last executing test programs: 6.9403886s ago: executing program 3 (id=899): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)) 6.939975929s ago: executing program 3 (id=900): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x16000000b}) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) 6.86985733s ago: executing program 3 (id=901): munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0xd, {0x0, 0xf0, 0x3}, 0xff}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES32=r0, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x20040801}, 0x44891) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8015) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x4}, 0x0, &(0x7f00000002c0)={0x1}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fa8000/0x1000)=nil, 0x1000) r4 = socket(0x0, 0x1, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90224fc60100c034002000600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) connect$tipc(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000060000000000000000000095000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) 3.833557094s ago: executing program 3 (id=912): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r3) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000008c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 3.832245478s ago: executing program 2 (id=913): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x101, 0x3, 0x7}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4813}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800000000000000000000000a00000000000000000000000800100004"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff02, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003b00010027bd70000000000003"], 0x14d8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000040a0108f6ffffbfffffffff01000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020}, 0x2028) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='mmap_lock_acquire_returned\x00'}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) dup(r3) r4 = getpid() sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) 3.60040928s ago: executing program 0 (id=914): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.599971209s ago: executing program 2 (id=915): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') open(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000180)={{@hyper}, 0xe, 0x100}) write$sequencer(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0400"], 0x8) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{0x20, '-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU'}]}, 0x11a) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) iopl(0x3) personality(0x8001a0ffffffff) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2d03ef6e00"], 0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x41f, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0x1f}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) 3.540339798s ago: executing program 0 (id=916): sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="23f2b18cdf746d0636de7f639e2857351edf53b8d22fd1eca7b90c695de8600a5c61a1a05a384f044ef1bb0d3d7adc662ff8316b643fae398564c74f310a8912df6fe5127913e986f9f2d0231457d86bfc6f8158f42cbd5519c27d8a1095cd1028fe04f1c2b27c5a270d0e6fa8f0bbef890bd03e41144a5a909926eb8da7397664ce9c5edaa7609451e97e21b1b6a72cf5fcce11ce5b842fa26b890fa0666b9dd21172703ea0cf90e7a3c3544a3a95ccc76d58a478919180ed3079f2f6e52442725aad83dc228d7c616369a33e3e602bb374dbd93adbc69b01d8f9eab303a94d7c6a5c1c08308032c14bae9ad4c20dea6d09ebbe061ed62bd4ffe867fd58368aad50b8f0d4406a486a8e85e2f1aa6e8f20b3ae1348ee3129b985091ba69ceb58258f3412a3843b7c4d34f744324d8b04a0a6b1dd270790dc248ea70e45ba1ed41e73462ee24843b4a691a9756eee691d8de6168775524885509942c4863a35010990e5a91ca88a036fc772af7f79b4364ae32c4d3679cf34a782af535db1389fd0d7d7192eeb8c3ec65055380a04353d12f874345172f30a724800f5144127e7553e162a037b95be75121eee3027f45816065080af8039601b2414cd2b1a3aba580d0aa62baf64eddc68b1a92f52834fb76d3bd671a49c0155683f04fd3c14a1a399bad68e962a4ba1f0372fd6f0efe062dd57c15c2829feccdb40087ab204ffc06edaf00888de7221f0992dfd8967addca762f20c8fa28df2b516cefe8670333ec5726c2935fafa7e9990b3b1316a415b622d0a208635d6b68a67323a9e31a0ef30d845a9e6857486c94a0f094f09931d1210b068b7e6e0764726ba5ecac28c0f3f72f6fbe2597e63cffce1ecdd7053e15c49b7d9ed9431bc7b31d098e0841198ec838786857e1d256390edcd3917679801433c58dd2411a38da08743931714adf70aed483af9ecfd426c144cecac2456d7970b57c1d1af81f39c2e83fd371d571bf713322cdb606e2994bcbee609c4c6294b4bba750af48603543e5168c9e81d53cc167ed139eeebd489f0baa468099e71ab893112c6ccb62a00d895418dc1f1d44e95612bb911a28f2f8a43107fcc6c191353829a08cba39be28f1322cbda07892a3e149a0b04f05c58540c5eb124a71a9eac47efd1fbd2788343b75b7fe6acb87e353aa1b8f72265253bf447889