last executing test programs: 8.757945017s ago: executing program 1 (id=1716): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x5d2, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6389d884059c0001fe8000000000000000000000000000bbff0200000000000000000000000000012f27000000000000c2"], 0x0) 8.75577724s ago: executing program 1 (id=1717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004480)=@newlink={0x70, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xc, 0x1, @dev}, @IFLA_BROADCAST={0xa, 0x2, @link_local}]}, 0x70}}, 0x0) 8.701160856s ago: executing program 1 (id=1718): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="314052fe", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00ffdb6a86f37870670000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYRESDEC=r0], 0x5c}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000400)=ANY=[@ANYBLOB="08031100000000000000000000000000000000000083b70b53e317131837e499fd17aece090f8c14979c34a6cf7750fbfea1092bffecc0aeebc84dea37d03e2c1bc5f703a36c9806ff2c7edbf2a5a4ef75e3df0142c2c510384b8e4a1773e42fe803c46a259551ea00f06565b617b05980651514e78a175090cd49905423d391e3d70d5d9d911a6bd5cd56c3cabefffee3052199964250f77d801bd3ce3e4d3d1c5de14c853fdbe6e5ec99fc4ef8bf4aee4abed6ca8a0479d55906e22dfb713a0a3706540d85c9046a661a1ef07317b342f8958054a308f05a70207ce458cffa2bf400"/238], 0x22) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00002) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000a80)="3dfeb162f3ccc51b8ec0ba896a6d39ab262e540f7abfdaee0f52b8a3554c9122ce1f6ed327282ab7a6416a7a365d373e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r7, 0x1, 0x1e, 0x0, &(0x7f0000000040)=0x2e) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="fa", 0x1}], 0x1}, 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0x1, 0x3}}, 0x2e) accept4$inet(r4, 0x0, &(0x7f0000000080), 0x800) r10 = socket$inet6(0xa, 0x80000, 0x1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3a) sendmmsg$inet6(r10, &(0x7f0000001500)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x2, 0x0) 7.991670944s ago: executing program 0 (id=1724): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000005c0)={0x4, 0x0, '\x00', {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/25, 0x19}, 0xfffffffa}], 0x1, 0x40002000, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0180c200007800000000000000004404c60000004e2000109078020000000000000000000000000000000000f7ff0000cd88d9fa48900a0a6c3656a61235a0937e564849e8e14c693087074e7508b5be5b4911eb"], 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000dc2b0900000800450000140000000000119078000000000000000000000000000c907801000000"], 0x0) setpriority(0x2, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 6.750230237s ago: executing program 1 (id=1730): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="28f8a81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_int(r1, 0x1, 0x47, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x68040200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000004"], 0x68) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 6.686357373s ago: executing program 0 (id=1731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}, @RTA_MARK={0x8}]}, 0x2c}}, 0x0) 6.631720635s ago: executing program 0 (id=1732): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f000001aa80)={{r1}, "f11f1befc77a9f1024dc1e99dd8a95893b430db5ef0b53b2343d0009f1f23daf4ec06b41f14aec3ecc1195bbcf0aaeee76172e4a375af7cd483c491e3449b11d237efffbdc727ce5e670f8a5d1649fd05dcd608fe8606477d7b0fc479d5380c654964c23742f71e2081534cb10c7f33049ca19984860ad13141fbd903d6fc4350275c8c11d7d2e8d1827dfb9444bb634863eb30fe51e1a3d8ed1daa947b57d310838275782d11fbe7ef074742e36e55f7a358fef93976b2a8337eb20b19628632fa8ea50de62bf632b44d138efa68ff3fa19a0226615ca0f94714fc8cd951899f9ba09648d776ea42cf9f44b58bc1121417bc7bbce6be7132e312db43d55abf26998b8154f0cbb69e39126c40fc2b7be1439cc2e09a6ff71a475612d55c290ee0fa4f9ea9529f332ff9387578345acff2d1b06064c9665e016eb5603bc6f6c1f7ebd1c6bcf8e21d31674b13fcdc21fa0b173dc3b823736893ee5fb10195b84aac06170c9cf642eb5ea3a2049671126035a43e3bd78c6fd989429dbac0352c969e7c3e379d0e171dced0103684668b6c2df31b80e2d7295f0321c75cdd8f8a13b3f5f73ec465d51ce4ccee41ec493a711f53ada199c9f6ecf7f99968515a95f0b336c65e2a40bf239504797a6a6fcdc57008b9861ad8fb22e71abd2fc3cd328d8c0776ec217ff60406a363b5bf41c05597eff56470d9b19b9fc213bac3d3f1d94eaa9e6bd5ae76a6ec3a573d85caf0074c24c2d75f83f5ba882d8a7ca66ccffbc58698bd92c3686adb3876804024e58ffe89a34eeb6dd7bfe25b7ab1354b3a6fd04ef2b4522c066e1762e313cd746b7166a65277653d76eb0ca09199aa97f9711bfcc62a3b522475a655d7fd89aaee4c0eece175fd5221662f3eb44123ca5c074c4c684d4076405c9aa29e4aab6b2403f81150d1ad3c8afb919371f37b1f885d941de2d9580a9587b602bc2473177c8fe099fef5c4caad4297f49168172445afca8415d4f480e8276e5b364a64c08daa9d64c04ad43511f06580dd8d5156a31dfcdc94db6dfdc1cca5651641748f307ae16748654e0323cef1145df8310724d0d91a657d8192d5a97aa71966ae2229e97c979997954c611eda5afc6256e84122f1dac9c0bd8b8a286ec54119771f6bffad6f98cf1eef6451b1e034f359a1ae852baf1fec1652581a8f7190304d066d4e779cbaafab009d49412a3e36f92833920ae227a76830f415242f0ce285c603eac4a8cfa6c4ab593ecd0c78ad49b2b9cf464e7b8ad89c85516f57a43c757e8a5ee90cacdd16b6c451bb5002da11a23d2bffd9d81dda8f59bc52eca76edf9d198364c1d1aafccb63397615c3bdba2b52289607969bec07a60bf639f937e939847b43f8bfed51545a7169fc05f68f91672c16cb9c5d58fb52e0d085c761e3dcb2d111085d77b2974cc4ee7cb1e3d0fe92e470e8961cdb1320089bef664a317b88443476bbff37887fcda3140f6ab13422ed1042f5c3e8546ff61353d556c214adb13bbb60e4a9a8ae61432bf514e6a99ce807245bba4f14f36b0525a5e44529f73665110380c5d7fde7ec933c64143edfabe915f8905e11b77983a867b3f1e92f8fb6ddc9872b6deb7c32be9bb34f55c1d9715d66526a2d062477338cb8c23f42a858e99d66f8a05c67acea08e977afde6a9ddbb10ef91d14ebb49e73d05e8d1393c242513d5b417a565cf4765206c91e25802afc0cfd1141199f4e035d6898776105777d93fe0d7dc53aba7b1cf24540d0c7bc360063a1a0f5140846b161a3956f4d77ad4999d3e6f474428942817c2a46ef03d1b582581f02d7aa91350b5d8e837e7fde5ad78865c7fd2d577d6e871b42c84a5bb0702fafde18e95e643b4edeb041e09dc9f8fa54d586f0d136bd75329a8dc086ced26b7553d6596d799417248e4f5f9999cd62e3e48f531dd6fb69fad050da8e95239b71688ef5f9da963e185c4372ad8ddcbf3091d4701abe9c331c115a70ae7702a5865a4183c812c2ab557f390a2c7531de7ec804ac36e66a70b46e4768c5a3c940cadbe94d1a55efd4ee55f7587b5c1f96666615f2c56cf8821f2e85f9e9b96e4f56ae7569d6fc180aa3e2de4fd1c0a856400e2607eb4d001267bdaf71024620736edd2ceee6f09b8c9429dd64894cc738036c5526e26853aecf8539258577d8e38039d11bb158ef9b0f9f18b0aece70f58185289b585b505d76148b150bca628d946bf1f65530a6f3026f3b8837bd04da9119da2eefddf5927af57bde4de6b54bdb256b4e62c51360564392eb3849562f3063c0884d4e7836fb9566d56c64bced6b7fc3e5ad5f4273be3f571cc9c61d9369147c8e50bb1eb91b38af393685e24ca553e5b9d6ecc349e447dccb55482fb116c97646a8aebc5f935c9394b46b8a354973edba907c0051a7298f5af98b7bb738a76f15b12e94cf80d76befe8c97dc71fea1e7db6c7462801c60c4f71151759bb995d111d2651e9d4254034924bfdbe7ac741a2c0bd8c42bab0974cd7faf67ceb0bb725d85e9079e731f59e638269dc13b80ac8f730e5773281d78a52d0c94339ed3e476db811fdc08fca14cd9befb20f10d32be8b0e3d7ce8b9c08b909d7d052df167d134785f7c3ca1b61989b5eb5dfa51210d051819af1b87d1927d7ba9c305f67e490e4314db735477490ca917522080e61bd489bf6ca7a05453043fd22a5689d2b630bd66db67679a2cd49e5cd61820ddaf29bf9fd695d193cf33f8047223c44c6e08451f5e47218638a37b3a504ed22e3b03cb5d0ddd2ac2d2e71ce6e19c8d70b918bd60b3207f41de01d26fd1fb79d68f0476cad1bc45a097dc588ae58e46a292c42fa62496c36aac683caadb40d2d1523dfd1a7691d2f6ca9d41a7c868f7378992b2e30b102296ce0914bb158c458d18bb8338ecfde8a70fa7318c04239bad025ffb2f4a5c88bb143c1202fe1bf57154385b2c5d09edf9be575f23fc02518be78e8c35b857dfc9e4ed97d36bd7fbdfd6dbed41a11a13ea4be5fd3522224cbf47933f051203addf290f0bb4ad6016b193d708f30dcdff5e63311b0130a4a9366bd1da6121b459f010fa2c1818ea76ee25c19fee8ccf20eb15fc21486d73bb0edb8f83e64e2d53b5713b87b6b6c8d8ab78bf3f4b839875d50ace056e408d57560223873b17644b81891db6f39ddedbe845ae40f843a8914cdd40da080119c45fe240ef087e5bafd909f60123df23eae4105ef9ceeba16279bf2e644e1672a43c5b3d03f64f3fca1e3d8340953f0743a03e4998cd56a305d12e86c487458b7ea0a001077b4662bce734a684a28ba50a761977c17b4caa207fcd66b2aebc94ec0644b957f96eb20d371d7d3346cf701d7e97bf53b8e0c1cbad4993556684264a5865c0e28bb5c173fa227183bf71a2cedc3256ebb22e2f7c530d36a33e5380448d8c15f7e4fc096f4c38212d3cf33dd767c17a0e5649db75e480ae773246095148239d201c2a2d863975cbe87f42bf95c813f3a93202d6fee632ede54abbad4721b9bcd31abed80fbfe1b3e5588fc173732b8ce3f3e2b7b99f85c8efe14a26b0911803141c60ab42bd207c9cb12121f67488a1e0c59e4fef7f0c01fa7346a46f59ec567e57150c279a1c3a68b49de9a1e040269b11d47a029d065a6a2232cc77fdb9fcaa4bedd5e4e3d301f69682bf620da417ccd9388b0353c38c316931d1489d3b481de5120f14cce809108dee8f653e4441d3cd8a41a8d8d55f24fbaec6a8a6104aa35fc803579ab75d4f6af3c9b46314e9f9ce899e6883a253fd87e20d4fd13b2e85350eb6eb918f2038a25948f298c5e84255eee9032da39744293e45c9bff64eafc7ad29a459d11881e30a41e9282310dfc1363d17d11f72000aa28f7fdd5c52f9bb36afb628f53ea192aad25fdbf9c1b0e1e7be3673f0fcb515fd38f7de4506ee04a83ba8ca99b2e108ccc115d653b8f1a0eb809657ba42c40a25dc30d2030b882ff3f20560ba93b8b03c1e4fe8182ba102f08ae1326822a9a941f43fa403c862b2751ffb8cbbbd4e07000db5bdabf9f5edf37e22c223ae09f8b0471e444e941f4a35e7650d49c4af108d1bb558fc341608877489d3fb4d57270092cbc17c4738230d555fe55b15f56303f266e6f0a817f902ced586207ce494f6716a54641c653f3145859d2926f6882ded836949fda9d1e02f36b8f742cef537464f36511de1b107fb2120aad7de149a5cc3607e4a06908979d7eded277f050a549a4ee8059c9483aa373a42a23172ac716bb133480527ebb202c35e997cf513ef5fecf0f0a6adea570a6f951d38a952d5a0b858545c38e01d1f297810e427121e09387473d51bce72ba0c22a3c207cabba543c5ac3e8b05f1d8384e9fde735e833f09a5ec4560daff49c2e64e7b386ab5686b31e6bb446a2ebe8055ab9e982eb19fcdc0bf165599363c423fc0602b19a7bba7e62e59bd9a2466710e4338f6b5fd74a2af7b8c2c15ae0fa60e6401f410a1720ce818590c9e10f2653fc53827307bef20e29af305cfe7b2a88717136753587f0f6b31f59dcb359949295a90285a758bbeb266e2bce1f5fb1fc208cfbc849d84937725ea6cf2b0d4f680ced38cda4203d3aa21a9cf93e0138f4a3c9273cfbeb7af37e1d42632eb2dd98e4029147ffc42a6e0b97d14ddd64392e4963cd63d058725d433469496ed84ae06da4677ee1b949607081b0a628477f142f9f4ee69fb462d4953350b59e643d97f23ad649649980195bf68753abb1acd76ef328946bd5e39cb55ce2d1e11723abf9b6478716193ae711feb648012f8573336b36a5a4487f286b26002d6308ef78504cb85074979bfb36f5e4caf9f842105c7f4741405e68dcd507d7db7f6e177c8b80d43e9504676d44acbce2c999cad228dcd3935e5389b1ad788e784f1aad657910fc3ae729dcea38b7c2a843042e20ed96b1d4310ce87f3c86f69306bc8f76c1930d04f505e01dbb049f8c152962f0c7531d67f4129f37cc21bac9e6967330b2fd188e53a131ccb9c21056cb888570084c9560203668ba48a8b5e43148f3bd5b28c731d8c3bd942b6e54e90b80e2e85e4eee1d3b17c12e00e99a48339726519c1fefe43044a2f32e6e8b8b69120867cb0965ad501fbcc499be654283d7f7866f2e54678a5aa4f297102b98528800857f844b64d111aec02ce58cb82a03c7168175ec589647cfc665cce2e74913cb19a470b9540ac8d3f6cf1fa633e87d7d2c1e33a52f8540e8b7a13b0587c01b9c7c643f078f952bb775c908f35fdeb1af158c126fcead5b3f95a302d211dc034e996b7bc286a6a1983fdfd48164eeba2512646cf201bb8b27d0280f584183f11d75b6e0e4171c15c471a34bde708b4b8d5f5449d62516f620c8e6fc7ea945011ef4a1e9625e164497f4ec13aec3a0501b2b190ac24cc8dc118f287466d533f335144a46e1110a220b3fe2d23d8fe64ae8efd5871c924d68526348add2d8596c8bca2ab35cebcfbb48211070c1ba4e36baec6a5c5165718a8db86c7afc42a6cd0630fa2c9224bffcb7f83700599a709d787e29e6f33d2e1a821f51dd8ba50fa927e6a5c06c8c0cf91c64f9b672714b86bbbd547aca1ded9ae22fed567341f58554dc2f36c8110568dd9e14841cf69ef3b79622abc61da8c002d9648f40f48f6434e280c2c814072c839abba320452abb7baed613cc372e429ccf25b4af8b5d30ca7181abbe426014680ce80fdac7bf9b7da8f69b1f891b7373091e503ea81a562db63c37ed3478a0a7ce416564bdc3e2768815ae244977e32"}) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$IOCTL_STOP_ACCEL_DEV(r7, 0x40096101, &(0x7f0000001380)={{&(0x7f0000001300)={'Accelerator\x00', {&(0x7f00000011c0)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {"a57f329be7965ac50810414227c68810400bde1fcae053e2505c786e0ffa8571ed3078c71c73914612fcadc28a992159a9eba840c4fd2965810ff3cf062f085f"}, {&(0x7f0000001100)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0x8}}}}}, {&(0x7f0000001280)={'Accelerator1\x00'}}}}, 0x5}) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000700000000000000000008000b4000000001050001000700000011000300686100023a69702c6d61726b0000000005000400020000000900020073797a310000"], 0x60}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x76}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a638", 0x5c}], 0x2}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.256339903s ago: executing program 2 (id=1733): syz_emit_ethernet(0xfe53, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aaace14f931d020c009078000b0300450000000000000000000000e000"], 0x0) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffd, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xb}, {0xffe0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000075c000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60083ff200540600fe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="02000000907800291d12eb3ffa01d3e709af34f2e0ac744f24ca1d12129738cd02013be65d02d8ee2ece912beb88a968917d6e0774fcbfdb1bc7617f22447db1f74be3098b7a5b6360fe4d266371c94f35a98897b2e45aabc9e483886bc74ceef367d8d35b690000ce33d12bc2dff6a1c4d319040000002a0ea991f628608c47e78547685fee443fa180f23e7375c9c2173c81cedb96df0f44102e15bd84e131dfdce66bc7241b1a8bb2b9b1018000000000000040e494d7110c8c431400000000"], 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) lseek(r6, 0x9, 0x0) 5.270616999s ago: executing program 2 (id=1734): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) shutdown(r0, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001140)=0x40) 5.168682658s ago: executing program 2 (id=1735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x5, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304, 0x36}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) 5.101688877s ago: executing program 2 (id=1737): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x2, 0x0, {0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}}, 0x3a) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x36, 0x20000000, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10) 4.680422299s ago: executing program 1 (id=1738): r0 = socket(0x2a, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000680)=ANY=[@ANYBLOB], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f00000003c0)='cifs.idmap\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x8004745a, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x2, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) sendfile(r2, r6, 0x0, 0x2023898) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0xf8, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x74, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6db}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040011}, 0x40) close_range(r5, r7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$afs(&(0x7f0000000300)=ANY=[@ANYBLOB="2d73797ad752a5beb6eab257bc0c210fbbb659313a73797a312e726561666f6e397900807506257ec89a60054fceafbcda9269020932f18743fb998175da866ffe81141586efa5803838eb28ab371f153e5367d9345da16e11c63b9fc3193a3d2a8a31399670c669a77989df9c9e4ea655c36f76b9789b1941360bd106f184"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 4.38162926s ago: executing program 0 (id=1739): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="314052fe", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00ffdb6a86f37870670000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYRESDEC=r0], 0x5c}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000400)=ANY=[@ANYBLOB="08031100000000000000000000000000000000000083b70b53e317131837e499fd17aece090f8c14979c34a6cf7750fbfea1092bffecc0aeebc84dea37d03e2c1bc5f703a36c9806ff2c7edbf2a5a4ef75e3df0142c2c510384b8e4a1773e42fe803c46a259551ea00f06565b617b05980651514e78a175090cd49905423d391e3d70d5d9d911a6bd5cd56c3cabefffee3052199964250f77d801bd3ce3e4d3d1c5de14c853fdbe6e5ec99fc4ef8bf4aee4abed6ca8a0479d55906e22dfb713a0a3706540d85c9046a661a1ef07317b342f8958054a308f05a70207ce458cffa2bf400"/238], 0x22) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00002) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000a80)="3dfeb162f3ccc51b8ec0ba896a6d39ab262e540f7abfdaee0f52b8a3554c9122ce1f6ed327282ab7a6416a7a365d373e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r7, 0x1, 0x1e, 0x0, &(0x7f0000000040)=0x2e) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="fa", 0x1}], 0x1}, 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0x1, 0x3}}, 0x2e) accept4$inet(r4, 0x0, &(0x7f0000000080), 0x800) r10 = socket$inet6(0xa, 0x80000, 0x1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3a) sendmmsg$inet6(r10, &(0x7f0000001500)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x2, 0x0) 3.741536317s ago: executing program 2 (id=1744): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) shutdown(r0, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001140)=0x40) 3.582390357s ago: executing program 2 (id=1745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000280)=r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 2.635759902s ago: executing program 3 (id=1746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000440)=0xc) r6 = syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000180)={0x7ff}, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x3, 0x1000000000000, 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000480)={0x4, ""/4}) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000280)) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000040)) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000073797a30000000000900010073797a30000000002c0003800800014000000000"], 