last executing test programs: 1m29.201706999s ago: executing program 2 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pwrite64(r0, &(0x7f0000000080)="0981c9f06af23d24cf6624fa829bbee81fa861e921f36079d5f9b5a042af22905589bbde22ce32a9c16d99c68a0eba424a4d182a44bf7c38c5b3608f5086b5263f1da2d91ef175ad45dfc5c7c9264997d5261a72bbbf6e0eed1859f05e2c66eeff7ac6d49c9321c52c39bab130e01e8a1afac8c3a6db81d40121099af455cbc33251f86bdee0b878a582627fe4a3be3e7dd70752008bf726603964202954ad4a6585cda3a3f6d95e9d66d4a79ea132aaacc1a5b2e47bb05960c385334a63f1e4391dffc261fb0e32909da01cce690c9d73aa0efa22336b3610e32a", 0xdb, 0xfffffffffffffffb) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000030811"], 0xfdef) 1m28.261795873s ago: executing program 2 (id=428): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2d) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/108) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 1m28.19916473s ago: executing program 2 (id=434): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000106015539000000000000000000"], 0x14}}, 0x0) syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000106015539000000000000000000"], 0x14}}, 0x0) (async) 1m28.101445895s ago: executing program 2 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000a00)={0x339, 0x2, 0x0, {{0x500, 0x1f8, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x11d, '\bg\x96m\v\x9c\r\xe2Nw\x9c\xb0\x17\xc9l\x00M\n\x13s\xd7d\xe3\x16}l\x00\xa5k4\x1b\x84\xf3ei&\xbd\xe1\x94\xd1\xd1n\xef\xfcG\x0e\xdc\x94\xa8\xaf\x05Oa\x04\x00\x00\x00\x00\x00\x00\x00!\x8e\xbe\xad\xe7\a\x02\x00\x1fV1\xb1\xd8tU\x9b\xb4\xc4\xcc\xcf\xa7e\"\x1d\x18\xe5\xb0\xa1\xed\xe1l\xd0\x91\x10\xd1\x15YeS\xe0 \x93\xad\xa4l\xdd\x0e\xaa5Z^\xa0\xd5\x7f\x80E\xfb\xcet\x10\x99\xc0{O\xedw\xa8Y h\xd7\nu?\xd5\xe9aZ\xa0\f\xefJ\xc2\xd8k\x19-\v7\xd6\x9c\x8a\xd48\xb4\x99\x85Nn\xc8K\x1f\xe4\xe8\x1e\xd0M\xdc\xc2\x19Vn\"0\xb7\xf4\xd6\xfb\x87\xb4!\x1e\xac6hv\xb7\x1e\xb5du\xf6Hp\x119\xdd\x8f&\\\xa7Ek\"\x98=[u\xb7h3\xca\xd4m\xaf(R\x83\xb5\xbcK=\xfakJ4j\xd7\xe5I%\xa3\xb8\xb0\xae\x8a\xadCB\xc6\x9d\x17Q\xf24gw\x03\xd7*{X\x8e=\xdf\x97\x8ex\xd0\xecq\xe1\xa4x\xe8\x97\x02\xe8\xb4\v$_\x8e6 \xe4b\xdc\xd2\x92G\xb6aS', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, r3, 0xee01}}, 0x339) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 1m27.200619239s ago: executing program 2 (id=464): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4, 0x1}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0x6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x182, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xfffffff8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)={r8, 0x55, "202e14e6270880f4793f71347d2af2c3cfbf4ab83f66ed82a475a8e790bf11601f1a656989f3b5f43a2a8d1e4fe5faebb9f5669bd4566a6dc80a17b120ba1529cdded2738209a7dc2b59160332db375fec90b72403"}, &(0x7f0000000280)=0x5d) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x285, 0x80, 0x2, 0x4}, {0x101, 0x7, 0x9, 0x8}, {0x9, 0x4, 0x3, 0xc}, {0x9, 0xf5, 0xf9, 0xffff4eb5}, {0x9, 0x3, 0x1, 0x9}, {0x8000, 0x0, 0x96, 0x8001}, {0x8, 0x5, 0x47, 0x4}]}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000020fc0003000000000d00000000000000000000080018004e224e220020000000"], 0x24}}, 0x0) 1m26.951389287s ago: executing program 2 (id=477): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b703"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x5, 0xa, 0xb}], 0x10, 0x3}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfd12}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x345c9763, 0xfaaf) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m26.896372369s ago: executing program 32 (id=477): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b703"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x5, 0xa, 0xb}], 0x10, 0x3}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfd12}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x345c9763, 0xfaaf) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.070230074s ago: executing program 0 (id=1861): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x5f) 2.069811389s ago: executing program 0 (id=1864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0xffffffffffffffe7, 0x0, 0x843ca, {0x0, 0x4}}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000001c0)="430fc73f0f2390b9800000c00f32f30f090f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e00b9600500000f322d1aa80000460f1c46004b41ad", 0x4b}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r2, r0, 0x80000) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001001f, 0x0, 0x7b}]}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) 1.450434177s ago: executing program 0 (id=1878): socket(0xa, 0x3, 0xff) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) 1.450150125s ago: executing program 0 (id=1881): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x5, @local, 0x1}}, 0xa0a, 0x400}, &(0x7f0000000180)=0x90) 1.391468459s ago: executing program 0 (id=1882): socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2217, 0x7721, 0x35, 0x0, 0x0) 1.391270853s ago: executing program 0 (id=1884): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) poll(0x0, 0x0, 0x9) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa31e3000) migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000300)=0xa) migrate_pages(0x0, 0x9, &(0x7f0000000180)=0x7f, &(0x7f00000000c0)=0x6) io_setup(0x9, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x3, 0x4, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) r4 = dup(r3) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) 1.161346724s ago: executing program 3 (id=1892): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ef4, 0x81, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffe000/0x2000)=nil, 0x6) 1.101322817s ago: executing program 1 (id=1895): r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705320725930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e67f3fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r0, 0x0, 0x0, 0x0) 1.031642802s ago: executing program 1 (id=1904): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x1, 0xa0002f6}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x100a, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0xfffd) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet(r0, &(0x7f0000000280)='%', 0x1, 0x40, 0x0, 0x0) 952.558529ms ago: executing program 1 (id=1898): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4800) 952.479674ms ago: executing program 1 (id=1899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a60, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000440)={0x10, 0x0, [{0x882, 0x0, 0x2b10}, {0x80000006}, {0x2, 0x0, 0xf5}, {0x70800000, 0x0, 0x10000e80e}, {0x6, 0x0, 0xb0}, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x47}, {0xfffffffc, 0x0, 0x4}, {0x40, 0x0, 0x5}, {0x4}, {0x8009e}, {0x4, 0x0, 0x6}, {0x6, 0x0, 0x9}, {0xff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3, 0x0, 0xfff}]}) 841.282081ms ago: executing program 1 (id=1901): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) 591.454597ms ago: executing program 3 (id=1903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) 498.93424ms ago: executing program 3 (id=1906): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x0) 291.46136ms ago: executing program 1 (id=1907): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000000)={0x1f, 0x2, 0x1, 0xffffffffffff8000}, 0x0, 0x0, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0) 291.160583ms ago: executing program 3 (id=1909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080) 290.973056ms ago: executing program 4 (id=1910): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="3ef0478074ad0074b805000000b9000000000f01d9653e2e0f019c800080ffffb9040100c00f32c401e9d0e5c744240005000000c744240200400000c7442406000000000f01142466baa100ecf00883090000003e660f678b9c19000066ba4300ed", 0x62}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 221.53656ms ago: executing program 4 (id=1911): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) listen(r0, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 221.391924ms ago: executing program 3 (id=1912): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) umount2(0x0, 0x4) 221.26905ms ago: executing program 4 (id=1913): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7c2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000163d4f99d69e216e9cc21000a0c10000000008003000000", 0x58}], 0x1) recvfrom(r0, 0x0, 0x0, 0x40000102, 0x0, 0x0) 171.44855ms ago: executing program 4 (id=1914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8001) read$FUSE(r2, &(0x7f00000032c0)={0x2020}, 0x2020) sendmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="95", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400c840) 192.574µs ago: executing program 4 (id=1915): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee) 63.447µs ago: executing program 3 (id=1916): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000030000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000168000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000050c000/0x12000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36c, 0xc000, 0x8, 0x77}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) 0s ago: executing program 4 (id=1917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): syz.0.591'. [ 87.960382][ T8182] cgroup: No subsys list or none specified [ 88.000637][ T5970] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 88.008048][ T5970] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 88.042982][ T8204] block nbd1: NBD_DISCONNECT [ 88.044927][ T8193] block nbd1: Disconnected due to user request. [ 88.047199][ T8193] block nbd1: shutting down sockets [ 88.055503][ T8193] netlink: 424 bytes leftover after parsing attributes in process `syz.1.594'. [ 88.067154][ T8210] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 88.160976][ T8227] netlink: 228 bytes leftover after parsing attributes in process `syz.0.595'. [ 88.271168][ T5932] Bluetooth: hci3: command tx timeout [ 88.548946][ T8270] "syz.1.610" (8270) uses obsolete ecb(arc4) skcipher [ 88.563860][ T8264] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 88.566865][ T8264] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 88.584664][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.610967][ T8280] netlink: 'syz.4.613': attribute type 2 has an invalid length. [ 88.615429][ T8280] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 88.619007][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 88.624680][ T8282] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 88.627203][ T8282] netlink: 224 bytes leftover after parsing attributes in process `syz.1.615'. [ 88.704660][ T8296] Bluetooth: MGMT ver 1.23 [ 88.863355][ T40] kauditd_printk_skb: 552 callbacks suppressed [ 88.863367][ T40] audit: type=1400 audit(1762975365.118:1039): avc: denied { read write } for pid=8319 comm="syz.3.622" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.880826][ T40] audit: type=1400 audit(1762975365.118:1040): avc: denied { ioctl open } for pid=8319 comm="syz.3.622" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.888194][ T40] audit: type=1400 audit(1762975365.118:1041): avc: denied { override_creds } for pid=8319 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.962267][ T8338] sp0: Synchronizing with TNC [ 89.007323][ T8346] XFS (nbd1): no-recovery mounts must be read-only. [ 89.209847][ T8358] netlink: 'syz.4.630': attribute type 3 has an invalid length. [ 89.320302][ T40] audit: type=1400 audit(1762975365.568:1042): avc: denied { getopt } for pid=8359 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.772839][ T8396] block nbd3: NBD_DISCONNECT [ 89.774520][ T8396] block nbd3: Disconnected due to user request. [ 89.777456][ T8396] block nbd3: shutting down sockets [ 89.820943][ T8400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8400 comm=syz.1.640 [ 89.844820][ T8402] trusted_key: encrypted_key: hex blob is missing [ 89.927630][ T40] audit: type=1326 audit(1762975366.178:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8413 comm="syz.4.647" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4955d8f6c9 code=0x0 [ 89.931609][ T8412] binder: 8409:8412 ioctl c0306201 200000000540 returned -22 [ 89.984150][ T40] audit: type=1400 audit(1762975366.238:1044): avc: denied { write } for pid=8413 comm="syz.4.647" name="file0" dev="9p" ino=71827695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.993615][ T40] audit: type=1400 audit(1762975366.238:1045): avc: denied { open } for pid=8413 comm="syz.4.647" path="/34/file0/file0" dev="9p" ino=71827695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.110874][ T5942] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 90.220767][ T5970] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 90.351079][ T5942] Bluetooth: hci3: command 0x0419 tx timeout [ 90.390755][ T5970] usb 6-1: Using ep0 maxpacket: 16 [ 90.395165][ T5970] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 90.397918][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 90.400424][ T5970] usb 6-1: Product: syz [ 90.402610][ T5970] usb 6-1: Manufacturer: syz [ 90.404086][ T5970] usb 6-1: SerialNumber: syz [ 90.406971][ T5970] usb 6-1: config 0 descriptor?? [ 90.620068][ T5970] usb 6-1: USB disconnect, device number 3 [ 90.647679][ T8451] tmpfs: Unknown parameter '0x00000000000000060x0000000000000000' [ 90.732733][ T9] hid-generic 0007:0000:000D.0004: unknown main item tag 0x5 [ 90.735541][ T9] hid-generic 0007:0000:000D.0004: unknown main item tag 0x6 [ 90.737052][ T40] audit: type=1400 audit(1762975366.988:1046): avc: denied { execute } for pid=8456 comm="syz.1.652" path="/proc/tty/drivers" dev="proc" ino=4026531852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 90.738519][ T9] hid-generic 0007:0000:000D.0004: unknown main item tag 0x4 [ 90.751233][ T9] hid-generic 0007:0000:000D.0004: unexpected long global item [ 90.755011][ T9] hid-generic 0007:0000:000D.0004: probe with driver hid-generic failed with error -22 [ 90.793294][ T8474] tmpfs: Bad value for 'mpol' [ 90.799078][ T40] audit: type=1400 audit(1762975367.048:1047): avc: denied { listen } for pid=8473 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.808615][ T40] audit: type=1400 audit(1762975367.058:1048): avc: denied { accept } for pid=8473 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.897788][ T8486] dlm: Unknown command passed to DLM device : 33 [ 90.897788][ T8486] [ 90.903676][ T8487] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.982137][ T8497] netlink: 'syz.3.664': attribute type 11 has an invalid length. [ 91.030155][ T8509] __nla_validate_parse: 5 callbacks suppressed [ 91.030165][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 91.035835][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.666'. [ 91.042001][ T8509] geneve2: entered promiscuous mode [ 91.044067][ T8509] geneve2: entered allmulticast mode [ 91.183124][ T8517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8517 comm=syz.4.667 [ 91.285911][ T8525] No control pipe specified [ 91.367031][ T8530] ptm ptm46: ldisc open failed (-12), clearing slot 46 [ 91.705922][ T8539] binder: Binderfs stats mode cannot be changed during a remount [ 91.829970][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 91.838296][ T8547] bridge0: entered allmulticast mode [ 91.877886][ T8550] 9pnet_virtio: no channels available for device 127.0.0.1 [ 91.979091][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 92.402987][ T8596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8596 comm=syz.0.683 [ 92.441621][ T5942] Bluetooth: hci3: command 0x0419 tx timeout [ 92.599213][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 92.615506][ T8603] bond0: Invalid ad_actor_system MAC address. [ 92.618319][ T8603] bond0: option ad_actor_system: invalid value (255) [ 92.623789][ T8603] bond0 (unregistering): Released all slaves [ 92.667451][ T8670] openvswitch: netlink: Flow key attr not present in new flow. [ 92.673685][ T8670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8670 comm=syz.0.684 [ 92.901542][ T8673] vxcan3: entered promiscuous mode [ 93.029494][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 93.059449][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 93.110772][ T8689] binder: 8688:8689 ioctl c0e85667 2000000000c0 returned -22 [ 93.138729][ T8691] netlink: 92 bytes leftover after parsing attributes in process `syz.1.691'. [ 93.142246][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'. [ 93.145869][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'. [ 93.255552][ T8699] kvm: user requested TSC rate below hardware speed [ 93.330027][ T8714] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.334432][ T8714] overlayfs: failed to set xattr on upper [ 93.336726][ T8714] overlayfs: ...falling back to redirect_dir=nofollow. [ 93.339326][ T8714] overlayfs: ...falling back to metacopy=off. [ 93.341623][ T8714] overlayfs: ...falling back to index=off. [ 93.343965][ T8714] overlayfs: ...falling back to uuid=null. [ 93.511219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.531530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.593212][ T8741] Failed to get privilege flags for destination (handle=0x2:0x7) [ 93.610992][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 93.758175][ T8753] fuse: Bad value for 'user_id' [ 93.759798][ T8753] fuse: Bad value for 'user_id' [ 93.777285][ T8758] wg2: entered promiscuous mode [ 93.779288][ T8758] wg2: entered allmulticast mode [ 93.782680][ T9] usb 9-1: config 0 has no interfaces? [ 93.784393][ T9] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 93.787247][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.791066][ T9] usb 9-1: config 0 descriptor?? [ 93.800326][ T8763] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.852290][ T8773] IPVS: set_ctl: invalid protocol: 1 172.20.20.43:20003 [ 93.887566][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 93.887577][ T40] audit: type=1400 audit(1762975370.138:1064): avc: denied { accept } for pid=8776 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.896171][ T40] audit: type=1400 audit(1762975370.138:1065): avc: denied { getopt } for pid=8776 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.903876][ T40] audit: type=1400 audit(1762975370.138:1066): avc: denied { ioctl } for pid=8776 comm="syz.1.711" path="socket:[26832]" dev="sockfs" ino=26832 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 94.003588][ T5995] usb 9-1: USB disconnect, device number 3 [ 94.095906][ T40] audit: type=1400 audit(1762975370.348:1067): avc: denied { write } for pid=8845 comm="syz.1.716" path="socket:[26848]" dev="sockfs" ino=26848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.103997][ T40] audit: type=1400 audit(1762975370.348:1068): avc: denied { ioctl } for pid=8845 comm="syz.1.716" path="socket:[26067]" dev="sockfs" ino=26067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.180988][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 94.330894][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 94.334785][ T9] usb 8-1: config 59 has an invalid interface number: 206 but max is 0 [ 94.336210][ T8885] binder: Unknown parameter 'dont_appraise' [ 94.338161][ T9] usb 8-1: config 59 has no interface number 0 [ 94.338197][ T9] usb 8-1: config 59 interface 206 altsetting 64 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 94.349647][ T9] usb 8-1: config 59 interface 206 altsetting 64 endpoint 0x8A has an invalid bInterval 210, changing to 11 [ 94.354704][ T9] usb 8-1: config 59 interface 206 altsetting 64 endpoint 0x8A has invalid maxpacket 17548, setting to 1024 [ 94.359479][ T9] usb 8-1: config 59 interface 206 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 94.364226][ T9] usb 8-1: config 59 interface 206 altsetting 64 endpoint 0xD has invalid maxpacket 17796, setting to 64 [ 94.368463][ T9] usb 8-1: config 59 interface 206 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 94.372146][ T9] usb 8-1: config 59 interface 206 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 94.376574][ T9] usb 8-1: config 59 interface 206 altsetting 64 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 94.384171][ T9] usb 8-1: config 59 interface 206 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 94.388616][ T9] usb 8-1: config 59 interface 206 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 94.393523][ T9] usb 8-1: config 59 interface 206 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 94.398045][ T9] usb 8-1: config 59 interface 206 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 94.402719][ T9] usb 8-1: config 59 interface 206 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 94.407069][ T9] usb 8-1: config 59 interface 206 altsetting 64 has a duplicate endpoint with address 0x3, skipping [ 94.411716][ T9] usb 8-1: config 59 interface 206 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 94.416312][ T9] usb 8-1: config 59 interface 206 altsetting 64 has 18 endpoint descriptors, different from the interface descriptor's value: 16 [ 94.421948][ T9] usb 8-1: config 59 interface 206 has no altsetting 0 [ 94.425422][ T9] usb 8-1: language id specifier not provided by device, defaulting to English [ 94.429667][ T9] usb 8-1: New USB device found, idVendor=19d2, idProduct=1075, bcdDevice=bb.90 [ 94.432361][ T8893] netlink: 'syz.1.722': attribute type 7 has an invalid length. [ 94.441302][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.444503][ T9] usb 8-1: Product: Џ [ 94.446180][ T9] usb 8-1: Manufacturer: గ [ 94.448038][ T9] usb 8-1: SerialNumber: 酕ꏢ﯀䛢쎽㙩譃䑕绻മ㏚磴룵뾥䖡િ⊸쫵蔚䣒皞涉觝₢鑫譼砧镪饤皥⚅棞刲擠䕨顊痛ꅔ셃蠗作뗃뵳鷜ኛ湙幋䎛堋槷倏綨萗ﲹ닇퍵ą쩞溾࠮嘧䙦঻ff葔ҁȒ㙶彗溜콠ㅿ᡼ꝶḎ﹌㠵즫 [ 94.461055][ T8779] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 94.464384][ T8779] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 94.671532][ T9] option 8-1:59.206: GSM modem (1-port) converter detected [ 94.682182][ T9] usb 8-1: USB disconnect, device number 4 [ 94.692295][ T9] option 8-1:59.206: device disconnected [ 94.801645][ T8917] fuse: Unknown parameter 'rootmofe' [ 95.028586][ T40] audit: type=1400 audit(1762975371.278:1069): avc: denied { watch } for pid=8947 comm="syz.4.730" path="/51/file1" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.053206][ T40] audit: type=1400 audit(1762975371.308:1070): avc: denied { map } for pid=8953 comm="syz.0.731" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.060976][ T40] audit: type=1400 audit(1762975371.308:1071): avc: denied { execute } for pid=8953 comm="syz.0.731" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.289597][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.294652][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.298933][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.306587][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.309741][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.316808][ T8980] xt_socket: unknown flags 0xe4 [ 