ea9dbefde6480125a736e3048683fdab7e3d502e4f0d200516ffb2a1864cd59e340bd52bbe42d0c12046ceaa37ed83595e2156eec3b146ae266b4c0631d24e425b74ac9ab8e1762a2abcd71d6a7ec0d35dbde2f25859c91caa34c030f75acb1a4fac37f804090bf49854007f24f82eeb6b43b81b3b3e1c44076f3a31ca73834820084682e8c016082e21d7df16ef686d99b9e437a3646b4d044dc3b5e4386a5dbe092881d8971dbab37ebc99d32e28cbe48b59cae05c7d13cded41831ff899aa4c84154fd169b8cd536b75c5aa47dcad8d976bf3e02e687e533544412e29672824743609be3b19b606c2f605591200055bd62f02d43713a72ec0aa75933a63be1c4037ada5e649f84d2626da0edf946490c83cbf76742f3334a0c9c2ed1cfecb75e46c70f739360f20685ca289ed50098a8b2297cf0de278bab941f9cd4e81991f7101f8f7271eb206ccde6fa014fc4d4568f8f7391148be86bf5dc7a25b17f2b48eb8f97dd6c7d0811ca0662d93839c0e36dba7b62990f22188122f3d0bfd5cf12fdf25aa1481381bba7c43bfd2c49cd6e830beeb30b1e86e6730b4a2b855e1edbdfda9c575a58575ee5647ef25a9a53d3eb80d058825dd8eea300168adf07e395e0c1f36fd776522f7b029c2f37a6f1bfbf54862af1fbfaffca741b40ae41900225c179b30dda0ee98793967aab7e90d6145ade6d1c9f8634f6201bfaf92a9ec769ec2240093df19cede23c9bc1682db61298dc061776421302edb0b06cc5b3621fd74e926f0d96ce2c9caf509ca9f4408984dca97f97504f5edad78650faa8b2475f716bc2dafa032fd8d6f854cfc54a76455a302b680d859208da428aed6daf456ef3f3a46efe579c3e44ba006862004bd0806addbdec043ce26b2f331b7a7e36289ea86eac138f0224a0cc0554b8e480ea2e6f0b2a79357b0ae15fe1510117382e9a0615adca535749b23639bb3afd0a046038e925fba461f4d92ba3ff9416526bc06118cbe219f59650987895bb1f179374d43418ec46d298aad563b9a67628eee1888a74de187cbce211c688dd2e45a0f7c068dd1feb24e6d71c20875f225e31e34f48c7d672fe9353fe86b872546318f2e911451cc5b51ee1c63565306e0a10af7793edacf9705c912e7b459f29225ed934195541eb133e7e46c21ff138a125688d45e00380afb46bf886a5b80ba275a2e2a634c705ab880c7d333593c8c450a4bfd0af3a70f332f6d489d3faf17b3cd536e6d8b80bf3ca0f14a7b7c7a9c85a4413cbd0c371ce64804130ccc42ca8b2197dd0fa58a8af9ff989e5974cc804105d9f5b2c97461c760c3023b6a791a7abc0ae91fe18c02fd26f64b66404268da2e1ccb6f137c5aac3ce126463e302d1cdce5a703be4643be9670f6e47a7b9117235bde7b5d3930a0e95d61e31282a8117a1eca6115a5123c6e76870e563bc09e1f75219bf3c054fa3d831b6735a4aa32f8a66ad21b67a72141d32056a4e52155788c960647497c8514d186d2724f0c3913aa0728dec766d8b9d3f700c47c5ea9b11e70f283ec97fa9b92ac552f505927f92842ccb15f9a0caae6422256c21f8c5b5ab2098d1b4e7e823cde561eba661a057bc3513c33c5da4e363993c361ac8c9ce45437da7e5a7a31aabbd9cf8512ea504c3aa1b1f224ba5ead03bd87e0b8c191edb58cbfd878186974e58abe1c20e5e41880768b22a4ff7b9961e9165ecff9b9f641d8f55b5fe748d6fcd19654ff60d0dbf89a2f573a816f3022edee1192a70763d0684cae689dcb56c64262c28a440e141e861eb4f9eec6d7727204960591b1db79a7164b29bd6fd2123aae36ec1691ae17814649efa29ce7b314b8aadb56490a232903aab11c2ac96c8c18965e68a2bbce14caa47307227b1d2139d4cdea519c51551a568334f9d64c84d3a8c65e25c7ac52f1362af56c6dab12474543776cfdb4c033e138df4c8351c9579d039eaafc7f13c5e86d2c9ae593215d0f6b61117eaa9e10c3399efd25ea839665878a2fee89a8569ba2426e9dccbafd49976963249a4ae9bcfd6b69d7176f3e421802efbc50f1fd0a9108d03cb83ec74a513b21d123742d9a55c45cb436a1982e029d4d1863cd69b497f0d88342795c22ea93b20d88f4c14c4d7295723cef20b89cc44ee46375e2d798583659b04b0ef303901e03c6d80a707c6ab1d912dcfb1f10b19caaeb6b33194840a3ab38627d07011a235d0d2afda0e61c83b33df144d5c7a83be00de16f4769578d21bdd707b9bd71c471372b5e0b555c64945e3fa3e1f638092c0d670a2c92f1bb80e4a2b0a446e5d3476390135620688877c4e0c6e1883c2dd7dfc037eb027ab26ce9f6be88e27c2b40f2b65d426d81fe21b8157059387f1b2897895587abf372f426aeffe50f48a890e11d84fe864de50af2ec1b56718091b5f15b9a83c9a851bc096e215dce736da1b5de1d4b891345ae82c6f93d6456a6e5325fb7f36493fa8647fa1344baaf8191403e3bb42ed99b946d01fe6f0d3aeffcaf4af6f606ac2fa93fb4cfe97a3eb1f461134e6aeff1dd1bd47e572fe8f7a8ae7a520aaf7fe80423c2293bcb08cab7ee83e0b683009127a08ccec77c77d1f62bf73c823832554ca6912c02e78ccf0c0c485a8fd7e524be537420a981fdbb95d30755d057fa1c23d71662c5a973b81372c323b223e9f2d3cdcb82e9acbae883eac8a9ea02f8bd403b9c8d9b9237c13650f0d37ae9073d441ef8f29d0ce19537e965cd6ad0499ffd1b42f1ea3e439a1b7c7da1efe8cca5c9bf790a57c633351044f3e253bfe3e2ab802d3a315ecdde8e4676353cc353063bb385510b24fc796fdcb57bb67a681408d8cfefc664ae75d551734312e18251c9e519ee6f9adeda8e1b49a6d9ee068d77584f6a5b85d8606f7a379907e451708347087e06e7fc69eb02f66e2def63c02e855aabb8b85b0ac8cc12a7ec5073cc9c3ac55a573e5855d31babed955e73d9246a19d8f1a20029ef8f20c878cfbac7d78995c1d4afabcba37f723b3218301b7e6eae8313ad221bbf6cbb01c64cb2abe546a40171d66b1062feedf63d0a748dae1c304899fab6ee459115c65ac01f7c708e2cd163534a73a14432502ae440846ef1f5f0ac4a8ea6067f04b3d8b02cae245b4ae6e3e0764cb628e377de72ea7826be6229be9ebc068c73e5073874187c6a7070e41bb99afba65e16ae104f4e057315aa33d9fda117ba628312ce240c6645b0ee40490ee3b99e7cdad8daced4f545f08419c36ed3777b7f28ce95502beb986a445ab0cd166a1660c5c21cd18cb32c8cb539cbc55b5a0ba0e103a9a6f2a96eb14c43d91d1f01fffb1bca9b50f47e52e434d8af01ede9