last executing test programs: 1m9.937305018s ago: executing program 2 (id=215): syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045037800000000e00000010000000000649078020000000300000000000000f3a6012efff2432f55966460a6e32600b6f209eb912c65b0400c186a88daa96c155f6ff08a0a9bea16fcc47e59a89c2e1051a66114baa9046fe4f1d41908aad9f7f3abe27ec832b2ed1b623e81dc83ea000000000000000000"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x1) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9daee93b50574d9}}, 0xb8}}, 0x4000080) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a9e"], 0x64}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@uuid_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r1, @ANYRES64=r2, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 1m9.86835889s ago: executing program 2 (id=216): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$9p_virtio(&(0x7f0000002600), &(0x7f0000002640)='./file0\x00', &(0x7f0000002680), 0x82, &(0x7f00000026c0)={'trans=virtio,', {[{@cache_fscache}]}}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x7, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m9.858538375s ago: executing program 2 (id=218): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r6, 0x203, 0x70bd2a, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r8], 0x1, r3, r4, 0x3, 0x0, 0x0, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x4, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x3d, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r6, 0x203, 0x70bd2a, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r8], 0x1, r3, r4, 0x3, 0x0, 0x0, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x4, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x3d, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) (async) 1m9.678325246s ago: executing program 2 (id=222): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x1, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @loopback, 0x5}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x21) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002abd700004000000050000000800090002000000050007000300000006001b004e21000008000b0000000000"], 0x34}}, 0x20000084) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006111680000000000950000000000000068dd253aa0e2332c817c5e9376eaf9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 1m9.678111074s ago: executing program 2 (id=223): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000400000000008000f00fd000000", 0x24) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r4, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8400) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r6, r2, 0x0) recvmmsg(r7, &(0x7f0000004a40)=[{{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)=""/144, 0x90}], 0x1}, 0x2}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x40082) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x7, 0x2, 0x6d, 0x1}, 0x3, 0x6, 0x0, 0xed, 0x0, 0x8}}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1006}, 0x4) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1m9.518895182s ago: executing program 2 (id=227): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="2716157f3354"}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000080a01010000000000000000010000000900010073797a3000000000090002"], 0xc8}}, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x62) 55.779025725s ago: executing program 0 (id=388): removexattr(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)=@known='user.syz\x00') socket$inet_tcp(0x2, 0x1, 0x0) 55.77887635s ago: executing program 0 (id=389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c000e"], 0x90}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 55.719010683s ago: executing program 0 (id=390): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000380)=0x2, 0x4) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0x1, 0xa, 0x804, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "2e3a95cc1386d9ad674c318704491f92b29353217814b6572cb6e111c66e0164c1c1749295417f7fed06"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x86, 0x6, "1fcf5834b33d9083d5a6d84d630c6b1af4c3e297c34e018f81f85450dec3b016ff480b8b1fc027d841dec804bd015ed30a77e8c35a851a20581e1a5d0ddc3035625fa197f48530f91122732065b46466362f4bdd4a80a5add0968138d02845eea3b68a0ac8fe29e0feb371eff209c6ccac0b44096b8d9f97cc7057a6cd4cb9947486"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x404089c}, 0x40001) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 55.594876912s ago: executing program 0 (id=391): ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000140)=""/71) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000300)=[{{}, 0x5, 0x2, 0x8}, {{0x77359400}, 0x17, 0x5d, 0x40}, {{r0, r1/1000+60000}, 0x5, 0x405, 0x9}, {{}, 0x14, 0x7, 0x6}, {{}, 0x12, 0x0, 0xffff}, {{}, 0x0, 0x8, 0x4}, {{r2, r3/1000+10000}, 0x16, 0xff, 0x6}, {{}, 0x17, 0x7737, 0x7}], 0xc0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r6, @ANYRES32=r6, @ANYRES16=r4], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) setregid(0xffffffffffffffff, r7) socket$inet(0x2, 0x2, 0x1) fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x80000) unshare(0x8000000) r10 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40400) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000140)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000200)={r11, 0x0, 0x0}) r12 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$vcsa(0x0, 0x1, 0x45c0) close_range(r12, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e07480204"], 0xa) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) 54.636444208s ago: executing program 0 (id=403): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) msgget$private(0x0, 0x105) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000020071113d000000000085b449b587d19a2d281044a721ea10000002000000850000007d000000950033"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 54.636061808s ago: executing program 0 (id=404): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfe}]}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)) 54.523585229s ago: executing program 32 (id=227): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="2716157f3354"}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000080a01010000000000000000010000000900010073797a3000000000090002"], 0xc8}}, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x62) 39.173164979s ago: executing program 33 (id=404): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfe}]}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)) 3.427325238s ago: executing program 5 (id=1086): getpid() socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000bf85f340181c51471a853500", @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.67763042s ago: executing program 1 (id=1090): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 2.48447763s ago: executing program 5 (id=1092): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) symlink(0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timerfd_create(0x6, 0x80000) read$msr(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xb6b2ca0ebc195c99, {0x2, 0x4e22, @multicast2}, 'veth0_vlan\x00'}) 2.484335793s ago: executing program 3 (id=1093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 2.484194953s ago: executing program 5 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) close(r2) 2.484033919s ago: executing program 3 (id=1095): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) 2.407612708s ago: executing program 5 (id=1096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x7, 0x81, &(0x7f0000000280)="1a000000", 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) 2.407401653s ago: executing program 3 (id=1097): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r1, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$link(0x8, r4, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x34]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.248104328s ago: executing program 4 (id=1098): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffff, 0x1582603b6fab213b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x6945, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)=@newtaction={0x6c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x58, 0x1, [@m_skbmod={0x54, 0x0, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6f, 0xb, 0xffffffffffffffff, 0x2, 0x6}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='svcsock_tcp_state\x00', r1, 0x0, 0x83e1}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ba4000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, r4, 0x83000000) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) 1.750170589s ago: executing program 1 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f00000007c0)={0x0, 0x20, 0x10, 0x6dd, 0x64, 0x0, 0x4, 0xb05, 0x20, 0x1, 0x1, 0x7, &(0x7f0000000000)=[0x4], 0x1, 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x4048081) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="74e756000000000000"]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000180)={0xf2}) syz_open_dev$sndctrl(0x0, 0x2, 0x0) 1.317989663s ago: executing program 4 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000080000"], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.317737659s ago: executing program 3 (id=1101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1.258378182s ago: executing program 4 (id=1102): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000034000)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x80087601, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 658.076249ms ago: executing program 5 (id=1103): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f00000002c0), 0x4) 566.246313ms ago: executing program 5 (id=1104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000034000)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2f9}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x80087601, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 566.008518ms ago: executing program 1 (id=1105): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20040824) 426.919805ms ago: executing program 1 (id=1106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000540)={0x0, 0xe7a2, 0x800, 0xfffa, 0x40024e}, &(0x7f0000000600)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x0, 0x2161, 0x1, {0x2}}) io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 317.461383ms ago: executing program 4 (id=1107): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 317.21946ms ago: executing program 3 (id=1108): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002182, 0x0) 254.860063ms ago: executing program 4 (id=1109): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000040)=[{0x1, 0x7fff, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x404081, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r5 = socket$inet(0x2, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000940)) 254.626021ms ago: executing program 3 (id=1110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 57.153475ms ago: executing program 1 (id=1111): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000001000000008000100", @ANYRES32=0x0, @ANYBLOB="0600110000fb"], 0x24}}, 0x0) 4.496966ms ago: executing program 4 (id=1112): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f00000007c0)={0x0, 0x20, 0x10, 0x6dd, 0x64, 0x0, 0x4, 0xb05, 0x20, 0x1, 0x1, 0x7, &(0x7f0000000000)=[0x4], 0x1, 0x0}) kernel console output (not intermixed with test programs): vice number 5 [ 67.484375][ T6757] __nla_validate_parse: 3 callbacks suppressed [ 67.484384][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 67.508529][ T6757] bridge0: entered promiscuous mode [ 67.513355][ T6757] bridge0: port 3(macvlan2) entered blocking state [ 67.516351][ T6757] bridge0: port 3(macvlan2) entered disabled state [ 67.520569][ T6757] macvlan2: entered allmulticast mode [ 67.522987][ T6757] bridge0: entered allmulticast mode [ 67.527260][ T6757] macvlan2: left allmulticast mode [ 67.530552][ T6757] bridge0: left allmulticast mode [ 67.533668][ T6757] bridge0: left promiscuous mode [ 67.617939][ T6760] evm: overlay not supported [ 67.714856][ T6762] netlink: 'syz.3.194': attribute type 15 has an invalid length. [ 67.747416][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 67.747428][ T40] audit: type=1400 audit(1758309121.280:330): avc: denied { getopt } for pid=6763 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.904825][ T10] usb 6-1: USB disconnect, device number 2 [ 67.963804][ T9] usb 7-1: USB disconnect, device number 3 [ 67.976431][ T40] audit: type=1400 audit(1758309121.520:331): avc: denied { bind } for pid=6780 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.077474][ T40] audit: type=1400 audit(1758309121.610:332): avc: denied { read } for pid=6775 comm="syz.1.199" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.089662][ T40] audit: type=1400 audit(1758309121.610:333): avc: denied { open } for pid=6775 comm="syz.1.199" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.102143][ T40] audit: type=1400 audit(1758309121.640:334): avc: denied { ioctl } for pid=6775 comm="syz.1.199" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.118576][ T6796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.202'. [ 68.244960][ T40] audit: type=1400 audit(1758309121.780:335): avc: denied { bind } for pid=6795 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.397156][ T40] audit: type=1400 audit(1758309121.930:336): avc: denied { map } for pid=6803 comm="syz.2.205" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.405358][ T40] audit: type=1400 audit(1758309121.930:337): avc: denied { execute } for pid=6803 comm="syz.2.205" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.414153][ T40] audit: type=1400 audit(1758309121.940:338): avc: denied { setattr } for pid=6803 comm="syz.2.205" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.887275][ T6809] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 68.911645][ T40] audit: type=1400 audit(1758309122.450:339): avc: denied { connect } for pid=6812 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.954419][ T6819] overlayfs: failed to resolve './file0': -2 [ 69.108388][ T5976] Bluetooth: hci1: command 0x041b tx timeout [ 69.187600][ T6828] openvswitch: netlink: IP tunnel dst address not specified [ 69.190598][ T6828] openvswitch: netlink: IP tunnel dst address not specified [ 69.382312][ T6837] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 69.390267][ T6837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.215'. [ 69.393914][ T6837] overlayfs: missing 'lowerdir' [ 69.441180][ T6840] netlink: 68 bytes leftover after parsing attributes in process `syz.2.216'. [ 69.455717][ T6840] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.494976][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 69.499088][ T6842] netlink: 244 bytes leftover after parsing attributes in process `syz.3.217'. [ 69.584877][ T6845] overlay: filesystem on ./bus not supported as upperdir [ 69.587319][ T6846] netlink: 72 bytes leftover after parsing attributes in process `syz.1.220'. [ 69.695350][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 69.699080][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 69.821894][ T6865] netlink: 76 bytes leftover after parsing attributes in process `syz.1.224'. [ 69.870657][ T6875] overlay: filesystem on ./bus not supported as upperdir [ 69.907681][ T6877] kAFS: Can only specify source 'none' with -o dyn [ 70.892744][ T6887] binder: 6886:6887 ioctl c018620c 200000000000 returned -22 [ 71.081832][ T6891] netlink: 'syz.0.236': attribute type 39 has an invalid length. [ 71.081879][ T6892] netlink: 'syz.0.236': attribute type 39 has an invalid length. [ 71.265497][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.267861][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.499181][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 71.651422][ T10] usb 5-1: config 3 has an invalid interface number: 80 but max is 2 [ 71.654964][ T10] usb 5-1: config 3 has an invalid interface number: 26 but max is 2 [ 71.658637][ T10] usb 5-1: config 3 