95.319447][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.323412][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.326747][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.330024][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.334604][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 95.341981][ T34] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [] on 3z۲^|ބ 1JJgm!v';۝J=a)g_Bl%D [ 95.433577][ T8994] omfs: Unknown parameter '*):$@<1ᠣ"sU00000000000000003327' [ 116.705238][ T40] audit: type=1400 audit(1762975392.958:1150): avc: denied { write } for pid=11249 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.012459][T11309] overlayfs: missing 'lowerdir' [ 117.019784][T11309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11309 comm=syz.4.1131 [ 117.028116][T11300] overlayfs: statfs failed on './file0' [ 131.240870][T11322] __nla_validate_parse: 12 callbacks suppressed [ 131.240881][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 131.243846][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 131.243860][ T40] audit: type=1400 audit(1762975407.498:1152): avc: denied { getopt } for pid=11317 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.287256][ T40] audit: type=1400 audit(1762975407.538:1153): avc: denied { getopt } for pid=11326 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.375100][T11339] overlayfs: missing 'lowerdir' [ 131.566865][ T40] audit: type=1400 audit(1762975407.818:1154): avc: denied { read open } for pid=11350 comm="syz.3.1144" path="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.653021][ T9429] Bluetooth: Error in BCSP hdr checksum [ 131.912044][ T9429] Bluetooth: Error in BCSP hdr checksum [ 132.171057][ T9424] Bluetooth: Error in BCSP hdr checksum [ 132.203215][T11368] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1149'. [ 132.292360][ T40] audit: type=1400 audit(1762975408.548:1155): avc: denied { setopt } for pid=11376 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.299394][ T40] audit: type=1400 audit(1762975408.548:1156): avc: denied { accept } for pid=11376 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.305174][T11381] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 132.324431][T11381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.425589][ T40] audit: type=1400 audit(1762975408.678:1157): avc: denied { mount } for pid=11415 comm="syz.0.1153" name="/" dev="autofs" ino=33476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 132.527740][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.679777][T11425] netlink: 'syz.3.1156': attribute type 2 has an invalid length. [ 132.683137][T11425] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1156'. [ 132.744112][T11428] XFS (nbd3): SB validate failed with error -5. [ 132.858248][ T40] audit: type=1400 audit(1762975409.108:1158): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 133.021665][T11466] program syz.4.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.152611][T11480] VFS: Mount too revealing [ 133.470878][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.470932][ T5932] Bluetooth: hci4: command 0x1003 tx timeout [ 133.516322][ T40] audit: type=1400 audit(1762975409.768:1159): avc: denied { execute } for pid=11485 comm="syz.1.1170" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.673148][T11504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1172'. [ 133.678433][T11504] netlink: 1343 bytes leftover after parsing attributes in process `syz.3.1172'. [ 133.835680][T11519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1175'. [ 133.869916][ T40] audit: type=1400 audit(1762975410.118:1160): avc: denied { connect } for pid=11520 comm="syz.1.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.951659][ T40] audit: type=1326 audit(1762975410.208:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11531 comm="syz.0.1179" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e60d8f6c9 code=0x7ffd0000 [ 134.169583][T11534] SQUASHFS error: Failed to read block 0x0: -5 [ 134.172452][T10290] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 134.174916][T11534] unable to read squashfs_super_block [ 134.320984][T10290] usb 6-1: Using ep0 maxpacket: 32 [ 134.323905][T10290] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.328241][T10290] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 134.331262][T10290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.333834][T10290] usb 6-1: Product: syz [ 134.335129][T10290] usb 6-1: Manufacturer: syz [ 134.336601][T10290] usb 6-1: SerialNumber: syz [ 134.342213][T10290] usb 6-1: config 0 descriptor?? [ 134.452876][T11551] @: renamed from vlan0 (while UP) [ 134.566205][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'. [ 135.204709][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 135.223131][T11613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.251824][T11651] Unsupported ieee802154 address type: 0 [ 135.315234][T11653] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1199'. [ 135.511382][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 135.694376][T11692] mkiss: ax0: crc mode is auto. [ 135.720039][T11692] nvme_fabrics: missing parameter 'transport=%s' [ 135.722980][T11692] nvme_fabrics: missing parameter 'nqn=%s' [ 135.761896][T11704] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 136.053599][T11744] veth1_to_batadv: entered promiscuous mode [ 136.056546][T11744] batadv_slave_0: entered promiscuous mode [ 136.058600][T11744] batadv_slave_0: left promiscuous mode [ 136.060635][T11744] veth1_to_batadv: left promiscuous mode [ 136.158021][T11761] efs: cannot read volume header [ 136.249347][T11771] netlink: 'syz.0.1224': attribute type 29 has an invalid length. [ 136.253642][T11771] netlink: 'syz.0.1224': attribute type 29 has an invalid length. [ 136.256888][T11771] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1224'. [ 136.360094][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1226'. [ 136.386093][T11778] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 136.451048][ T5970] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 136.600757][ T5970] usb 8-1: Using ep0 maxpacket: 8 [ 136.604096][ T5970] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.607373][ T5970] usb 8-1: config 0 has no interfaces? [ 136.609118][ T5970] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 136.612629][ T5970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.617856][ T5970] usb 8-1: config 0 descriptor?? [ 136.822804][ T842] usb 8-1: USB disconnect, device number 9 [ 136.861687][T11851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.899799][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 136.899810][ T40] audit: type=1400 audit(1762975413.148:1220): avc: denied { bind } for pid=11852 comm="syz.4.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.913764][T10290] usb 6-1: USB disconnect, device number 9 [ 136.936252][T11865] loop2: detected capacity change from 0 to 7 [ 136.938660][T11865] Dev loop2: unable to read RDB block 7 [ 136.940314][T11865] loop2: unable to read partition table [ 136.942728][T11865] loop2: partition table beyond EOD, truncated [ 136.944578][T11865] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 137.020623][ T40] audit: type=1400 audit(1762975413.268:1221): avc: denied { read } for pid=11869 comm="syz.4.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.174376][ T40] audit: type=1400 audit(1762975413.428:1222): avc: denied { create } for pid=11876 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 137.196412][ T40] audit: type=1400 audit(1762975413.448:1223): avc: denied { remove_name } for pid=11876 comm="syz.4.1231" name="file2" dev="9p" ino=71827777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.200513][T11877] fuse: Bad value for 'fd' [ 137.205583][ T40] audit: type=1400 audit(1762975413.448:1224): avc: denied { rmdir } for pid=11876 comm="syz.4.1231" name="file2" dev="9p" ino=71827777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.205623][ T40] audit: type=1400 audit(1762975413.448:1225): avc: denied { mounton } for pid=11876 comm="syz.4.1231" path="/207/file0/file0" dev="9p" ino=71827695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.470138][T11899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11899 comm=syz.3.1238 [ 137.507153][T11912] program syz.3.1242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.510475][T11913] program syz.3.1242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.514878][T11912] netlink: 'syz.3.1242': attribute type 5 has an invalid length. [ 137.572279][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1241'. [ 137.577243][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 137.601332][T11985] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 2, id = 0 [ 137.694738][T11995] /dev/sg0: Can't lookup blockdev [ 137.696647][T11995] /dev/sg0: Can't lookup blockdev [ 137.698704][T11995] /dev/sg0: Can't lookup blockdev [ 137.701745][T11995] /dev/sg0: Can't lookup blockdev [ 137.703659][T11995] /dev/sg0: Can't lookup blockdev [ 137.705449][T11995] /dev/sg0: Can't lookup blockdev [ 137.707304][T11995] /dev/sg0: Can't lookup blockdev [ 137.709106][T11995] /dev/sg0: Can't lookup blockdev [ 137.711069][T11995] /dev/sg0: Can't lookup blockdev [ 137.712860][T11995] /dev/sg0: Can't lookup blockdev [ 137.714615][T11995] /dev/sg0: Can't lookup blockdev [ 137.716362][T11995] /dev/sg0: Can't lookup blockdev [ 137.718121][T11995] /dev/sg0: Can't lookup blockdev [ 137.720038][T11995] /dev/sg0: Can't lookup blockdev [ 137.723398][T11995] /dev/sg0: Can't lookup blockdev [ 137.725148][T11995] /dev/sg0: Can't lookup blockdev [ 137.727227][T11995] /dev/sg0: Can't lookup blockdev [ 137.729185][T11995] /dev/sg0: Can't lookup blockdev [ 137.731363][T11995] /dev/sg0: Can't lookup blockdev [ 137.733815][T11995] /dev/sg0: Can't lookup blockdev [ 137.736211][T11995] /dev/sg0: Can't lookup blockdev [ 137.738696][T11995] /dev/sg0: Can't lookup blockdev [ 137.743074][T11995] /dev/sg0: Can't lookup blockdev [ 137.745424][T11995] /dev/sg0: Can't lookup blockdev [ 137.747994][T11995] /dev/sg0: Can't lookup blockdev [ 137.750496][T11995] /dev/sg0: Can't lookup blockdev [ 137.752973][T11995] /dev/sg0: Can't lookup blockdev [ 137.755405][T11995] /dev/sg0: Can't lookup blockdev [ 137.758004][T11995] /dev/sg0: Can't lookup blockdev [ 137.760499][T11995] /dev/sg0: Can't lookup blockdev [ 137.762728][T11995] /dev/sg0: Can't lookup blockdev [ 137.765216][T11995] /dev/sg0: Can't lookup blockdev [ 137.768380][T11995] /dev/sg0: Can't lookup blockdev [ 137.770827][T11995] /dev/sg0: Can't lookup blockdev [ 137.772743][T11995] /dev/sg0: Can't lookup blockdev [ 137.774652][T11995] /dev/sg0: Can't lookup blockdev [ 137.776524][T11995] /dev/sg0: Can't lookup blockdev [ 137.778370][T11995] /dev/sg0: Can't lookup blockdev [ 137.780238][T11995] /dev/sg0: Can't lookup blockdev [ 137.787711][T11995] /dev/sg0: Can't lookup blockdev [ 137.790337][T11995] /dev/sg0: Can't lookup blockdev [ 137.792943][T11995] /dev/sg0: Can't lookup blockdev [ 137.795535][T11995] /dev/sg0: Can't lookup blockdev [ 137.798107][T11995] /dev/sg0: Can't lookup blockdev [ 137.800906][T11995] /dev/sg0: Can't lookup blockdev [ 137.803305][T11995] /dev/sg0: Can't lookup blockdev [ 137.805635][T11995] /dev/sg0: Can't lookup blockdev [ 137.807524][T11995] /dev/sg0: Can't lookup blockdev [ 137.809878][T11995] /dev/sg0: Can't lookup blockdev [ 137.812564][T11995] /dev/sg0: Can't lookup blockdev [ 137.814801][T11995] /dev/sg0: Can't lookup blockdev [ 137.816860][T11995] /dev/sg0: Can't lookup blockdev [ 137.819216][T11995] /dev/sg0: Can't lookup blockdev [ 137.821648][T11995] /dev/sg0: Can't lookup blockdev [ 137.824161][T11995] /dev/sg0: Can't lookup blockdev [ 137.826451][T11995] /dev/sg0: Can't lookup blockdev [ 137.828852][T11995] /dev/sg0: Can't lookup blockdev [ 137.831401][T11995] /dev/sg0: Can't lookup blockdev [ 137.833815][T11995] /dev/sg0: Can't lookup blockdev [ 137.836282][T11995] /dev/sg0: Can't lookup blockdev [ 137.838589][T11995] /dev/sg0: Can't lookup blockdev [ 137.841190][T11995] /dev/sg0: Can't lookup blockdev [ 137.843501][T11995] /dev/sg0: Can't lookup blockdev [ 137.845935][T11995] /dev/sg0: Can't lookup blockdev [ 137.848355][T11995] /dev/sg0: Can't lookup blockdev [ 137.876883][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 137.891952][T12015] bond2: Invalid ad_actor_system MAC address. [ 137.893985][T12015] bond2: option ad_actor_system: invalid value (255) [ 137.894760][T12051] overlayfs: conflicting options: userxattr,redirect_dir=on [ 137.902947][T12015] bond2 (unregistering): Released all slaves [ 138.044432][T12095] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 138.044778][T12097] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 138.363976][T12130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12130 comm=syz.3.1263 [ 138.433963][T12137] vlan1: entered promiscuous mode [ 138.436164][T12137] batadv_slave_1: entered promiscuous mode [ 138.502361][ T40] audit: type=1400 audit(1762975414.758:1226): avc: denied { bind } for pid=12145 comm="syz.3.