f72359e7a1c4280f7d817c0837feece0269eca17be8f7bda61073e55ab5ede5dc00482c096121a0d2752dcf5a30c94caba39beb5a13634c6cfa77fdfcc7aa112fee6df94793d9b9c2e2aeaf7b511dcbd0a3ccd980e9d256c2301aa3fb8f012568ff9aeb2280008fee7e3129f7299f614890dc4e50bc2cc50854abe1090579889cf794c95abb875ce45e2314bd669773fe1552dcf1a213168a7f70e0c86537ad14ca7219197178c82246c084740cb82d901102fede317b4098198b2d87e8c990f361c2ecac19774aeb4befadbe006a3f3cc6f518c8e8932c77bb59475b98eab94a09c95f2957fe7c866b1ddb06ec83ebb36c12ca78e11cafb823ea102b87792e463734e3ebc1da2be537cd294737dec7bf530ca23c5a8519f67bcfbc79e006f4c6a5e27d20c0fffff117985353da7b8c960b672b0a009d2488271fe95be0e076d96dcd1ab062502c0f19501d71e24d0742eaad474f2fd16b00647f3dc99b54bbc3c3af54667b954fce5b8d37eef64bbc5c5f224d0da581b875d8666364ca4a5b571341f9b21ce6eb197394c2ff6fb67fb88ad7f8990204613da762adb368d57bcd1071b889f29ada1e6d4c8615fd0d71c257ef74c75d7abeb841a5cb481cf71994815d3f8ae0fc5e854cc7f96b8f4d94f281983fd3dbc0f9b5d16e8a97a9c1d2067b17689f096f59d47eca9a02f547a51f2c74ab641d3855ade10f5b7be0fdff91dc9d3eacb8a8800bc707efa019c2121514e5c290d9112f8aed786960356f567eb2e0f6f73f193e9f9ac17ac84a47a85ad202044a398c32c8bd6a3510a98f1c46a51ca2c57a2b34109cec5c7a2cd100768b2a77cfc0a9365b5266db0e90c0ec797788276492b0c844172403bdb76a5624af642a3c5d393c604241e8eddcdc28bda58c2caf2f45542da3a8c0932e16f6fff3fe9c0c156953e69171918aa981e66d26841f8c72bbc643eb56ddffd133a61f99e9f1a15b495d0b38114816172275705c4312f5c8ed693cea6a9df5e87e3faa70cfadfbb6a604b2312dd1ffe418e98c864af3fb5a37a458d9e52cf12f1dbfe75858080bb320fad9445f92003aa25b6f92458e1ddce65a9c6e658367340d8d1094db7b6f28f8409997f58fd86aa9b573d70091dc0724fc7b7a9b366aca74ab1c73caa8de8b6c91faf9e21d13b20492b124322b5b48b5129de698702194944388586f9483e12ae458faad18e3f45b1737aa6f1538aaeb8e6d287bae12ec", 0x1000, 0x20044001, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x1, 0x12, 0x6, @broadcast}, 0x14) 3.539928671s ago: executing program 0 (id=917): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002300)="851bf0ea44d0c5de23007aa811723ce9d478a626c148adf492d83475cc071b28032cebb39f1631ab1540db2961cdaedf526c1fb54b4fac98e264684023b2867206697bba1ad08bad9bf765527f8edee2d956bb3d9e210b127baf", 0x5a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$loop(0x0, 0x6, 0x82200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 3.539325772s ago: executing program 2 (id=918): fanotify_init(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r3) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000008c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8, 0x80000) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x2040400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4, 0x0, 0xffffffffffffffeb}, 0x0, 0x0) 3.450155636s ago: executing program 2 (id=919): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@delchain={0x38, 0x65, 0x100, 0x70bd26, 0x9, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0xfffc, 0x7}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xdd}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c0004800800034000000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x78}}, 0x0) 3.368361565s ago: executing program 2 (id=920): munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0xd, {0x0, 0xf0, 0x3}, 0xff}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES32=r0, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x20040801}, 0x44891) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0x3, 0x3, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x5, 0xfffffffe, 0x3, 0x1, 0x3, 0x7, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0x5, 0x4, 0x654, 0x8001, 0x7, 0x7dfb, 0x15b, 0xa, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x8, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x3, 0x3, 0x0, 0x7, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x2, 0x0, 0xd12e, 0x6, 0x0, 0xdd7, 0x1, 0x3fe, 0x200, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xc1a, 0xa, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x1, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x6, 0x0, 0x3, 0x5, 0x1, 0x4, 0xfffffe00, 0x5, 0x7fffffff, 0x1, 0x5, 0x8, 0x81, 0x6, 0x7b, 0x4, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x3, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x800, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x81, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x6, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x1, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8000, 0x4, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x2, 0x2, 0x0, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x2, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xff, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x6, 0x3, 0xa, 0x40, 0x7f, 0x4, 0x8, 0x1, 0x6, 0x6e, 0x8, 0x40, 