has an invalid interface number: 18 but max is 2 [ 71.662057][ T10] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 71.666019][ T10] usb 5-1: config 3 has no interface number 0 [ 71.670175][ T10] usb 5-1: config 3 has no interface number 1 [ 71.674330][ T10] usb 5-1: config 3 has no interface number 2 [ 71.676954][ T10] usb 5-1: config 3 interface 80 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 71.681547][ T10] usb 5-1: config 3 interface 80 altsetting 8 endpoint 0xD has invalid wMaxPacketSize 0 [ 71.685684][ T10] usb 5-1: config 3 interface 80 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 71.689875][ T10] usb 5-1: config 3 interface 26 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 71.694976][ T10] usb 5-1: config 3 interface 26 altsetting 255 endpoint 0x3 has an invalid bInterval 255, changing to 4 [ 71.699523][ T10] usb 5-1: config 3 interface 26 altsetting 255 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 71.702924][ T10] usb 5-1: config 3 interface 26 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 71.706459][ T10] usb 5-1: config 3 interface 26 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 71.710585][ T10] usb 5-1: config 3 interface 26 altsetting 255 endpoint 0x9 has an invalid bInterval 140, changing to 4 [ 71.714970][ T10] usb 5-1: config 3 interface 26 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 71.719502][ T10] usb 5-1: config 3 interface 26 altsetting 255 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 71.724011][ T10] usb 5-1: config 3 interface 26 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 71.728855][ T10] usb 5-1: config 3 interface 18 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 71.733717][ T10] usb 5-1: config 3 interface 18 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 71.737976][ T10] usb 5-1: config 3 interface 18 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 71.741868][ T10] usb 5-1: config 3 interface 18 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 71.746001][ T10] usb 5-1: config 3 interface 18 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 71.750657][ T10] usb 5-1: config 3 interface 18 altsetting 129 has a duplicate endpoint with address 0x9, skipping [ 71.754507][ T10] usb 5-1: config 3 interface 18 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 71.758406][ T10] usb 5-1: config 3 interface 18 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 71.764106][ T10] usb 5-1: config 3 interface 18 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 71.768891][ T10] usb 5-1: config 3 interface 18 altsetting 129 has a duplicate endpoint with address 0x3, skipping [ 71.773844][ T10] usb 5-1: config 3 interface 18 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 71.777822][ T10] usb 5-1: config 3 interface 80 has no altsetting 0 [ 71.780729][ T10] usb 5-1: config 3 interface 26 has no altsetting 0 [ 71.783573][ T10] usb 5-1: config 3 interface 18 has no altsetting 0 [ 71.790436][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=2000, bcdDevice=3c.d8 [ 71.794600][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.798721][ T10] usb 5-1: Product: syz [ 71.800610][ T10] usb 5-1: Manufacturer: syz [ 71.802867][ T10] usb 5-1: SerialNumber: syz [ 72.016807][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.020461][ T10] snd-usb-audio 5-1:3.80: probe with driver snd-usb-audio failed with error -2 [ 72.029855][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.033049][ T10] snd-usb-audio 5-1:3.26: probe with driver snd-usb-audio failed with error -2 [ 72.045553][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.067312][ T10] snd-usb-audio 5-1:3.18: probe with driver snd-usb-audio failed with error -2 [ 72.076522][ T10] usb 5-1: USB disconnect, device number 6 [ 72.105119][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:3.18/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.734338][ T6905] Bluetooth: MGMT ver 1.23 [ 72.791242][ T6907] netlink: 'syz.1.241': attribute type 21 has an invalid length. [ 72.795117][ T6907] netlink: 156 bytes leftover after parsing attributes in process `syz.1.241'. [ 72.867302][ T6915] cgroup: name respecified [ 72.938179][ T6923] SELinux: syz.3.248 (6923) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.150147][ T5965] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.318405][ T5965] usb 6-1: Using ep0 maxpacket: 8 [ 73.324762][ T5965] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 73.329159][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.332615][ T5965] usb 6-1: Product: syz [ 73.334238][ T5965] usb 6-1: Manufacturer: syz [ 73.336108][ T5965] usb 6-1: SerialNumber: syz [ 73.494902][ T6932] IPVS: Error connecting to the multicast addr [ 73.545381][ T5965] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 73.572133][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 73.572149][ T40] audit: type=1400 audit(1758309127.110:354): avc: denied { bind } for pid=6933 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.583788][ T40] audit: type=1400 audit(1758309127.110:355): avc: denied { listen } for pid=6933 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.635442][ T40] audit: type=1400 audit(1758309127.170:356): avc: denied { accept } for pid=6933 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.743333][ T6034] usb 6-1: USB disconnect, device number 3 [ 73.748681][ T6034] usblp0: removed [ 74.517502][ T40] audit: type=1400 audit(1758309128.050:357): avc: denied { read } for pid=6949 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.609871][ T6953] netlink: 76 bytes leftover after parsing attributes in process `syz.1.255'. [ 74.613563][ T6954] netlink: 76 bytes leftover after parsing attributes in process `syz.1.255'. [ 74.656078][ T40] audit: type=1400 audit(1758309128.190:358): avc: denied { read } for pid=6957 comm="syz.1.256" path="socket:[15899]" dev="sockfs" ino=15899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.704734][ T40] audit: type=1400 audit(1758309128.240:359): avc: denied { connect } for pid=6961 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.714056][ T40] audit: type=1400 audit(1758309128.240:360): avc: denied { read } for pid=6961 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.759762][ T40] audit: type=1400 audit(1758309128.300:361): avc: denied { write } for pid=6961 comm="syz.1.258" path="socket:[14664]" dev="sockfs" ino=14664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.939371][ T40] audit: type=1400 audit(1758309128.480:362): avc: denied { getopt } for pid=6961 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.117866][ T40] audit: type=1400 audit(1758309128.650:363): avc: denied { shutdown } for pid=6973 comm="syz.0.262" laddr=fe80::16 lport=50433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.160123][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 75.448385][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.600183][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 75.604113][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 75.608007][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 75.613602][ T9] usb 5-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 75.617694][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.623631][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.627010][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.629977][ T9] usb 5-1: Product: 稊줏輻數蜥⛞䋳⧿緪ꣁǏ䪃ﳮ浞簡࢙㈳ퟥ跸桿㴲葠襜鑬絢᎘㡖쥊ꀇ⬌䎨溵㸢뫠輨頳镩ꫫ먓턦仨紭ᠵᔤᗣ찔㡢ꄮ樋신귒禋旛㕴쏔䂐醑ꅌᏔ⼎ϼ郔⿰뚳ℽꟶ渚㖓쾽ъ匉ꠈ䣵㌐ᵔ㈔썩娏팎⬆腝ꋲ噸队멻⹌靔ނ꛱ɛⱡ쎟㯥睅홴Ⓨ㏖簎絽ᙣ囕푾䂙헚 [ 75.640383][ T9] usb 5-1: Manufacturer: 簷ᚕ᲻≳탤謣⨾쁚웑褿ꓚ汵亝ᬕ멋ꫂዋ浊儵餜쳷뿦淶龠蛦썽盝餋㜴瞧瑟箍脒⬣ꭡ￦䴍￑棶ק鵟梟ݥﵙ쟎Ꜿ䓔攂䨳㴽塞㉇⬸ḿ㝕쮟肈岉婜㤱ꔆꉺﺴ䰊⇶踀¦쑣㷾㶾 [ 75.648428][ T9] usb 5-1: SerialNumber: ␁ [ 75.651499][ T9] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 75.654629][ T9] usb 5-1: no configuration chosen from 1 choice [ 76.052633][ T7000] block nbd1: Attempted send on invalid socket [ 76.056161][ T7000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 76.062195][ T7000] XFS (nbd1): SB validate failed with error -5. [ 77.226329][ T7016] nfs4: Bad value for 'source' [ 77.459431][ T7024] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 77.474663][ T7024] gretap1: entered promiscuous mode [ 77.480075][ T7024] bond2: (slave gretap1): making interface the new active one [ 77.483218][ T7024] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 77.540666][ T7023] cdrom: dropping to single frame dma [ 77.871403][ T7038] program syz.1.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.876706][ T7038] openvswitch: netlink: Flow key attr not present in new flow. [ 78.053401][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 78.127191][ T7048] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.171782][ T7056] overlay: Bad value for 'redirect_dir' [ 78.209361][ T34] usb 5-1: USB disconnect, device number 7 [ 78.340082][ T6125] IPVS: starting estimator thread 0... [ 78.431023][ T7073] IPVS: using max 42 ests per chain, 100800 per kthread [ 78.436670][ T7085] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 78.478832][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.297'. [ 78.484480][ T7094] ip6_vti0: entered promiscuous mode [ 78.486498][ T7094] ip6_vti0: entered allmulticast mode [ 78.493115][ T7093] trusted_key: syz.0.297 sent an empty control message without MSG_MORE. [ 78.512460][ T7097] bad cache= option: none [ 78.512460][ T7097] [ 78.514973][ T7097] CIFS: VFS: bad cache= option: none [ 78.591551][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 78.591565][ T40] audit: type=1400 audit(1758309132.130:379): avc: denied { write } for pid=7102 comm="syz.0.300" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.614805][ T40] audit: type=1400 audit(1758309132.130:380): avc: denied { open } for pid=7102 comm="syz.0.300" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.626101][ T40] audit: type=1400 audit(1758309132.150:381): avc: denied { accept } for pid=7102 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.080641][ T40] audit: type=1400 audit(1758309132.620:382): avc: denied { ioctl } for pid=7117 comm="syz.0.304" path="socket:[14048]" dev="sockfs" ino=14048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.094693][ T7118] binder: BINDER_SET_CONTEXT_MGR already set [ 79.097332][ T7118] binder: 7117:7118 ioctl 4018620d 200000000040 returned -16 [ 79.100356][ T7118] dlm: plock device version mismatch: kernel (1.2.0), user (8.0.0) [ 79.109493][ T7118] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 79.116078][ T7118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.120814][ T7118] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 79.472221][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 79.637540][ T40] audit: type=1400 audit(1758309133.170:383): avc: denied { read write } for pid=7133 comm="syz.1.311" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.647133][ T40] audit: type=1400 audit(1758309133.180:384): avc: denied { open } for pid=7133 comm="syz.1.311" path="/62/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.780570][ T40] audit: type=1400 audit(1758309133.320:385): avc: denied { setopt } for pid=7137 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.901404][ T7143] kvm: user requested TSC rate below hardware speed [ 79.907226][ T7143] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 79.913619][ T7143] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 79.945226][ T7147] [U] v3f"S/4:XTzWtlW= [ 80.158368][ T839] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 80.174580][ T7155] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 80.177778][ T7155] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 80.181937][ T7155] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 80.233870][ T40] audit: type=1400 audit(1758309133.770:386): avc: denied { append } for pid=7160 comm="syz.3.319" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.309271][ T839] usb 6-1: Using ep0 maxpacket: 16 [ 80.319676][ T839] usb 6-1: unable to get BOS descriptor or descriptor too short [ 80.328947][ T839] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 80.333998][ T839] usb 6-1: can't read configurations, error -71 [ 80.357017][ T40] audit: type=1400 audit(1758309133.890:387): avc: denied { read } for pid=7170 comm="syz.3.321" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.368114][ T40] audit: type=1400 audit(1758309133.900:388): avc: denied { ioctl } for pid=7170 comm="syz.3.321" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.511518][ T7177] tmpfs: Group quota block hardlimit too large. [ 80.516430][ T7177] tmpfs: Bad value for 'mpol' [ 80.570534][ T7182] netlink: 156 bytes leftover after parsing attributes in process `syz.0.325'. [ 80.659771][ T7195] netlink: 52 bytes leftover after parsing attributes in process `syz.3.329'. [ 80.670281][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 80.809376][ T7203] NILFS (nbd3): device size too small [ 81.327807][ T7223] erofs (device loop1): cannot find valid erofs superblock [ 81.435222][ T7241] erofs (device nbd3): cannot find valid erofs superblock [ 81.480347][ T7244] random: crng reseeded on system resumption [ 81.555983][ T7250] SELinux: policydb string does not match my string SE Linux [ 81.558839][ T7250] SELinux: failed to load policy [ 81.693083][ T7261] bond0: entered promiscuous mode [ 81.695224][ T7261] bond_slave_0: entered promiscuous mode [ 81.697845][ T7261] bond_slave_1: entered promiscuous mode [ 81.700642][ T7261] batadv0: entered promiscuous mode [ 81.708385][ T7261] bond0: left promiscuous mode [ 81.711909][ T7261] bond_slave_0: left promiscuous mode [ 81.714470][ T7261] bond_slave_1: left promiscuous mode [ 81.717087][ T7261] batadv0: left promiscuous mode [ 82.025477][ T840] IPVS: starting estimator thread 0... [ 82.108429][ T7283] IPVS: using max 42 ests per chain, 100800 per kthread [ 82.154968][ T7286] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 82.158637][ T7286] netlink: 76 bytes leftover after parsing attributes in process `syz.3.359'. [ 82.208578][ T7288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7288 comm=syz.3.360 [ 82.343493][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 82.584821][ T7320] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 82.587054][ T7320] pim6reg1: persist disabled [ 82.650330][ T7322] batadv0: entered allmulticast mode [ 82.728836][ T7326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7326 comm=syz.3.372 [ 82.733801][ T7326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7326 comm=syz.3.372 [ 82.815809][ T7334] netlink: 164 bytes leftover after parsing attributes in process `syz.0.375'. [ 82.971300][ T7350] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.974300][ T7350] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 83.220477][ T7371] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 83.553594][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.389'. [ 83.557904][ T7403] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.389'. [ 83.561977][ T7403] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 83.643998][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 83.644009][ T40] audit: type=1400 audit(1758309137.180:426): avc: denied { ioctl } for pid=7405 comm="syz.0.390" path="socket:[17695]" dev="sockfs" ino=17695 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.756044][ T40] audit: type=1326 audit(1758309137.290:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.0.391" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba6a58ec29 code=0x0 [ 83.858762][ T7436] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 83.864925][ T7436] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 83.868862][ T7436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.965181][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 83.973731][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 84.172534][ T40] audit: type=1400 audit(1758309137.710:428): avc: denied { watch_mount } for pid=7460 comm="syz.3.395" path="/133" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.196024][ T40] audit: type=1400 audit(1758309137.730:429): avc: denied { ioctl } for pid=7457 