0x80}}, 0x0) 2.292309484s ago: executing program 3 (id=1747): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x0, 0xc9, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x1}]}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x39}, 0x18) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x41c21c49b1a76e92}) socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000000ead}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000630000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000200)='./file0\x00', &(0x7f0000004280)='gfs2\x00', 0x0, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000540)=0x1000000, 0x4) 2.260736446s ago: executing program 0 (id=1748): socket(0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r0 = getpid() open(&(0x7f0000000040)='./file0\x00', 0x0, 0x194) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f00000000c0)) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000000400)=""/185, 0xb9}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x200052, 0x0) r5 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r5, 0x7, &(0x7f0000027000)={0x1}) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000340)={0x3, {{0x2, 0x4e24, @multicast1}}}, 0x88) sched_setscheduler(r3, 0x6, &(0x7f0000000140)=0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x40000000, &(0x7f0000000180)={0x0, 0x989680}) process_vm_readv(r0, &(0x7f0000000980)=[{0x0}, {0x0}], 0x2, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) epoll_create1(0x0) write$P9_RREADLINK(r7, &(0x7f0000000140), 0x1c) sched_setaffinity(0x0, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000240), 0x7fff) 996.001584ms ago: executing program 0 (id=1749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aecf, &(0x7f0000002640)) 905.656569ms ago: executing program 3 (id=1750): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 866.792521ms ago: executing program 3 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}, @RTA_MARK={0x8}]}, 0x2c}}, 0x0) 761.988667ms ago: executing program 3 (id=1752): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="95010000ff00000085a80a"]) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="decc72f890adc12dff1d7de790e344d9ceb9738a6b24a6c63654ff332fc2e45f73e1ed08e5cadef18de5b6bc713c1d6a649b3fcdc23f154928ea8538dda7d9f7220cf897f0a32029a6e4738d1b5903eb7837a0da209d986c103c6637a509be3f0e7275f8c53ab9a2c9b82c012a257b77cef2b80fccd2c37c0cb894e10254944daf620a33bd9b8a8fbe7d5600d320946fb1bd91387e3aeac5dd1408f463c95c55f34b160bc32c71f89f2c8b72880f6cdc090c69af077ee591ea4101fb5c", @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000005) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200242c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa84"], 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r10}, 0x10) setsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) 229.034511ms ago: executing program 1 (id=1753): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x2, 0x0, {0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}}, 0x3a) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x36, 0x20000000, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10) 0s ago: executing program 3 (id=1754): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x0, 0x230880) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000600)={0x0, 0x0, '\x00', {0x0, @reserved}}) r4 = dup(r2) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x220000, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRES8], 0xfffffe01) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0x10) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="04060310c9001ca8345e1e83b7b3362f00b45782b0a13ac6e52c64d14068b978ef96f7460f8fa2e9aa194145d51f450b93f390187e1280dc6fbd7e0dc855a9a9523e21e9df808535ce9409365107c9d593328f20625f9d46c84199cc422345bafc5590b6035597a8adfaffffffffffffff35730b98d08333f99769ec992df3dd12"], 0x6) openat$iommufd(0xffffffffffffff9c, 0x0, 0x208500, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x9, 0x0, 0x2, 0x414d6714bf78e135}, 0x9c) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r11}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r8, 0x6}, &(0x7f00000000c0)=0x8) connect$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x7c8) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=', @ANYRESDEC=r13]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') kernel console output (not intermixed with test programs): ce 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 144.764294][ T56] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 144.768111][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.773928][ T7195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.233698][ T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input17 [ 145.390399][ T58] usb 6-1: USB disconnect, device number 8 [ 145.390466][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.396513][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 145.400310][ T58] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 145.704210][ T7217] ip6gretap0 speed is unknown, defaulting to 1000 [ 145.704384][ T7217] ip6gretap0 speed is unknown, defaulting to 1000 [ 145.708177][ T7217] ip6gretap0 speed is unknown, defaulting to 1000 [ 145.725045][ T7217] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.739540][ T7217] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 145.788922][ T7217] ip6gretap0 speed is unknown, defaulting to 1000 [ 145.795553][ T7217] ip6gretap0 speed is unknown, defaulting to 1000 [ 145.799677][ T7217] ip6gretap0 speed is unknown, defaulting to 1000 [ 145.803458][ T7217] ip6gretap0 speed is unknown, defaulting to 1000 [ 145.987934][ T40] audit: type=1326 audit(1722442489.666:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.1.587" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x0 [ 146.464203][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.663646][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.668769][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.673083][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.676736][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.690475][ T7224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.698695][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.715161][ T40] audit: type=1400 audit(1722442490.396:382): avc: denied { watch watch_reads } for pid=7219 comm="syz.1.587" path="/proc/378" dev="proc" ino=14076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 146.795781][ T7228] netlink: 830 bytes leftover after parsing attributes in process `syz.3.589'. [ 147.101158][ T10] usb 5-1: USB disconnect, device number 6 [ 147.150774][ T40] audit: type=1400 audit(1722442490.816:383): avc: denied { create } for pid=7230 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.403690][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 147.550611][ T40] audit: type=1800 audit(1722442491.226:384): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.593" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 148.194130][ T990] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 148.398862][ T990] usb 8-1: Using ep0 maxpacket: 8 [ 148.409699][ T990] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 148.413343][ T990] usb 8-1: config 179 has no interface number 0 [ 148.425441][ T990] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 148.431102][ T990] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 148.444756][ T990] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.457255][ T990] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 148.463064][ T990] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 148.467174][ T990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.489985][ T7248] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.683474][ T7257] siw: device registration error -23 [ 148.727371][ T990] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input18 [ 148.759611][ T40] audit: type=1400 audit(1722442492.436:385): avc: denied { map } for pid=7258 comm="syz.1.599" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 148.840306][ T40] audit: type=1400 audit(1722442492.516:386): avc: denied { execmod } for pid=7258 comm="syz.1.599" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 148.850677][ T40] audit: type=1400 audit(1722442492.516:387): avc: denied { execute } for pid=7258 comm="syz.1.599" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 148.940532][ T10] usb 8-1: USB disconnect, device number 6 [ 148.941686][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 148.947959][ T10] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 149.352788][ T7265] netlink: 'syz.2.600': attribute type 4 has an invalid length. [ 149.383949][ T7265] netlink: 'syz.2.600': attribute type 4 has an invalid length. [ 149.542456][ T7269] capability: warning: `syz.3.601' uses deprecated v2 capabilities in a way that may be insecure [ 149.576674][ T7268] netpci0: tun_chr_ioctl cmd 1074025677 [ 149.579290][ T7268] netpci0: linktype set to 804 [ 149.624103][ T40] audit: type=1400 audit(1722442493.296:388): avc: denied { write } for pid=7266 comm="syz.3.601" name="usbmon7" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.733931][ T40] audit: type=1804 audit(1722442493.406:389): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.603" name="/newroot/163/bus/bus" dev="overlay" ino=895 res=1 errno=0 [ 149.740232][ T7271] Invalid ELF header len 18 [ 149.752446][ T40] audit: type=1400 audit(1722442493.416:390): avc: denied { module_load } for pid=7270 comm="syz.0.603" path="/163/bus/bus" dev="overlay" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 149.886933][ T7277] dccp_close: ABORT with 62 bytes unread [ 151.094218][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 151.233879][ T7288] netlink: 830 bytes leftover after parsing attributes in process `syz.3.609'. [ 151.290875][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.302096][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 151.314210][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.322532][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.360895][ T7282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.381468][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.839274][ T10] usb 6-1: USB disconnect, device number 9 [ 152.386062][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 152.564072][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 152.574496][ T56] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.578588][ T56] usb 8-1: config 179 has no interface number 0 [ 152.581342][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.587525][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.593946][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.599522][ T56] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.610021][ T56] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.614418][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.623227][ T7290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.874262][ T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input19 [ 153.082249][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.085739][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 153.097422][ T56] usb 8-1: USB disconnect, device number 7 [ 153.105446][ T56] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 153.799154][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 153.799171][ T40] audit: type=1804 audit(1722442497.476:400): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.614" name="/newroot/148/bus/bus" dev="overlay" ino=822 res=1 errno=0 [ 153.807797][ T7302] Invalid ELF header len 18 [ 153.832365][ T7300] syzkaller0: entered promiscuous mode [ 153.841367][ T7300] syzkaller0: entered allmulticast mode [ 153.921997][ T40] audit: type=1400 audit(1722442497.596:401): avc: denied { watch watch_reads } for pid=7303 comm="syz.1.615" path="/149/file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.837669][ T7313] overlayfs: failed to resolve '/0000000 00000000000000000000': -2 [ 155.815125][ T7316] netlink: 'syz.1.619': attribute type 6 has an invalid length. [ 156.014729][ T40] audit: type=1804 audit(1722442499.696:402): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.624" name="/newroot/153/bus/bus" dev="overlay" ino=859 res=1 errno=0 [ 156.023054][ T7332] Invalid ELF header len 18 [ 156.082000][ T7336] batadv_slave_1: entered promiscuous mode [ 156.316903][ T40] audit: type=1400 audit(1722442499.996:403): avc: denied { setopt } for pid=7347 comm="syz.3.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.214866][ T7333] batadv_slave_1: left promiscuous mode [ 157.338971][ T40] audit: type=1400 audit(1722442501.016:404): avc: denied { create } for pid=7373 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 157.387777][ T7370] syzkaller0: entered promiscuous mode [ 157.390232][ T7370] syzkaller0: entered allmulticast mode [ 157.668963][ T40] audit: type=1400 audit(1722442501.346:405): avc: denied { create } for pid=7381 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.675713][ T7382] syz.3.640[7382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.687151][ T7382] syz.3.640[7382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.892623][ T40] audit: type=1400 audit(1722442503.566:406): avc: denied { create } for pid=7409 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 160.298073][ T7419] syz.0.652[7419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.298721][ T7419] syz.0.652[7419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.501099][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.654'. [ 161.853299][ T7441] syzkaller0: entered promiscuous mode [ 161.855978][ T7441] syzkaller0: entered allmulticast mode [ 163.124065][ T58] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 163.306748][ T58] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 163.311558][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.316429][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.323656][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 163.331177][ T58] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 163.335459][ T58] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 163.338770][ T58] usb 6-1: Manufacturer: syz [ 163.343778][ T58] usb 6-1: config 0 descriptor?? [ 163.618152][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.663'. [ 163.805279][ T58] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 163.810868][ T58] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 163.833199][ T58] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 164.147144][ T5368] usb 6-1: USB disconnect, device number 10 [ 164.588103][ T40] audit: type=1400 audit(1722442508.246:407): avc: denied { create } for pid=7478 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.733032][ T7486] batadv_slave_1: entered promiscuous mode [ 164.892654][ T7494] nfs: Bad value for 'source' [ 165.068918][ T7482] kvm: emulating exchange as write [ 165.483579][ T7485] batadv_slave_1: left promiscuous mode [ 165.547101][ T7505] netlink: 'syz.2.681': attribute type 4 has an invalid length. [ 165.869746][ T7518] nfs: Bad value for 'source' [ 166.268596][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 166.410872][ T7542] nfs: Bad value for 'source' [ 166.483576][ T7549] xt_time: unknown flags 0x4 [ 166.530636][ T7551] batadv_slave_1: entered promiscuous mode [ 166.814112][ T5368] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.014156][ T5368] usb 5-1: Using ep0 maxpacket: 8 [ 167.028007][ T5368] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.032979][ T5368] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.044133][ T5368] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.051273][ T5368] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.060068][ T5368] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.068314][ T5368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.299390][ T5368] usb 5-1: usb_control_msg returned -32 [ 167.301562][ T5368] usbtmc 5-1:16.0: can't read capabilities [ 167.659970][ T40] audit: type=1400 audit(1722442511.336:408): avc: denied { write } for pid=7552 comm="syz.0.701" name="usbtmc0" dev="devtmpfs" ino=2665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.711267][ T7550] batadv_slave_1: left promiscuous mode [ 167.874103][ T10] usb 5-1: USB disconnect, device number 7 [ 168.172887][ T7578] nfs: Bad value for 'source' [ 168.982087][ T7601] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 169.127292][ T7602] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 169.376753][ T7605] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 169.484600][ T7609] xt_time: unknown flags 0x4 [ 170.248228][ T40] audit: type=1326 audit(1722442513.906:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.723" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35c9773b9 code=0x0 [ 170.548466][ T7631] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 170.564165][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 170.874850][ T7645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.953385][ T40] audit: type=1400 audit(1722442514.626:410): avc: denied { mount } for pid=7648 comm="syz.3.729" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 171.439056][ T40] audit: type=1400 audit(1722442515.126:411): avc: denied { ioctl } for pid=7659 comm="syz.2.732" path="socket:[18246]" dev="sockfs" ino=18246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.500927][ T40] audit: type=1400 audit(1722442515.176:412): avc: denied { setopt } for pid=7659 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.561367][ T40] audit: type=1400 audit(1722442515.236:413): avc: denied { append } for pid=7659 comm="syz.2.732" name="ubi_ctrl" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.665286][ T7660] netlink: 68 bytes leftover after parsing attributes in process `syz.2.732'. [ 171.787939][ T7667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.734'. [ 171.832260][ T40] audit: type=1400 audit(1722442515.506:414): avc: denied { unmount } for pid=5323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 172.062386][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.737'. [ 172.083360][ T40] audit: type=1400 audit(1722442515.756:415): avc: denied { map } for pid=7674 comm="syz.3.737" path="socket:[21518]" dev="sockfs" ino=21518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 172.124619][ T40] audit: type=1400 audit(1722442515.756:416): avc: denied { accept } for pid=7674 comm="syz.3.737" path="socket:[21518]" dev="sockfs" ino=21518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 172.387223][ T7678] batadv_slave_1: entered promiscuous mode [ 172.554163][ T40] audit: type=1400 audit(1722442516.226:417): avc: denied { append } for pid=7674 comm="syz.3.737" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.149464][ T7699] netlink: 68 bytes leftover after parsing attributes in process `syz.2.744'. [ 173.314930][ T7705] netlink: 'syz.2.746': attribute type 3 has an invalid length. [ 173.318665][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 173.322109][ T7705] netlink: 'syz.2.746': attribute type 3 has an invalid length. [ 173.325952][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 173.434295][ T7710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.486012][ T7677] batadv_slave_1: left promiscuous mode [ 173.863891][ T7724] netlink: 68 bytes leftover after parsing attributes in process `syz.1.754'. [ 173.873096][ T7728] binder: BINDER_SET_CONTEXT_MGR already set [ 173.876284][ T7728] binder: 7726:7728 ioctl 4018620d 20000040 returned -16 [ 173.900055][ T7728] syz.3.755 (7728): drop_caches: 2 [ 174.201465][ T7747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.558626][ T40] audit: type=1326 audit(1722442518.236:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.763" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x0 [ 174.740760][ T7762] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 174.744907][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.763'. [ 175.221875][ T7771] batadv_slave_1: entered promiscuous mode [ 175.242887][ T7773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.345859][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'. [ 175.908440][ T7770] batadv_slave_1: left promiscuous mode [ 176.182392][ T7796] netlink: 'syz.2.778': attribute type 3 has an invalid length. [ 176.186183][ T7796] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 176.190033][ T7796] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.778'. [ 176.223459][ T40] audit: type=1400 audit(1722442519.896:419): avc: denied { watch } for pid=7795 comm="syz.2.778" path="/129" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.234117][ T40] audit: type=1400 audit(1722442519.896:420): avc: denied { watch_sb } for pid=7795 comm="syz.2.778" path="/129" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 176.297749][ T7799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.530364][ T40] audit: type=1326 audit(1722442520.206:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.2.781" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x0 [ 176.655891][ T40] audit: type=1326 audit(1722442520.336:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.0.784" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa212f773b9 code=0x0 [ 176.698162][ T7812] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 176.698186][ T7812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 176.829866][ T7826] netlink: 'syz.3.788': attribute type 3 has an invalid length. [ 176.833189][ T7826] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 176.837066][ T7826] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.788'. [ 176.966842][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.789'. [ 177.421200][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.790'. [ 177.538799][ T7842] batadv_slave_1: entered promiscuous mode [ 177.624148][ T5748] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 177.833547][ T5748] usb 6-1: Using ep0 maxpacket: 8 [ 177.883836][ T5748] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.888227][ T5748] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.892307][ T5748] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.910914][ T5748] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.916430][ T5748] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.920466][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.975337][ T40] audit: type=1400 audit(1722442521.646:423): avc: denied { read } for pid=7849 comm="syz.3.794" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 177.986042][ T40] audit: type=1400 audit(1722442521.646:424): avc: denied { open } for pid=7849 comm="syz.3.794" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.175085][ T5748] usb 6-1: usb_control_msg returned -32 [ 178.178743][ T5748] usbtmc 6-1:16.0: can't read capabilities [ 178.492560][ T40] audit: type=1326 audit(1722442522.166:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.2.799" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x0 [ 178.497092][ T7873] netlink: 'syz.3.800': attribute type 4 has an invalid length. [ 178.540815][ T7841] batadv_slave_1: left promiscuous mode [ 178.559973][ T7873] netlink: 'syz.3.800': attribute type 4 has an invalid length. [ 178.707114][ T7875] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 178.710201][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.799'. [ 178.733494][ T5748] usb 6-1: USB disconnect, device number 11 [ 179.329689][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.803'. [ 179.361394][ T7887] ip6gretap0 speed is unknown, defaulting to 1000 [ 180.329691][ T7931] mmap: syz.2.810 (7931) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.348743][ T7933] batadv_slave_1: entered promiscuous mode [ 180.405387][ T40] audit: type=1400 audit(1722442524.086:426): avc: denied { create } for pid=7937 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 180.433433][ T40] audit: type=1400 audit(1722442524.086:427): avc: denied { bind } for pid=7937 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 180.782477][ T40] audit: type=1326 audit(1722442524.456:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.2.816" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x0 [ 181.221702][ T7932] batadv_slave_1: left promiscuous mode [ 181.648372][ T40] audit: type=1400 audit(1722442525.326:429): avc: denied { write } for pid=7958 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.808202][ T40] audit: type=1400 audit(1722442525.486:430): avc: denied { bind } for pid=7965 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.833379][ T40] audit: type=1400 audit(1722442525.486:431): avc: denied { write } for pid=7965 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.908390][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 182.021854][ T7977] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 182.025107][ T7977] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 182.057358][ T7977] vhci_hcd vhci_hcd.0: Device attached [ 182.153664][ T7981] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 182.156608][ T7981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.160739][ T7981] vhci_hcd vhci_hcd.0: Device attached [ 182.184276][ T40] audit: type=1400 audit(1722442525.856:432): avc: denied { create } for pid=7976 comm="syz.0.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 182.274252][ T10] vhci_hcd: vhci_device speed not set [ 182.356685][ T10] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 182.725372][ T40] audit: type=1326 audit(1722442526.396:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.2.827" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x0 [ 182.755529][ T7974] netlink: 'syz.3.823': attribute type 4 has an invalid length. [ 182.836613][ T7974] netlink: 'syz.3.823': attribute type 4 has an invalid length. [ 182.845856][ T7978] vhci_hcd: connection reset by peer [ 182.846135][ T7982] vhci_hcd: connection closed [ 182.857771][ T1113] vhci_hcd: stop threads [ 182.861631][ T1113] vhci_hcd: release socket [ 182.874879][ T1113] vhci_hcd: disconnect device [ 182.886493][ T1113] vhci_hcd: stop threads [ 182.888402][ T1113] vhci_hcd: release socket [ 182.890448][ T1113] vhci_hcd: disconnect device [ 183.311395][ T8017] netlink: 'syz.1.830': attribute type 4 has an invalid length. [ 183.378383][ T8017] netlink: 'syz.1.830': attribute type 4 has an invalid length. [ 183.418446][ T40] audit: type=1400 audit(1722442527.096:434): avc: denied { read } for pid=8018 comm="syz.2.834" laddr=127.0.0.1 lport=49594 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 186.649938][ T40] audit: type=1400 audit(1722442530.326:435): avc: denied { setopt } for pid=8043 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.690661][ T8047] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 186.693753][ T8047] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.701363][ T8047] vhci_hcd vhci_hcd.0: Device attached [ 186.751097][ T8043] block nbd2: shutting down sockets [ 186.779288][ T8050] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 186.782460][ T8050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.786229][ T8050] vhci_hcd vhci_hcd.0: Device attached [ 186.803014][ T40] audit: type=1400 audit(1722442530.476:436): avc: denied { create } for pid=8046 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 186.904557][ T56] vhci_hcd: vhci_device speed not set [ 186.974090][ T56] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 187.504213][ T10] vhci_hcd: vhci_device speed not set [ 187.517467][ T8051] vhci_hcd: connection closed [ 187.517832][ T1109] vhci_hcd: stop threads [ 187.518616][ T8048] vhci_hcd: connection reset by peer [ 187.519675][ T1109] vhci_hcd: release socket [ 187.527387][ T1109] vhci_hcd: disconnect device [ 187.530281][ T64] vhci_hcd: stop threads [ 187.532195][ T64] vhci_hcd: release socket [ 187.534892][ T64] vhci_hcd: disconnect device [ 187.666540][ T40] audit: type=1400 audit(1722442531.346:437): avc: denied { append } for pid=8077 comm="syz.0.854" name="uinput" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.690582][ T8058] netlink: 'syz.2.847': attribute type 4 has an invalid length. [ 187.714269][ T8058] netlink: 'syz.2.847': attribute type 4 has an invalid length. [ 187.810527][ T8081] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 187.872871][ T8081] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 188.442931][ T40] audit: type=1400 audit(1722442532.116:438): avc: denied { connect } for pid=8092 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.900808][ T40] audit: type=1400 audit(1722442532.576:439): avc: denied { setopt } for pid=8097 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 191.558023][ T40] audit: type=1400 audit(1722442535.236:440): avc: denied { block_suspend } for pid=8137 comm="syz.0.873" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.011137][ T5368] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 192.144132][ T56] vhci_hcd: vhci_device speed not set [ 192.239228][ T5368] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.244957][ T5368] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.249635][ T5368] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.262412][ T5368] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.272746][ T8138] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.290298][ T5368] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.704125][ T10] usb 7-1: USB disconnect, device number 4 [ 193.119564][ T8147] netlink: 'syz.3.874': attribute type 4 has an invalid length. [ 193.147960][ T8147] netlink: 'syz.3.874': attribute type 4 has an invalid length. [ 194.402434][ T8203] netlink: 400 bytes leftover after parsing attributes in process `syz.0.883'. [ 194.670573][ T40] audit: type=1400 audit(1722442538.346:441): avc: denied { write } for pid=8206 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.754263][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.964058][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.969205][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.974090][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.979779][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.996585][ T8217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.004214][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.406633][ T10] usb 5-1: USB disconnect, device number 8 [ 196.566536][ T8252] kvm: kvm [8251]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0x800 [ 196.580667][ T8274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.894'. [ 196.964109][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 197.167306][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.172680][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.181798][ T10] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.186535][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.190592][ T10] usb 8-1: SerialNumber: syz [ 197.377758][ T40] audit: type=1400 audit(1722442541.056:442): avc: denied { create } for pid=8283 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 197.482434][ T8292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.894'. [ 197.488841][ T40] audit: type=1400 audit(1722442541.166:443): avc: denied { watch_sb } for pid=8290 comm="syz.1.896" path="/194/net_prio.prioidx" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 197.503488][ T8292] veth0_to_bond: entered allmulticast mode [ 197.525144][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.894'. [ 197.606165][ T10] usb 8-1: 0:2 : does not exist [ 197.610507][ T10] usb 8-1: unit 5 not found! [ 197.687767][ T10] usb 8-1: USB disconnect, device number 8 [ 197.801547][ T8323] overlayfs: missing 'lowerdir' [ 198.165091][ T8121] udevd[8121]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.041235][ T8361] overlayfs: missing 'lowerdir' [ 199.045518][ T40] audit: type=1400 audit(1722442542.716:444): avc: denied { setopt } for pid=8360 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.065980][ T40] audit: type=1400 audit(1722442542.726:445): avc: denied { shutdown } for pid=8360 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.082003][ T40] audit: type=1400 audit(1722442542.726:446): avc: denied { read } for pid=8360 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.188090][ T8371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.912'. [ 199.208227][ T40] audit: type=1400 audit(1722442542.816:447): avc: denied { ioctl } for pid=8360 comm="syz.0.910" path="socket:[22344]" dev="sockfs" ino=22344 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.600710][ T40] audit: type=1400 audit(1722442543.276:448): avc: denied { write } for pid=8383 comm="syz.3.913" name="/" dev="9p" ino=36701615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.611111][ T40] audit: type=1400 audit(1722442543.276:449): avc: denied { add_name } for pid=8383 comm="syz.3.913" name="freezer.state" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.624119][ T56] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 199.629542][ T40] audit: type=1400 audit(1722442543.276:450): avc: denied { create } for pid=8383 comm="syz.3.913" name="freezer.state" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.744264][ T834] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 199.781221][ T8388] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 199.819349][ T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.823458][ T56] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.828981][ T56] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.832764][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.836313][ T56] usb 6-1: SerialNumber: syz [ 199.936200][ T834] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.940444][ T834] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.944651][ T834] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.948024][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.960964][ T8368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 199.976519][ T834] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.138791][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.142046][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 200.142059][ T40] audit: type=1400 audit(1722442543.816:455): avc: denied { connect } for pid=8418 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.147062][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.167252][ T8374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.912'. [ 200.186735][ T8374] veth0_to_bond: entered allmulticast mode [ 200.191015][ T8374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.912'. [ 200.232881][ T56] usb 6-1: 0:2 : does not exist [ 200.239903][ T56] usb 6-1: unit 5 not found! [ 200.275515][ T56] usb 6-1: USB disconnect, device number 12 [ 200.280984][ T8] usb 7-1: USB disconnect, device number 5 [ 200.681248][ T8121] udevd[8121]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 200.887776][ T8466] overlayfs: missing 'lowerdir' [ 200.958241][ T40] audit: type=1400 audit(1722442544.636:456): avc: denied { listen } for pid=8468 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 200.969584][ T40] audit: type=1400 audit(1722442544.636:457): avc: denied { accept } for pid=8468 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.669757][ T8482] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 202.854968][ T8520] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 202.903328][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 202.907333][ T8499] netlink: 'syz.2.927': attribute type 4 has an invalid length. [ 202.932526][ T8499] netlink: 'syz.2.927': attribute type 4 has an invalid length. [ 202.954679][ T8520] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 203.364099][ T6132] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.579594][ T6132] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.584422][ T6132] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.606055][ T6132] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.610678][ T6132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.624360][ T6132] usb 5-1: SerialNumber: syz [ 203.844116][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 203.980896][ T8525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.929'. [ 204.023128][ T8525] veth0_to_bond: entered allmulticast mode [ 204.051924][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.089213][ T8525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 204.124075][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.129318][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.133882][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.157827][ T8532] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 204.178063][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.239011][ T6132] usb 5-1: 0:2 : does not exist [ 204.241334][ T6132] usb 5-1: unit 5 not found! [ 204.325035][ T6132] usb 5-1: USB disconnect, device number 9 [ 204.574552][ T8121] udevd[8121]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 204.598362][ T8] usb 6-1: USB disconnect, device number 13 [ 208.123513][ T8629] netlink: 'syz.1.944': attribute type 4 has an invalid length. [ 208.196771][ T8621] netlink: 'syz.1.944': attribute type 4 has an invalid length. [ 208.704267][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.869750][ T40] audit: type=1400 audit(1722442552.546:458): avc: denied { setcurrent } for pid=8645 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 208.960254][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.965315][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.969103][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.972574][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.981760][ T8632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.003457][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.653590][ T30] usb 5-1: USB disconnect, device number 10 [ 210.545859][ T40] audit: type=1400 audit(1722442554.226:459): avc: denied { getopt } for pid=8690 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 210.849190][ T8696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.958'. [ 211.912009][ T8734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.969'. [ 212.054912][ T8707] netlink: 'syz.2.961': attribute type 4 has an invalid length. [ 212.078864][ T8707] netlink: 'syz.2.961': attribute type 4 has an invalid length. [ 212.094076][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 212.296704][ T30] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 212.300713][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 212.305846][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 212.311047][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.317159][ T30] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.321336][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.342092][ T30] usb 8-1: config 0 descriptor?? [ 212.351007][ T8726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.770302][ T30] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 212.780838][ T30] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 212.791409][ T30] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 213.041815][ T30] usb 8-1: USB disconnect, device number 9 [ 213.903448][ T8788] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 213.974996][ T8788] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 215.294576][ T832] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 215.512829][ T832] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.518438][ T832] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.523342][ T832] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.527934][ T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.566715][ T8799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.576481][ T832] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.918789][ T832] usb 7-1: USB disconnect, device number 6 [ 216.164097][ T834] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 216.368020][ T834] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 216.377311][ T834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 216.388536][ T834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 216.394353][ T834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.399839][ T834] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.404634][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.421140][ T834] usb 6-1: config 0 descriptor?? [ 216.430608][ T8827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.752915][ T40] audit: type=1400 audit(1722442560.426:460): avc: denied { ioctl } for pid=8851 comm="syz.3.986" path="pid:[4026532885]" dev="nsfs" ino=4026532885 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 216.845277][ T40] audit: type=1400 audit(1722442560.516:461): avc: denied { map } for pid=8851 comm="syz.3.986" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 216.855893][ T40] audit: type=1400 audit(1722442560.516:462): avc: denied { execute } for pid=8851 comm="syz.3.986" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 216.891510][ T834] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 216.907385][ T834] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 216.924462][ T834] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 217.161500][ T834] usb 6-1: USB disconnect, device number 14 [ 217.809005][ T40] audit: type=1400 audit(1722442561.486:463): avc: denied { open } for pid=8887 comm="syz.3.991" path="/dev/ptyqb" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 217.838847][ T40] audit: type=1400 audit(1722442561.486:464): avc: denied { ioctl } for pid=8887 comm="syz.3.991" path="/dev/ptyqb" dev="devtmpfs" ino=140 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 217.852012][ T40] audit: type=1400 audit(1722442561.496:465): avc: denied { read } for pid=8889 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.875433][ T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 218.003261][ T40] audit: type=1400 audit(1722442561.676:466): avc: denied { remount } for pid=8910 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 218.073452][ T30] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.081222][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.085653][ T30] usb 7-1: Product: syz [ 218.087839][ T30] usb 7-1: Manufacturer: syz [ 218.089927][ T30] usb 7-1: SerialNumber: syz [ 218.098818][ T30] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.139372][ T30] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.236967][ T832] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 218.381651][ T58] usb 7-1: USB disconnect, device number 7 [ 218.428399][ T832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.433410][ T832] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.439285][ T832] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.443372][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.450884][ T832] usb 6-1: config 0 descriptor?? [ 218.605703][ T8872] fuse: Unknown parameter '¥ˆ8€ÕXrootmode' [ 218.827242][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 218.874469][ T40] audit: type=1400 audit(1722442562.556:467): avc: denied { map } for pid=8904 comm="syz.1.994" path="socket:[23454]" dev="sockfs" ino=23454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 218.940320][ T832] plantronics 0003:047F:FFFF.000B: item fetching failed at offset 5/15 [ 218.945082][ T832] plantronics 0003:047F:FFFF.000B: parse failed [ 218.947978][ T832] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 219.025427][ T8] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 219.028898][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 219.033528][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 219.038059][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.043816][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.049240][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.057928][ T8] usb 8-1: config 0 descriptor?? [ 219.062298][ T8942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.177428][ T30] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 219.181259][ T30] ath9k_htc: Failed to initialize the device [ 219.198612][ T58] usb 7-1: ath9k_htc: USB layer deinitialized [ 219.493657][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 219.498572][ T8] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 219.509253][ T8] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 219.777751][ T5368] usb 8-1: USB disconnect, device number 10 [ 221.142047][ T40] audit: type=1400 audit(1722442564.816:468): avc: denied { setopt } for pid=9025 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.229921][ T834] usb 6-1: USB disconnect, device number 15 [ 221.774191][ T834] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 221.969130][ T834] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 221.973581][ T834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 221.981821][ T834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 221.991757][ T834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.997874][ T834] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.002084][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.008351][ T834] usb 6-1: config 0 descriptor?? [ 222.011304][ T9046] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.342497][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 222.347562][ T9063] netlink: 'syz.0.1015': attribute type 12 has an invalid length. [ 222.362825][ T9063] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.367630][ T9063] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.371152][ T9063] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.374809][ T9063] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.378440][ T9063] vxlan0: entered promiscuous mode [ 222.436312][ T834] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 222.441496][ T834] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 222.450924][ T834] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 222.708407][ T832] usb 6-1: USB disconnect, device number 16 [ 223.415122][ T832] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 223.511120][ T9116] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1024'. [ 223.610430][ T832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.615412][ T832] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.621111][ T832] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.631939][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.649739][ T832] usb 8-1: config 0 descriptor?? [ 224.115308][ T832] plantronics 0003:047F:FFFF.000E: item fetching failed at offset 5/15 [ 224.119849][ T832] plantronics 0003:047F:FFFF.000E: parse failed [ 224.123179][ T832] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 224.745463][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 224.750464][ T9145] netlink: 'syz.0.1028': attribute type 12 has an invalid length. [ 224.875029][ T40] audit: type=1400 audit(1722442568.556:469): avc: denied { bind } for pid=9152 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.418801][ T40] audit: type=1400 audit(1722442569.096:470): avc: denied { write } for pid=9156 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 225.419123][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1032'. [ 225.838463][ T9174] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1037'. [ 226.169105][ T5748] usb 8-1: USB disconnect, device number 11 [ 227.091701][ T40] audit: type=1400 audit(1722442570.766:471): avc: denied { read } for pid=9209 comm="syz.2.1042" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.094915][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1042'. [ 227.318606][ T40] audit: type=1400 audit(1722442570.996:472): avc: denied { name_bind } for pid=9221 comm="syz.1.1046" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 227.327459][ T40] audit: type=1400 audit(1722442570.996:473): avc: denied { node_bind } for pid=9221 comm="syz.1.1046" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 227.541023][ T9240] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1050'. [ 227.634173][ T832] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 227.709808][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1051'. [ 227.837950][ T832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.849733][ T832] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.856314][ T832] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.860041][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.871941][ T832] usb 6-1: config 0 descriptor?? [ 227.943902][ T40] audit: type=1400 audit(1722442571.616:474): avc: denied { module_request } for pid=9252 comm="syz.0.1055" kmod="net-pf-2-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 227.999766][ T9256] netlink: 'syz.0.1055': attribute type 9 has an invalid length. [ 228.332151][ T832] plantronics 0003:047F:FFFF.000F: item fetching failed at offset 5/15 [ 228.345958][ T832] plantronics 0003:047F:FFFF.000F: parse failed [ 228.348840][ T832] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 229.596681][ T9276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9276 comm=syz.0.1059 [ 229.602331][ T40] audit: type=1400 audit(1722442573.276:475): avc: denied { nlmsg_read } for pid=9275 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 229.611297][ T40] audit: type=1400 audit(1722442573.276:476): avc: denied { audit_write } for pid=9275 comm="syz.0.1059" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 229.656776][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1060'. [ 229.920383][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 229.924303][ T9290] netlink: 'syz.3.1065': attribute type 12 has an invalid length. [ 229.950396][ T9290] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.954301][ T9290] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.958111][ T9290] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.961545][ T9290] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.965739][ T9290] vxlan0: entered promiscuous mode [ 230.398611][ T832] usb 6-1: USB disconnect, device number 17 [ 231.155130][ T56] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 231.225927][ T9319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9319 comm=syz.1.1070 [ 231.378681][ T56] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.382682][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.387337][ T56] usb 8-1: Product: syz [ 231.389135][ T56] usb 8-1: Manufacturer: syz [ 231.390811][ T56] usb 8-1: SerialNumber: syz [ 231.398452][ T56] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.421703][ T5748] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 231.673509][ T56] usb 8-1: USB disconnect, device number 12 [ 231.892450][ T9310] fuse: Unknown parameter '¥ˆ8€ÕXrootmode' [ 231.924380][ T834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 231.996660][ T9370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9370 comm=syz.2.1082 [ 232.106386][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.110740][ T834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.116707][ T834] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.121301][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.127963][ T834] usb 5-1: config 0 descriptor?? [ 232.464244][ T5748] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 232.475904][ T5748] ath9k_htc: Failed to initialize the device [ 232.481465][ T56] usb 8-1: ath9k_htc: USB layer deinitialized [ 232.567354][ T834] plantronics 0003:047F:FFFF.0010: item fetching failed at offset 5/15 [ 232.572401][ T834] plantronics 0003:047F:FFFF.0010: parse failed [ 232.578082][ T834] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22 [ 232.662761][ T40] audit: type=1800 audit(1722442576.336:477): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1089" name="bus" dev="overlay" ino=1476 res=0 errno=0 [ 232.811427][ T9413] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9413 comm=syz.3.1092 [ 232.968538][ T40] audit: type=1400 audit(1722442576.646:478): avc: denied { mounton } for pid=9418 comm="syz.3.1095" path="/272/file0" dev="tmpfs" ino=1492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 233.787943][ T9429] netlink: 'syz.1.1097': attribute type 9 has an invalid length. [ 233.898858][ T9444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1100'. [ 234.037580][ T9456] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.043245][ T9456] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 234.055965][ T9456] bridge_slave_0: default FDB implementation only supports local addresses [ 234.119979][ T9459] input: syz1 as /devices/virtual/input/input30 [ 234.327128][ T40] audit: type=1400 audit(1722442578.006:479): avc: denied { getopt } for pid=9471 comm="syz.3.