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.751780][T12168] input: syz1 as /devices/virtual/input/input15 [ 138.841510][T12178] smc: net device sit0 applied user defined pnetid SYZ2 [ 139.077440][T12187] devpts: Bad value for 'max' [ 139.228411][ T40] audit: type=1400 audit(1762975415.478:1227): avc: denied { getopt } for pid=12188 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.492410][T12197] rtc_cmos 00:05: Alarms can be up to one day in the future [ 139.534430][ T40] audit: type=1400 audit(1762975415.788:1228): avc: denied { accept } for pid=12199 comm="syz.1.1280" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.540594][T12200] x_tables: duplicate underflow at hook 2 [ 139.576363][T12202] ./bus: Can't lookup blockdev [ 139.631766][T12213] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 139.637928][T12213] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 139.672997][T12217] input: syz1 as /devices/virtual/input/input16 [ 139.682308][T12217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1286'. [ 139.777939][T12231] binder: 12228:12231 ioctl 80047437 200000000000 returned -22 [ 139.837361][T12246] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 139.856180][ T40] audit: type=1400 audit(1762975416.108:1229): avc: denied { accept } for pid=12250 comm="syz.1.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.907564][T12258] team_slave_1: Caught tx_queue_len zero misconfig [ 139.957894][T12260] sctp: [Deprecated]: syz.0.1297 (pid 12260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.957894][T12260] Use struct sctp_sack_info instead [ 139.962626][T10290] rtc_cmos 00:05: Alarms can be up to one day in the future [ 139.971171][T10290] rtc_cmos 00:05: Alarms can be up to one day in the future [ 139.980085][T10290] rtc_cmos 00:05: Alarms can be up to one day in the future [ 139.990989][T10290] rtc_cmos 00:05: Alarms can be up to one day in the future [ 139.993628][T10290] rtc rtc0: __rtc_set_alarm: err=-22 [ 140.080459][T12283] ip6erspan0: entered promiscuous mode [ 140.114640][T12292] wg2: entered promiscuous mode [ 140.116644][T12292] wg2: entered allmulticast mode [ 140.259739][T12329] tmpfs: Bad value for 'mpol' [ 140.515982][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 140.748077][T12349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.782067][T12386] netlink: 'syz.4.1318': attribute type 1 has an invalid length. [ 140.804005][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'. [ 140.807763][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 140.841042][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 140.847892][T12386] bond2 (unregistering): Released all slaves [ 140.942594][T12457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12457 comm=syz.1.1319 [ 140.947471][T12458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=12458 comm=syz.1.1319 [ 140.947593][T12457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=12457 comm=syz.1.1319 [ 141.114735][T12473] bond0: entered promiscuous mode [ 141.117741][T12473] batadv0: entered promiscuous mode [ 141.121962][T12473] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 141.125600][T12473] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 141.294603][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 141.575430][T12531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1336'. [ 141.587574][T12530] SELinux: failed to load policy [ 141.620492][T12540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1339'. [ 141.625165][T12540] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 141.630544][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1340'. [ 141.635472][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 141.639409][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'. [ 141.666067][T12544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12544 comm=syz.1.1340 [ 141.727528][T12615] program syz.3.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.734236][T12615] netlink: 'syz.3.1342': attribute type 16 has an invalid length. [ 141.736654][T12615] netlink: 'syz.3.1342': attribute type 2 has an invalid length. [ 141.738989][T12615] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.1342'. [ 141.764130][T12619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.767214][T12619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.800543][T12630] openvswitch: netlink: IP tunnel dst address not specified [ 141.801149][T12629] tmpfs: Unknown parameter 'n' [ 141.806912][T12629] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1346'. [ 141.924217][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 141.924234][ T40] audit: type=1400 audit(1762975418.178:1234): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.936736][ T40] audit: type=1400 audit(1762975418.178:1235): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.947705][ T40] audit: type=1400 audit(1762975418.178:1236): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.972663][T12619] binder: Bad value for 'stats' [ 141.974609][T12655] binder: Bad value for 'stats' [ 141.975479][T12651] use of bytesused == 0 is deprecated and will be removed in the future, [ 141.979734][T12651] use the actual size instead. [ 142.011401][T10290] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 142.037522][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 142.108986][ T40] audit: type=1400 audit(1762975418.358:1237): avc: denied { getopt } for pid=12657 comm="syz.1.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.150989][T10290] usb 5-1: device descriptor read/64, error -71 [ 142.283193][T12669] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.286620][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.390145][T12669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.390846][T10290] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 142.402395][T12669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.541220][T10290] usb 5-1: device descriptor read/64, error -71 [ 142.547370][ T9425] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.552386][ T9425] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.556276][ T9425] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.560575][ T9425] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.644027][T12687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1359'. [ 142.661122][T10290] usb usb5-port1: attempt power cycle [ 142.744134][T12692] overlayfs: failed lookup in lower (newroot/237, name='file1', err=-40): overlapping layers [ 142.752624][ T40] audit: type=1400 audit(1762975418.998:1238): avc: denied { remount } for pid=12691 comm="syz.4.1361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 142.800977][T12696] tipc: Failed to remove unknown binding: 66,1,1/0:3418405536/3418405538 [ 142.841529][T12714] usb usb8: usbfs: process 12714 (syz.3.1364) did not claim interface 0 before use [ 142.880194][T12698] netlink: 'syz.4.1363': attribute type 4 has an invalid length. [ 143.020804][T10290] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 143.042432][T10290] usb 5-1: device descriptor read/8, error -71 [ 143.100965][ T4559] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 143.291080][ T4559] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 143.295386][ T4559] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.299878][ T4559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.300797][T10290] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 143.304326][ T4559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.313729][ T4559] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.317253][ T4559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.322432][ T4559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.325180][ T4559] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.328526][ T4559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.335718][T10290] usb 5-1: device descriptor read/8, error -71 [ 143.340732][ T4559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.344143][ T4559] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.347710][ T4559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.351736][ T4559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.355210][ T4559] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.358572][ T4559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.362520][ T4559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.366241][ T4559] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.369213][ T4559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.373858][ T4559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.376119][T12762] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 143.376965][ T4559] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.382408][ T4559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.387025][ T4559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.394370][T12762] bond4: entered promiscuous mode [ 143.394537][ T4559] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.396169][T12762] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.399215][ T4559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.405306][ T4559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.410005][ T4559] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 143.413316][ T4559] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 143.416643][ T4559] usb 6-1: Product: syz [ 143.418356][ T4559] usb 6-1: Manufacturer: syz [ 143.420303][ T4559] usb 6-1: SerialNumber: syz [ 143.424910][ T4559] usb 6-1: config 0 descriptor?? [ 143.431002][T12762] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.433347][ T4559] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 143.433373][T12762] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 143.439147][T12762] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 143.441755][T10290] usb usb5-port1: unable to enumerate USB device [ 143.448123][T12762] bond4: (slave wireguard0): making interface the new active one [ 143.450658][T12762] wireguard0: entered promiscuous mode [ 143.454520][T12762] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 