comm="syz.1.394" path="socket:[17716]" dev="sockfs" ino=17716 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.446805][ T40] audit: type=1400 audit(1758309137.980:430): avc: denied { setopt } for pid=7473 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.590850][ T40] audit: type=1400 audit(1758309138.130:431): avc: denied { write } for pid=7484 comm="syz.3.402" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.600800][ T40] audit: type=1400 audit(1758309138.130:432): avc: denied { ioctl } for pid=7484 comm="syz.3.402" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.665901][ T7487] capability: warning: `syz.0.403' uses deprecated v2 capabilities in a way that may be insecure [ 84.773514][ T40] audit: type=1400 audit(1758309138.310:433): avc: denied { watch watch_reads } for pid=7490 comm="syz.3.406" path="/138/file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.818990][ T40] audit: type=1400 audit(1758309138.350:434): avc: denied { execute } for pid=7493 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 84.844486][ T40] audit: type=1400 audit(1758309138.350:435): avc: denied { execute_no_trans } for pid=7493 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 85.093361][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.097717][ T5980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.101586][ T5980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.105686][ T5980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.110060][ T5980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.200074][ T7499] netlink: 'syz.3.409': attribute type 13 has an invalid length. [ 85.203910][ T7499] netlink: 'syz.3.409': attribute type 17 has an invalid length. [ 85.217850][ T7499] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.292372][ T6137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.412087][ T6137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.423765][ T7504] chnl_net:caif_netlink_parms(): no params data found [ 85.507307][ T6137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.565015][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.568135][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.571690][ T7504] bridge_slave_0: entered allmulticast mode [ 85.575683][ T7504] bridge_slave_0: entered promiscuous mode [ 85.595632][ T6137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.606396][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.609976][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.613052][ T7504] bridge_slave_1: entered allmulticast mode [ 85.616213][ T7504] bridge_slave_1: entered promiscuous mode [ 85.649511][ T7530] binder: 7529:7530 ioctl c0306201 200000000080 returned -14 [ 85.655043][ T7530] binder: 7529:7530 ioctl c0306201 2000000003c0 returned -14 [ 85.658181][ T7530] binder: 7529:7530 ioctl c0306201 2000000001c0 returned -14 [ 85.672932][ T7504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.682421][ T7504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.745181][ T7504] team0: Port device team_slave_0 added [ 85.752418][ T7504] team0: Port device team_slave_1 added [ 85.840180][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.842349][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.851492][ T7504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.872094][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.876212][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.886427][ T7504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.933147][ T6137] bridge_slave_1: left allmulticast mode [ 85.935571][ T6137] bridge_slave_1: left promiscuous mode [ 85.938240][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.943454][ T6137] bridge_slave_0: left allmulticast mode [ 85.945293][ T6137] bridge_slave_0: left promiscuous mode [ 85.947133][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.229678][ T5980] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 86.233435][ T5980] Bluetooth: hci3: Injecting HCI hardware error event [ 86.236277][ T5980] Bluetooth: hci3: hardware error 0x00 [ 86.327712][ T6137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.334045][ T6137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.337825][ T6137] bond0 (unregistering): Released all slaves [ 86.372205][ T7504] hsr_slave_0: entered promiscuous mode [ 86.375114][ T7504] hsr_slave_1: entered promiscuous mode [ 86.378181][ T7504] debugfs: 'hsr0' already exists in 'hsr' [ 86.381270][ T7504] Cannot create hsr debugfs directory [ 86.626789][ T60] cfg80211: failed to load regulatory.db [ 86.661347][ T6137] hsr_slave_0: left promiscuous mode [ 86.675434][ T6137] hsr_slave_1: left promiscuous mode [ 86.678738][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.681249][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.683995][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.686304][ T7558] fuse: Bad value for 'user_id' [ 86.686454][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.688056][ T7558] fuse: Bad value for 'user_id' [ 86.692195][ T7558] fuse: Unknown parameter '00000000000000000000003A:>'' [ 86.741278][ T6137] veth1_macvtap: left promiscuous mode [ 86.743322][ T6137] veth0_macvtap: left promiscuous mode [ 87.182099][ T5976] Bluetooth: hci2: command tx timeout [ 87.276846][ T6137] team0 (unregistering): Port device team_slave_1 removed [ 87.341894][ T7593] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 87.350046][ T6137] team0 (unregistering): Port device team_slave_0 removed [ 87.907543][ T7504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.912893][ T7504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.923837][ T7504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.931922][ T7504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.005521][ T7504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.024777][ T7504] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.033447][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.036436][ T6144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.043648][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.044922][ T7612] netlink: 244 bytes leftover after parsing attributes in process `syz.3.436'. [ 88.046323][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.079575][ T7612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.295510][ T7504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.298434][ T5980] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 88.373256][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'. [ 88.376398][ T7636] netlink: 264 bytes leftover after parsing attributes in process `syz.3.440'. [ 88.383457][ T7636] netlink: 56 bytes leftover after parsing attributes in process `syz.3.440'. [ 88.396802][ T7636] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 88.404164][ T7636] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 88.408985][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 88.485666][ T7645] program syz.3.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.557386][ T7504] veth0_vlan: entered promiscuous mode [ 88.571836][ T7504] veth1_vlan: entered promiscuous mode [ 88.605438][ T7504] veth0_macvtap: entered promiscuous mode [ 88.611129][ T7504] veth1_macvtap: entered promiscuous mode [ 88.627981][ T7504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.644806][ T7504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.656993][ T6144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.663964][ T6144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.668117][ T6144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.672239][ T6144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.676062][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 88.676070][ T40] audit: type=1400 audit(1758309142.210:454): avc: denied { setopt } for pid=7661 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.750874][ T6144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.753344][ T6144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.790051][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.792520][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.811740][ T7667] nvme_fabrics: missing parameter 'transport=%s' [ 88.814626][ T7667] nvme_fabrics: missing parameter 'nqn=%s' [ 88.868667][ T7677] erofs (device nbd4): cannot find valid erofs superblock [ 88.896700][ T7667] kvm: MWAIT instruction emulated as NOP! [ 89.148214][ T40] audit: type=1400 audit(1758309142.680:455): avc: denied { create } for pid=7686 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.206347][ T7692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.258604][ T5980] Bluetooth: hci2: command tx timeout [ 89.381117][ T40] audit: type=1400 audit(1758309142.920:456): avc: denied { mount } for pid=7708 comm="syz.3.455" name="/" dev="autofs" ino=17395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 89.997376][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=7727 comm=syz.4.457 [ 90.199589][ T7734] ip6tnl1: entered promiscuous mode [ 90.201479][ T7734] ip6tnl1: entered allmulticast mode [ 90.203643][ T7734] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 90.212312][ T7734] VFS: Can't find a romfs filesystem on dev nullb0. [ 90.212312][ T7734] [ 90.227245][ T40] audit: type=1400 audit(1758309143.760:457): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 90.240134][ T7734] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 90.243771][ T7734] VFS: Can't find a romfs filesystem on dev nullb0. [ 90.243771][ T7734] [ 90.292259][ T7741] usb usb8: usbfs: process 7741 (syz.3.462) did not claim interface 0 before use [ 90.321333][ T40] audit: type=1400 audit(1758309143.860:458): avc: denied { write } for pid=7740 comm="syz.3.462" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.328510][ T40] audit: type=1400 audit(1758309143.860:459): avc: denied { open } for pid=7740 comm="syz.3.462" path="/dev/input/mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.385441][ T40] audit: type=1400 audit(1758309143.920:460): avc: denied { append } for pid=7748 comm="syz.4.464" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.385470][ T7749] random: crng reseeded on system resumption [ 90.474198][ T40] audit: type=1400 audit(1758309144.010:461): avc: denied { shutdown } for pid=7750 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.606236][ T7761] loop2: detected capacity change from 0 to 7 [ 90.614120][ T7761] Dev loop2: unable to read RDB block 7 [ 90.618485][ T7761] loop2: unable to read partition table [ 90.620594][ T7761] loop2: partition table beyond EOD, truncated [ 90.623094][ T7761] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 90.885164][ T7774] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 90.887712][ T7774] netlink: 'syz.3.472': attribute type 101 has an invalid length. [ 90.890570][ T7774] netlink: 232 bytes leftover after parsing attributes in process `syz.3.472'. [ 91.338409][ T5980] Bluetooth: hci2: command tx timeout [ 92.181370][ T7785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.475'. [ 92.218589][ T7785] netlink: 120 bytes leftover after parsing attributes in process `syz.3.475'. [ 92.224634][ T40] audit: type=1400 audit(1758309145.760:462): avc: denied { setattr } for pid=7784 comm="syz.3.475" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 92.524033][ T7799] netlink: 5 bytes leftover after parsing attributes in process `syz.4.481'. [ 92.574422][ T40] audit: type=1400 audit(1758309146.110:463): avc: denied { accept } for pid=7800 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 92.576282][ T7801] loop7: detected capacity change from 0 to 16384 [ 92.686458][ T7802] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 92.689325][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.693407][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 92.830296][ T7801] loop7: detected capacity change from 16384 to 0 [ 92.835971][ T7803] vhci_hcd: connection closed [ 92.839791][ T6137] vhci_hcd: stop threads [ 92.842921][ T6137] vhci_hcd: release socket [ 92.845258][ T6137] vhci_hcd: disconnect device [ 92.868413][ T34] vhci_hcd: vhci_device speed not set [ 93.374400][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 93.385975][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.484'. [ 93.428593][ T5980] Bluetooth: hci2: command tx timeout [ 93.502212][ T7822] netlink: 'syz.1.487': attribute type 4 has an invalid length. [ 93.504616][ T7822] netlink: 152 bytes leftover after parsing attributes in process `syz.1.487'. [ 93.512458][ T7822] : renamed from bond0 (while UP) [ 93.613548][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'. [ 93.619231][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'. [ 93.622263][ T7832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'. [ 93.976589][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 93.976605][ T40] audit: type=1400 audit(1758309147.510:465): avc: denied { getopt } for pid=7847 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.149537][ T7855] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 94.193610][ T7857] efs: device does not support 512 byte blocks [ 94.195790][ T7857] device does not support 512 byte blocks [ 94.195790][ T7857] [ 94.261498][ T40] audit: type=1400 audit(1758309147.800:466): avc: denied { setopt } for pid=7862 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.274970][ T7863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.398529][ T40] audit: type=1400 audit(1758309147.930:467): avc: denied { read } for pid=7873 comm="syz.4.503" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.406982][ T40] audit: type=1400 audit(1758309147.930:468): avc: denied { open } for pid=7873 comm="syz.4.503" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.453904][ T7886] can0: slcan on ttyprintk. [ 94.510780][ T7884] can0 (unregistered): slcan off ttyprintk. [ 94.559191][ T7889] 9pnet: Could not find request transport: virtioF [ 94.586680][ T40] audit: type=1400 audit(1758309148.120:469): avc: denied { append } for pid=7899 comm="syz.4.510" name="001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.603191][ T7902] binder: Unknown parameter 'func' [ 94.625126][ T40] audit: type=1400 audit(1758309148.160:470): avc: denied { read } for pid=7901 comm="syz.1.511" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.632562][ T40] audit: type=1400 audit(1758309148.160:471): avc: denied { open } for pid=7901 comm="syz.1.511" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.640089][ T40] audit: type=1400 audit(1758309148.160:472): avc: denied { ioctl } for pid=7901 comm="syz.1.511" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.797309][ T40] audit: type=1400 audit(1758309148.330:473): avc: denied { read } for pid=7910 comm="syz.1.513" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 94.806263][ T40] audit: type=1400 audit(1758309148.330:474): avc: denied { open } for pid=7910 comm="syz.1.513" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 95.213622][ T5980] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 95.218102][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 95.218127][ T5980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.218141][ T5980] Workqueue: hci1 hci_rx_work [ 95.218192][ T5980] Call Trace: [ 95.218199][ T5980] [ 95.218207][ T5980] dump_stack_lvl+0x16c/0x1f0 [ 95.218230][ T5980] sysfs_warn_dup+0x7f/0xa0 [ 95.218277][ T5980] sysfs_create_dir_ns+0x24b/0x2b0 [ 95.218299][ T5980] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 95.218324][ T5980] ? find_held_lock+0x2b/0x80 [ 95.218350][ T5980] ? do_raw_spin_unlock+0x172/0x230 [ 95.218375][ T5980] kobject_add_internal+0x2c4/0x9b0 [ 95.218402][ T5980] kobject_add+0x16e/0x240 [ 95.218442][ T5980] ? __pfx_kobject_add+0x10/0x10 [ 95.218467][ T5980] ? do_raw_spin_unlock+0x172/0x230 [ 95.218490][ T5980] ? kobject_put+0xab/0x5a0 [ 95.218521][ T5980] device_add+0x288/0x1aa0 [ 95.218549][ T5980] ? __pfx_dev_set_name+0x10/0x10 [ 95.218565][ T5980] ? __pfx_device_add+0x10/0x10 [ 95.218589][ T5980] ? mgmt_send_event_skb+0x2fb/0x460 [ 95.218616][ T5980] hci_conn_add_sysfs+0x17e/0x230 [ 95.218637][ T5980] le_conn_complete_evt+0x1075/0x1d70 [ 95.218657][ T5980] ? preempt_count_sub+0xb0/0x160 [ 95.218683][ T5980] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 95.218703][ T5980] ? hci_event_packet+0x459/0x11c0 [ 95.218729][ T5980] hci_le_conn_complete_evt+0x23c/0x370 [ 95.218752][ T5980] hci_le_meta_evt+0x354/0x5e0 [ 95.218774][ T5980] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 95.218798][ T5980] hci_event_packet+0x682/0x11c0 [ 95.218817][ T5980] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 95.218836][ T5980] ? __pfx_hci_event_packet+0x10/0x10 [ 95.218858][ T5980] ? kcov_remote_start+0x3c9/0x6d0 [ 95.218880][ T5980] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.218925][ T5980] hci_rx_work+0x2c5/0x16b0 [ 95.218947][ T5980] ? rcu_is_watching+0x12/0xc0 [ 95.218976][ T5980] process_one_work+0x9cc/0x1b70 [ 95.219006][ T5980] ? __pfx_process_one_work+0x10/0x10 [ 95.219033][ T5980] ? assign_work+0x1a0/0x250 [ 95.219051][ T5980] worker_thread+0x6c8/0xf10 [ 95.219084][ T5980] ? __pfx_worker_thread+0x10/0x10 [ 95.219103][ T5980] kthread+0x3c2/0x780 [ 95.219123][ T5980] ? __pfx_kthread+0x10/0x10 [ 95.219142][ T5980] ? rcu_is_watching+0x12/0xc0 [ 95.219162][ T5980] ? __pfx_kthread+0x10/0x10 [ 95.219183][ T5980] ret_from_fork+0x56a/0x730 [ 95.219199][ T5980] ? __pfx_kthread+0x10/0x10 [ 95.219215][ T5980] ret_from_fork_asm+0x1a/0x30 [ 95.219250][ T5980] [ 95.314065][ T5980] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.318549][ T5980] Bluetooth: hci1: failed to register connection device [ 95.575723][ T7942] netlink: 'syz.4.522': attribute type 10 has an invalid length. [ 95.579926][ T7942] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 95.582698][ T7942] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 95.586302][ T7942] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 96.034868][ T7948] __nla_validate_parse: 5 callbacks suppressed [ 96.034892][ T7948] netlink: 37 bytes leftover after parsing attributes in process `syz.1.524'. [ 96.041555][ T7948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.045083][ T7948] IPv6: NLM_F_CREATE should be set when creating new route [ 96.048237][ T7948] IPv6: NLM_F_CREATE should be set when creating new route [ 96.146741][ T7955] loop4: detected capacity change from 0 to 2560 [ 96.153043][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.156023][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.159463][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.162251][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.165081][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.167911][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.172518][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.175111][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.177651][ T7955] ldm_validate_partition_table(): Disk read failed. [ 96.180428][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.183151][ T7955] Buffer I/O error on dev loop4, logical block 0, async page read [ 96.185846][ T7955] Dev loop4: unable to read RDB block 0 [ 96.188158][ T7955] loop4: unable to read partition table [ 96.190578][ T7955] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 96.298982][ T6144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.302688][ T6144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.328543][ T840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.378473][ T839] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 96.438547][ T840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.484330][ T5378] ldm_validate_partition_table(): Disk read failed. [ 96.486621][ T5378] Dev loop4: unable to read RDB block 0 [ 96.488737][ T5378] loop4: unable to read partition table [ 96.536956][ T7960] tipc: Started in network mode [ 96.538967][ T839] usb 6-1: Using ep0 maxpacket: 32 [ 96.540936][ T7960] tipc: Node identity eecbf5f0f8ad, cluster identity 4711 [ 96.545298][ T7960] tipc: Enabled bearer , priority 0 [ 96.550128][ T839] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.553054][ T839] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.556190][ T839] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.559226][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.562676][ T839] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.566618][ T839] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.571471][ T839] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.574687][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.580037][ T839] usb 6-1: config 0 descriptor?? [ 96.580562][ T7963] tipc: Resetting bearer [ 96.790201][ T839] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.804097][ T839] usb 6-1: USB disconnect, device number 6 [ 96.812301][ T839] usblp0: removed [ 96.892994][ T840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.108384][ T839] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 97.261366][ T839] usb 6-1: Using ep0 maxpacket: 32 [ 97.265231][ T839] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.268842][ T839] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.272881][ T839] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.276739][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.280822][ T839] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.284848][ T839] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.290505][ T839] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.294206][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.301713][ T839] usb 6-1: config 0 descriptor?? [ 97.514116][ T839] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.560424][ T7963] tipc: Disabling bearer [ 97.633416][ T5378] ldm_validate_partition_table(): Disk read failed. [ 97.635692][ T5378] Dev loop4: unable to read RDB block 0 [ 97.637621][ T5378] loop4: unable to read partition table [ 97.644448][ T7968] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 97.723080][ T840] usb 6-1: USB disconnect, device number 7 [ 97.734364][ T840] usblp0: removed [ 98.247402][ T7980] SELinux: failed to load policy [ 98.325491][ T7987] netlink: 'syz.4.534': attribute type 12 has an invalid length. [ 98.374158][ T7989] overlayfs: missing 'lowerdir' [ 98.381292][ T7989] openvswitch: netlink: Multiple metadata blocks provided [ 98.481613][ T7991] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 98.491214][ T7991] cramfs: wrong magic [ 98.686514][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 98.721538][ T8008] netlink: 'syz.4.540': attribute type 12 has an invalid length. [ 98.724103][ T8008] netlink: 120 bytes leftover after parsing attributes in process `syz.4.540'. [ 98.761794][ T8013] sctp: [Deprecated]: syz.4.541 (pid 8013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.761794][ T8013] Use struct sctp_sack_info instead [ 98.799883][ T8015] bridge0: entered allmulticast mode [ 98.802435][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 98.805447][ T8015] bridge_slave_1: left allmulticast mode [ 98.807703][ T8015] bridge_slave_1: left promiscuous mode [ 98.810737][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.815198][ T8015] bridge_slave_0: left allmulticast mode [ 98.817031][ T8015] bridge_slave_0: left promiscuous mode [ 98.819418][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.837734][ T8015] bridge0 (unregistering): left allmulticast mode [ 99.053522][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 99.306249][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 99.338896][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 99.338907][ T40] audit: type=1400 audit(1758309152.880:490): avc: denied { read } for pid=8039 comm="syz.1.549" path="socket:[21788]" dev="sockfs" ino=21788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.068519][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.348122][ T5976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.352322][ T5976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.355205][ T5976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.359698][ T5976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.362597][ T5976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.412613][ T40] audit: type=1400 audit(1758309153.950:491): avc: denied { ioctl } for pid=8066 comm="syz.3.555" path="socket:[22584]" dev="sockfs" ino=22584 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.419891][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 100.427185][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.431544][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.435366][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.438904][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.452419][ T8067] batadv0 (unregistering): left allmulticast mode [ 100.471247][ T8070] Bluetooth: MGMT ver 1.23 [ 100.472670][ T8070] Bluetooth: hci0: too big key_count value 32767 [ 100.507045][ T8064] chnl_net:caif_netlink_parms(): no params data found [ 100.568554][ T840] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.573026][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.575417][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.577743][ T8064] bridge_slave_0: entered allmulticast mode [ 100.580705][ T8064] bridge_slave_0: entered promiscuous mode [ 100.584007][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.586346][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.588961][ T8064] bridge_slave_1: entered allmulticast mode [ 100.591642][ T8064] bridge_slave_1: entered promiscuous mode [ 100.622555][ T6147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.656380][ T8064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.662228][ T8064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.680142][ T8078] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 100.682786][ T8078] netlink: 208 bytes leftover after parsing attributes in process `syz.3.557'. [ 100.685691][ T8078] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 100.688067][ T8078] netlink: 'syz.3.557': attribute type 2 has an invalid length. [ 100.722391][ T6147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.726029][ T840] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 100.729333][ T840] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.734808][ T840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 100.735451][ T8064] team0: Port device team_slave_0 added [ 100.736295][ T8083] binder: 8082:8083 ioctl c0306201 200000000640 returned -22 [ 100.736713][ T8083] fuse: Unknown parameter 'ro0080000I00000' [ 100.740064][ T840] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.743875][ T8064] team0: Port device team_slave_1 added [ 100.744402][ T840] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.753002][ T840] usb 6-1: Product: syz [ 100.754556][ T840] usb 6-1: Manufacturer: syz [ 100.756005][ T840] usb 6-1: SerialNumber: syz [ 100.762041][ T840] usb 6-1: config 0 descriptor?? [ 100.768821][ T840] hub 6-1:0.0: bad descriptor, ignoring hub [ 100.770955][ T840] hub 6-1:0.0: probe with driver hub failed with error -5 [ 100.776579][ T840] usb 6-1: selecting invalid altsetting 0 [ 100.835253][ T6147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.845246][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.847484][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.858970][ T8064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.865248][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.868034][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.877226][ T8064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.907483][ T6147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.950944][ T8064] hsr_slave_0: entered promiscuous mode [ 100.953155][ T8064] hsr_slave_1: entered promiscuous mode [ 100.955169][ T8064] debugfs: 'hsr0' already exists in 'hsr' [ 100.956906][ T8064] Cannot create hsr debugfs directory [ 100.972991][ T40] audit: type=1400 audit(1758309154.510:492): avc: denied { read write } for pid=8090 comm="syz.3.560" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.983543][ T40] audit: type=1400 audit(1758309154.520:493): avc: denied { open } for pid=8090 comm="syz.3.560" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.141323][ T6147] bridge_slave_1: left allmulticast mode [ 101.144006][ T6147] bridge_slave_1: left promiscuous mode [ 101.146124][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.152443][ T6147] bridge_slave_0: left allmulticast mode [ 101.154433][ T6147] bridge_slave_0: left promiscuous mode [ 101.156322][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.249703][ T8101] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.380020][ T8063] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 101.384388][ T8063] usb 6-1: device reset changed ep0 maxpacket size! [ 101.389249][ T29] usb 6-1: USB disconnect, device number 8 [ 101.540177][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 101.551312][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.557133][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.563786][ T6147] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 101.573568][ T6147] bond0 (unregistering): Released all slaves [ 101.656903][ T8064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.665257][ T8064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.672434][ T8064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.679335][ T8064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.688538][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 101.695924][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 101.708343][ T29] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 101.711442][ T29] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 101.714998][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.720067][ T29] usb 6-1: language id specifier not provided by device, defaulting to English [ 101.724507][ T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.727678][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.731195][ T29] usb 6-1: Product:   [ 101.732731][ T29] usb 6-1: Manufacturer: ည [ 101.734400][ T29] usb 6-1: SerialNumber: syz [ 101.813677][ T8064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.826367][ T8064] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.832715][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.835223][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.850168][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.852867][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.862493][ T6147] hsr_slave_0: left promiscuous mode [ 101.865028][ T6147] hsr_slave_1: left promiscuous mode [ 101.867232][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.869692][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.872942][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.875438][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.904448][ T6147] veth1_vlan: left allmulticast mode [ 101.906216][ T6147] veth1_macvtap: left promiscuous mode [ 101.908001][ T6147] veth0_macvtap: left promiscuous mode [ 101.910313][ T6147] veth1_vlan: left promiscuous mode [ 101.912463][ T6147] veth0_vlan: left promiscuous mode [ 101.948377][ T29] usb 6-1: 0:2 : does not exist [ 101.957616][ T29] usb 6-1: USB disconnect, device number 9 [ 101.975458][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.380504][ T5976] Bluetooth: hci0: command tx timeout [ 102.496142][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.565'. [ 102.527483][ T6147] team0 (unregistering): Port device team_slave_1 removed [ 102.612976][ T6147] team0 (unregistering): Port device team_slave_0 removed [ 102.737745][ T40] audit: type=1400 audit(1758309156.270:494): avc: denied { create } for pid=8141 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.746180][ T40] audit: type=1400 audit(1758309156.270:495): avc: denied { ioctl } for pid=8141 comm="syz.1.569" path="socket:[23737]" dev="sockfs" ino=23737 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.793610][ T40] audit: type=1400 audit(1758309156.330:496): avc: denied { write } for pid=8141 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.793690][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 