0x7fffffff, 0x6, 0x1, 0x5, 0x1647, 0xe, 0x7, 0x0, 0x8001, 0x8, 0x0, 0x4, 0x5, 0x69, 0x3, 0x5, 0xfff, 0x6, 0x2, 0x5, 0x1, 0x7, 0x5, 0x9, 0x8, 0x36, 0x69d, 0x5a526380, 0xe, 0xcbd6, 0x7, 0x4, 0x1, 0xd, 0x5, 0x3, 0x2, 0x1, 0x7f, 0xffffffff, 0x2903, 0x13272278, 0x8, 0x80, 0x5211, 0x3, 0x400, 0x2, 0x7, 0xe9, 0x5, 0xffff, 0x2, 0x1, 0x7, 0x3, 0x6, 0x80000001, 0x9, 0xc0, 0x8, 0x5, 0x81, 0xe6, 0x7ff, 0x1, 0x9, 0x5dc, 0x101, 0x3, 0x5, 0x4, 0x1, 0x9382, 0x0, 0x4b81, 0x0, 0xfffffffe, 0x0, 0x8, 0x3, 0x400, 0x7fffffff, 0x9, 0x7fffffff, 0xa, 0x7, 0x4, 0xffffff86, 0x8, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x1, 0x8001, 0x7, 0x100, 0x16ba, 0xa568, 0x2, 0x4, 0x9, 0x8, 0x0, 0x8, 0x0, 0xa, 0x7f, 0x8, 0xe41, 0xff, 0x6, 0xd, 0x1149, 0xe, 0x1, 0x6, 0x3, 0x2, 0x4dc, 0x3, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x2, 0x4, 0x80000000, 0x4, 0x80000000, 0xfffff635, 0x1, 0x2, 0x2, 0x9, 0x0, 0x800, 0x2, 0xe59, 0x8, 0x15, 0x200, 0x8, 0x2, 0x7fffffff, 0x3, 0xfff, 0x3, 0x4, 0xbf2f, 0x8, 0x3, 0x3, 0x5, 0x31, 0x40, 0x9, 0x10001, 0x9, 0xba, 0x7, 0x80000000, 0xfffffffa, 0x40, 0x414ff9ea, 0x2, 0x68e, 0x3, 0x4, 0xfffffff7, 0x6, 0x0, 0x0, 0xc3, 0xd5a7, 0x9, 0x7, 0x0, 0x3, 0x0, 0xdb, 0x1, 0x7ff, 0x4, 0x5, 0x1, 0x2, 0x10, 0x1, 0x8, 0xa00, 0x4, 0x8, 0x1, 0x1, 0x47, 0x8, 0x54fef146, 0x5, 0x56, 0x0, 0xffffffff, 0x4, 0x101, 0x7, 0x2, 0x1, 0x2, 0x6, 0x2, 0x1, 0x8, 0x3, 0x8, 0x1000, 0x7, 0x38000000, 0x7, 0x800, 0x7f, 0x6, 0x5, 0x1, 0xd, 0x401, 0xf, 0x7, 0x2, 0x7, 0x0, 0x6, 0x401, 0x2, 0x101, 0x4, 0xfff, 0x4, 0x8, 0x6, 0xf]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8015) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x4}, 0x0, &(0x7f00000002c0)={0x1}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fa8000/0x1000)=nil, 0x1000) r4 = socket(0x0, 0x1, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90224fc60100c034002000600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) connect$tipc(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000060000000000000000000095000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) 2.979628132s ago: executing program 3 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ndctl0(0xffffff9c, &(0x7f00000000c0), 0x40202, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000040)={0x16000000b}) epoll_wait(r6, &(0x7f0000000180)=[{}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 2.498468299s ago: executing program 0 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7957fbdbfb2aa975531396fdcd06430f49d3102697a185091e299fd98504173205364a390622b72d5b169249a81bc558643f18c4fe15d272375fec5f59124a968"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r5], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x0) 2.06268484s ago: executing program 3 (id=923): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x844) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) syz_usb_connect(0x4, 0x5ee, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x3a, 0xe3, 0x29, 0x40, 0x403, 0x87d0, 0x94da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5dc, 0x2, 0x5, 0x28, 0x10, 0x1, [{{0x9, 0x4, 0x32, 0x9, 0x0, 0x4d, 0x5a, 0x34, 0x79}}, {{0x9, 0x4, 0x38, 0x10, 0xe, 0xc0, 0x56, 0x96, 0xd, [@hid_hid={0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x8db}}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0xbb, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7f}, @generic={0x6, 0x23, "4ae06ef5"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xb, 0x9, 0x5, [@generic={0x8d, 0x2, "e5bc659cf83912c3619602091b05eb75ed58ec0f945423879817c1570f9a05d26724ce6ea0a664d570b15e2186ef33c264c05b175bf5f6fb7b81f41fe8bc378d1952d28f9be424159109b36273de0432c93cff7299dd725e2d14d6147c8e1933b029a7e6ddca2a73c52f1033de22441d6aefb7ca896d6d00e8d618d7151e8aacf21f9f661f50f1803b8b0c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x7}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x7, 0x81, 0x7f}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x8, 0xd, 0x2, [@generic={0xf0, 0xb, "e1e660778763923146de98c07749738c556a4c89b42a72faf2e3f994fecb9bade3189bb2e1a9d960ac72c3072809cbd8213b8923f13eb7373b46b888792f767853158190ed2cfb1fea727e8c8020d8de49e8ac74751e5bd87f3c6cc0b66f1f51e16e1ee5c5c54f46a66793efb249cc4ef53a5522a1b986571a59cad69e2754f9829ff92aaeedba9776d049505b5075f15cffc3cda6d0eae9df53f047da8055ace9c00a684dcfd4fc462e007c228a40e211bac7b28c0f0824a5745dac623f6a148fe8c50666601190332d42bcf0d0e7bfa86d9eb67939dcd1b95f3339326e6627fa7e5530782ff84dfdcba37fd2bb"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x40, 0x6, 0x48, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x9, 0xfc, [@generic={0xfd, 