143.462701][T12762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.465724][T12762] IPv6: NLM_F_CREATE should be set when creating new route [ 143.468707][T12762] IPv6: NLM_F_CREATE should be set when creating new route [ 143.472768][T12762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.533773][T12815] lo: Caught tx_queue_len zero misconfig [ 143.634287][ T53] usb 6-1: USB disconnect, device number 10 [ 143.639899][ T53] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 143.779982][T12836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.794482][T12835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.842969][T12722] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 144.281829][T12843] pim6reg1: tun_chr_ioctl cmd 1074025676 [ 144.283862][T12843] pim6reg1: owner set to 0 [ 144.370048][ T40] audit: type=1400 audit(1762975420.621:1239): avc: denied { setopt } for pid=12850 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.424170][T12859] netlink: 'syz.4.1381': attribute type 144 has an invalid length. [ 144.487729][ T40] audit: type=1400 audit(1762975420.741:1240): avc: denied { write } for pid=12850 comm="syz.3.1378" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 144.817642][T12892] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 144.822984][ T40] audit: type=1400 audit(1762975421.081:1241): avc: denied { relabelto } for pid=12891 comm="syz.0.1387" name="296" dev="tmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 144.831351][ T40] audit: type=1400 audit(1762975421.081:1242): avc: denied { associate } for pid=12891 comm="syz.0.1387" name="296" dev="tmpfs" ino=1597 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 144.920783][ T40] audit: type=1400 audit(1762975421.171:1243): avc: denied { remove_name } for pid=5934 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 144.938939][T12897] CIFS mount error: No usable UNC path provided in device string! [ 144.938939][T12897] [ 144.942301][T12897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 145.046692][T12902] could not allocate digest TFM handle cbcmac-aes-ce [ 145.228008][T12922] evm: overlay not supported [ 145.431448][T12961] netlink: 'syz.0.1405': attribute type 39 has an invalid length. [ 145.452331][T12969] netlink: 'syz.3.1406': attribute type 10 has an invalid length. [ 145.458104][T12969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.477851][T12961] netlink: 'syz.0.1405': attribute type 1 has an invalid length. [ 145.492570][T12974] netlink: 'syz.3.1407': attribute type 15 has an invalid length. [ 145.661412][T12996] netlink: 'syz.3.1414': attribute type 11 has an invalid length. [ 145.664657][T12996] netlink: 'syz.3.1414': attribute type 11 has an invalid length. [ 145.686888][T12999] netlink: 'syz.0.1416': attribute type 4 has an invalid length. [ 145.725522][T12999] veth1_to_batadv: entered promiscuous mode [ 145.728089][T12999] batadv_slave_0: entered promiscuous mode [ 145.730300][T12999] batadv_slave_0: left promiscuous mode [ 145.736522][T12999] veth1_to_batadv: left promiscuous mode [ 145.748103][T13002] veth1_to_batadv: entered promiscuous mode [ 145.751076][T13002] batadv_slave_0: entered promiscuous mode [ 145.753703][T13002] batadv_slave_0: left promiscuous mode [ 145.756289][T13002] veth1_to_batadv: left promiscuous mode [ 145.854840][T13031] random: crng reseeded on system resumption [ 145.919240][T13039] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 145.938798][T13039] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.964470][T13039] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.966897][T13039] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 145.971001][T13039] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 145.995532][T13085] SELinux: unknown common  [ 145.997509][T13085] SELinux: failed to load policy [ 146.032990][T13086] veth5: entered promiscuous mode [ 146.036596][T13086] bond5: (slave veth5): Enslaving as an active interface with a down link [ 146.043734][T13086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.250834][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 146.252294][T13162] overlay: ./file0 is not a directory [ 146.422325][ C2] ata1: illegal qc_active transition (00000000->00040000) [ 146.427622][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 146.432953][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.439808][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 146.444049][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 146.447068][ T9] usb 5-1: Product: syz [ 146.448471][ T9] usb 5-1: Manufacturer: syz [ 146.450078][ T9] usb 5-1: SerialNumber: syz [ 146.460195][T13085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.667177][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 146.754759][ T1116] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 146.758698][ T1116] ata1.00: configured for UDMA/100 [ 146.869606][T13085] __nla_validate_parse: 48 callbacks suppressed [ 146.869621][T13085] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1426'. [ 146.879086][T13085] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1426'. [ 146.882810][T13085] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1426'. [ 146.889032][ T5969] usb 5-1: USB disconnect, device number 11 [ 146.893446][ T5969] usblp0: removed [ 147.163184][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 147.163200][ T40] audit: type=1400 audit(1762975423.421:1246): avc: denied { mount } for pid=13215 comm="syz.4.1439" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 147.173120][ T40] audit: type=1400 audit(1762975423.421:1247): avc: denied { mounton } for pid=13215 comm="syz.4.1439" path="/269/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 147.918496][ T40] audit: type=1400 audit(1762975424.171:1248): avc: denied { relabelfrom } for pid=13241 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.926046][ T40] audit: type=1400 audit(1762975424.171:1249): avc: denied { relabelto } for pid=13241 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.030230][ T40] audit: type=1400 audit(1762975424.281:1250): avc: denied { unmount } for pid=7668 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 148.225609][T13264] CIFS mount error: No usable UNC path provided in device string! [ 148.225609][T13264] [ 148.229109][T13264] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.239024][T13264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.292555][T13273] binder: Binderfs stats mode cannot be changed during a remount [ 148.296200][ T40] audit: type=1326 audit(1762975424.551:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.4.1452" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4955d8f6c9 code=0x0 [ 148.347491][T13273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1452'. [ 148.390851][T13280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1454'. [ 148.411621][T13278] can: request_module (can-proto-0) failed. [ 148.478873][ T40] audit: type=1400 audit(1762975424.731:1252): avc: denied { setopt } for pid=13292 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.504323][T13289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1458'. [ 148.509113][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 148.513476][T13289] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1458'. [ 148.516338][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 148.536087][ T40] audit: type=1400 audit(1762975424.791:1253): avc: denied { connect } for pid=13292 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.536899][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 148.550764][T13300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.553041][T13300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.556390][T13300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.559437][T13300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.575130][T13300] batadv0 (unregistering): left promiscuous mode [ 148.803531][T13319] kvm: kvm [13318]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 148.807150][T13319] kvm: kvm [13318]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 148.823974][T13319] kvm: kvm [13318]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 148.842931][T13319] kvm: kvm [13318]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 148.846309][T13319] kvm: kvm [13318]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 148.864657][T13327] veth0: entered promiscuous mode [ 149.179822][T13349] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 149.278092][T13349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.686067][ T40] audit: type=1400 audit(1762975425.941:1254): avc: denied { write } for pid=13417 comm="syz.1.1490" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 149.695217][ T40] audit: type=1400 audit(1762975425.941:1255): avc: denied { open } for pid=13417 comm="syz.1.1490" path="/392/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 149.703512][T13418] ntfs3(sr0): Primary boot signature is not NTFS. [ 149.707619][T13418] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 149.710020][T13425] delete_channel: no stack [ 149.797639][T13440] f2fs: Unknown parameter 'bjrrier' [ 150.034070][T13472] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3728 sclass=netlink_xfrm_socket pid=13472 comm=syz.0.1499 [ 150.310723][ T5969] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 150.460742][ T5969] usb 8-1: Using ep0 maxpacket: 16 [ 150.465177][ T5969] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 150.468175][ T5969] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 150.470916][ T5969] usb 8-1: Product: syz [ 150.472276][ T5969] usb 8-1: Manufacturer: syz [ 150.473837][ T5969] usb 8-1: SerialNumber: syz [ 150.477763][ T5969] usb 8-1: config 0 descriptor?? [ 150.684413][T10290] usb 8-1: USB disconnect, device number 10 [ 150.728403][T13508] IPv6: sit1: Disabled Multicast RS [ 150.729180][T13508] sit1: entered allmulticast mode [ 150.881446][T13520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=13520 comm=syz.4.1506 [ 150.906871][T13519] syz.1.1505: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 150.914291][T13519] CPU: 2 UID: 0 PID: 13519 Comm: syz.1.1505 Not tainted syzkaller #0 PREEMPT(full) [ 150.914315][T13519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.914326][T13519] Call Trace: [ 150.914343][T13519] [ 150.914350][T13519] dump_stack_lvl+0x16c/0x1f0 [ 150.914396][T13519] warn_alloc+0x248/0x3a0 [ 150.914424][T13519] ? __pfx_warn_alloc+0x10/0x10 [ 150.914463][T13519] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 150.914494][T13519] ? __vmalloc_node_noprof+0xad/0xf0 [ 150.914522][T13519] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 150.914554][T13519] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 150.914582][T13519] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 150.914613][T13519] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 150.914635][T13519] vmalloc_user_noprof+0x9e/0xe0 [ 150.914658][T13519] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 150.914681][T13519] vb2_vmalloc_alloc+0x135/0x3f0 [ 150.914704][T13519] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 150.914725][T13519] __vb2_queue_alloc+0x8c9/0x1280 [ 150.914759][T13519] vb2_core_reqbufs+0xa90/0xfe0 [ 150.914786][T13519] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 150.914811][T13519] ? rcu_is_watching+0x12/0xc0 [ 150.914837][T13519] ? __mutex_lock+0x1c5/0x1060 [ 150.914853][T13519] ? avc_has_extended_perms+0x47c/0x1090 [ 150.914893][T13519] vb2_reqbufs+0x1a3/0x1f0 [ 150.914912][T13519] ? __pfx_vb2_reqbufs+0x10/0x10 [ 150.914930][T13519] ? kasan_quarantine_put+0x10a/0x240 [ 150.914949][T13519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.914975][T13519] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 150.914997][T13519] v4l_reqbufs+0x142/0x1d0 [ 150.915022][T13519] __video_do_ioctl+0xb77/0xf00 [ 150.915051][T13519] ? __might_fault+0xe3/0x190 [ 150.915077][T13519] ? __pfx___video_do_ioctl+0x10/0x10 [ 150.915112][T13519] video_usercopy+0x4d0/0x1720 [ 150.915141][T13519] ? __pfx___video_do_ioctl+0x10/0x10 [ 150.915165][T13519] ? selinux_kernel_read_file+0xc0/0x130 [ 150.915185][T13519] ? __pfx_video_usercopy+0x10/0x10 [ 150.915230][T13519] v4l2_ioctl+0x1bd/0x250 [ 150.915254][T13519] ? __pfx_v4l2_ioctl+0x10/0x10 [ 150.915280][T13519] __x64_sys_ioctl+0x18e/0x210 [ 150.915307][T13519] do_syscall_64+0xcd/0xfa0 [ 150.915327][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.915344][T13519] RIP: 0033:0x7ffafdf8f6c9 [ 150.915358][T13519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.915374][T13519] RSP: 002b:00007ffafee5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.915390][T13519] RAX: ffffffffffffffda RBX: 00007ffafe1e6090 RCX: 00007ffafdf8f6c9 [ 150.915401][T13519] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 150.915411][T13519] RBP: 00007ffafe011f91 R08: 0000000000000000 R09: 0000000000000000 [ 150.915420][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.915430][T13519] R13: 00007ffafe1e6128 R14: 00007ffafe1e6090 R15: 00007ffc83902df8 [ 150.915455][T13519] [ 150.915461][T13519] Mem-Info: [ 151.003465][T13537] netlink: 'syz.0.1510': attribute type 12 has an invalid length. [ 151.005775][T13519] active_anon:17725 inactive_anon:37447 isolated_anon:0 [ 151.005775][T13519] active_file:629 inactive_file:46082 isolated_file:0 [ 151.005775][T13519] unevictable:1768 dirty:65 writeback:0 [ 151.005775][T13519] slab_reclaimable:9753 slab_unreclaimable:74903 [ 151.005775][T13519] mapped:24078 shmem:51588 pagetables:1435 [ 151.005775][T13519] sec_pagetables:309 bounce:0 [ 151.005775][T13519] kernel_misc_reclaimable:0 [ 151.005775][T13519] free:411930 free_pcp:15990 free_cma:0 [ 151.042143][T13519] Node 0 active_anon:50952kB inactive_anon:149788kB active_file:2492kB inactive_file:184128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98768kB dirty:248kB writeback:0kB shmem:182896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14544kB pagetables:5544kB sec_pagetables:1236kB all_unreclaimable? no Balloon:0kB [ 151.055747][T13519] Node 1 active_anon:19948kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:12kB writeback:0kB shmem:23456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 151.059226][T13541] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.068226][T13519] Node 0 DMA free:5876kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:9448kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.068281][T13519] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 151.068317][T13519] Node 0 DMA32 free:50372kB boost:4096kB min:31676kB low:38568kB high:45460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50824kB inactive_anon:140340kB active_file:2492kB inactive_file:184128kB unevictable:3536kB writepending:248kB zspages:0kB present:2080628kB managed:1269472kB mlocked:0kB bounce:0kB free_pcp:54060kB local_pcp:16548kB free_cma:0kB [ 151.071872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.073324][T13541] overlayfs: failed to set xattr on upper [ 151.083906][T13519] lowmem_reserve[]: 0 0 0 [ 151.086931][T13541] overlayfs: ...falling back to redirect_dir=nofollow. [ 151.100014][T13519] 0 0 [ 151.100038][T13519] Node 1 Normal free:1591472kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19948kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:9444kB local_pcp:8224kB free_cma:0kB [ 151.100090][T13519] lowmem_reserve[]: 0 0 [ 151.104070][T13541] overlayfs: ...falling back to index=off. [ 151.106036][T13519] 0 0 0 [ 151.106053][T13519] Node 0 DMA: [ 151.108064][T13541] overlayfs: ...falling back to uuid=null. [ 151.110871][T13519] 7*4kB (UM) 9*8kB (UM) 5*16kB (U) 6*32kB (UM) [ 151.113269][T13541] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 151.124535][T13519] 4*64kB (UM) 3*128kB (UM) 1*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 1*4096kB (U) = 5876kB [ 151.124621][T13519] Node 0 DMA32: 281*4kB (UME) 416*8kB (UME) 179*16kB (UME) 33*32kB (ME) 60*64kB (UME) 69*128kB (UME) 21*256kB (UME) 26*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 47924kB [ 151.145625][T13519] Node 1 Normal: 45*4kB (UME) 58*8kB (UME) 69*16kB (UME) 167*32kB (UME) 84*64kB (UME) 40*128kB (UME) 14*256kB (UME) 9*512kB (UME) 5*1024kB (UME) 6*2048kB (UM) 378*4096kB (UM) = 1591476kB [ 151.151519][T13519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.154515][T13519] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 151.157353][T13519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.160249][T13519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 151.163284][T13519] 98295 total pagecache pages [ 151.164802][T13519] 0 pages in swap cache [ 151.166154][T13519] Free swap = 124996kB [ 151.167447][T13519] Total swap = 124996kB [ 151.168782][T13519] 1048443 pages RAM [ 151.170028][T13519] 0 pages HighMem/MovableOnly [ 151.171726][T13519] 281762 pages reserved [ 151.173048][T13519] 0 pages cma reserved [ 151.183003][T13545] comedi comedi0: Minor 3954 is invalid! [ 151.262411][T13561] ntfs3(sr0): Primary boot signature is not NTFS. [ 151.264599][T13561] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 151.580817][T13595] netlink: 'syz.3.1522': attribute type 10 has an invalid length. [ 151.581200][T13596] netlink: 'syz.3.1522': attribute type 10 has an invalid length. [ 151.583444][T13595] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 151.588402][T13595] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 151.590838][T13595] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 151.595840][T13596] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 151.874469][T13608] overlayfs: conflicting lowerdir path [ 151.905922][T13616] netlink: 'syz.4.1529': attribute type 9 has an invalid length. [ 151.938000][T13628] can0: slcan on ttyprintk. [ 151.987252][T13641] __nla_validate_parse: 15 callbacks suppressed [ 151.987263][T13641] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1532'. [ 151.994670][T13641] netlink: 'syz.4.1532': attribute type 1 has an invalid length. [ 151.997147][T13641] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1532'. [ 152.021438][T13623] can0 (unregistered): slcan off ttyprintk. [ 152.335139][T13670] block device autoloading is deprecated and will be removed. [ 152.376903][T13678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=13678 comm=syz.3.1541 [ 152.390082][T13680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1540'. [ 152.403526][T13682] vxcan1: entered allmulticast mode [ 153.045425][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 153.070980][T13719] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1551'. [ 153.097849][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'. [ 153.126990][T13716] hsr_slave_1 (unregistering): left promiscuous mode [ 153.161630][T13731] netlink: 'syz.0.1555': attribute type 4 has an invalid length. [ 153.169868][T13731] netlink: 'syz.0.1555': attribute type 4 has an invalid length. [ 153.230814][ T5970] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 153.296096][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 153.296110][ T40] audit: type=1400 audit(1762975429.551:1262): avc: denied { transfer } for pid=13754 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 153.296627][T13755] binder_alloc: 13754: binder_alloc_buf, no vma [ 153.336848][T13761] exFAT-fs (nullb0): invalid boot record signature [ 153.340750][T13761] exFAT-fs (nullb0): failed to read boot sector [ 153.343283][T13761] exFAT-fs (nullb0): failed to recognize exfat type [ 153.369930][T13766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 153.378835][T13771] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.390863][ T5970] usb 9-1: Invalid ep0 maxpacket: 32 [ 153.469860][T13776] 9pnet_virtio: no channels available for device syz [ 153.473919][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 153.531097][ T5970] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 153.572503][T13826] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 153.629048][T13832] macsec0: entered promiscuous mode [ 153.682203][ T5970] usb 9-1: Invalid ep0 maxpacket: 32 [ 153.685186][ T5970] usb usb9-port1: attempt power cycle [ 153.732279][ T40] audit: type=1400 audit(1762975429.991:1263): avc: denied { ioctl } for pid=13828 comm="syz.0.1571" path="socket:[42830]" dev="sockfs" ino=42830 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.842203][T13845] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 153.846372][T13845] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 153.851265][T13845] overlayfs: failed to get uuid (419/file0, err=-13); falling back to uuid=null. [ 153.856963][T13845] 9pnet_virtio: no channels available for device syz [ 153.862925][T13845] cgroup: Unknown subsys name 'cpuset' [ 153.870785][ T40] audit: type=1400 audit(1762975430.121:1264): avc: denied { mount } for pid=13844 comm="syz.1.1576" name="/" dev="rpc_pipefs" ino=41718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 153.880759][ T40] audit: type=1400 audit(1762975430.131:1265): avc: denied { mounton } for pid=13844 comm="syz.1.1576" path="/419/file0" dev="rpc_pipefs" ino=41718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 154.021491][ T5970] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 154.051147][ T5970] usb 9-1: Invalid ep0 maxpacket: 32 [ 154.122961][T13856] IPVS: Error during creation of socket; terminating [ 154.180790][ T5970] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 154.201391][ T40] audit: type=1326 audit(1762975430.461:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcd58f6c9 code=0x7ffc0000 [ 154.201594][ T5970] usb 9-1: Invalid ep0 maxpacket: 32 [ 154.211599][ T40] audit: type=1326 audit(1762975430.461:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcd58f6c9 code=0x7ffc0000 [ 154.213351][ T5970] usb usb9-port1: unable to enumerate USB device [ 154.222124][ T40] audit: type=1326 audit(1762975430.461:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafcd58f6c9 code=0x7ffc0000 [ 154.233014][ T40] audit: type=1326 audit(1762975430.461:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcd58f6c9 code=0x7ffc0000 [ 154.242556][ T40] audit: type=1326 audit(1762975430.461:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafcd58f6c9 code=0x7ffc0000 [ 154.252477][ T40] audit: type=1326 audit(1762975430.461:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcd58f6c9 code=0x7ffc0000 [ 154.404323][T13870] netlink: 'syz.1.1582': attribute type 10 has an invalid length. [ 154.410367][T13870] team0: Failed to send options change via netlink (err -105) [ 154.412850][T13870] team0: Port device netdevsim0 added [ 154.552691][T13884] comedi comedi4: bad chanlist[0]=0x001ffffe chan=65534 range length=2 [ 154.678151][T13889] sg_write: data in/out 1376413916/39 bytes for SCSI command 0xdf-- guessing data in; [ 154.678151][T13889] program syz.1.1588 not setting count and/or reply_len properly [ 155.080915][ T5970] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.111789][T13906] xt_socket: unknown flags 0x20 [ 155.232129][ T5970] usb 5-1: config 0 has no interfaces? [ 155.234113][ T5970] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.237068][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.241471][ T5970] usb 5-1: config 0 descriptor?? [ 155.446821][ T5969] usb 5-1: USB disconnect, device number 12 [ 155.472686][T13918] netlink: 'syz.1.1595': attribute type 9 has an invalid length. [ 155.475843][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 155.600194][T13927] batadv_slave_0: entered allmulticast mode [ 156.018461][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 156.054169][T13941] binder: 13940:13941 unknown command 0 [ 156.055943][T13941] binder: 13940:13941 ioctl c0306201 200000000080 returned -22 [ 156.059558][T13941] binder_alloc: binder_alloc_mmap_handler: 13940 200000ffd000-200001000000 already mapped failed -16 [ 156.064726][T13943] binder: BINDER_SET_CONTEXT_MGR already set [ 156.066619][T13943] binder: 13940:13943 ioctl 4018620d 200000000040 returned -16 [ 156.069567][T13941] binder_alloc: 13940: binder_alloc_buf, no vma [ 156.266279][T13949] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 156.493162][T13974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15616 sclass=netlink_route_socket pid=13974 comm=syz.1.1608 [ 156.700833][T10290] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 156.804003][T13989] Invalid source name [ 156.805426][T13989] UBIFS error (pid: 13989): cannot open "/dev/sg0", error -22 [ 156.850958][T10290] usb 9-1: Using ep0 maxpacket: 16 [ 156.861693][T10290] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 156.866991][T10290] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.869918][T10290] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.873634][T10290] usb 9-1: Product: syz [ 156.875321][T10290] usb 9-1: Manufacturer: syz [ 156.877061][T10290] usb 9-1: SerialNumber: syz [ 156.880179][T14001] sock: sock_set_timeout: `syz.1.1616' (pid 14001) tries to set negative timeout [ 156.881792][T10290] usb 9-1: config 0 descriptor?? [ 156.889952][T10290] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.893631][T10290] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 157.378509][T14037] __nla_validate_parse: 3 callbacks suppressed [ 157.378563][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 157.384111][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'. [ 157.440340][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1627'. [ 157.458417][T14041] bond4: option primary_reselect: invalid value (133) [ 157.462562][T14041] bond4 (unregistering): Released all slaves [ 157.493929][T10290] em28xx 9-1:0.0: chip ID is em2710 [ 157.664080][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 157.922904][T14124] bond4: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 157.928345][T14124] bond4 (unregistering): Released all slaves [ 158.110044][T10290] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 158.114411][T10290] em28xx 9-1:0.0: board has no eeprom [ 158.182180][T14213] btrfs: Unknown parameter 'barriers' [ 158.227275][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 158.328506][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 158.328521][ T40] audit: type=1400 audit(1762975434.581:1363): avc: denied { create } for pid=14229 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.345029][ T40] audit: type=1400 audit(1762975434.601:1364): avc: denied { create } for pid=14233 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.353543][ T40] audit: type=1400 audit(1762975434.601:1365): avc: denied { bind } for pid=14229 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.361855][ T40] audit: type=1400 audit(1762975434.601:1366): avc: denied { accept } for pid=14229 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.369878][ T40] audit: type=1400 audit(1762975434.601:1367): avc: denied { write } for pid=14229 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.378230][ T40] audit: type=1400 audit(1762975434.601:1368): avc: denied { write } for pid=13966 comm="syz.4.1606" name="i2c-2" dev="devtmpfs" ino=3151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.387623][ T40] audit: type=1400 audit(1762975434.611:1369): avc: denied { write } for pid=14233 comm="syz.3.1643" path="socket:[45086]" dev="sockfs" ino=45086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.407030][ T40] audit: type=1400 audit(1762975434.661:1370): avc: denied { bpf } for pid=14236 comm="syz.3.1645" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.413808][ T40] audit: type=1400 audit(1762975434.661:1371): avc: denied { perfmon } for pid=14236 comm="syz.3.1645" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.432275][ T40] audit: type=1400 audit(1762975434.691:1372): avc: denied { read } for pid=14238 comm="syz.0.1644" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.870885][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 159.042250][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.045551][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.050192][ T29] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 159.053381][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.056429][ T29] usb 5-1: Product: syz [ 159.057809][ T29] usb 5-1: Manufacturer: syz [ 159.059361][ T29] usb 5-1: SerialNumber: syz [ 159.063583][ T29] usb 5-1: config 0 descriptor?? [ 159.102735][ T5970] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 159.163841][T13967] em28xx 9-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 159.221088][T10290] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 159.223596][T10290] em28xx 9-1:0.0: dvb set to bulk mode. [ 159.227262][ T29] em28xx 9-1:0.0: Binding DVB extension [ 159.233985][T10290] usb 9-1: USB disconnect, device number 12 [ 159.236366][T10290] em28xx 9-1:0.0: Disconnecting em28xx [ 159.259509][ T29] em28xx 9-1:0.0: Registering input extension [ 159.260755][ T5970] usb 6-1: Using ep0 maxpacket: 32 [ 159.262625][T10290] em28xx 9-1:0.0: Closing input extension [ 159.265976][ T5970] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 159.272640][ T5970] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 159.277370][ T5970] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.277778][ T5969] usb 5-1: USB disconnect, device number 13 [ 159.282791][ T5970] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 159.293229][T10290] em28xx 9-1:0.0: Freeing device [ 159.294156][ T5970] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 159.300343][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.303971][ T5970] usb 6-1: Product: syz [ 159.305754][ T5970] usb 6-1: Manufacturer: syz [ 159.307683][ T5970] usb 6-1: SerialNumber: syz [ 159.317299][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 159.324802][ T5970] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input20 [ 159.337048][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 159.540734][ T5970] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 159.544192][ T5970] (id 0x00) [ 159.600798][ T5970] rc_core: IR keymap rc-imon-pad not found [ 159.603293][ T5970] Registered IR keymap rc-empty [ 159.605385][ T5970] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 159.613098][ T5970] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 159.754047][ T5970] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 159.759673][ T5970] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input21 [ 159.768920][ T5970] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:11> initialized [ 159.893104][T14344] fuse: Bad value for 'fd' [ 159.922235][T14344] syz.0.1660: attempt to access beyond end of device [ 159.922235][T14344] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 159.926675][T14344] gfs2: error -5 reading superblock [ 159.933138][T14345] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 159.938864][T14345] overlayfs: failed lookup in lower (newroot/389, name='bus', err=-40): overlapping layers [ 159.979620][T14357] netlink: 572 bytes leftover after parsing attributes in process `syz.0.1661'. [ 159.983630][ T5969] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 160.142369][ T5969] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 160.146738][ T5969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.152673][ T5969] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 160.156158][ T5969] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.159333][ T5969] usb 8-1: Product: syz [ 160.162966][ T5969] usb 8-1: Manufacturer: syz [ 160.164933][ T5969] usb 8-1: SerialNumber: syz [ 160.168930][ T5969] usb 8-1: config 0 descriptor?? [ 160.185952][T14371] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 160.222270][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1665'. [ 160.253110][T14377] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1667'. [ 160.275012][T14379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1666'. [ 160.327026][ T9] usb 6-1: USB disconnect, device number 11 [ 160.444405][T14420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.586890][ T5970] usb 8-1: USB disconnect, device number 11 [ 161.139678][T14463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=14463 comm=syz.3.1677 [ 161.432781][T14485] team0: Port device team_slave_0 removed [ 161.584744][T14582] kvm: kvm [14581]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 161.603855][T14582] kvm: kvm [14581]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 161.607188][T14582] kvm: kvm [14581]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 161.623317][T14582] kvm_intel: kvm [14581]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 161.761121][T14602] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 161.764069][T14602] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 161.767442][T14602] overlayfs: failed to get uuid (312/file0, err=-13); falling back to uuid=null. [ 162.084735][T14626] netlink: 'syz.4.1699': attribute type 11 has an invalid length. [ 162.110597][T14638] Failed to initialize the IGMP autojoin socket (err -2) [ 162.278841][T14672] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 162.281179][T14672] UDF-fs: Scanning with blocksize 2048 failed [ 162.284754][T14672] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 162.287133][T14672] UDF-fs: Scanning with blocksize 4096 failed [ 162.288696][T14664] netlink: 'syz.0.1708': attribute type 29 has an invalid length. [ 162.296699][T14674] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 162.297637][T14664] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 162.303777][T14664] netlink: 'syz.0.1708': attribute type 29 has an invalid length. [ 162.305452][T14674] cramfs: wrong magic [ 162.321869][T14683] netlink: 'syz.4.1712': attribute type 13 has an invalid length. [ 162.421383][T14683] netlink: 'syz.4.1712': attribute type 13 has an invalid length. [ 162.491058][T14704] __nla_validate_parse: 6 callbacks suppressed [ 162.491069][T14704] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1715'. [ 163.492867][ T40] kauditd_printk_skb: 206 callbacks suppressed [ 163.492882][ T40] audit: type=1400 audit(1762975439.751:1579): avc: denied { append } for pid=14821 comm="syz.1.1755" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.780496][ T40] audit: type=1400 audit(1762975440.031:1580): avc: denied { sqpoll } for pid=14863 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 163.981710][ T40] audit: type=1400 audit(1762975440.241:1581): avc: denied { create } for pid=14878 comm="syz.1.