102.802223][ T40] audit: type=1400 audit(1758309156.330:497): avc: denied { nlmsg_write } for pid=8141 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.817980][ T8143] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2581 sclass=netlink_xfrm_socket pid=8143 comm=syz.1.569 [ 103.394544][ T8064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.431702][ T6147] IPVS: stop unused estimator thread 0... [ 103.594583][ T8185] netlink: 'syz.1.576': attribute type 15 has an invalid length. [ 103.607790][ T8064] veth0_vlan: entered promiscuous mode [ 103.613060][ T8064] veth1_vlan: entered promiscuous mode [ 103.638120][ T8064] veth0_macvtap: entered promiscuous mode [ 103.643348][ T8064] veth1_macvtap: entered promiscuous mode [ 103.653395][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.661177][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.671359][ T6147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.683756][ T6147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.686739][ T6147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.690327][ T6147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.692634][ T8193] fuse: Bad value for 'user_id' [ 103.695007][ T8193] fuse: Bad value for 'user_id' [ 103.720417][ T40] audit: type=1400 audit(1758309157.250:498): avc: denied { setattr } for pid=8197 comm="syz.4.580" name="RAW" dev="sockfs" ino=22806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.729286][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.735836][ T40] audit: type=1400 audit(1758309157.270:499): avc: denied { accept } for pid=8197 comm="syz.4.580" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.736056][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.759457][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.762547][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.817322][ T8208] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.582'. [ 103.817322][ T8207] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.582'. [ 103.835025][ T8211] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 103.865320][ T8219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.584'. [ 103.865377][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.584'. [ 104.097555][ T8239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8239 comm=syz.5.590 [ 104.105465][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.590'. [ 104.109256][ T8239] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 104.242692][ T8262] pvfs2: Unknown parameter '/proc/sys/net/ipv4/vs/sync_retries' [ 104.267219][ T8263] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.270820][ T8265] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 104.277470][ T8263] overlayfs: failed to set xattr on upper [ 104.280153][ T8263] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.283137][ T8263] overlayfs: ...falling back to index=off. [ 104.285637][ T8263] overlayfs: ...falling back to uuid=null. [ 104.287364][ T8262] capability: warning: `syz.4.596' uses 32-bit capabilities (legacy support in use) [ 104.287556][ T8263] overlayfs: ...falling back to xino=off. [ 104.337823][ T8273] gfs2: path_lookup on 6(+dQnB!eUV!`: 8DSE y|YT{-,mb/ returned error -2 [ 104.381277][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 104.381292][ T40] audit: type=1400 audit(1758309157.920:505): avc: denied { read } for pid=8274 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.432676][ T8276] overlay: ./bus is not a directory [ 104.432696][ T40] audit: type=1400 audit(1758309157.970:506): avc: denied { mounton } for pid=8274 comm="syz.1.601" path="/168/bus" dev="tmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 104.458516][ T5976] Bluetooth: hci0: command tx timeout [ 104.486289][ T8284] fuse: Unknown parameter 'fMWQ`d "Lzn-0x0000000000000004' [ 104.517813][ T8289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.525078][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.5.605'. [ 104.563657][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.607'. [ 104.593868][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 104.600470][ T8293] kvm: kvm [8292]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000030) = 0xbad935afb2300006 [ 104.628853][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 104.634097][ T8293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8293 comm=syz.5.607 [ 104.638666][ T6144] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.674343][ T8300] nfs: Unknown parameter 'smackfstransmute' [ 104.675298][ T8303] tipc: Started in network mode [ 104.678146][ T8303] tipc: Node identity beead3e1d81a, cluster identity 4711 [ 104.681727][ T8303] tipc: Enabled bearer , priority 0 [ 104.715256][ T8307] tmpfs: Bad value for 'mpol' [ 104.720130][ T40] audit: type=1400 audit(1758309158.260:507): avc: denied { mount } for pid=8306 comm="syz.1.612" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.726547][ T8305] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 104.726731][ T40] audit: type=1400 audit(1758309158.260:508): avc: denied { watch watch_reads } for pid=8306 comm="syz.1.612" path="/172/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 104.736839][ T8308] tmpfs: Bad value for 'mpol' [ 104.775577][ T8314] binder: 8313:8314 ioctl c018620b 0 returned -14 [ 104.775623][ T8316] binder: 8313:8316 ioctl c018620b 0 returned -14 [ 104.789283][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 104.797448][ T9] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 104.801461][ T9] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 104.805977][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 104.812520][ T9] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 104.816301][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.819907][ T9] usb 9-1: Product: syz [ 104.821830][ T9] usb 9-1: Manufacturer: syz [ 104.823930][ T9] usb 9-1: SerialNumber: syz [ 104.828358][ T9] usb 9-1: config 0 descriptor?? [ 104.865136][ T8322] openvswitch: netlink: EtherType 0 is less than min 600 [ 105.048882][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input11 [ 105.104058][ T40] audit: type=1400 audit(1758309158.640:509): avc: denied { bind } for pid=8332 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.152200][ T8337] bridge0: port 3(syz_tun) entered blocking state [ 105.155417][ T8337] bridge0: port 3(syz_tun) entered disabled state [ 105.157942][ T8337] syz_tun: entered allmulticast mode [ 105.162835][ T8337] syz_tun: entered promiscuous mode [ 105.165342][ T8337] bridge0: port 3(syz_tun) entered blocking state [ 105.167603][ T8337] bridge0: port 3(syz_tun) entered forwarding state [ 105.231951][ T8339] block device autoloading is deprecated and will be removed. [ 105.242720][ T40] audit: type=1400 audit(1758309158.780:510): avc: denied { read } for pid=8268 comm="syz.4.598" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 105.304673][ T40] audit: type=1400 audit(1758309158.840:511): avc: denied { read } for pid=8268 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.321813][ T40] audit: type=1400 audit(1758309158.860:512): avc: denied { append } for pid=8350 comm="syz.3.623" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.403569][ T839] hid_parser_main: 10 callbacks suppressed [ 105.403583][ T839] hid-generic 0005:0007:0008.0004: unknown main item tag 0x0 [ 105.408034][ T40] audit: type=1400 audit(1758309158.940:513): avc: denied { listen } for pid=8356 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.413327][ T839] hid-generic 0005:0007:0008.0004: hidraw1: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 105.446478][ T8360] fido_id[8360]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 105.466188][ T8363] loop6: detected capacity change from 0 to 63 [ 105.468619][ T8362] netlink: 'syz.3.626': attribute type 64 has an invalid length. [ 105.470670][ T40] audit: type=1400 audit(1758309159.020:514): avc: denied { map } for pid=8361 comm="syz.1.627" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.471096][ T8362] netlink: 'syz.3.626': attribute type 4 has an invalid length. [ 105.473424][ T5982] buffer_io_error: 53 callbacks suppressed [ 105.473433][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.473758][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.474011][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.474302][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.474583][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.601305][ T8376] bridge3: entered promiscuous mode [ 105.643305][ T8376] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.700329][ T6034] tipc: Node number set to 1727058913 [ 105.750108][ T8391] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 105.753788][ T8391] veth0_macvtap: left promiscuous mode [ 106.023584][ T8407] fuse: Unknown parameter 'fd90x0000000000000003' [ 106.103933][ T8414] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.548489][ T5980] Bluetooth: hci0: command tx timeout [ 106.673555][ T8430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8430 comm=syz.1.646 [ 106.698731][ T5980] Bluetooth: hci4: command 0x1003 tx timeout [ 106.703341][ T5976] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.844275][ T8439] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 106.878984][ T8441] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 106.890072][ T8441] netlink: 'syz.5.650': attribute type 1 has an invalid length. [ 106.903683][ T8441] bond1 (unregistering): Released all slaves [ 107.110126][ T8455] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 107.118949][ T8455] CIFS mount error: No usable UNC path provided in device string! [ 107.118949][ T8455] [ 107.123117][ T8455] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 107.191713][ T8458] binder: 8457:8458 ioctl c0306201 2000000003c0 returned -14 [ 107.347635][ T60] usb 9-1: USB disconnect, device number 2 [ 107.377823][ T8475] ocfs2: Unknown parameter 'usrquota/tun' [ 107.512632][ T8485] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 0, id = 0 [ 107.701146][ T8509] __nla_validate_parse: 12 callbacks suppressed [ 107.701157][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 107.739582][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.758751][ T8512] input: syz1 as /devices/virtual/input/input12 [ 107.899208][ T8525] nbd0: detected capacity change from 0 to 127 [ 107.906004][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.674'. [ 107.943560][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 107.971764][ T5976] block nbd0: Receive control failed (result -104) [ 108.045533][ T8537] binder: 8536:8537 ioctl c0306201 200000000540 returned -22 [ 108.186667][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.682'. [ 108.288915][ T8547] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 108.362683][ T8565] nfs: Unknown parameter '/dev/vbi#' [ 108.448454][ T60] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 108.603885][ T60] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 108.607364][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 108.611503][ T60] usb 9-1: Product: syz [ 108.613111][ T60] usb 9-1: Manufacturer: syz [ 108.614787][ T60] usb 9-1: SerialNumber: syz [ 108.617594][ T60] usb 9-1: config 0 descriptor?? [ 108.625994][ T60] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 108.628536][ T5976] Bluetooth: hci0: command tx timeout [ 108.631537][ T60] dvb-usb: bulk message failed: -22 (2/0) [ 108.642496][ T60] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.653298][ T60] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 108.656730][ T60] usb 9-1: media controller created [ 108.674761][ T60] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.678726][ T8591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.688'. [ 108.800563][ T8602] program syz.5.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.802304][ T8604] misc userio: Invalid payload size [ 108.934159][ C2] vcan0: j1939_tp_rxtimer: 0xffff888026e9a000: rx timeout, send abort [ 108.937695][ C2] vcan0: j1939_tp_rxtimer: 0xffff888026e9a800: rx timeout, send abort [ 108.940498][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888026e9a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.946733][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888026e9a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.961468][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.692'. [ 108.992551][ T8621] dlm: no local IP address has been set [ 108.994633][ T8621] dlm: cannot start dlm midcomms -107 [ 109.028221][ T8626] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 109.065108][ T8631] tmpfs: Unknown parameter 'inde32' [ 109.122898][ T8635] tmpfs: Bad value for 'mpol' [ 109.128091][ T6147] syzkaller0: tun_net_xmit 76 [ 109.130478][ T5976] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 109.133511][ T6147] syzkaller0: tun_net_xmit 48 [ 109.151566][ T838] syzkaller0: tun_net_xmit 76 [ 109.340847][ T8643] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 109.345673][ T8643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8643 comm=syz.3.701 [ 110.155012][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.700'. [ 110.157965][ T8639] netem: change failed [ 110.263592][ T8657] bond0: entered allmulticast mode [ 110.266163][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.287948][ T8658] bond3: entered allmulticast mode [ 110.292602][ T8658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.344881][ T8667] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 110.413705][ T8677] netlink: 'syz.5.711': attribute type 29 has an invalid length. [ 110.434757][ T8677] netlink: 'syz.5.711': attribute type 29 has an invalid length. [ 110.440652][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 110.440663][ T40] audit: type=1400 audit(1758309163.980:532): avc: denied { ioctl } for pid=8678 comm="syz.1.712" path="socket:[25347]" dev="sockfs" ino=25347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.452361][ T8684] 9pnet_virtio: no channels available for device syz [ 110.570893][ T8690] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 110.574235][ T8690] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 110.635610][ T5976] Bluetooth: hci0: Malformed LE Event: 0x0d [ 111.335386][ T40] audit: type=1804 audit(1758309164.870:533): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.720" name="/newroot/39/file1" dev="fuse" ino=1 res=1 errno=0 [ 111.344030][ T40] audit: type=1800 audit(1758309164.870:534): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.720" name="/" dev="fuse" ino=1 res=0 errno=0 [ 111.350903][ T40] audit: type=1800 audit(1758309164.870:535): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.720" name="/" dev="fuse" ino=1 res=0 errno=0 [ 111.567989][ T40] audit: type=1400 audit(1758309165.100:536): avc: denied { mounton } for pid=8712 comm="syz.5.722" path="/proc/136/cgroup" dev="proc" ino=27757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 111.575940][ T40] audit: type=1400 audit(1758309165.110:537): avc: denied { remount } for pid=8712 comm="syz.5.722" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 111.597390][ T8715] tipc: Enabling of bearer rejected, failed to enable media [ 111.604676][ T8715] SELinux: policydb version 717861127 does not match my version range 15-35 [ 111.608354][ T8715] SELinux: failed to load policy [ 111.684750][ T8719] netlink: 200 bytes leftover after parsing attributes in process `syz.5.725'. [ 111.718647][ T40] audit: type=1400 audit(1758309165.260:538): avc: denied { mount } for pid=8720 comm="syz.5.726" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.720153][ T8721] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.730585][ T8721] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 111.750441][ T40] audit: type=1400 audit(1758309165.290:539): avc: denied { unmount } for pid=8064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.946055][ T8724] [U]  [ 112.102882][ T40] audit: type=1400 audit(1758309165.640:540): avc: denied { create } for pid=8737 comm="syz.5.