0xb, "5615cd7d27899a1e4155876bcf39d4ff4c34cbcc705c22c2b04ea12024a687d5d203eb66e94d332ac22c161fdac32317c187eb90550923557373a9c1d46eae68472e4c188438bb90721f453fc4f614638dd6c380c3c5ae11a611d51cb7801ee4910264983d572e0b70cf87b3ac9adc6d08deb606e3cfc4f3e402658e96745dcf7ef6dedd4496c36b9884788f759e3eddad6d5a23337b36260dc146756d1a78ce9d7398117ca8490fb0dca451a3222530b067ec55194f47cf621b554f72f15a058427fe004d8c69b72b361e2f1cebac62c6ba12d92b1d4e37610ff7952a56bec7083f8268bcd2c7b262843d7abba53ea924ab0d41b911c6f1e4bdab"}, @generic={0xbc, 0xa, "67cc0208505a91f46de968515ff89a415eaa1a7450d19c2818e4b16ab6e5adac5330038e68a1490f18699832dc401e8ca0915c48260ebbc114ea757106305c39cd392f69cfc7377ad1cba047cfa4d0523d573b6ff7d62ba8be6f3b6f67790f67b1adbee49983259d563c905e68cc3d77d9b79930ae48dc8f3d22ccecbedb26c37bcb32156b5b78f217d763c35209d3188096caedddc4625a17b6c997c07ca7980911ed12adf65712a1c5e30bd4cd61403ee166922963a1247ed2"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x3, 0x40, 0xc}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa4, 0x5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x9}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x3, 0x0, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x3, 0x9, 0x0, [@generic={0xc6, 0xb, "ec7f28ed03efbc6f8eefaf83a254ba8ddecd527ad645b4269de4724d79c7f15ab14c5e9778f8443bbb9c45dbd80dcf8195e72445c2fcc365306bb8a46027eac3f2da5efb690145e3ad45c6b61985ee8789df0439c78586cc0a8156ec9cb9525a60fd09a21f0dca2d259740275bcec0ffb9bfcc73ca21e4c79cd731fa7e96107202f8eb54d019af66d7eda8c1b30aeae1309063f12eed378252619e291e21d2c14892a418581fac64aea9a4aff3f47063bc43ab193a02dee0b3dbcdb872a3eaa9555db6e7"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x19, 0x6, [@generic={0x5, 0x1, "9e0621"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0x1, 0x9, 0xeb, [@generic={0x28, 0x22, "b4aa2a915cd5b97024fea61650a55d0be770c1bf633f97141f3726d0f8933b412b4d75767b29"}, @generic={0xe1, 0xd, "9b3822dff63daf5a2ea0a54ff85935bc7010d2ae9b73e6de724c140a7f93ef48efbe4ec059d60468cd5571dbd49343d7294a308ba6c8115b7c32a634fff1d51ab35982df5c22b05a7f4d94da4e0bb217c6bebadf8729779c056d41feb1248ce61f563da8827ac992b08a8c257a1fc0e90eb085abedbbce22b76de15541adc0e1071d5913564cdf1d0eb3ae141b0b99d936130cf78135b95a621e4438704ef5e320467f23768bb16342ead307a34a4326f43c660e950176d94e73392ac69a1828721ddc1a76b447c7b1464de89b33549cb5aba07075813e160946de4029f1fd"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0xf, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf9, 0x3}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x6, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x91, 0xff, 0x1}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="050f410000"], 0x7, [{0x101, &(0x7f0000000ac0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3009}}, {0x48, &(0x7f0000000c00)=@string={0x48, 0x3, "cda5cf96e07654ee025d75fa55585f6846cbf610041252b730da629f3948377bee117a85d8ebc1b2686806179320c3ef53d60238be10850a783702f95a5ddf37287372bac692"}}, {0x3f, &(0x7f0000000e40)=ANY=[@ANYBLOB="3f03e7bdc6f610d8801f52418b9a9b96a6e642b7d313cec5d9557a3d263ae60d5251028a8c1131776cadbe56410503e7fc231112b1c5fb591e51cfc63ccf773ea904d3ef641f9e45594a54844fea67c65ea4bf35a04138e0b3bf2ed18920ddf4041d7419b5ff7e99e220db11f752791c0ac55866aa3b9ecac804871f5e8d22011ff2854b8070068a0aed89ba0179216c44dca45e2e96e47f55ccdd6b04efe975fd35ca908f60b49641d0fc081b7c57830cc9d841d7b370633589d7c7e432455e494edcda7af2b27899b77a9ae6c938d40627b729aee1ee6ac40188a8e65ed3167fbc0f12624fc5fd6edd4c2c14f2b29200"/254]}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x406}}]}) recvfrom$inet(r0, &(0x7f0000000d80)=""/115, 0x73, 0x100a2, &(0x7f0000000e00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf32(r2, 0x0, 0xfe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000001c0)="26262e0f01ca360f23e90f20e06635000040000f22e064660f388153020f2114660fae740e0f011a0f01546866b9800000c00f320f30670f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.696897188s ago: executing program 1 (id=924): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x101, 0x3, 0x7}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4813}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800000000000000000000000a00000000000000000000000800100004"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff02, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003b00010027bd70000000000003"], 0x14d8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000040a0108f6ffffbfffffffff01000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) dup(r4) r5 = getpid() sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) 1.380077891s ago: executing program 1 (id=925): ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x2) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x1) write$binfmt_elf32(r2, 0x0, 