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.678685][ T56] usb 5-1: USB disconnect, device number 11 [ 234.820681][ T9498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1112'. [ 234.879182][ T40] audit: type=1800 audit(1722442578.556:480): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1113" name="bus" dev="overlay" ino=1257 res=0 errno=0 [ 235.092955][ T9512] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9512 comm=syz.0.1117 [ 235.378486][ T9528] input: syz1 as /devices/virtual/input/input31 [ 235.534239][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 235.545012][ T9536] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1122'. [ 235.727376][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.732797][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.743272][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.747479][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.782995][ T8] usb 8-1: config 0 descriptor?? [ 236.227831][ T8] plantronics 0003:047F:FFFF.0011: item fetching failed at offset 5/15 [ 236.232202][ T8] plantronics 0003:047F:FFFF.0011: parse failed [ 236.236370][ T8] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 236.310272][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1124'. [ 237.614216][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 237.618087][ T9584] netlink: 'syz.1.1135': attribute type 12 has an invalid length. [ 237.632630][ T9584] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.632700][ T9584] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.632732][ T9584] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.632759][ T9584] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.632845][ T9584] vxlan0: entered promiscuous mode [ 237.690824][ T9586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1137'. [ 237.822585][ T9592] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1138'. [ 238.273497][ T832] usb 8-1: USB disconnect, device number 13 [ 238.341840][ T9614] syz.3.1141[9614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.342010][ T9614] syz.3.1141[9614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.363779][ T40] audit: type=1404 audit(1722442582.036:481): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 238.407906][ T40] audit: type=1400 audit(1722442582.076:482): avc: denied { read write } for pid=5326 comm="syz-executor" name="loop1" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 238.429371][ T40] audit: type=1404 audit(1722442582.086:483): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 238.447887][ T40] audit: type=1400 audit(1722442582.106:484): avc: denied { read write } for pid=5324 comm="syz-executor" name="loop0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.468147][ C3] vkms_vblank_simulate: vblank timer overrun [ 238.485104][ T40] audit: type=1400 audit(1722442582.116:485): avc: denied { open } for pid=5324 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.496021][ T40] audit: type=1400 audit(1722442582.116:486): avc: denied { ioctl } for pid=5324 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.507129][ T40] audit: type=1400 audit(1722442582.116:487): avc: denied { read write } for pid=9616 comm="syz.1.1142" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 238.518516][ T40] audit: type=1400 audit(1722442582.116:488): avc: denied { open } for pid=9616 comm="syz.1.1142" path="/dev/sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 238.529684][ T40] audit: type=1400 audit(1722442582.156:489): avc: denied { prog_load } for pid=9618 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 238.539925][ T40] audit: type=1400 audit(1722442582.156:490): avc: denied { bpf } for pid=9618 comm="syz.0.1143" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.623207][ T9631] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1147'. [ 240.405055][ T9672] input: syz1 as /devices/virtual/input/input32 [ 240.991372][ T9666] netlink: 'syz.0.1155': attribute type 4 has an invalid length. [ 240.998047][ T9667] netlink: 'syz.0.1155': attribute type 4 has an invalid length. [ 241.349189][ T9688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1160'. [ 241.479810][ T9710] syz.1.1165[9710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.479950][ T9710] syz.1.1165[9710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.368124][ T9754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1175'. [ 243.030208][ T9779] netlink: 'syz.2.1182': attribute type 4 has an invalid length. [ 243.047847][ T9779] netlink: 'syz.2.1182': attribute type 4 has an invalid length. [ 243.368277][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 243.368295][ T40] audit: type=1400 audit(1722442587.046:614): avc: denied { write } for pid=9784 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.382618][ T40] audit: type=1400 audit(1722442587.066:615): avc: denied { read } for pid=9784 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.720078][ T40] audit: type=1400 audit(1722442587.396:616): avc: denied { read write } for pid=9791 comm="syz.2.1185" name="vbi8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 243.730103][ T40] audit: type=1400 audit(1722442587.396:617): avc: denied { open } for pid=9791 comm="syz.2.1185" path="/dev/vbi8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 243.734777][ T9792] cgroup: noprefix used incorrectly [ 243.747392][ T40] audit: type=1400 audit(1722442587.406:618): avc: denied { ioctl } for pid=9791 comm="syz.2.1185" path="/dev/vbi8" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 243.772273][ T40] audit: type=1400 audit(1722442587.416:619): avc: denied { mounton } for pid=9791 comm="syz.2.1185" path="/239/file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 243.944054][ T40] audit: type=1400 audit(1722442587.616:620): avc: denied { create } for pid=9794 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.952256][ T40] audit: type=1400 audit(1722442587.626:621): avc: denied { create } for pid=9794 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 243.961419][ T40] audit: type=1400 audit(1722442587.636:622): avc: denied { create } for pid=9794 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 244.182019][ T40] audit: type=1400 audit(1722442587.856:623): avc: denied { connect } for pid=9794 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 244.526045][ T9808] netfs: Couldn't get user pages (rc=-14) [ 244.710710][ T9815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1190'. [ 244.753705][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'. [ 244.817801][ T9818] 9pnet_fd: Insufficient options for proto=fd [ 245.530751][ T9916] cgroup: noprefix used incorrectly [ 246.093467][ T9936] cgroup: noprefix used incorrectly [ 247.042118][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 247.048453][ T9952] block device autoloading is deprecated and will be removed. [ 247.163842][ T9957] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 247.163842][ T9957] The task syz.3.1210 (9957) triggered the difference, watch for misbehavior. [ 247.469595][ T9972] cgroup: noprefix used incorrectly [ 247.737132][ T9973] Illegal XDP return value 4294967274 on prog (id 238) dev N/A, expect packet loss! [ 248.139216][ T9987] cgroup: noprefix used incorrectly [ 248.316185][ T9984] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 248.319737][ T9984] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1218'. [ 248.323767][ T9984] block nbd10: not configured, cannot reconfigure [ 248.380267][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 248.380284][ T40] audit: type=1400 audit(1722442592.056:663): avc: denied { mount } for pid=9983 comm="syz.2.1218" name="/" dev="configfs" ino=2115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 248.488011][ T40] audit: type=1400 audit(1722442592.166:664): avc: denied { unlink } for pid=9983 comm="syz.2.1218" name="#2b" dev="tmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.503005][ T9984] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.509157][ T40] audit: type=1400 audit(1722442592.186:665): avc: denied { mount } for pid=9983 comm="syz.2.1218" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 248.578394][ T40] audit: type=1400 audit(1722442592.256:666): avc: denied { read } for pid=9983 comm="syz.2.1218" name="/" dev="configfs" ino=2115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.602012][ T40] audit: type=1400 audit(1722442592.266:667): avc: denied { open } for pid=9983 comm="syz.2.1218" path="/" dev="configfs" ino=2115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.859987][ T40] audit: type=1400 audit(1722442592.536:668): avc: denied { unmount } for pid=6102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 248.872554][ T40] audit: type=1400 audit(1722442592.546:669): avc: denied { unmount } for pid=6102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 249.027079][T10014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1227'. [ 249.596507][ T40] audit: type=1400 audit(1722442593.276:670): avc: denied { module_request } for pid=10030 comm="syz.3.1232" kmod="net-pf-2-proto-256-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 249.663322][ T40] audit: type=1400 audit(1722442593.336:671): avc: denied { create } for pid=10030 comm="syz.3.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.671818][ T40] audit: type=1400 audit(1722442593.346:672): avc: denied { map } for pid=10030 comm="syz.3.1232" path="socket:[28432]" dev="sockfs" ino=28432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.820135][T10031] overlay: ./file1 is not a directory [ 250.120545][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1238'. [ 250.178557][T10055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1239'. [ 250.422541][T10066] cgroup: noprefix used incorrectly [ 251.648477][T10101] netlink: 'syz.1.1251': attribute type 4 has an invalid length. [ 251.785236][T10101] netlink: 'syz.1.1251': attribute type 4 has an invalid length. [ 252.057515][T10108] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1255'. [ 253.010301][T10120] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 253.013820][T10120] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1259'. [ 253.019668][T10120] block nbd10: not configured, cannot reconfigure [ 253.054251][T10120] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.251937][T10158] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 253.327207][T10160] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 253.474900][T10164] netlink: 'syz.0.1270': attribute type 4 has an invalid length. [ 254.147100][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 254.147116][ T40] audit: type=1400 audit(1722442597.826:696): avc: denied { create } for pid=10176 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.160247][ T5368] IPVS: starting estimator thread 0... [ 254.160968][ T40] audit: type=1400 audit(1722442597.826:697): avc: denied { write } for pid=10176 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.184154][ T40] audit: type=1400 audit(1722442597.826:698): avc: denied { setopt } for pid=10176 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.264186][T10178] IPVS: using max 34 ests per chain, 81600 per kthread [ 254.378887][ T40] audit: type=1400 audit(1722442598.046:699): avc: denied { bind } for pid=10190 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 254.395677][ T40] audit: type=1400 audit(1722442598.056:700): avc: denied { connect } for pid=10190 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 254.403695][ T40] audit: type=1400 audit(1722442598.076:701): avc: denied { accept } for pid=10199 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.567507][ T40] audit: type=1400 audit(1722442598.246:702): avc: denied { mount } for pid=10206 comm="syz.3.1284" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 254.594519][ T40] audit: type=1400 audit(1722442598.276:703): avc: denied { watch } for pid=10206 comm="syz.3.1284" path="/316/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 254.627325][ T40] audit: type=1400 audit(1722442598.296:704): avc: denied { unmount } for pid=5323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 254.767785][ T40] audit: type=1400 audit(1722442598.446:705): avc: denied { getopt } for pid=10217 comm="syz.1.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.807562][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 254.898468][T10228] dccp_xmit_packet: Payload too large (65475) for featneg. [ 255.647266][ C3] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 255.777199][T10263] dccp_xmit_packet: Payload too large (65475) for featneg. [ 256.155060][T10283] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.1305'. [ 256.158747][T10283] netlink: 'syz.2.1305': attribute type 1 has an invalid length. [ 256.161353][T10283] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1305'. [ 256.421701][T10291] netlink: 'syz.2.1307': attribute type 4 has an invalid length. [ 256.473219][T10291] netlink: 'syz.2.1307': attribute type 4 has an invalid length. [ 257.186714][T10305] dccp_xmit_packet: Payload too large (65475) for featneg. [ 258.069338][T10332] netlink: 'syz.0.1316': attribute type 1 has an invalid length. [ 258.103002][T10332] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1316'. [ 258.113430][T10332] block nbd10: not configured, cannot reconfigure [ 258.203009][T10344] netlink: 'syz.2.1320': attribute type 4 has an invalid length. [ 258.259459][T10344] netlink: 'syz.2.1320': attribute type 4 has an invalid length. [ 258.322700][T10329] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 258.676518][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.681969][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.697192][T10351] bridge0: entered allmulticast mode [ 258.738244][T10354] dccp_xmit_packet: Payload too large (65475) for featneg. [ 258.766027][ T5340] Bluetooth: hci4: sending frame failed (-49) [ 258.769961][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 258.776135][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.779556][T10351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.783579][T10351] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.787703][T10351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.797724][T10351] bridge0: entered promiscuous mode [ 258.801807][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1325'. [ 259.613335][T10386] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1332'. [ 259.738326][T10386] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1332'. [ 259.934849][T10391] dccp_xmit_packet: Payload too large (65475) for featneg. [ 259.995530][T10392] netlink: 'syz.0.1333': attribute type 4 has an invalid length. [ 259.999234][T10392] netlink: 'syz.0.1333': attribute type 4 has an invalid length. [ 260.289677][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 260.289696][ T40] audit: type=1400 audit(1722442603.966:728): avc: denied { bind } for pid=10396 comm="syz.2.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.293932][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 260.306937][ T40] audit: type=1400 audit(1722442603.966:729): avc: denied { write } for pid=10396 comm="syz.2.