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 112.114245][ T40] audit: type=1400 audit(1758309165.660:541): avc: denied { sys_admin } for pid=8737 comm="syz.5.732" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 112.574885][ T8755] SELinux: unknown common r [ 112.576492][ T8755] SELinux: failed to load policy [ 113.483464][ T8769] overlay: ./file0 is not a directory [ 113.748645][ T60] cxusb: set interface failed [ 113.750991][ T60] dvb-usb: bulk message failed: -22 (1/0) [ 113.779523][ T8788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.746'. [ 113.791215][ T60] DVB: Unable to find symbol mt352_attach() [ 113.793504][ T60] dvb-usb: bulk message failed: -22 (5/0) [ 113.795758][ T60] zl10353_read_register: readreg error (reg=127, ret==-121) [ 113.798997][ T60] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 113.822458][ T8788] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 113.860448][ T60] rc_core: IR keymap rc-dvico-mce not found [ 113.862808][ T60] Registered IR keymap rc-empty [ 113.866145][ T60] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 113.870136][ T60] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input13 [ 113.874494][ T60] dvb-usb: schedule remote query interval to 100 msecs. [ 113.876918][ T60] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 113.897721][ T60] usb 9-1: USB disconnect, device number 3 [ 113.944186][ T60] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 113.973990][ T8802] 9pnet_virtio: no channels available for device ./file0 [ 114.036726][ T8806] qrtr: Invalid version 0 [ 114.312218][ T8828] sctp: [Deprecated]: syz.1.757 (pid 8828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.312218][ T8828] Use struct sctp_sack_info instead [ 114.445874][ T8838] netlink: 'syz.4.759': attribute type 8 has an invalid length. [ 114.538414][ T5976] Bluetooth: hci0: command tx timeout [ 114.610482][ T8848] netlink: 60 bytes leftover after parsing attributes in process `syz.4.761'. [ 114.639039][ T8850] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 114.661805][ T8850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.677425][ T8850] bond2: (slave erspan1): making interface the new active one [ 114.681382][ T8850] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 114.792032][ T1315] block nbd0: Possible stuck request ffff888027e5e000: control (read@0,1024B). Runtime 5 seconds [ 114.797177][ T1315] block nbd0: Possible stuck request ffff888027e5e1c0: control (read@1024,1024B). Runtime 5 seconds [ 114.802324][ T1315] block nbd0: Possible stuck request ffff888027e5e380: control (read@2048,1024B). Runtime 5 seconds [ 114.807106][ T1315] block nbd0: Possible stuck request ffff888027e5e540: control (read@3072,1024B). Runtime 5 seconds [ 114.905829][ T8865] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 114.914810][ T8865] overlayfs: overlapping lowerdir path [ 114.939697][ T8869] netlink: zone id is out of range [ 114.941366][ T8869] netlink: zone id is out of range [ 114.942982][ T8869] netlink: zone id is out of range [ 114.944618][ T8869] netlink: zone id is out of range [ 114.946240][ T8869] netlink: zone id is out of range [ 114.947905][ T8869] netlink: zone id is out of range [ 114.950254][ T8869] netlink: zone id is out of range [ 114.952123][ T8869] netlink: zone id is out of range [ 114.954163][ T8869] netlink: zone id is out of range [ 114.956098][ T8869] netlink: zone id is out of range [ 115.013670][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 115.017822][ T8874] usb usb8: usbfs: process 8874 (syz.4.771) did not claim interface 0 before use [ 115.071583][ T8879] netlink: 'syz.5.772': attribute type 29 has an invalid length. [ 115.185063][ T8889] overlayfs: overlapping lowerdir path [ 115.189219][ T8889] netlink: 32 bytes leftover after parsing attributes in process `syz.5.775'. [ 115.197765][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 115.202278][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 115.560569][ T8922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.682139][ T8922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.721324][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 115.721340][ T40] audit: type=1400 audit(1758309169.260:564): avc: denied { listen } for pid=8929 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 115.754940][ T8922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.814419][ T8922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.883470][ T8949] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 115.886896][ T8949] NCSI netlink: No device for ifindex 0 [ 115.922170][ T6146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.923854][ T8954] netlink: 48 bytes leftover after parsing attributes in process `syz.3.794'. [ 115.925829][ T6146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.938118][ T6146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.949921][ T6142] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.975422][ T40] audit: type=1400 audit(1758309169.510:565): avc: denied { mount } for pid=8955 comm="syz.3.795" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 115.976154][ T8956] tracefs: Unknown parameter 'usrquota_block_hardlimit' [ 115.981318][ T8958] tipc: Started in network mode [ 115.981341][ T8958] tipc: Node identity 7ee7c1529ec3, cluster identity 4711 [ 115.981457][ T8958] tipc: Enabled bearer , priority 0 [ 115.981904][ T8958] syzkaller0: entered promiscuous mode [ 115.981915][ T8958] syzkaller0: entered allmulticast mode [ 115.983802][ T40] audit: type=1400 audit(1758309169.510:566): avc: denied { remount } for pid=8955 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 115.983943][ T8958] tipc: Resetting bearer [ 116.009515][ T8957] tipc: Resetting bearer [ 116.009750][ T40] audit: type=1400 audit(1758309169.530:567): avc: denied { listen } for pid=8955 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.019735][ T40] audit: type=1400 audit(1758309169.530:568): avc: denied { accept } for pid=8955 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.034989][ T8957] tipc: Disabling bearer [ 116.096115][ T40] audit: type=1400 audit(1758309169.630:569): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 116.108053][ T8902] orangefs_mount: mount request failed with -4 [ 116.118466][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 116.282646][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.287690][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 116.293431][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.297488][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.302765][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.305594][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.319070][ T10] usb 9-1: config 0 descriptor?? [ 116.321184][ T8951] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.497380][ T8977] netlink: 'syz.5.800': attribute type 11 has an invalid length. [ 116.567362][ T8981] loop6: detected capacity change from 0 to 2560 [ 116.570211][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.572811][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.575524][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.579716][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.582266][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.584818][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.587316][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.590533][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.593437][ T8797] ldm_validate_partition_table(): Disk read failed. [ 116.596028][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.600043][ T8797] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.602527][ T8797] Dev loop6: unable to read RDB block 0 [ 116.604591][ T8797] loop6: unable to read partition table [ 116.608427][ T8981] ldm_validate_partition_table(): Disk read failed. [ 116.612155][ T8981] Dev loop6: unable to read RDB block 0 [ 116.616385][ T8981] loop6: unable to read partition table [ 116.619472][ T8981] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 116.735140][ T10] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 116.762458][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 116.888361][ T40] audit: type=1400 audit(1758309170.430:570): avc: denied { setopt } for pid=8998 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.990936][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 116.999601][ T10] usb 9-1: USB disconnect, device number 4 [ 117.077728][ T9010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.809'. [ 117.122183][ T9019] SELinux: Context # is not valid (left unmapped). [ 117.126423][ T40] audit: type=1400 audit(1758309170.660:571): avc: denied { relabelto } for pid=9018 comm="syz.3.812" name="audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="#" [ 117.136523][ T40] audit: type=1400 audit(1758309170.660:572): avc: denied { associate } for pid=9018 comm="syz.3.812" name="audio1" dev="devtmpfs" ino=1323 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="#" [ 117.141433][ T9015] xt_limit: Overflow, try lower: 271964/0 [ 117.146878][ T40] audit: type=1400 audit(1758309170.660:573): avc: denied { ioctl } for pid=9018 comm="syz.3.812" path="/dev/audio1" dev="devtmpfs" ino=1323 ioctlcmd=0xaf76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="#" [ 117.184215][ T9022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9022 comm=syz.3.813 [ 117.271358][ T9031] 9pnet_fd: Insufficient options for proto=fd [ 117.318714][ T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 117.480049][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 117.485518][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.490917][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.494294][ T29] usb 10-1: Product: syz [ 117.496085][ T29] usb 10-1: Manufacturer: syz [ 117.497595][ T29] usb 10-1: SerialNumber: syz [ 117.563617][ T9047] netlink: 'syz.3.818': attribute type 10 has an invalid length. [ 117.567029][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.3.818'. [ 117.706843][ T29] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 118.057364][ T9070] 9pnet_fd: Insufficient options for proto=fd [ 118.058220][ T9013] 9pnet_fd: Insufficient options for proto=fd [ 118.062734][ T34] usb 10-1: USB disconnect, device number 2 [ 118.067483][ T34] usblp0: removed [ 118.326581][ T9087] syz.3.829 (9087): /proc/9086/oom_adj is deprecated, please use /proc/9086/oom_score_adj instead. [ 118.334745][ T9090] hugetlbfs: Bad value 'e' for mount option 'size' [ 118.334745][ T9090] [ 118.491281][ T5976] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6 [ 118.524388][ T9109] binder: 9108:9109 ioctl c00c620f 200000000000 returned -22 [ 118.793788][ T9128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52820 sclass=netlink_route_socket pid=9128 comm=syz.4.843 [ 118.861588][ T9136] __nla_validate_parse: 4 callbacks suppressed [ 118.861598][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 118.866241][ T9136] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 118.902794][ T9139] input: syz1 as /devices/virtual/input/input15 [ 119.028779][ T9144] netlink: 'syz.5.848': attribute type 5 has an invalid length. [ 119.070617][ C2] sr 2:0:0:0: [sr0] tag#30 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 119.074691][ C2] sr 2:0:0:0: [sr0] tag#30 CDB: Rebuild(16) 81 05 04 36 fc 23 92 71 a4 c2 2b b3 [ 119.978432][ T840] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 120.138398][ T840] usb 10-1: Using ep0 maxpacket: 32 [ 120.141843][ T840] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 120.146773][ T840] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.151052][ T840] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.153642][ T840] usb 10-1: Product: syz [ 120.155073][ T840] usb 10-1: Manufacturer: syz [ 120.157158][ T840] usb 10-1: SerialNumber: syz [ 120.162328][ T840] usb 10-1: config 0 descriptor?? [ 120.165512][ T9173] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 120.350401][ T9196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.386230][ T6125] usb 10-1: USB disconnect, device number 3 [ 120.720575][ T9222] tmpfs: Unknown parameter 'h{ [ 120.720575][ T9222] euge' [ 120.748871][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 120.748883][ T40] audit: type=1400 audit(1758309174.290:585): avc: denied { watch watch_reads } for pid=9226 comm="syz.4.859" path="pipe:[17079]" dev="pipefs" ino=17079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 120.749961][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.763804][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.766707][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.770414][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.773357][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.775669][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.777984][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.780446][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.782746][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.785285][ T9228] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.994519][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.862'. [ 121.068840][ T6052] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 121.199039][ T1315] block nbd0: Possible stuck request ffff888027e5e000: control (read@0,1024B). Runtime 10 seconds [ 121.203156][ T1315] block nbd0: Possible stuck request ffff888027e5e1c0: control (read@1024,1024B). Runtime 10 seconds [ 121.207561][ T1315] block nbd0: Possible stuck request ffff888027e5e380: control (read@2048,1024B). Runtime 10 seconds [ 121.211790][ T1315] block nbd0: Possible stuck request ffff888027e5e540: control (read@3072,1024B). Runtime 10 seconds [ 121.218378][ T6052] usb 9-1: Using ep0 maxpacket: 8 [ 121.221316][ T6052] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 121.224564][ T6052] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.227582][ T6052] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.230901][ T6052] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.234615][ T6052] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.238956][ T6052] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.242380][ T6052] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.450388][ T6052] usb 9-1: usb_control_msg returned -32 [ 121.452960][ T6052] usbtmc 9-1:16.0: can't read capabilities [ 121.503570][ T40] audit: type=1400 audit(1758309175.040:586): avc: denied { nlmsg_read } for pid=9252 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.504057][ T9253] could not allocate digest TFM handle tgr128-generic [ 121.659531][ T9260] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 121.670581][ T9260] bond4: entered promiscuous mode [ 121.672403][ T9260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.697425][ T9260] bond4: (slave bridge6): making interface the new active one [ 121.701401][ T9260] bridge6: entered promiscuous mode [ 121.704289][ T9260] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 121.800978][ T9275] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 121.805267][ T9275] SELinux: failed to load policy [ 121.812170][ T9276] net_ratelimit: 4 callbacks suppressed [ 121.812188][ T9276] netlink: ct family unspecified [ 121.817322][ T9276] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.818430][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.976316][ T9290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.877'. [ 122.241923][ T9302] netlink: 'syz.3.881': attribute type 2 has an invalid length. [ 123.044684][ T9311] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 123.083424][ T40] audit: type=1400 audit(1758309176.620:587): avc: denied { create } for pid=9313 comm="syz.5.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 123.092752][ T40] audit: type=1400 audit(1758309176.620:588): avc: denied { getopt } for pid=9313 comm="syz.5.