0x6c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) writev(r4, &(0x7f0000004340)=[{&(0x7f0000002080)="4f7f61bfe7ec271202403a540b524a03bda1e44111dd69d3924090d27ac2f6b2c654d94690a10a33d0d750dfd480537cf143fe51614e6ef378570b0e4de812be0039dfc4059b1678612802443de1867e8b6f02bfad591946856fa253dc218f1855ec05db98f30013c81d0a3844b197d321ef6a7914017cab12f329503ff3dd396132d7ee303ed39294cc5ca7f4cc6d041ecbda420ac8fe2831f39493794144926d8e2f7c5bd6e6778946a484dac79ed07c6652c7377541019517454e0483cc3fda284fc3a355815e14c47c490df8c17346e824e1ccad7ceb0822af74403ef2425a9aea91ac785b17c48c1d312e62372c15861af4be05a14636a7722bf4946a5b2b953aa02c27626c2435dc8da6048a9cd130adeaae21a278267f33810369658fad3449b3d981d405283e111d39b4684269e23bf1b9bef475774ad846d3474a494ea09953add988d827a9cb4085200753908a910e7c5df36af311cf5afa54dcf1206c2f846e455497ce782bdee335f3ab4a20fa6a1805b2b06caca9258e7f5cc7bd285d23a415282abb776369418a2dcb40b670decca0a3ffc2e2b2466f54c75c7534684c79e2a347cd7b7bffb51221c1dde0e0b66746a62078aa9cb15f8ccf1784010728b6ae6897069349a7cbb0ff158d597639fc87b9a82873973f485b9ca9021615eb5a83292c3a55d241e9129bc14c790e65cf762665e8cf7a9647a2f2212cdf6d96eae4af485e40974e064ae39392266651670b631855f884bc37d4c65f239dbbaebda30ca4319ff755bf0540d17d1d6d2b6bed2ccb98fead22075372f2f1be61bec98aede702e16614338298945691297220c14d95cf9b19bead137656d2f14979faa46ff6ab2d65dbac4557999205ae4162d818e7d75f4aa5a1dae8b9ff23678a0c22398387bd8b7ea6e2fb4e0abb79bf711208a082c785b05254492d041f7b7679e3180527c526ef28f6d353cc77f415a5922828b670ce5821452a77aee3bc79a9685a6f3d82e3e062f660f007ee7b1b2a33597b8a30e3899aa9ea61476547a678d01a4e74851b8b0bb560ba74dc5820b359ac5b20cfe94b832ea4084f7cf56a3cb6eeafac8d54545de5726e887ea6a40b2be6455fa38e9cd1d28abdbce2ea0aa6e96a78ddd14292b4f9470c48487f885c398f14c7e0133793b1489a6b68ae19a3c705f057b62fdb853e8088790bb220c46bd0248f740c5aa89dddc32990315599832e71caac29bfc337b047877fdcf89a9d1d9675dfae684511d405cedcb887c336dd4125e87c845a091c519c3b1520490198b0cd5f045fc5f12b49efa40e2798faeb304a4e080ad159a7d9b8962ef7d46d4e0b16f71f214405e7f3bffcfb635bf929f7a0e14eb18e14f07498a84ed47e5c18c61be6a87160bfbd1d1965112030525d15f2ee992513c8752a18b84314461bcfdc3027cc8be0d312d5efdd29d20257a079d69bce9e5da4f082e930325db1e3d66659493fb3e12dfdf77090a75d5273c2ecd8a94b5a4cd1e81716321be6925f9192ec75118aee50a249235d33d90c8566ca699921fd492e7294147ace7e90ca2deec0d24c777d7760ac68e6a29c0573b32e6426c212a48c3170e990e29961fd9b836a4f6960948996d4e5432e999ca7424e366c356d6e85e251223c082475f001763fd20b84d7cdfc0e10fdfadfaa36e89a91337337e15d8582db18162ee9e68fbbcc630cb51e47b07acb020f289b4463fa397cd3cc669c9e7af86d3d5d3b73e00156eb87f08b76cef098ff335af7b7df9f84a7644e535c0ec8d99324833339f3e0dd779feb795df57a4a932fbdf85f21f7a15617f481b426de4ce4f2cf652b8056e9a4f4f0e4871c9e65a5a9dcc50b5214e93c2aa2a9421d05e5ebabd290acef4d1cbb32e50437332f7c5ed993b7acad061708011c404f0b16267c7ee733b8e0869953e4a42bee37c1100ae40a357f79d97b1426aa5df0e5e82b0e8badc7ebb913d2f3c294e42e49ed52d49a8883cb767954ace21e59db96df1c64cc8ad22cbb092e4aa4c81fb6204ebad156abec7ae0592c6fae90c25855761ac21dbe4a7b5b770f9d8d1cd5be20af130c6eb0b217575a68f523cfecce8f37faa7fbaac6b8dad9dae8e518dd3ba16d57b1f4019418b506e9d36fe1faa8c86a2bae1f7c5b8f68acff88062a3f7ea6fe6de7bbbd7d1f6a3d2ee58270452037ae10788b032b466b38efc1785bf969a7e5db48474ec98f22213838568204d5fcb547b37a2839ddd26efa91ae8a616760376af70bdc24eec2e13bb6e146ad79624ce8c07320af8688de2ee494e1f05224fbf3504f803ed332b72268f241491b7020f2436796ee0ce6d322bbc808d75be75578d36cde218ad791bc1e4e0f66cd4660206eba2ce8145e62ee6637d06efb25b93c4f3ed81038f625a25047eef7914b35c9884fe7751968a12b79e72c072204bd5dbc5f2332fdaabf9ed2b032a8062e0a3ff5a6d0ae4e9ac1aad156b75983a2747b28419752080610460f56539ec08cc4aa5fd669f1968ef5d9f55746aef7b7d868258dcab3442afae072c0e787c50181168316a4a30dda37a03b9aa0b7f59a02b020a126478e41a4b4c28ddff798e3a05319a682c2aa90790cbf29e2f8d3c594b47a0d71e0187d56155fe001e7703039cb8f7a3e1618ce9f59daa25aa3a3f3acdf177e6b7fd17e2a3545d81596163171dfe61fb4acbe291c5b1658d6c966b9d5c69c202da14020cf104d5d724af560cd4124a5fc8b11d7f44dee0352469afdc2bffa0272d9961b766bf082771f7a124c35ba377191f1bf907887f572dc2e535c3fae938566eff3e4b65223441ded0b30cce86a270eeb107db361669561f2f480deda7e299c24c7ef6e8cefaf93ef62bed847b213c30d12355aead8750abf0f4795010ac2e4d2efbb6587851a9e046dd19b86e3d8450ebb39976e8f95a5a875148e8534c8bbfb68432dc30b866e472d95aaabcb67df21671b8c99db6a1a99063a52471a3a9b77b07a4c7ba1238bc13ef143d4f7690048c47cde1b8a1f808d6e9d21864df85d8155fd84db4ae77bdb5104256a1aa9b2ea096debada1d27f3dfc0cba2734e844cedf6254b2985dabc61b018940c4590a73ae1b60bed7bfd9aa2dcbc44c01c9ea4df213ab2e34b1cca8e6e583321ab2f86174495affd273c94475069c843b7644c3a8e1f86bc93f8e4d4f45a0a74481914dc316a07f5afb9f0543840338c68cb1e67ccc9b0170cd62a75214ef9907663efb86b655a55d5eabb9a89f0e1620c34cba32b585a2d9cf0656f4d8cfe5e880dc4d741a344cb48d3ca3c1ca8efaa915d5f0ce5a0b47a0379bd4b3b50a3455e21655bd1214837b640a11bba8bdeb431d70e532ad2be3ed7a2ba75