ 176.448802][ T9834] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 176.452816][ T9834] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900043efd88 [ 176.456587][ T9834] R13: ffffc900043efd88 R14: 0000000000000001 R15: ffff888052b4e800 [ 176.459857][ T9834] FS: 00007f50b944d6c0(0000) GS:ffff8880d7160000(0000) knlGS:0000000000000000 [ 176.463717][ T9834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.467246][ T9834] CR2: 00007f50b942cd58 CR3: 0000000050473000 CR4: 0000000000352ef0 [ 176.471275][ T9834] Call Trace: [ 176.472783][ T9834] [ 176.474016][ T9834] ? __pfx_bcsp_recv+0x10/0x10 [ 176.476048][ T9834] hci_uart_tty_receive+0x254/0x7e0 [ 176.478300][ T9834] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 176.480605][ T9834] tty_ioctl+0x583/0x1680 [ 176.482452][ T9834] ? __pfx_tty_ioctl+0x10/0x10 [ 176.484490][ T9834] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.487984][ T9834] ? hook_file_ioctl_common+0x145/0x410 [ 176.490926][ T9834] ? selinux_file_ioctl+0x180/0x270 [ 176.493431][ T9834] ? selinux_file_ioctl+0xb4/0x270 [ 176.495636][ T9834] ? __pfx_tty_ioctl+0x10/0x10 [ 176.497710][ T9834] __x64_sys_ioctl+0x18b/0x210 [ 176.499798][ T9834] do_syscall_64+0xcd/0x4e0 [ 176.501803][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.504343][ T9834] RIP: 0033:0x7f50b858eec9 [ 176.506326][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.516371][ T9834] RSP: 002b:00007f50b944d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.519809][ T9834] RAX: ffffffffffffffda RBX: 00007f50b87e6090 RCX: 00007f50b858eec9 [ 176.523110][ T9834] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 176.526354][ T9834] RBP: 00007f50b8611f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.529983][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.534061][ T9834] R13: 00007f50b87e6128 R14: 00007f50b87e6090 R15: 00007fff3a806ba8 [ 176.538084][ T9834] [ 176.539420][ T9834] Modules linked in: [ 176.541244][ C3] vkms_vblank_simulate: vblank timer overrun [ 176.544496][ T9834] ---[ end trace 0000000000000000 ]--- [ 176.546533][ T9833] FAT-fs (loop4): unable to read boot sector [ 176.555994][ T9834] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 176.558291][ T9834] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 1a eb 84 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 176.572403][ T9834] RSP: 0018:ffffc900043efbf0 EFLAGS: 00010293 [ 176.581390][ T9834] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff88362d9a [ 176.584719][ T9834] RDX: ffff888025b0c900 RSI: ffffffff88362de6 RDI: 0000000000000005 [ 176.588273][ T9834] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 176.591390][ T9834] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900043efd88 [ 176.594719][ T9834] R13: ffffc900043efd88 R14: 0000000000000001 R15: ffff888052b4e800 [ 176.599321][ T9834] FS: 00007f50b944d6c0(0000) GS:ffff8880d7060000(0000) knlGS:0000000000000000 [ 176.603545][ T9834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.615409][ T9834] CR2: 00007f50b944dd58 CR3: 0000000050473000 CR4: 0000000000352ef0 [ 176.619247][ T9834] Kernel panic - not syncing: Fatal exception [ 176.629449][ T9834] Kernel Offset: disabled [ 176.631428][ T9834] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:30:58 Registers: info registers vcpu 0 CPU#0 RAX=000000000018481c RBX=0000000000000000 RCX=ffffffff8b509fe9 RDX=ffffed100d4c6656 RSI=ffffffff8bd00840 RDI=ffffffff8190b35d RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e08 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff90606c90 R15=0000000000000000 RIP=ffffffff8b508b2f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50b942bf98 CR3=000000003a284000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000818181d8 Opmask01=00000000003fffff Opmask02=0000000013bfffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563b1f205de0 0000563b1f205de0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563b1f17cc80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f212d3f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f212d3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 000000000000ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c525e4c6823 73730c525e4c6823 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 7373254d0fd44273 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007400003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004900000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00a5c385ace7aaa7 e487bdee9b95ee9b abe689bbe3b888ef bcb9ecb0a9eabe85 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef9684eba298e696 b2e9a39bee96b4e8 bd9ae69097e6a791 e68eb2e488aeeab7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bee39aa9ec9bafe6 b0b0ecaa9eed8f84 e99babe2b6a0e99c afeea2b0eb86d187 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8e99288ef85b8e5 