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 123.127834][ T40] audit: type=1400 audit(1758309176.660:589): avc: denied { map } for pid=9317 comm="syz.5.887" path="socket:[29339]" dev="sockfs" ino=29339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.154675][ T9321] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 123.264088][ T9328] Bluetooth: MGMT ver 1.23 [ 123.266257][ T9327] netlink: 36 bytes leftover after parsing attributes in process `syz.5.890'. [ 123.436744][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 123.473323][ T9341] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.479931][ T9341] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 123.482779][ T40] audit: type=1400 audit(1758309177.020:590): avc: denied { setopt } for pid=9340 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.826612][ T9] usb 9-1: USB disconnect, device number 5 [ 123.860554][ T40] audit: type=1326 audit(1758309177.400:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9348 comm="syz.4.896" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e9418ec29 code=0x0 [ 124.338176][ T40] audit: type=1800 audit(1758309177.870:592): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.901" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 124.370731][ T9367] geneve2: entered allmulticast mode [ 124.779118][ T9381] FAT-fs (nullb0): bogus number of reserved sectors [ 124.782809][ T9381] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 124.786145][ T9381] FAT-fs (nullb0): bogus number of reserved sectors [ 124.788979][ T9381] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 124.883894][ T40] audit: type=1400 audit(1758309178.420:593): avc: denied { nlmsg_read } for pid=9382 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 125.485596][ T9394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.908'. [ 125.570009][ T9402] netlink: 'syz.4.910': attribute type 3 has an invalid length. [ 125.573642][ T9402] netlink: 224 bytes leftover after parsing attributes in process `syz.4.910'. [ 125.585488][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'. [ 125.611559][ T9402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.669086][ T9412] veth0_to_bridge: mtu less than device minimum [ 125.682165][ T9412] syz_tun: entered allmulticast mode [ 125.686766][ T9411] syz_tun: left allmulticast mode [ 125.690635][ T9414] tmpfs: Bad value for 'mpol' [ 125.709019][ T40] audit: type=1400 audit(1758309179.240:594): avc: denied { write } for pid=9415 comm="syz.4.914" path="socket:[29419]" dev="sockfs" ino=29419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.759677][ T40] audit: type=1400 audit(1758309179.300:595): avc: denied { getopt } for pid=9415 comm="syz.4.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.772624][ T9421] syzkaller1: entered promiscuous mode [ 125.774828][ T9421] syzkaller1: entered allmulticast mode [ 125.780431][ T40] audit: type=1400 audit(1758309179.320:596): avc: denied { getopt } for pid=9418 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.886412][ T9437] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 125.895859][ T9437] mmap: syz.3.922 (9437) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.992992][ T40] audit: type=1400 audit(1758309179.530:597): avc: denied { add_name } for pid=9444 comm="syz.4.926" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.999997][ T40] audit: type=1400 audit(1758309179.530:598): avc: denied { create } for pid=9444 comm="syz.4.926" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 126.008123][ T40] audit: type=1400 audit(1758309179.530:599): avc: denied { associate } for pid=9444 comm="syz.4.926" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 126.018032][ T40] audit: type=1400 audit(1758309179.530:600): avc: denied { search } for pid=9446 comm="syz.1.927" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.023611][ T9445] bridge0: entered allmulticast mode [ 126.027540][ T40] audit: type=1400 audit(1758309179.530:601): avc: denied { search } for pid=9446 comm="syz.1.927" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.031887][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 126.037506][ T40] audit: type=1400 audit(1758309179.530:602): avc: denied { search } for pid=9446 comm="syz.1.927" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.049763][ T40] audit: type=1400 audit(1758309179.540:603): avc: denied { write } for pid=9444 comm="syz.4.926" name="file0" dev="9p" ino=71827885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.423183][ T9466] tmpfs: Group quota inode hardlimit too large. [ 126.423886][ T9470] tmpfs: Group quota inode hardlimit too large. [ 126.501879][ T9473] netlink: 156 bytes leftover after parsing attributes in process `syz.1.934'. [ 126.605284][ T9478] fuse: Bad value for 'rootmode' [ 126.690087][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 126.694107][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 126.702505][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 126.706352][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 126.712696][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 126.826429][ T40] audit: type=1400 audit(1758309180.360:604): avc: denied { ioctl } for pid=9504 comm="syz.4.942" path="socket:[32208]" dev="sockfs" ino=32208 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.024799][ T6136] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.027589][ T6136] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.030664][ T6136] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.033679][ T6136] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.199184][ T9548] ref_ctr increment failed for inode: 0x5c8 offset: 0x7 ref_ctr_offset: 0x1600 of mm: 0xffff888022e5d600 [ 127.369722][ T9580] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 127.463039][ T9586] vcan1: entered allmulticast mode [ 127.581879][ T1315] block nbd0: Possible stuck request ffff888027e5e000: control (read@0,1024B). Runtime 15 seconds [ 127.595112][ T1315] block nbd0: Possible stuck request ffff888027e5e1c0: control (read@1024,1024B). Runtime 15 seconds [ 127.600089][ T1315] block nbd0: Possible stuck request ffff888027e5e380: control (read@2048,1024B). Runtime 15 seconds [ 127.604994][ T1315] block nbd0: Possible stuck request ffff888027e5e540: control (read@3072,1024B). Runtime 15 seconds [ 127.669322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.690228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 127.719463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 127.797047][ T9601] ata1.00: invalid cdb length 6 [ 127.826952][ T9600] futex_wake_op: syz.5.963 tries to shift op by 32; fix this program [ 127.940670][ T9610] overlayfs: failed to clone lowerpath [ 127.953298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 127.968607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.028792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.051874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.084770][ T9634] batadv1: entered promiscuous mode [ 128.098363][ T9635] batadv1: entered promiscuous mode [ 128.137341][ T9639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=9639 comm=syz.4.974 [ 129.559930][ T9694] geneve2: entered allmulticast mode [ 129.674990][ T9706] overlayfs: failed to clone upperpath [ 129.694804][ T9709] overlay: Bad value for 'workdir' [ 129.779995][ T9717] autofs4:pid:9717:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 129.834948][ T9720] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 130.160776][ T9739] geneve2: entered promiscuous mode [ 130.163027][ T9739] geneve2: entered allmulticast mode [ 130.166789][ T6137] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.171233][ T6137] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.175533][ T6137] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.180261][ T6137] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.343284][ T9750] fuse: Unknown parameter '' [ 130.347916][ T9750] 9p: Unknown access argument 18446744073709551615: -34 [ 130.588903][ T9770] __nla_validate_parse: 11 callbacks suppressed [ 130.588920][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1017'. [ 130.637270][ T9774] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1019'. [ 130.641421][ T9774] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1019'. [ 130.646194][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'. [ 130.647269][ T9774] block nbd5: Attempted send on invalid socket [ 130.654587][ T9774] I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 130.660648][ T9774] gfs2: error -5 reading superblock [ 130.747938][ T9791] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 130.750120][ T9791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.753954][ T9791] vhci_hcd vhci_hcd.0: Device attached [ 130.756769][ T9791] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 130.758973][ T9791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.766468][ T9791] vhci_hcd vhci_hcd.0: Device attached [ 130.770577][ T9791] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 130.773345][ T9791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.776699][ T9791] vhci_hcd vhci_hcd.0: Device attached [ 130.786443][ T9801] vlan0: entered promiscuous mode [ 130.791520][ T9791] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 130.794109][ T9791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.797853][ T9791] vhci_hcd vhci_hcd.0: Device attached [ 130.808808][ T9791] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 130.811938][ T9791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.816682][ T9791] vhci_hcd vhci_hcd.0: Device attached [ 130.860748][ T9811] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1028'. [ 130.863858][ T9811] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1028'. [ 130.867252][ T9811] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1028'. [ 130.872659][ T9811] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1028'. [ 130.876077][ T9811] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1028'. [ 130.876194][ T9811] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1028'. [ 130.913762][ T9806] vhci_hcd: connection closed [ 130.913871][ T9798] vhci_hcd: connection closed [ 130.915396][ T6146] vhci_hcd: stop threads [ 130.917362][ T9802] vhci_hcd: connection closed [ 130.918853][ T6146] vhci_hcd: release socket [ 130.919374][ T9795] vhci_hcd: connection closed [ 130.920217][ T9792] vhci_hcd: connection closed [ 130.920446][ T6146] vhci_hcd: disconnect device [ 130.927694][ T6146] vhci_hcd: stop threads [ 130.929846][ T6146] vhci_hcd: release socket [ 130.931532][ T6146] vhci_hcd: disconnect device [ 130.933350][ T6146] vhci_hcd: stop threads [ 130.934753][ T6146] vhci_hcd: release socket [ 130.936498][ T6146] vhci_hcd: disconnect device [ 130.940007][ T6146] vhci_hcd: stop threads [ 130.941371][ T6146] vhci_hcd: release socket [ 130.943114][ T6146] vhci_hcd: disconnect device [ 130.944939][ T6146] vhci_hcd: stop threads [ 130.946345][ T6146] vhci_hcd: release socket [ 130.949125][ T6146] vhci_hcd: disconnect device [ 130.988742][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 130.988757][ T40] audit: type=1400 audit(1758309184.520:618): avc: denied { create } for pid=9834 comm="syz.5.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.993057][ T840] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 131.000987][ T40] audit: type=1400 audit(1758309184.520:619): avc: denied { write } for pid=9834 comm="syz.5.1032" path="socket:[33988]" dev="sockfs" ino=33988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.014949][ T840] usb 39-1: enqueue for inactive port 0 [ 131.039992][ T9844] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 131.079026][ T840] vhci_hcd: vhci_device speed not set [ 131.203285][ T40] audit: type=1400 audit(1758309184.740:620): avc: denied { ioctl } for pid=9871 comm="syz.1.1040" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.263043][ T40] audit: type=1400 audit(1758309184.800:621): avc: denied { bind } for pid=9877 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.271065][ T40] audit: type=1400 audit(1758309184.800:622): avc: denied { accept } for pid=9877 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.276957][ T40] audit: type=1400 audit(1758309184.820:623): avc: denied { listen } for pid=9877 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.529653][ T9904] GUP no longer grows the stack in syz.3.1049 (9904): 200000004000-20000000a000 (200000002000) [ 131.533275][ T9904] CPU: 3 UID: 0 PID: 9904 Comm: syz.3.1049 Not tainted syzkaller #0 PREEMPT(full) [ 131.533292][ T9904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.533299][ T9904] Call Trace: [ 131.533303][ T9904] [ 131.533308][ T9904] dump_stack_lvl+0x16c/0x1f0 [ 131.533344][ T9904] gup_vma_lookup+0x1d2/0x220 [ 131.533364][ T9904] __get_user_pages+0x243/0x34a0 [ 131.533382][ T9904] ? find_held_lock+0x2b/0x80 [ 131.533397][ T9904] ? __pfx___get_user_pages+0x10/0x10 [ 131.533430][ T9904] get_user_pages_remote+0x243/0xab0 [ 131.533445][ T9904] ? mas_parent_gap+0x6f0/0x7b0 [ 131.533460][ T9904] ? __pfx_get_user_pages_remote+0x10/0x10 [ 131.533476][ T9904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.533498][ T9904] __access_remote_vm+0x24d/0x850 [ 131.533514][ T9904] ? do_raw_spin_lock+0x12c/0x2b0 [ 131.533527][ T9904] ? __pfx___access_remote_vm+0x10/0x10 [ 131.533545][ T9904] proc_pid_cmdline_read+0x4de/0x8e0 [ 131.533563][ T9904] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 131.533579][ T9904] ? rw_verify_area+0xcf/0x6c0 [ 131.533597][ T9904] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 131.533609][ T9904] vfs_readv+0x5c1/0x8b0 [ 131.533622][ T9904] ? __pfx_vfs_readv+0x10/0x10 [ 131.533642][ T9904] ? __fget_files+0x20e/0x3c0 [ 131.533657][ T9904] ? do_preadv+0x1a6/0x270 [ 131.533666][ T9904] do_preadv+0x1a6/0x270 [ 131.533676][ T9904] ? __pfx_do_preadv+0x10/0x10 [ 131.533690][ T9904] do_syscall_64+0xcd/0x4e0 [ 131.533711][ T9904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.533723][ T9904] RIP: 0033:0x7f359138ec29 [ 131.533732][ T9904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.533743][ T9904] RSP: 002b:00007f3592295038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 131.533755][ T9904] RAX: ffffffffffffffda RBX: 00007f35915d5fa0 RCX: 00007f359138ec29 [ 131.533762][ T9904] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 131.533770][ T9904] RBP: 00007f3591411e41 R08: 0000000000000000 R09: 0000000000000000 [ 131.533777][ T9904] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 131.533785][ T9904] R13: 00007f35915d6038 R14: 00007f35915d5fa0 R15: 00007ffd5ef156c8 [ 131.533798][ T9904] [ 131.629139][ T29] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 131.806963][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.814926][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 131.824608][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 131.824633][ T9922] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 131.824633][ T9922] program syz.1.1055 not setting count and/or reply_len properly [ 131.828454][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 187, setting to 64 [ 131.839953][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.845738][ T29] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 131.849061][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.851623][ T29] usb 10-1: Product: syz [ 131.852977][ T29] usb 10-1: Manufacturer: syz [ 131.854461][ T29] usb 10-1: SerialNumber: syz [ 131.857223][ T29] usb 10-1: config 0 descriptor?? [ 131.860529][ T9891] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.865167][ T29] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input17 [ 132.072025][ T9891] input: syz0 as /devices/virtual/input/input18 [ 132.167891][ T6052] usb 10-1: USB disconnect, device number 4 [ 132.240506][ T9950] bridge_slave_0: entered promiscuous mode [ 132.700005][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702518][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.748970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.348517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 133.348584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 133.959981][ T9973] Can't find ip_set type hash: [ 134.154031][ T5976] Bluetooth: hci1: command 0x041b tx timeout [ 134.246867][ T40] audit: type=1400 audit(1758309187.780:624): avc: denied { write } for pid=9991 comm="syz.5.