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.578207][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.581565][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.591871][T10420] bridge0: entered allmulticast mode [ 260.699188][ T5340] Bluetooth: hci4: sending frame failed (-49) [ 260.703798][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 260.707606][ T40] audit: type=1326 audit(1722442604.386:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.0.1343" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa212f773b9 code=0x0 [ 260.719067][T10420] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.720489][ T5340] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 260.722168][T10420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.728765][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.731778][T10420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.735288][T10420] bridge0: entered promiscuous mode [ 260.749413][ T40] audit: type=1326 audit(1722442604.426:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.1.1341" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x0 [ 261.220262][ T40] audit: type=1400 audit(1722442604.896:732): avc: denied { getopt } for pid=10438 comm="syz.2.1345" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.334708][ T40] audit: type=1400 audit(1722442605.006:733): avc: denied { listen } for pid=10444 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.342541][ T40] audit: type=1400 audit(1722442605.016:734): avc: denied { read } for pid=10444 comm="syz.2.1346" path="socket:[29637]" dev="sockfs" ino=29637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.577895][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.580978][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.659964][T10463] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 261.746026][T10474] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 262.186586][T10465] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 262.190187][T10465] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1352'. [ 262.195503][T10465] block nbd10: not configured, cannot reconfigure [ 262.258612][T10465] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.808698][ T40] audit: type=1326 audit(1722442606.486:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.3.1368" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35c9773b9 code=0x0 [ 262.839734][ T40] audit: type=1400 audit(1722442606.516:736): avc: denied { getopt } for pid=10504 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 262.963016][ T40] audit: type=1400 audit(1722442606.646:737): avc: denied { read } for pid=10523 comm="syz.1.1372" name="rtc0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.335385][T10535] kvm: kvm [10534]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1445000003d0 [ 263.355489][T10535] kvm: kvm [10534]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x28df00000300 [ 263.371905][T10535] kvm: kvm [10534]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x3d0000000300 [ 264.432938][T10577] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 265.205435][T10590] kvm: kvm [10588]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1445000003d0 [ 265.287668][T10590] kvm: kvm [10588]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x28df00000300 [ 265.314607][T10590] kvm: kvm [10588]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x3d0000000300 [ 265.750084][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 265.750100][ T40] audit: type=1804 audit(1722442609.426:754): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1398" name="/newroot/363/file1/file0" dev="hugetlbfs" ino=32814 res=1 errno=0 [ 265.863483][ T40] audit: type=1400 audit(1722442609.536:755): avc: denied { create } for pid=10632 comm="syz.0.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.891572][ T40] audit: type=1400 audit(1722442609.566:756): avc: denied { write } for pid=10632 comm="syz.0.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 266.156817][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 266.354056][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 266.365366][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 266.368533][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 266.373185][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.378002][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 173, changing to 11 [ 266.382628][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.389018][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 266.391683][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 266.396010][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.400714][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 173, changing to 11 [ 266.407934][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.413642][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 266.417027][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 266.421421][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.426213][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 173, changing to 11 [ 266.430846][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.442183][ T25] usb 5-1: string descriptor 0 read error: -22 [ 266.445411][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 266.448976][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.463181][ T25] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 266.782633][ T40] audit: type=1326 audit(1722442610.456:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.1.1404" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x0 [ 266.791454][ T5368] usb 5-1: USB disconnect, device number 12 [ 266.799770][T10655] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 266.924202][T10670] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1403'. [ 267.588751][ T40] audit: type=1400 audit(1722442611.266:758): avc: denied { read } for pid=10687 comm="syz.3.1410" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 267.602706][ T40] audit: type=1400 audit(1722442611.266:759): avc: denied { open } for pid=10687 comm="syz.3.1410" path="/dev/sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 267.615500][ T40] audit: type=1400 audit(1722442611.266:760): avc: denied { ioctl } for pid=10687 comm="syz.3.1410" path="/dev/sg0" dev="devtmpfs" ino=707 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 267.626895][ T40] audit: type=1400 audit(1722442611.266:761): avc: denied { getopt } for pid=10687 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 267.694473][T10699] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 267.733556][T10682] kvm: kvm [10681]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1445000003d0 [ 267.761939][T10682] kvm: kvm [10681]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x28df00000300 [ 267.790637][T10682] kvm: kvm [10681]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x3d0000000300 [ 267.883318][T10706] netlink: 'syz.1.1413': attribute type 4 has an invalid length. [ 267.920589][T10706] netlink: 'syz.1.1413': attribute type 4 has an invalid length. [ 268.551184][ T40] audit: type=1400 audit(1722442612.226:762): avc: denied { create } for pid=10719 comm="syz.3.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 268.606784][ T40] audit: type=1400 audit(1722442612.226:763): avc: denied { setopt } for pid=10719 comm="syz.3.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 268.872093][T10735] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.876029][T10735] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.888817][T10735] bridge0: entered allmulticast mode [ 268.925639][ T5340] Bluetooth: hci4: sending frame failed (-49) [ 268.936776][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.939845][T10735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.943343][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.946241][T10735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.952361][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 268.952823][ T5340] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 268.960985][T10735] bridge0: entered promiscuous mode [ 269.672248][T10754] netlink: 'syz.1.1426': attribute type 4 has an invalid length. [ 269.714438][T10745] kvm: kvm [10744]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1445000003d0 [ 269.746275][T10745] kvm: kvm [10744]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x28df00000300 [ 269.753746][T10757] netlink: 'syz.1.1426': attribute type 4 has an invalid length. [ 269.795842][T10745] kvm: kvm [10744]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x3d0000000300 [ 270.662792][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 270.667295][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 270.834927][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 270.834942][ T40] audit: type=1400 audit(1722442614.506:770): avc: denied { mounton } for pid=10784 comm="syz.1.1435" path="/proc/912/task" dev="proc" ino=30259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 270.853816][ T40] audit: type=1400 audit(1722442614.516:771): avc: denied { mount } for pid=10784 comm="syz.1.1435" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 270.862169][ T40] audit: type=1326 audit(1722442614.536:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x7fc00000 [ 270.872176][ T40] audit: type=1326 audit(1722442614.536:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f765bf773b9 code=0x7fc00000 [ 271.258705][ T40] audit: type=1326 audit(1722442614.936:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x7fc00000 [ 271.327885][ T40] audit: type=1326 audit(1722442614.936:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x7fc00000 [ 271.371277][ T40] audit: type=1326 audit(1722442614.936:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x7fc00000 [ 271.504568][ T40] audit: type=1326 audit(1722442614.966:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.2.1430" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x7fc00000 [ 271.554985][T10814] netlink: 'syz.3.1442': attribute type 4 has an invalid length. [ 271.581793][T10818] Bluetooth: MGMT ver 1.23 [ 271.616781][T10814] netlink: 'syz.3.1442': attribute type 4 has an invalid length. [ 271.885494][ T40] audit: type=1400 audit(1722442615.566:778): avc: denied { sqpoll } for pid=10829 comm="syz.1.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 272.274050][ T40] audit: type=1326 audit(1722442615.946:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.1.1451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x7fc00000 [ 272.767331][T10842] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1452'. [ 273.009547][T10859] syzkaller1: entered promiscuous mode [ 273.011873][T10859] syzkaller1: entered allmulticast mode [ 273.106405][T10862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1457'. [ 273.122144][T10862] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 273.130681][T10862] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 273.137164][T10862] kvm: requested 82971 ns i8254 timer period limited to 200000 ns [ 273.142013][T10862] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 273.148142][T10862] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 273.153491][T10862] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 273.160831][T10862] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 273.167680][T10862] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 273.173176][T10862] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 273.178472][T10862] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 273.281651][T10877] netlink: 'syz.3.1460': attribute type 4 has an invalid length. [ 273.318112][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 273.361323][T10877] netlink: 'syz.3.1460': attribute type 4 has an invalid length. [ 274.166428][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 274.171879][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1467'. [ 274.408471][T10906] syzkaller1: entered promiscuous mode [ 274.411043][T10906] syzkaller1: entered allmulticast mode [ 274.616114][T10914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=10914 comm=syz.3.1472 [ 274.952397][T10923] netlink: 'syz.2.1475': attribute type 4 has an invalid length. [ 275.026478][T10923] netlink: 'syz.2.1475': attribute type 4 has an invalid length. [ 275.090845][T10921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1474'. [ 275.551435][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 275.641764][T10943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=10943 comm=syz.1.1481 [ 275.931873][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 275.974746][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 275.974761][ T40] audit: type=1400 audit(1722442619.656:812): avc: denied { ioctl } for pid=10953 comm="syz.1.1484" path="socket:[33224]" dev="sockfs" ino=33224 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 276.115112][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 276.558224][T10986] ALSA: mixer_oss: invalid OSS volume '' [ 276.560450][T10986] ALSA: mixer_oss: invalid OSS volume '' [ 276.563704][T10986] ALSA: mixer_oss: invalid OSS volume 'L' [ 276.980730][T10995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1491'. [ 277.031730][T11003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=11003 comm=syz.1.1492 [ 277.069508][ T40] audit: type=1326 audit(1722442620.746:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10992 comm="syz.0.1491" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa212f773b9 code=0x0 [ 277.231650][ T40] audit: type=1326 audit(1722442620.906:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x7ffc0000 [ 277.242658][ T40] audit: type=1326 audit(1722442620.916:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x7ffc0000 [ 277.255936][ T40] audit: type=1326 audit(1722442620.916:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa54bd773b9 code=0x7ffc0000 [ 277.266486][ T40] audit: type=1326 audit(1722442620.936:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x7ffc0000 [ 277.275468][ T40] audit: type=1326 audit(1722442620.936:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x7ffc0000 [ 277.301348][ T40] audit: type=1326 audit(1722442620.936:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa54bd773b9 code=0x7ffc0000 [ 277.318958][ T40] audit: type=1326 audit(1722442620.986:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54bd773b9 code=0x7ffc0000 [ 277.329131][ T40] audit: type=1326 audit(1722442620.996:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fa54bd773b9 code=0x7ffc0000 [ 277.471593][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.474571][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.477905][T11021] bridge0: entered allmulticast mode [ 277.553065][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.556638][T11021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.559415][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.562663][T11021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.585571][T11021] bridge0: entered promiscuous mode [ 278.114075][T11040] syz.1.1501 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 278.766211][T11060] netlink: 'syz.2.1503': attribute type 13 has an invalid length. [ 278.874791][T11066] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 278.878859][T11066] __nla_validate_parse: 2 callbacks suppressed [ 278.878871][T11066] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1506'. [ 279.537971][T11085] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1511'. [ 279.542632][T11083] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1511'. [ 279.574210][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 279.575922][ T5340] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 279.748863][T11108] syz_tun: entered promiscuous mode [ 279.757984][T11108] batadv_slave_1: entered promiscuous mode [ 280.232850][T11123] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 280.299563][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.302900][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.307649][T11129] bridge0: left promiscuous mode [ 280.368770][ T76] Bluetooth: hci4: Frame reassembly failed (-84) [ 280.373902][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.377224][T11129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.381000][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.384587][T11129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.389232][T11129] bridge0: entered promiscuous mode [ 280.673358][T11136] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 280.678811][T11136] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1523'. [ 281.107349][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 281.107360][ T40] audit: type=1400 audit(1722442624.786:898): avc: denied { mount } for pid=11139 comm="syz.0.1524" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 281.118519][ T40] audit: type=1400 audit(1722442624.786:899): avc: denied { remount } for pid=11139 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 281.451236][T11147] syz_tun: entered promiscuous mode [ 281.456583][T11147] batadv_slave_1: entered promiscuous mode [ 281.459563][T11147] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 281.462692][T11147] Cannot create hsr debugfs directory [ 281.603723][ T40] audit: type=1400 audit(1722442625.276:900): avc: denied { relabelfrom } for pid=11150 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 281.612667][ T40] audit: type=1400 audit(1722442625.276:901): avc: denied { relabelto } for pid=11150 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 281.749058][ T40] audit: type=1400 audit(1722442625.426:902): avc: denied { unmount } for pid=5324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 282.010233][ T40] audit: type=1400 audit(1722442625.686:903): avc: denied { open } for pid=11163 comm="syz.0.1528" path="/dev/ptyq5" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 282.052916][ T40] audit: type=1400 audit(1722442625.726:904): avc: denied { name_bind } for pid=11163 comm="syz.0.1528" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 282.066207][ T40] audit: type=1400 audit(1722442625.726:905): avc: denied { node_bind } for pid=11163 comm="syz.0.1528" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 282.079154][ T40] audit: type=1400 audit(1722442625.746:906): avc: denied { read } for pid=11173 comm="syz.2.1531" path="socket:[30560]" dev="sockfs" ino=30560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.089622][ T40] audit: type=1400 audit(1722442625.746:907): avc: denied { name_connect } for pid=11163 comm="syz.0.1528" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 282.214411][T11181] mkiss: ax0: crc mode is