db09929b10cd12a6d8970a4c2501a4299a616d09fabad2a42a5ef9e0211e5810e8521382af00538b8f6381f7c02dc16de0224c6916238f38fbe30788d996b62de4f2560aaf792d447ec227d949131715bd07b97b1a57188cac47b41c0be2f09e3f85b3f8b18e2b9ed4cee4d89d855bf55c5fd019e9a83778ba98f33146889fbb654edbc39e7346edf04f7514192a6482315e2c0d4e6c2b11cd363fdf1a4f000d284a9a835519d89dac9bb9e54b6675f6a120ff10be0fd5972f2a6d81c7dd8be05de5a4587b1b40b4aab3c7b14b6fe5ab23486626a4f6fcf322b6d5890d17a48d38db3f922b701e66d82bb72dc022a8f55928f885ef206de452b9f04330e536ccf93f070ff062a821b8d980358f7393aeef2b1a4eb96dec0e5d211f5be61558814342dfaa8e5ba6964da137e34a8ba5a969d0a5500e6eb6e7be5ba43a6eb4909ab88adef2e70849f0e1c570ce3a832719d31973f9b456e424f9467c4a11f526f629ea47300b2ee3604a9df0561404c9ea7047ea837e99937b67228393404b3a7c47a3018ab50858ce57757300693a68507707c22a47db614d034b690afed59c149ac56a619df5a71cc7d923abdcb4e1dcb97d1aa721f9f909d86f8f050205f4d44ee4429a3044271a2cdf1784be6c14ec4a26395bccc745dec421605baa3034da052dccbe3fb9c32e5d2aac75330d7bdccd7c67986d39d7db308832b3f3ea97ca4442b97ef9ced8d959ad0fc62dec7fc0bdeaa10334bc05d38a02f71d35f4e2e13bdd89a24c7e353db1a1ec582fa041653a22fd6107ed588c36f22b3b6cf7d6e0fa0d26037173ca881906935a8b0fc05b26974f00d9f56b64d39ff45870e4f9022375a494c6c6fdcccc0382914bc62ec16786f431eaddd31dbf348e21746c25b23c83ca9993d21522eef91a43c111b91a9e841c27ae343154a16efe4ca71f684d52cd126193652fe00f3b24b22e05eb492c543074b8b67243547be52f9ecd4321527d65dc354d98cdc8bd381c8a6e0b41342f0e2c4267cce1b310006e1d4e178a3b15e9d7df13b5461e493589860eb26638213b0b1a6acb90648d09b6b4430aa42757ffbcb245d78476ea7d7e2a69e148fb3363777ecf65f7f3c72ed7a3b9cccdb652431c2e8570a09741b4427d1b900629a2042ea9496157e4872af97fd43d8a4069c518e1165420a7ee1ffb5e05fd2009f2930533ef681d420949c43fb1ccc99a2d973f738227144e63d573dc0493e83d4dc46df2a2d55aedeb5f68a6a45762043731728d816410bee717c8ad1a158f82e1d3d9084ab9d38e833378f851ac71a57d87032fe835231a223d38dfde394b66c6c6c6b8879a29268b7536a754fc052373843ba3ac26ccd144c1f92458b7b3794cf0e465c8c90fe04c408867c4da42f445a9b334ab3614573620799875ae9e81fd3021a34050b8818744245f22234d2b9292d900b17793799838d66ba62fb411320f21b6bb4fafe3f5ff8f842f4e202d3ddd93cba5d982c70b5bdd43b8a616f3efbe0fe3645434d207ad6e72b1f5a533e65043d87c77ce8280fc6df6fbb0faf6b7f22252c8f184b8eaa213d5f5d04172c3718cd40cb8c1ba51df77b0af828aa43b30dbfb8965a12735810b68bee5cfc5b6f000dc37e086fcda438f18f809819501a8496fe61dab12ea2284c0740b1f9ca8e5555cc2d2c2da11ddbe88c8bcd308e48e50f89b5d18c30e7aae1dc8d05cb10b5b8d8db644662cb92cc10cd616639c17b57f1976b9e5f15f6636655a0ae44743e684b68afbb7f90a90119a20ef68c7006d47f775ffe7735582c78900b2f15b945ec396d3206fe3a639723a4a6b4fa16c175b8f82f4cc1f5eb7d7a3bec78231871e346f4f79186d2c1279ed8f60725f2b6a200b88879ca2d769692b5b32d12cddb79d1398aa728e1781336d25183dc66ef16aaea41cec5b8c47b0b0f19fd852f664b4682a5d687f2668cc7dc74ecb74d63ae04c3a04bc88e92973317d7d38dce7575f516c29fcf2eb880e2708b51f61c9d5995a4d9fc51e27c3b363468259eb5a1a995fb406c58922d5808abda405123fbe1934c4d014dc13d61d70458246f09023f1e31fbf9b7ca88256a2b1b10d9a75795e30631132418c11c36554382aaadd9a43007d9768dd191813508ae99dc61b1ceedf705e7a3b3c839873469284e65e039d302c991a09a08e5295b24c29c8226b175b20fc56fb68ece0c7365f8eb32597caf7b64fd610e157ec205b7230cf226b740d384f6964bda48a4eb7c254c7f8eeaecb319cdec2d34101ded9e9c4de6d0f6add74513bf9c24be055807243d06937f21c164786749452b356d0b5a11a52182b6fb7da316e6ea5ecebcbf76c09526a069625cccbb7d4b66d3bd79461189af73ab3b5a0fc049049fab02cbdf8f5c20dbe15d21c12561a95caaf14418901e", 0x1000}], 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 800.312135ms ago: executing program 1 (id=926): sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="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", 0x1000, 0x20044001, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x1, 0x12, 0x6, @broadcast}, 0x14) 739.065038ms ago: executing program 1 (id=927): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') open(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000180)={{@hyper}, 0xe, 0x100}) write$sequencer(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0400"], 0x8) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{0x20, '-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU'}]}, 0x11a) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) iopl(0x3) personality(0x8001a0ffffffff) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2d03ef6e0000"], 0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) 679.988815ms ago: executing program 1 (id=928): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@delchain={0x38, 0x65, 0x100, 0x70bd26, 0x9, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0xfffc, 0x7}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xdd}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c0004800800034000000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x78}}, 