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 135.427221][ T29] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 135.448409][ T29] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 135.460611][ T1315] block nbd0: Possible stuck request ffff888027e5e000: control (read@0,1024B). Runtime 20 seconds [ 135.464928][ T1315] block nbd0: Possible stuck request ffff888027e5e1c0: control (read@1024,1024B). Runtime 20 seconds [ 135.470015][ T1315] block nbd0: Possible stuck request ffff888027e5e380: control (read@2048,1024B). Runtime 20 seconds [ 135.474521][ T1315] block nbd0: Possible stuck request ffff888027e5e540: control (read@3072,1024B). Runtime 20 seconds [ 135.724200][ T40] audit: type=1400 audit(1758309189.260:625): avc: denied { map } for pid=10005 comm="syz.5.1084" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.864240][ T40] audit: type=1400 audit(1758309189.400:626): avc: denied { unmount } for pid=8064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 137.339679][ T40] audit: type=1400 audit(1758309190.860:627): avc: denied { write } for pid=10034 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 137.508421][ T29] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 137.508609][ T5976] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.510317][ T29] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 137.680213][ T40] audit: type=1400 audit(1758309191.210:628): avc: denied { ioctl } for pid=10034 comm="syz.5.1096" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 137.839100][ T6128] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 137.892106][T10040] orangefs_mount: mount request failed with -4 [ 138.977544][ T40] audit: type=1400 audit(1758309192.500:629): avc: denied { read } for pid=10072 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.579357][ T29] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.584728][ T29] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 139.589021][ C0] ------------[ cut here ]------------ [ 139.590894][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 139.593026][ C0] WARNING: CPU: 0 PID: 10083 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160 [ 139.595840][ C0] Modules linked in: [ 139.597528][ C0] CPU: 0 UID: 0 PID: 10083 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(full) [ 139.602164][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.605832][ C0] RIP: 0010:__queue_work+0xd03/0x1160 [ 139.607962][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 3f 7a 38 00 90 0f 0b 90 e9 b4 f5 ff [ 139.615380][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 139.617728][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 139.620877][ C0] RDX: ffff888026584880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 139.624041][ C0] RBP: ffff888035b28970 R08: 0000000000000001 R09: 0000000000000000 [ 139.627089][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000000f8f [ 139.630358][ C0] R13: 0000000080000100 R14: ffffffff81833490 R15: ffff88802aef1978 [ 139.633606][ C0] FS: 00007f35922746c0(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 139.637121][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.639326][ C0] CR2: 000000110c3ed170 CR3: 0000000064b02000 CR4: 0000000000352ef0 [ 139.641800][ C0] Call Trace: [ 139.642848][ C0] [ 139.643816][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 139.645703][ C0] call_timer_fn+0x197/0x620 [ 139.647182][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 139.648825][ C0] ? __run_timers+0x559/0x960 [ 139.650300][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 139.652097][ C0] __run_timers+0x569/0x960 [ 139.653547][ C0] ? __pfx___run_timers+0x10/0x10 [ 139.655115][ C0] run_timer_base+0x114/0x190 [ 139.656628][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 139.658427][ C0] ? rcu_is_watching+0x12/0xc0 [ 139.660149][ C0] run_timer_softirq+0x1a/0x40 [ 139.661895][ C0] handle_softirqs+0x219/0x8e0 [ 139.663481][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 139.665273][ C0] __irq_exit_rcu+0x109/0x170 [ 139.666851][ C0] irq_exit_rcu+0x9/0x30 [ 139.668178][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 139.669982][ C0] [ 139.670922][ C0] [ 139.671959][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.673864][ C0] RIP: 0010:__might_sleep+0x33/0x170 [ 139.675508][ C0] Code: 00 00 fc ff df 41 54 65 4c 8b 25 50 b5 4e 12 55 89 f5 53 48 89 fb 49 8d 7c 24 18 48 89 fa 48 c1 ea 03 48 83 ec 10 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 d8 00 00 00 41 [ 139.681427][ C0] RSP: 0018:ffffc900078f7c70 EFLAGS: 00000282 [ 139.683312][ C0] RAX: dffffc0000000000 RBX: ffffffff8ce41b80 RCX: ffffc9000ce43000 [ 139.685800][ C0] RDX: 0000000000000000 RSI: 0000000000000ba1 RDI: ffff888026584898 [ 139.688261][ C0] RBP: 0000000000000ba1 R08: 0000000000000005 R09: 0000000000000000 [ 139.690715][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888026584880 [ 139.693161][ C0] R13: 0000000000000000 R14: 000020000037d1c0 R15: 0000000000010106 [ 139.695624][ C0] __might_fault+0x83/0x190 [ 139.697085][ C0] do_recvmmsg+0x327/0x750 [ 139.698492][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 139.700031][ C0] ? rcu_is_watching+0x12/0xc0 [ 139.701544][ C0] ? do_futex+0x122/0x350 [ 139.702901][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 139.704540][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 139.706155][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 139.707867][ C0] do_syscall_64+0xcd/0x4e0 [ 139.709359][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.711191][ C0] RIP: 0033:0x7f359138ec29 [ 139.712583][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.718506][ C0] RSP: 002b:00007f3592274038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 139.721086][ C0] RAX: ffffffffffffffda RBX: 00007f35915d6090 RCX: 00007f359138ec29 [ 139.723521][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 139.725980][ C0] RBP: 00007f3591411e41 R08: 0000000000000000 R09: 0000000000000000 [ 139.728447][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 139.730905][ C0] R13: 00007f35915d6128 R14: 00007f35915d6090 R15: 00007ffd5ef156c8 [ 139.733364][ C0] [ 139.734372][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.736624][ C0] CPU: 0 UID: 0 PID: 10083 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(full) [ 139.739538][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.742727][ C0] Call Trace: [ 139.743788][ C0] [ 139.744688][ C0] dump_stack_lvl+0x3d/0x1f0 [ 139.746150][ C0] vpanic+0x6e8/0x7a0 [ 139.747404][ C0] ? __pfx_vpanic+0x10/0x10 [ 139.748860][ C0] ? __queue_work+0xd03/0x1160 [ 139.750358][ C0] panic+0xca/0xd0 [ 139.751540][ C0] ? __pfx_panic+0x10/0x10 [ 139.752950][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 139.754535][ C0] check_panic_on_warn+0xab/0xb0 [ 139.756069][ C0] __warn+0xf6/0x3c0 [ 139.757320][ C0] ? __queue_work+0xd03/0x1160 [ 139.758810][ C0] report_bug+0x3c3/0x580 [ 139.760196][ C0] ? __queue_work+0xd03/0x1160 [ 139.761749][ C0] handle_bug+0x184/0x210 [ 139.763144][ C0] exc_invalid_op+0x17/0x50 [ 139.764581][ C0] asm_exc_invalid_op+0x1a/0x20 [ 139.766111][ C0] RIP: 0010:__queue_work+0xd03/0x1160 [ 139.767772][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 3f 7a 38 00 90 0f 0b 90 e9 b4 f5 ff [ 139.773855][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 139.775748][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 139.778220][ C0] RDX: ffff888026584880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 139.780688][ C0] RBP: ffff888035b28970 R08: 0000000000000001 R09: 0000000000000000 [ 139.783172][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000000f8f [ 139.785685][ C0] R13: 0000000080000100 R14: ffffffff81833490 R15: ffff88802aef1978 [ 139.788172][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 139.790018][ C0] ? __warn_printk+0x198/0x350 [ 139.791530][ C0] ? __warn_printk+0x1a5/0x350 [ 139.793061][ C0] ? __queue_work+0xd02/0x1160 [ 139.794572][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 139.796402][ C0] call_timer_fn+0x197/0x620 [ 139.797891][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 139.799501][ C0] ? __run_timers+0x559/0x960 [ 139.801030][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 139.802999][ C0] __run_timers+0x569/0x960 [ 139.804536][ C0] ? __pfx___run_timers+0x10/0x10 [ 139.806138][ C0] run_timer_base+0x114/0x190 [ 139.807615][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 139.809198][ C0] ? rcu_is_watching+0x12/0xc0 [ 139.810679][ C0] run_timer_softirq+0x1a/0x40 [ 139.812180][ C0] handle_softirqs+0x219/0x8e0 [ 139.813729][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 139.815389][ C0] __irq_exit_rcu+0x109/0x170 [ 139.816895][ C0] irq_exit_rcu+0x9/0x30 [ 139.818235][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 139.819969][ C0] [ 139.820928][ C0] [ 139.821864][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.823792][ C0] RIP: 0010:__might_sleep+0x33/0x170 [ 139.825487][ C0] Code: 00 00 fc ff df 41 54 65 4c 8b 25 50 b5 4e 12 55 89 f5 53 48 89 fb 49 8d 7c 24 18 48 89 fa 48 c1 ea 03 48 83 ec 10 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 d8 00 00 00 41 [ 139.831558][ C0] RSP: 0018:ffffc900078f7c70 EFLAGS: 00000282 [ 139.833460][ C0] RAX: dffffc0000000000 RBX: ffffffff8ce41b80 RCX: ffffc9000ce43000 [ 139.835928][ C0] RDX: 0000000000000000 RSI: 0000000000000ba1 RDI: ffff888026584898 [ 139.838395][ C0] RBP: 0000000000000ba1 R08: 0000000000000005 R09: 0000000000000000 [ 139.840860][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888026584880 [ 139.843301][ C0] R13: 0000000000000000 R14: 000020000037d1c0 R15: 0000000000010106 [ 139.845770][ C0] __might_fault+0x83/0x190 [ 139.847197][ C0] do_recvmmsg+0x327/0x750 [ 139.848619][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 139.850185][ C0] ? rcu_is_watching+0x12/0xc0 [ 139.851695][ C0] ? do_futex+0x122/0x350 [ 139.853079][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 139.854640][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 139.856222][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 139.857975][ C0] do_syscall_64+0xcd/0x4e0 [ 139.859401][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.861253][ C0] RIP: 0033:0x7f359138ec29 [ 139.862651][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.868581][ C0] RSP: 002b:00007f3592274038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 139.871168][ C0] RAX: ffffffffffffffda RBX: 00007f35915d6090 RCX: 00007f359138ec29 [ 139.873639][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 139.876078][ C0] RBP: 00007f3591411e41 R08: 0000000000000000 R09: 0000000000000000 [ 139.878649][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 139.881319][ C0] R13: 00007f35915d6128 R14: 00007f35915d6090 R15: 00007ffd5ef156c8 [ 139.883982][ C0] [ 139.885636][ C0] Kernel Offset: disabled [ 139.887006][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:13:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c115 RDI=ffffffff9b118160 RBP=ffffffff9b118120 RSP=ffffc90000007550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000055 R14=ffffffff9b118120 R15=ffffffff8564c0b0 RIP=ffffffff8564c13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f35922746c0 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ed170 CR3=0000000064b02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd89605b76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd89605b76 00007ffd89605b7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e943a74a8 00007f7e943a74a0 00007f7e943a7498 00007f7e943a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94f0d100 00007f7e943a7460 00007f7e943a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e943a74b8 00007f7e943a74b0 00007f7e943a74a8 00007f7e943a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000008 RBX=ffffc900006a0b60 RCX=0000000000000000 RDX=ffffffff8100154a RSI=0000000000000014 RDI=ffffc900006a0b98 RBP=0000000000000008 RSP=ffffc900006a0b08 R8 =ffffffff913f67a0 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005cbf R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=ffffc900006a0b60 RIP=ffffffff851778f6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f59293729e0 CR3=0000000064b02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5ef15bd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5ef15bd6 00007ffd5ef15bdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3591412e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3591412e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3591412e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3591412e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3591412f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3591412fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35915a74a8 00007f35915a74a0 00007f35915a7498 00007f35915a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f359210d100 00007f35915a7460 00007f35915a0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35915a74b8 00007f35915a74b0 00007f35915a74a8 00007f35915a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000091373 RBX=0000000000000001 RCX=00000000001b204f RDX=0000000000091374 RSI=00000000000a98a9 RDI=ffffffff9222d0e8 RBP=ffffc90000648c10 RSP=ffffc90000648b58 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000091373 R12=ffffc90000648c18 R13=ffffc90000648bc8 R14=ffffc90000648bfd R15=ffffffff8a1373f6 RIP=ffffffff816af6ed RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f43e8346300 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000043000 CR3=000000002f236000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000461 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000008060a01 09ac001000061000 481000060073f42c 0000061500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000021000080171 f410800402100000 0000040806060158 9c0e080010800300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0408ae0280040210 000008000601589c 0e08000280030fff ffffffffff040580 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 041c100000080008 014f884080808296 1000059003101000 058003048c080002 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000141000060270 ec0fffffffffffff 040fffffffffffff 0412840800000800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01749a0000000000 0000000000000000 0000000000000001 ffffffffffffffff ZMM25=b0a85f1ab0a85f1a b0a85f1ab0a85f1a b0a85f1ab0a85f1a b0a85f1ab0a85f1a b0a85f1ab0a85f1a b0a85f1ab0a85f1a b0a85f1ab0a85f1a b0a85f1ab0a85f1a ZMM26=76080e2f76080e2f 76080e2f76080e2f 76080e2f76080e2f 76080e2f76080e2f 76080e2f76080e2f 76080e2f76080e2f 76080e2f76080e2f 76080e2f76080e2f ZMM27=e1b3aa23e1b3aa23 e1b3aa23e1b3aa23 e1b3aa23e1b3aa23 e1b3aa23e1b3aa23 e1b3aa23e1b3aa23 e1b3aa23e1b3aa23 e1b3aa23e1b3aa23 e1b3aa23e1b3aa23 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0606000006060000 0606000006060000 0606000006060000 0606000006060000 0606000006060000 0606000006060000 0606000006060000 0606000006060000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88806a63a300 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88806a63a302 RBP=dffffc0000000000 RSP=ffffc90006bef4d8 R8 =0000000000000001 R9 =ffff88806a73b294 R10=ffff88806a63a303 R11=0000000000000000 R12=0000000000007f8e R13=0000000000000000 R14=ffff88806a73b280 R15=ffffed100d4c7460 RIP=ffffffff8b978ae8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7e950876c0 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7e95086f98 CR3=0000000064a31000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd89605b76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd89605b76 00007ffd89605b7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94212fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e943a74a8 00007f7e943a74a0 00007f7e943a7498 00007f7e943a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e94f0d100 00007f7e943a7460 00007f7e943a7478 00007f7e943a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e943a74b8 00007f7e943a74b0 00007f7e943a74a8 00007f7e943a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000