auto. [ 282.374673][ T5340] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 282.607841][T11196] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 282.611572][T11196] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1534'. [ 282.963032][T11212] netlink: 'syz.2.1539': attribute type 3 has an invalid length. [ 282.966013][T11212] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1539'. [ 283.064171][T11215] netlink: 'syz.0.1537': attribute type 13 has an invalid length. [ 283.343593][T11238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 283.424311][T11249] x_tables: duplicate underflow at hook 2 [ 283.887618][T11267] gfs2: not a GFS2 filesystem [ 284.405418][T11277] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 284.409311][T11277] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1554'. [ 285.004238][T11290] ALSA: mixer_oss: invalid OSS volume '' [ 285.007424][T11290] ALSA: mixer_oss: invalid OSS volume '' [ 285.018512][T11290] ALSA: mixer_oss: invalid OSS volume 'L' [ 285.616621][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 285.739777][T11344] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 285.902784][T11350] gfs2: not a GFS2 filesystem [ 286.508409][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 286.508478][ T40] audit: type=1400 audit(1722442630.186:926): avc: denied { write } for pid=11361 comm="syz.3.1571" name="card2" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 286.636297][T11363] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1571'. [ 286.976493][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.211514][ T40] audit: type=1326 audit(1722442630.886:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1574" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f765bf773b9 code=0x0 [ 287.221854][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.226307][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.232315][T11373] bridge0: left promiscuous mode [ 287.296757][ T39] Bluetooth: hci4: Frame reassembly failed (-84) [ 287.302003][T11373] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.305389][T11373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.308762][T11373] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.312084][T11373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.317151][T11373] bridge0: entered promiscuous mode [ 287.355939][ T40] audit: type=1326 audit(1722442631.036:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.0.1575" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa212f773b9 code=0x0 [ 287.478490][T11380] ALSA: mixer_oss: invalid OSS volume '' [ 287.484847][T11380] ALSA: mixer_oss: invalid OSS volume '' [ 287.512241][T11380] ALSA: mixer_oss: invalid OSS volume 'L' [ 287.949647][ T40] audit: type=1400 audit(1722442631.626:929): avc: denied { append } for pid=11390 comm="syz.1.1577" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 288.080689][ T40] audit: type=1400 audit(1722442631.756:930): avc: denied { read } for pid=11394 comm="syz.2.1578" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 288.090431][ T40] audit: type=1400 audit(1722442631.756:931): avc: denied { open } for pid=11394 comm="syz.2.1578" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 288.100105][ T40] audit: type=1400 audit(1722442631.776:932): avc: denied { ioctl } for pid=11394 comm="syz.2.1578" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x64b7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 288.114231][ T40] audit: type=1400 audit(1722442631.776:933): avc: denied { accept } for pid=11394 comm="syz.2.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.490373][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 288.857680][ T40] audit: type=1400 audit(1722442632.536:934): avc: denied { bind } for pid=11404 comm="syz.3.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.975372][ T40] audit: type=1400 audit(1722442632.646:935): avc: denied { ioctl } for pid=11404 comm="syz.3.1581" path="socket:[33997]" dev="sockfs" ino=33997 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.204994][T11423] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 289.209109][T11423] netlink: 'syz.3.1586': attribute type 2 has an invalid length. [ 289.343295][T11435] netlink: 'syz.3.1591': attribute type 11 has an invalid length. [ 289.344571][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 289.347464][T11435] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.1591'. [ 289.352930][ T5340] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 289.512190][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.844290][T11452] gfs2: not a GFS2 filesystem [ 290.907202][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 291.160408][T11504] netlink: 'syz.0.1604': attribute type 3 has an invalid length. [ 291.167115][T11504] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1604'. [ 291.214326][T11508] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 291.504342][ T5368] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 291.520538][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 291.520553][ T40] audit: type=1400 audit(1722442635.196:950): avc: denied { accept } for pid=11531 comm="syz.1.1614" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 291.597078][ T40] audit: type=1400 audit(1722442635.276:951): avc: denied { shutdown } for pid=11535 comm="syz.3.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.603781][ T40] audit: type=1400 audit(1722442635.276:952): avc: denied { read } for pid=11535 comm="syz.3.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.704308][ T5368] usb 7-1: Using ep0 maxpacket: 16 [ 291.718019][ T5368] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.722699][ T5368] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.727316][ T5368] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.733954][ T5368] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.743184][ T5368] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 291.748632][ T5368] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 291.769437][ T5368] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.776136][ T5368] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.782348][ T5368] usb 7-1: Product: syz [ 291.785824][ T5368] usb 7-1: Manufacturer: syz [ 291.789301][ T5368] usb 7-1: SerialNumber: syz [ 292.226913][ T40] audit: type=1400 audit(1722442635.906:953): avc: denied { ioctl } for pid=11562 comm="syz.3.1622" path="socket:[33532]" dev="sockfs" ino=33532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.273253][ T40] audit: type=1400 audit(1722442635.946:954): avc: denied { sys_module } for pid=11562 comm="syz.3.1622" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.284082][ T40] audit: type=1400 audit(1722442635.956:955): avc: denied { ioctl } for pid=11562 comm="syz.3.1622" path="socket:[34131]" dev="sockfs" ino=34131 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 292.436003][T11570] ALSA: mixer_oss: invalid OSS volume '' [ 292.438791][T11570] ALSA: mixer_oss: invalid OSS volume '' [ 292.441987][T11570] ALSA: mixer_oss: invalid OSS volume 'L' [ 292.459726][ T5368] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 292.466242][ T5368] cdc_ncm 7-1:1.0: bind() failure [ 292.482322][ T5368] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 292.494227][ T5368] cdc_ncm 7-1:1.1: bind() failure [ 292.507028][ T5368] usb 7-1: USB disconnect, device number 8 [ 293.002785][T11594] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 293.005923][T11594] netlink: 'syz.3.1625': attribute type 2 has an invalid length. [ 293.203904][T11610] syz_tun: VLAN not yet supported [ 293.479567][ T40] audit: type=1400 audit(1722442637.156:956): avc: denied { bind } for pid=11611 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.669735][T11636] gfs2: not a GFS2 filesystem [ 293.671300][ T40] audit: type=1400 audit(1722442637.346:957): avc: denied { read write } for pid=11637 comm="syz.2.1643" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.682020][ T40] audit: type=1400 audit(1722442637.346:958): avc: denied { ioctl open } for pid=11637 comm="syz.2.1643" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.855734][ T40] audit: type=1400 audit(1722442637.536:959): avc: denied { create } for pid=11639 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 294.390751][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 294.819873][T11676] netlink: 'syz.3.1654': attribute type 10 has an invalid length. [ 294.823122][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1654'. [ 294.927044][T11683] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25 (only 8 groups) [ 296.180007][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 296.392955][T11765] loop0: detected capacity change from 0 to 7 [ 296.399871][T11765] Dev loop0: unable to read RDB block 7 [ 296.409760][T11765] loop0: AHDI p4 [ 296.411057][T11765] loop0: partition table partially beyond EOD, truncated [ 296.544964][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 296.544979][ T40] audit: type=1400 audit(1722442640.226:965): avc: denied { watch } for pid=11771 comm="syz.1.1668" path="/391/net_prio.prioidx" dev="tmpfs" ino=2114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 296.561930][ T40] audit: type=1400 audit(1722442640.236:966): avc: denied { watch_sb } for pid=11771 comm="syz.1.1668" path="/391/net_prio.prioidx" dev="tmpfs" ino=2114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.724809][ T40] audit: type=1400 audit(1722442640.406:967): avc: denied { append } for pid=11789 comm="syz.1.1675" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 296.886958][T11801] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25 (only 8 groups) [ 297.436655][ T40] audit: type=1804 audit(1722442641.096:968): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1684" name="/newroot/416/bus/file0" dev="overlay" ino=2280 res=1 errno=0 [ 297.656957][ T40] audit: type=1326 audit(1722442641.336:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.1688" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa212f773b9 code=0x0 [ 297.755905][T11839] program syz.2.1689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.783361][T11840] loop0: detected capacity change from 0 to 7 [ 297.783616][ T40] audit: type=1400 audit(1722442641.456:970): avc: denied { ioctl } for pid=11838 comm="syz.2.1689" path="socket:[35347]" dev="sockfs" ino=35347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.787045][T11840] Dev loop0: unable to read RDB block 7 [ 297.800248][T11840] loop0: AHDI p4 [ 297.801914][T11840] loop0: partition table partially beyond EOD, truncated [ 297.804281][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 297.970444][T11853] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25 (only 8 groups) [ 298.123047][ T40] audit: type=1804 audit(1722442641.796:971): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1695" name="/newroot/398/bus/file0" dev="overlay" ino=2200 res=1 errno=0 [ 299.687481][T11898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.737673][ T40] audit: type=1400 audit(1722442643.416:972): avc: denied { bind } for pid=11897 comm="syz.0.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.999809][ T40] audit: type=1400 audit(1722442643.676:973): avc: denied { map } for pid=11897 comm="syz.0.1705" path="/dev/hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 300.012310][ T40] audit: type=1400 audit(1722442643.676:974): avc: denied { execute } for pid=11897 comm="syz.0.1705" path="/dev/hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 300.018676][T11903] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25 (only 8 groups) [ 300.101560][T11898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.116934][T11909] loop0: detected capacity change from 0 to 7 [ 300.120734][T11909] Dev loop0: unable to read RDB block 7 [ 300.123103][T11909] loop0: AHDI p4 [ 300.125040][T11909] loop0: partition table partially beyond EOD, truncated [ 300.478853][T11915] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1708'. [ 301.711195][T11947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.890085][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'. [ 302.120386][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 302.120399][ T40] audit: type=1400 audit(1722442645.796:979): avc: denied { unmount } for pid=5324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 302.508851][T12004] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1724'. [ 302.509854][T11989] gfs2: not a GFS2 filesystem [ 302.911846][T11952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.347254][T12022] syzkaller0: entered promiscuous mode [ 303.349390][T12022] syzkaller0: entered allmulticast mode [ 303.677061][T12034] binder: 12033:12034 ioctl c018620b 0 returned -14 [ 303.683839][ T40] audit: type=1400 audit(1722442647.356:980): avc: denied { getopt } for pid=12033 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 304.214171][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 304.433228][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.441473][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.446297][ T8] usb 5-1: Product: syz [ 304.448415][ T8] usb 5-1: Manufacturer: syz [ 304.450943][ T8] usb 5-1: SerialNumber: syz [ 304.474851][ T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 304.609499][ T8] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 305.188839][ T40] audit: type=1400 audit(1722442648.866:981): avc: denied { shutdown } for pid=12059 comm="syz.2.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 305.199547][T12034] ip6gretap0 speed is unknown, defaulting to 1000 [ 305.338334][ T40] audit: type=1400 audit(1722442649.016:982): avc: denied { setopt } for pid=12091 comm="syz.2.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.614115][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 305.654302][ T8] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 305.657702][ T8] ath9k_htc: Failed to initialize the device [ 305.720357][ T8] usb 5-1: ath9k_htc: USB layer deinitialized [ 305.798456][ T40] audit: type=1400 audit(1722442649.466:983): avc: denied { write } for pid=12118 comm="syz.1.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 305.809098][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.813863][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.821480][T12122] kAFS: unparsable volume name [ 305.823610][ T25] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 305.831364][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.838867][ T25] usb 7-1: config 0 descriptor?? [ 306.029396][T12127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.406326][T12137] program syz.3.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.436594][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'. [ 306.601022][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 306.603943][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 306.628283][ T25] usb 7-1: USB disconnect, device number 9 [ 307.120078][T12152] syzkaller0: entered promiscuous mode [ 307.122553][T12152] syzkaller0: entered allmulticast mode [ 307.442872][T12130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.867584][ T40] audit: type=1400 audit(1722442651.546:984): avc: denied { ioctl } for pid=12163 comm="syz.3.1746" path="cgroup:[4026533173]" dev="nsfs" ino=4026533173 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 307.869662][T12164] binder: 12163:12164 ioctl c0306201 20000580 returned -14 [ 307.892019][T12164] binder: 12163:12164 ioctl 4b31 20000280 returned -22 [ 307.908719][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1746'. [ 307.975415][ T832] usb 5-1: USB disconnect, device number 13 [ 308.038630][T12157] x86/PAT: syz.0.1739:12157 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 308.277947][T12179] gfs2: not a GFS2 filesystem [ 308.464978][T12180] ======================================================= [ 308.464978][T12180] WARNING: The mand mount option has been deprecated and [ 308.464978][T12180] and is ignored by this kernel. Remove the mand [ 308.464978][T12180] option from the mount to silence this warning. [ 308.464978][T12180] ======================================================= [ 309.359111][ T40] audit: type=1400 audit(1722442653.036:985): avc: denied { unmount } for pid=5324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 309.657054][T12193] program syz.3.1752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.701862][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1752'. [ 310.464086][ T5368] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 310.464430][ C1] ================================================================== [ 310.471187][ C1] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x41c/0x4e0 [ 310.474163][ C1] Read of size 4 at addr ffffc9000467fa50 by task syz.3.1754/12206 [ 310.479241][ C1] [ 310.480800][ C1] CPU: 1 UID: 0 PID: 12206 Comm: syz.3.1754 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 310.485888][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.488530][T12208] binder: 12207:12208 ioctl c018620b 0 returned -14 [ 310.490584][ C1] Call Trace: [ 310.490594][ C1] [ 310.497930][ C1] dump_stack_lvl+0x116/0x1f0 [ 310.500046][ C1] print_report+0xc3/0x620 [ 310.502047][ C1] ? __virt_addr_valid+0x5e/0x590 [ 310.504295][ C1] kasan_report+0xd9/0x110 [ 310.506060][ C1] ? xdp_do_check_flushed+0x41c/0x4e0 [ 310.507913][ C1] ? xdp_do_check_flushed+0x41c/0x4e0 [ 310.509802][ C1] xdp_do_check_flushed+0x41c/0x4e0 [ 310.511649][ C1] __napi_poll.constprop.0+0xd1/0x550 [ 310.513520][ C1] net_rx_action+0xa92/0x1010 [ 310.515210][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 310.517204][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 310.519408][ C1] ? mark_held_locks+0x9f/0xe0 [ 310.521524][ C1] handle_softirqs+0x216/0x8f0 [ 310.523635][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 310.523781][T12208] ip6gretap0 speed is unknown, defaulting to 1000 [ 310.525813][ C1] irq_exit_rcu+0xbb/0x120 [ 310.525840][ C1] common_interrupt+0xb0/0xd0 [ 310.525862][ C1] [ 310.525868][ C1] [ 310.525874][ C1] asm_common_interrupt+0x26/0x40 [ 310.525893][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 310.525914][ C1] Code: c1 05 5a 14 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 310.525930][ C1] RSP: 0018:ffffc9000467f518 EFLAGS: 00000206 [ 310.525945][ C1] RAX: dffffc0000000000 RBX: 1ffff920008cfea5 RCX: 0000000000000001 [ 310.553444][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cc880 RDI: ffffffff8bb08480 [ 310.556752][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c50d8 [ 310.559986][ C1] R10: ffffffff946286c7 R11: 0000000000000000 R12: 0000000000000000 [ 310.563196][ C1] R13: 0000000000000000 R14: ffffffff8ddb52e0 R15: 0000000000000000 [ 310.566357][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 310.568283][ C1] ? page_ext_put+0x48/0xd0 [ 310.570033][ C1] ? page_table_check_clear.part.0+0x3a7/0x540 [ 310.572344][ C1] __page_table_check_pte_clear+0x1c0/0x580 [ 310.574362][ C1] ? __page_table_check_pte_clear+0x1ba/0x580 [ 310.576443][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 310.578513][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 310.580609][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 310.583044][ C1] unmap_page_range+0x21ac/0x3c10 [ 310.584764][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 310.586660][ C1] ? uprobe_munmap+0x20/0x5d0 [ 310.588318][ C1] unmap_single_vma+0x194/0x2b0 [ 310.589987][ C1] unmap_vmas+0x22f/0x490 [ 310.591483][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 310.593169][ C1] ? __pfx_lock_release+0x10/0x10 [ 310.595211][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 310.596941][ C1] exit_mmap+0x1b8/0xb20 [ 310.598350][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 310.600282][ C1] __mmput+0x12a/0x480 [ 310.601686][ C1] mmput+0x62/0x70 [ 310.602955][ C1] do_exit+0x9bf/0x2bb0 [ 310.604500][ C1] ? get_signal+0x8f2/0x2770 [ 310.606448][ C1] ? __pfx_do_exit+0x10/0x10 [ 310.608403][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 310.610500][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.612744][ C1] do_group_exit+0xd3/0x2a0 [ 310.614609][ C1] get_signal+0x25fd/0x2770 [ 310.616479][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 310.618249][ C1] ? __pfx_get_signal+0x10/0x10 [ 310.619887][ C1] ? __pfx_do_futex+0x10/0x10 [ 310.621807][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 310.624172][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 310.626639][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 310.628846][ C1] do_syscall_64+0xda/0x250 [ 310.630613][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.632875][ C1] RIP: 0033:0x7ff35c9773b9 [ 310.634605][ C1] Code: Unable to access opcode bytes at 0x7ff35c97738f. [ 310.637245][ C1] RSP: 002b:00007ff35d7c80f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 310.640522][ C1] RAX: fffffffffffffe00 RBX: 00007ff35cb05f88 RCX: 00007ff35c9773b9 [ 310.643715][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff35cb05f88 [ 310.646392][ C1] RBP: 00007ff35cb05f80 R08: 00007ff35d7c86c0 R09: 00007ff35d7c86c0 [ 310.649177][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff35cb05f8c [ 310.652204][ C1] R13: 000000000000000b R14: 00007ffe10c3ae70 R15: 00007ffe10c3af58 [ 310.655343][ C1] [ 310.656703][ C1] [ 310.657766][ C1] The buggy address belongs to stack of task syz.3.1754/12206 [ 310.660963][ C1] and is located at offset 24 in frame: [ 310.662958][ C1] exit_mmap+0x0/0xb20 [ 310.664612][ C1] [ 310.665655][ C1] This frame has 2 objects: [ 310.667540][ C1] [32, 96) 'vmi' [ 310.667548][ C1] [128, 256) 'tlb' [ 310.669084][ C1] [ 310.671664][ C1] The buggy address belongs to the virtual mapping at [ 310.671664][ C1] [ffffc90004678000, ffffc90004681000) created by: [ 310.671664][ C1] kernel_clone+0xfd/0x980 [ 310.678064][ C1] [ 310.679072][ C1] The buggy address belongs to the physical page: [ 310.681716][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803c4f6600 pfn:0x3c4f0 [ 310.685579][ C1] memcg:ffff8880247e0602 [ 310.687356][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 310.690133][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 310.693637][ C1] raw: ffff88803c4f6600 0000000000000000 00000001ffffffff ffff8880247e0602 [ 310.697030][ C1] page dumped because: kasan: bad access detected [ 310.699341][ C1] page_owner tracks the page as allocated [ 310.701695][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 64, tgid 64 (kworker/u32:3), ts 305290412900, free_ts 304774234767 [ 310.708301][ C1] post_alloc_hook+0x2d1/0x350 [ 310.709925][ C1] get_page_from_freelist+0x1351/0x2e50 [ 310.711792][ C1] __alloc_pages_noprof+0x22b/0x2460 [ 310.713815][ C1] alloc_pages_mpol_noprof+0x275/0x610 [ 310.715868][ C1] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 310.718357][ C1] copy_process+0x2f3b/0x8de0 [ 310.720085][ C1] kernel_clone+0xfd/0x980 [ 310.721905][ C1] user_mode_thread+0xb4/0xf0 [ 310.723767][ C1] call_usermodehelper_exec_work+0xcb/0x170 [ 310.726152][ C1] process_one_work+0x9c5/0x1b40 [ 310.727835][ C1] worker_thread+0x6c8/0xf20 [ 310.729574][ C1] kthread+0x2c1/0x3a0 [ 310.731368][ C1] ret_from_fork+0x45/0x80 [ 310.733001][ C1] ret_from_fork_asm+0x1a/0x30 [ 310.734801][ C1] page last free pid 5368 tgid 5368 stack trace: [ 310.737322][ C1] free_unref_page+0x64a/0xe40 [ 310.738963][ C1] qlist_free_all+0x4e/0x140 [ 310.740891][ C1] kasan_quarantine_reduce+0x192/0x1e0 [ 310.743067][ C1] __kasan_slab_alloc+0x69/0x90 [ 310.744967][ C1] kmem_cache_alloc_node_noprof+0x153/0x310 [ 310.747239][ C1] __alloc_skb+0x2b1/0x380 [ 310.749192][ C1] reset_per_cpu_data+0x26/0x240 [ 310.751344][ C1] send_dm_alert+0x1e/0xf0 [ 310.752904][ C1] process_one_work+0x9c5/0x1b40 [ 310.754728][ C1] worker_thread+0x6c8/0xf20 [ 310.756708][ C1] kthread+0x2c1/0x3a0 [ 310.758462][ C1] ret_from_fork+0x45/0x80 [ 310.760321][ C1] ret_from_fork_asm+0x1a/0x30 [ 310.762304][ C1] [ 310.763313][ C1] Memory state around the buggy address: [ 310.765521][ C1] ffffc9000467f900: 00 f2 f2 f2 00 f2 f2 f2 00 00 f2 f2 00 00 00 00 [ 310.768556][ C1] ffffc9000467f980: 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 310.771595][ C1] >ffffc9000467fa00: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 [ 310.774419][ C1] ^ [ 310.777316][ C1] ffffc9000467fa80: 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 [ 310.780718][ C1] ffffc9000467fb00: 00 00 00 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 [ 310.783921][ C1] ================================================================== [ 310.787572][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 310.790173][ C1] CPU: 1 UID: 0 PID: 12206 Comm: syz.3.1754 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 310.794449][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.798675][ C1] Call Trace: [ 310.800274][ C1] [ 310.801548][ C1] dump_stack_lvl+0x3d/0x1f0 [ 310.803606][ C1] panic+0x6f5/0x7a0 [ 310.805386][ C1] ? __pfx_panic+0x10/0x10 [ 310.807311][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 310.809260][ C1] check_panic_on_warn+0xab/0xb0 [ 310.810987][ C1] end_report+0x117/0x180 [ 310.812589][ C1] kasan_report+0xe9/0x110 [ 310.814143][ C1] ? xdp_do_check_flushed+0x41c/0x4e0 [ 310.816341][ C1] ? xdp_do_check_flushed+0x41c/0x4e0 [ 310.818596][ C1] xdp_do_check_flushed+0x41c/0x4e0 [ 310.820798][ C1] __napi_poll.constprop.0+0xd1/0x550 [ 310.823049][ C1] net_rx_action+0xa92/0x1010 [ 310.824898][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 310.826653][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 310.828635][ C1] ? mark_held_locks+0x9f/0xe0 [ 310.830258][ C1] handle_softirqs+0x216/0x8f0 [ 310.831936][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 310.833683][ C1] irq_exit_rcu+0xbb/0x120 [ 310.835081][ C1] common_interrupt+0xb0/0xd0 [ 310.836781][ C1] [ 310.837835][ C1] [ 310.838976][ C1] asm_common_interrupt+0x26/0x40 [ 310.840696][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 310.842763][ C1] Code: c1 05 5a 14 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 310.849957][ C1] RSP: 0018:ffffc9000467f518 EFLAGS: 00000206 [ 310.852269][ C1] RAX: dffffc0000000000 RBX: 1ffff920008cfea5 RCX: 0000000000000001 [ 310.855680][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cc880 RDI: ffffffff8bb08480 [ 310.859058][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c50d8 [ 310.862439][ C1] R10: ffffffff946286c7 R11: 0000000000000000 R12: 0000000000000000 [ 310.865887][ C1] R13: 0000000000000000 R14: ffffffff8ddb52e0 R15: 0000000000000000 [ 310.869309][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 310.871527][ C1] ? page_ext_put+0x48/0xd0 [ 310.873539][ C1] ? page_table_check_clear.part.0+0x3a7/0x540 [ 310.876238][ C1] __page_table_check_pte_clear+0x1c0/0x580 [ 310.878798][ C1] ? __page_table_check_pte_clear+0x1ba/0x580 [ 310.881451][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 310.884259][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 310.886942][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 310.890067][ C1] unmap_page_range+0x21ac/0x3c10 [ 310.892229][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 310.894609][ C1] ? uprobe_munmap+0x20/0x5d0 [ 310.896695][ C1] unmap_single_vma+0x194/0x2b0 [ 310.898612][ C1] unmap_vmas+0x22f/0x490 [ 310.900117][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 310.902060][ C1] ? __pfx_lock_release+0x10/0x10 [ 310.904204][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 310.906369][ C1] exit_mmap+0x1b8/0xb20 [ 310.908257][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 310.910322][ C1] __mmput+0x12a/0x480 [ 310.911792][ C1] mmput+0x62/0x70 [ 310.913071][ C1] do_exit+0x9bf/0x2bb0 [ 310.914836][ C1] ? get_signal+0x8f2/0x2770 [ 310.916772][ C1] ? __pfx_do_exit+0x10/0x10 [ 310.918794][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 310.920927][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.923195][ C1] do_group_exit+0xd3/0x2a0 [ 310.925217][ C1] get_signal+0x25fd/0x2770 [ 310.926995][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 310.928863][ C1] ? __pfx_get_signal+0x10/0x10 [ 310.930518][ C1] ? __pfx_do_futex+0x10/0x10 [ 310.932273][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 310.934623][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 310.937329][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 310.939788][ C1] do_syscall_64+0xda/0x250 [ 310.941795][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.944150][ C1] RIP: 0033:0x7ff35c9773b9 [ 310.945985][ C1] Code: Unable to access opcode bytes at 0x7ff35c97738f. [ 310.948812][ C1] RSP: 002b:00007ff35d7c80f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 310.951754][ C1] RAX: fffffffffffffe00 RBX: 00007ff35cb05f88 RCX: 00007ff35c9773b9 [ 310.954566][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff35cb05f88 [ 310.958004][ C1] RBP: 00007ff35cb05f80 R08: 00007ff35d7c86c0 R09: 00007ff35d7c86c0 [ 310.961531][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff35cb05f8c [ 310.964999][ C1] R13: 000000000000000b R14: 00007ffe10c3ae70 R15: 00007ffe10c3af58 [ 310.968236][ C1] [ 310.969838][ C1] Kernel Offset: disabled [ 310.971277][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:17:34 Registers: info registers vcpu 0 CPU#0 RAX=00007f765b612ed8 RBX=00007f765b612980 RCX=ffffffff843d8170 RDX=ffffffff843d810f RSI=ffffffff843d8137 RDI=00007f765b613020 RBP=00007f765b612900 RSP=00007fff972d0b50 R8 =00007f765b612c88 R9 =00007f765c0f2000 R10=00007f765cc35700 R11=0000000000000000 R12=00007f765b6128f8 R13=0000000000000010 R14=00007f765b601008 R15=000000000004bc1b RIP=00007f765be4f356 RFL=00000287 [--S--PC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555715b3500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b30d1fffc CR3=0000000048b0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff843d810f ffffffff843d8137 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff843d8137 ffffffff843d810f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff843d810f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765bfe56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765bfe56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765bfe56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765bfe56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765bfe5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765bfe5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765c0d5488 00007f765c0d5480 00007f765c0d5478 00007f765c0d5450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765cc3d100 00007f765c0d5440 00007f765c0d5458 00007f765c0d54a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765c0d5498 00007f765c0d5490 00007f765c0d5488 00007f765c0d5480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000001b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe2745 RDI=ffffffff9519a720 RBP=ffffffff9519a6e0 RSP=ffffc900008b0778 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666666 R12=0000000000000000 R13=0000000000000033 R14=ffffffff84fe26e0 R15=0000000000000000 RIP=ffffffff84fe276f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=0000000047b16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=5bd08e076486bb32 5ebae7a7e76c6e4f 5bd08e076486bb32 5ebae7a7e76c6e4f 5bd08e076486bb32 5ebae7a7e76c6e4f 5bd08e076486bb32 5ebae7a7e76c6e4f ZMM18=919d0749d0ecd18a d8a680db1abd9180 919d0749d0ecd18a d8a680db1abd9180 919d0749d0ecd18a d8a680db1abd9180 919d0749d0ecd18a d8a680db1abd9180 ZMM19=b51e000000000000 0000000000000204 b51e000000000000 0000000000000203 b51e000000000000 0000000000000202 b51e000000000000 0000000000000201 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=5ebae7a75ebae7a7 5ebae7a75ebae7a7 5ebae7a75ebae7a7 5ebae7a75ebae7a7 5ebae7a75ebae7a7 5ebae7a75ebae7a7 5ebae7a75ebae7a7 5ebae7a75ebae7a7 ZMM22=6486bb326486bb32 6486bb326486bb32 6486bb326486bb32 6486bb326486bb32 6486bb326486bb32 6486bb326486bb32 6486bb326486bb32 6486bb326486bb32 ZMM23=5bd08e075bd08e07 5bd08e075bd08e07 5bd08e075bd08e07 5bd08e075bd08e07 5bd08e075bd08e07 5bd08e075bd08e07 5bd08e075bd08e07 5bd08e075bd08e07 ZMM24=1abd91801abd9180 1abd91801abd9180 1abd91801abd9180 1abd91801abd9180 1abd91801abd9180 1abd91801abd9180 1abd91801abd9180 1abd91801abd9180 ZMM25=d8a680dbd8a680db d8a680dbd8a680db d8a680dbd8a680db d8a680dbd8a680db d8a680dbd8a680db d8a680dbd8a680db d8a680dbd8a680db d8a680dbd8a680db ZMM26=d0ecd18ad0ecd18a d0ecd18ad0ecd18a d0ecd18ad0ecd18a d0ecd18ad0ecd18a d0ecd18ad0ecd18a d0ecd18ad0ecd18a d0ecd18ad0ecd18a d0ecd18ad0ecd18a ZMM27=919d0749919d0749 919d0749919d0749 919d0749919d0749 919d0749919d0749 919d0749919d0749 919d0749919d0749 919d0749919d0749 919d0749919d0749 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b51e0000b51e0000 b51e0000b51e0000 b51e0000b51e0000 b51e0000b51e0000 b51e0000b51e0000 b51e0000b51e0000 b51e0000b51e0000 b51e0000b51e0000 info registers vcpu 2 CPU#2 RAX=000000000051a001 RBX=0000000000000002 RCX=ffffffff8b11a529 RDX=0000000000000000 RSI=ffffffff8b4cc580 RDI=ffffffff8bb08480 RBP=ffffed10030db000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d646fd9 R10=ffff88806b237ecb R11=0000000000000000 R12=0000000000000002 R13=ffff8880186d8000 R14=ffffffff9012b0d8 R15=0000000000000000 RIP=ffffffff8b11b91f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f765cd79fa8 CR3=000000002ae76000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe10c3b2e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff35c9e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff35c9e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff35c9e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff35c9e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff35c9e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff35c9e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffff520007a5e66 RBX=1ffff920007a5e66 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81edfbb7 RDI=ffffffff8ddb53a0 RBP=ffff88802daf6000 RSP=ffffc90003d2f320 R8 =0000000000000000 R9 =fffffbfff28c50d8 R10=ffffffff946286c7 R11=0000000000000000 R12=ffffffff8ddb53a0 R13=dffffc0000000000 R14=ffff88801f45ca10 R15=0000000000000001 RIP=ffffffff81686634 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555573be9500 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa213c356c0 CR3=000000002d308000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1403e780 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa212fe56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa212fe56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa212fe56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa212fe56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa212fe5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa212fe5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000