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.020439][ T40] audit: type=1400 audit(1762975440.271:1582): avc: denied { write } for pid=14881 comm="syz.1.1776" name="raw6" dev="proc" ino=4026532975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 164.994420][T14960] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.161717][ T40] audit: type=1400 audit(1762975441.421:1583): avc: denied { execute_no_trans } for pid=14973 comm="syz.4.1808" path="/352/file0" dev="tmpfs" ino=1912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.179895][ T40] audit: type=1400 audit(1762975441.431:1584): avc: denied { read write } for pid=7668 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.191138][ T40] audit: type=1400 audit(1762975441.431:1585): avc: denied { open } for pid=7668 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.200053][ T40] audit: type=1400 audit(1762975441.431:1586): avc: denied { ioctl } for pid=7668 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.211004][ T40] audit: type=1800 audit(1762975441.451:1587): pid=14976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1809" name="bus" dev="tmpfs" ino=1918 res=0 errno=0 [ 165.380738][ T40] audit: type=1400 audit(1762975441.631:1588): avc: denied { ioctl } for pid=14993 comm="syz.0.1816" path="mnt:[4026533157]" dev="nsfs" ino=4026533157 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.684466][T15014] kvm: emulating exchange as write [ 168.835093][T15282] ------------[ cut here ]------------ [ 168.837014][T15282] WARNING: CPU: 1 PID: 15282 at arch/x86/kvm/vmx/vmx.c:5264 handle_exception_nmi+0x14cf/0x1750 [ 168.840376][T15282] Modules linked in: [ 168.842528][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.4.1917 Not tainted syzkaller #0 PREEMPT(full) [ 168.847343][T15282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.851393][T15282] RIP: 0010:handle_exception_nmi+0x14cf/0x1750 [ 168.853548][T15282] Code: 20 fe ff 31 ff 89 c5 89 c6 e8 bd 34 69 00 85 ed 0f 85 bd fd ff ff e8 70 39 69 00 90 0f 0b 90 e9 af fd ff ff e8 62 39 69 00 90 <0f> 0b 90 e9 d0 f2 ff ff e8 54 39 69 00 31 f6 48 89 df e8 9a 15 ed [ 168.860095][T15282] RSP: 0018:ffffc90003d679e0 EFLAGS: 00010283 [ 168.862296][T15282] RAX: 0000000000010cf8 RBX: ffff888038e25280 RCX: ffffc900306f6000 [ 168.865010][T15282] RDX: 0000000000080000 RSI: ffffffff8153af6e RDI: 0000000000000001 [ 168.867719][T15282] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 168.870409][T15282] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000f6632eb [ 168.873195][T15282] R13: 0000000000000007 R14: 0000000080000300 R15: ffff888038e25358 [ 168.875927][T15282] FS: 00007f4956cf46c0(0000) GS:ffff8880d6b08000(0000) knlGS:0000000000000000 [ 168.878988][T15282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.881336][T15282] CR2: 000000000f6632eb CR3: 00000000267b0000 CR4: 0000000000352ef0 [ 168.884067][T15282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000300002a [ 168.886788][T15282] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 168.889505][T15282] Call Trace: [ 168.890739][T15282] [ 168.891795][T15282] ? __pfx_handle_exception_nmi+0x10/0x10 [ 168.893765][T15282] vmx_handle_exit+0x14bf/0x1c00 [ 168.895486][T15282] vcpu_run+0x33e1/0x54d0 [ 168.896999][T15282] ? __pfx_vcpu_run+0x10/0x10 [ 168.898676][T15282] ? rcu_is_watching+0x12/0xc0 [ 168.900398][T15282] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1920 [ 168.902547][T15282] kvm_arch_vcpu_ioctl_run+0xfd3/0x1920 [ 168.904481][T15282] kvm_vcpu_ioctl+0x5eb/0x1690 [ 168.906158][T15282] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.909327][T15282] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.911767][T15282] ? do_vfs_ioctl+0x128/0x14f0 [ 168.913492][T15282] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 168.915286][T15282] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 168.917691][T15282] ? hook_file_ioctl_common+0x145/0x410 [ 168.919728][T15282] ? selinux_file_ioctl+0x180/0x270 [ 168.922169][T15282] ? selinux_file_ioctl+0xb4/0x270 [ 168.924000][T15282] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.925889][T15282] __x64_sys_ioctl+0x18e/0x210 [ 168.927559][T15282] do_syscall_64+0xcd/0xfa0 [ 168.929150][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.931282][T15282] RIP: 0033:0x7f4955d8f6c9 [ 168.932856][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.939405][T15282] RSP: 002b:00007f4956cf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.942365][T15282] RAX: ffffffffffffffda RBX: 00007f4955fe5fa0 RCX: 00007f4955d8f6c9 [ 168.945087][T15282] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 168.947799][T15282] RBP: 00007f4955e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.950683][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.953429][T15282] R13: 00007f4955fe6038 R14: 00007f4955fe5fa0 R15: 00007fffbbed1c28 [ 168.956163][T15282] [ 168.957250][T15282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.959781][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.4.1917 Not tainted syzkaller #0 PREEMPT(full) [ 168.963015][T15282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.966677][T15282] Call Trace: [ 168.967848][T15282] [ 168.968902][T15282] dump_stack_lvl+0x3d/0x1f0 [ 168.970544][T15282] vpanic+0x640/0x6f0 [ 168.971962][T15282] ? handle_exception_nmi+0x14cf/0x1750 [ 168.973852][T15282] panic+0xca/0xd0 [ 168.975170][T15282] ? __pfx_panic+0x10/0x10 [ 168.976733][T15282] check_panic_on_warn+0xab/0xb0 [ 168.978464][T15282] __warn+0xf6/0x3c0 [ 168.979829][T15282] ? handle_exception_nmi+0x14cf/0x1750 [ 168.981806][T15282] report_bug+0x3c3/0x580 [ 168.983326][T15282] ? handle_exception_nmi+0x14cf/0x1750 [ 168.985233][T15282] handle_bug+0x184/0x210 [ 168.986748][T15282] exc_invalid_op+0x17/0x50 [ 168.988391][T15282] asm_exc_invalid_op+0x1a/0x20 [ 168.990090][T15282] RIP: 0010:handle_exception_nmi+0x14cf/0x1750 [ 168.992240][T15282] Code: 20 fe ff 31 ff 89 c5 89 c6 e8 bd 34 69 00 85 ed 0f 85 bd fd ff ff e8 70 39 69 00 90 0f 0b 90 e9 af fd ff ff e8 62 39 69 00 90 <0f> 0b 90 e9 d0 f2 ff ff e8 54 39 69 00 31 f6 48 89 df e8 9a 15 ed [ 168.998751][T15282] RSP: 0018:ffffc90003d679e0 EFLAGS: 00010283 [ 169.000861][T15282] RAX: 0000000000010cf8 RBX: ffff888038e25280 RCX: ffffc900306f6000 [ 169.003585][T15282] RDX: 0000000000080000 RSI: ffffffff8153af6e RDI: 0000000000000001 [ 169.006308][T15282] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 169.009008][T15282] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000f6632eb [ 169.011777][T15282] R13: 0000000000000007 R14: 0000000080000300 R15: ffff888038e25358 [ 169.014504][T15282] ? handle_exception_nmi+0x14ce/0x1750 [ 169.016418][T15282] ? __pfx_handle_exception_nmi+0x10/0x10 [ 169.018426][T15282] vmx_handle_exit+0x14bf/0x1c00 [ 169.020140][T15282] vcpu_run+0x33e1/0x54d0 [ 169.021710][T15282] ? __pfx_vcpu_run+0x10/0x10 [ 169.023355][T15282] ? rcu_is_watching+0x12/0xc0 [ 169.025024][T15282] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1920 [ 169.026994][T15282] kvm_arch_vcpu_ioctl_run+0xfd3/0x1920 [ 169.028901][T15282] kvm_vcpu_ioctl+0x5eb/0x1690 [ 169.030600][T15282] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 169.032388][T15282] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.034506][T15282] ? do_vfs_ioctl+0x128/0x14f0 [ 169.036167][T15282] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 169.037922][T15282] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 169.040269][T15282] ? hook_file_ioctl_common+0x145/0x410 [ 169.042221][T15282] ? selinux_file_ioctl+0x180/0x270 [ 169.044021][T15282] ? selinux_file_ioctl+0xb4/0x270 [ 169.045800][T15282] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 169.047593][T15282] __x64_sys_ioctl+0x18e/0x210 [ 169.049261][T15282] do_syscall_64+0xcd/0xfa0 [ 169.050901][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.052949][T15282] RIP: 0033:0x7f4955d8f6c9 [ 169.054525][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.061046][T15282] RSP: 002b:00007f4956cf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.063922][T15282] RAX: ffffffffffffffda RBX: 00007f4955fe5fa0 RCX: 00007f4955d8f6c9 [ 169.066665][T15282] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 169.069359][T15282] RBP: 00007f4955e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.072114][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.074831][T15282] R13: 00007f4955fe6038 R14: 00007f4955fe5fa0 R15: 00007fffbbed1c28 [ 169.077525][T15282] [ 169.079257][T15282] Kernel Offset: disabled [ 169.080733][T15282] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:24:05 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff910f6912 RDX=1ffff920007c4e8f RSI=0000000000000006 RDI=ffffc90003e27480 RBP=00007fafcd611f91 RSP=ffffc90003e273d0 R8 =ffffffff910f6916 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffc90003e27490 R13=ffffc90003e27440 R14=ffffc90003e27f48 R15=0000000000000001 RIP=ffffffff816c0927 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fafcb7f66c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6a08000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000300000a CR3=0000000029a4f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000300000a DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85296335 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc90003d67350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9add8740 R15=ffffffff852962d0 RIP=ffffffff8529635f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f4956cf46c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6b08000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000f6632eb CR3=00000000267b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000300002a DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a4426c0 RCX=ffffffff81b0d685 RDX=0000000000000006 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90003cff2c0 R8 =0000000000000005 R9 =0000000000000007 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88806a63b600 R15=ffffffff816dd9c0 RIP=ffffffff81bce3b8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200001000000 CR3=0000000029a4f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4955e13050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4955e1305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4955e13057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4955e1306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4955e130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4955e131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=1ffff92000786fc0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8da2b882 RDI=ffffffff8bf07040 RBP=ffffc90003c37f48 RSP=ffffc90003c37de8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000001 R12=ffffc90003c37e20 R13=0000000000000000 R14=0000000000000200 R15=0000000000000000 RIP=ffffffff81c4e8f4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffafee806c0 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39c784 CR3=000000002c607000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafe013050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafe01305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafe013057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafe01306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafe0130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafe0131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafe1b74a8 00007ffafe1b74a0 00007ffafe1b7498 00007ffafe1b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafed1d100 00007ffafe1b7460 00007ffafe1b7478 00007ffafe1b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffafe1b74b8 00007ffafe1b74b0 00007ffafe1b74a8 00007ffafe1b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000