ac86e4b194e28cb8 e096a1ec90a5e9a3 bbe79091eeaaade4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e99288ef85b8e5ac 86e4b194e28cb8e0 96a1ec90a5e9a3bb e79091eeaaade48e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c002c2c2c2c2c2c ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff820a4bc7 RDX=ffff888030d3c900 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000001255 RSP=ffffc900033dfe48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000012 R12=0000000000000000 R13=0000000000000000 R14=ffff88802a653050 R15=ffff88802a653060 RIP=ffffffff81bb12c2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fac11273300 ffffffff 00c00000 GS =0000 ffff8880d6f60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdfa285ffc CR3=000000002830f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000443 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2de6b8da537dbf8 29926ad9bf32e642 0203b20808800320 0000052d00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3a79142cd56a697 798311e45a2030a9 113d6d7b44488f2d 53c820a861b666bd ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed982855c862bfce 697ed5900191c504 8eacada507fbb9a6 ce253aabf3fdad09 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e1f470e732aa4c98 6ca157af6ad3f49f e3e21efaff2a2ee2 f2dc558d8c3c95e2 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b46885048e46bc42 399c46bf6bb6025d 501d8cda807f63db 085f1f8566a9999f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffee00000000 0300000000000014 0000000c0000000a 00040008000f0010 ZMM25=60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 ZMM26=e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 ZMM27=4743469347434693 4743469347434693 4743469347434693 4743469347434693 4743469347434693 4743469347434693 4743469347434693 4743469347434693 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 info registers vcpu 2 CPU#2 RAX=00000000000d819c RBX=0000000000000002 RCX=ffffffff8b509fe9 RDX=ffffed100d506656 RSI=ffffffff8bd00840 RDI=ffffffff8190b35d RBP=ffffed1003ad8920 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d506655 R10=ffff88806a8332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6c4900 R14=ffffffff90606c90 R15=0000000000000000 RIP=ffffffff8b508b2f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7060000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50b944dd58 CR3=000000002830f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000443 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2de6b8da537dbf8 29926ad9bf32e642 0203b20808800320 0000052d00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3a79142cd56a697 798311e45a2030a9 113d6d7b44488f2d 53c820a861b666bd ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed982855c862bfce 697ed5900191c504 8eacada507fbb9a6 ce253aabf3fdad09 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e1f470e732aa4c98 6ca157af6ad3f49f e3e21efaff2a2ee2 f2dc558d8c3c95e2 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b46885048e46bc42 399c46bf6bb6025d 501d8cda807f63db 085f1f8566a9999f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffee00000000 0300000000000014 0000000c0000000a 00040008000f0010 ZMM25=60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 60f0226360f02263 ZMM26=e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 e27a6b31e27a6b31 ZMM27=4743469347434693 4743469347434693 4743469347434693 4743469347434693 4743469347434693 4743469347434693 4743469347434693 4743469347434693 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 9a0500009a050000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85200855 RDI=ffffffff9ab64ae0 RBP=ffffffff9ab64aa0 RSP=ffffc900043ef5f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ab64aa0 R15=ffffffff852007f0 RIP=ffffffff8520087f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f50b944d6c0 ffffffff 00c00000 GS =0000 ffff8880d7160000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50b942cd58 CR3=0000000050473000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3a8070b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3a8070b6 00007fff3a8070bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b8612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b8612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b8612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b8612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b861305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b861313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b87b74a8 00007f50b87b74a0 00007f50b87b7498 00007f50b87b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b931d100 00007f50b87b7460 00007f50b87b7478 00007f50b87b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b87b74b8 00007f50b87b74b0 00007f50b87b74a8 00007f50b87b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000