0x0) 570.203163ms ago: executing program 1 (id=929): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x10, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="1c0000005e007f029ea69801d76ab0a272a29a6810a788bab6c95f79", 0x1c}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0xa000200f}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 289.960712ms ago: executing program 2 (id=930): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002300)="851bf0ea44d0c5de23007aa811723ce9d478a626c148adf492d83475cc071b28032cebb39f1631ab1540db2961cdaedf526c1fb54b4fac98e264684023b2867206697bba1ad08bad9bf765527f8edee2d956bb3d9e210b127baf", 0x5a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$loop(0x0, 0x6, 0x82200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 680.032µs ago: executing program 0 (id=931): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) 0s ago: executing program 0 (id=932): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547e2db80000000000000002", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_io_uring_setup(0x5ee7, &(0x7f0000000280)={0x0, 0x2000000}, &(0x7f00000008c0), &(0x7f0000000180)) io_uring_enter(r1, 0x5089, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r5 = dup(r4) write$evdev(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c002000020605000000000000000000c99e000015000400000000000900020073797a31000000000500010007000000050005000a00000800000080080008400000000015000300686173683a69702c706f72742c6e6574fb000000e691682afb26efcd2f68bea28d550911e16247a42c84d06aecf3aff8ba3bcf7a7d6e"], 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r8, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x48, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) unshare(0x22020400) r9 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0xfffffffd, 0x2, 0x3, 0xa, 0x0, 0xfffe}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r12, 0x400452c8, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r14}, 0x10) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 267282][ T6348] ? __mutex_unlock_slowpath+0x164/0x650 [ 87.268764][ T6348] ? fput+0x30/0x390 [ 87.269843][ T6348] ? ksys_write+0x1ad/0x260 [ 87.270992][ T6348] ? __pfx_ksys_write+0x10/0x10 [ 87.272229][ T6348] __x64_sys_bpf+0x78/0xc0 [ 87.273375][ T6348] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.274706][ T6348] do_syscall_64+0xcd/0x250 [ 87.275847][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.277334][ T6348] RIP: 0033:0x7f9a2457dff9 [ 87.278471][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.283957][ T6348] RSP: 002b:00007f9a25378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.286005][ T6348] RAX: ffffffffffffffda RBX: 00007f9a24736058 RCX: 00007f9a2457dff9 [ 87.287964][ T6348] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 87.290381][ T6348] RBP: 00007f9a25378090 R08: 0000000000000000 R09: 0000000000000000 [ 87.292733][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.294737][ T6348] R13: 0000000000000000 R14: 00007f9a24736058 R15: 00007ffe8be6c468 [ 87.296683][ T6348] [ 88.058799][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 89.021611][ T6372] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 89.023819][ T6372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.035805][ T6372] vhci_hcd vhci_hcd.0: Device attached [ 89.051566][ T6372] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 89.054052][ T6372] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.059588][ T6372] vhci_hcd vhci_hcd.0: Device attached [ 89.067316][ T6379] usbip_core: unknown command [ 89.073281][ T6379] vhci_hcd: unknown pdu 1196444672 [ 89.075841][ T6379] usbip_core: unknown command [ 89.078360][ T1102] vhci_hcd: stop threads [ 89.079830][ T1102] vhci_hcd: release socket [ 89.081506][ T1102] vhci_hcd: disconnect device [ 89.144501][ T6386] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 89.146814][ T6386] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.149941][ T6386] vhci_hcd vhci_hcd.0: Device attached [ 89.171156][ T6386] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 89.172939][ T6386] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.176986][ T6386] vhci_hcd vhci_hcd.0: Device attached [ 89.184998][ T6390] usbip_core: unknown command [ 89.186709][ T6390] vhci_hcd: unknown pdu 1196444672 [ 89.188503][ T6390] usbip_core: unknown command [ 89.190369][ T1100] vhci_hcd: stop threads [ 89.191969][ T1100] vhci_hcd: release socket [ 89.193380][ T1100] vhci_hcd: disconnect device [ 89.206703][ T6375] vhci_hcd: connection closed [ 89.206908][ T1102] vhci_hcd: stop threads [ 89.209269][ T1102] vhci_hcd: release socket [ 89.212098][ T1102] vhci_hcd: disconnect device [ 89.287603][ T6387] vhci_hcd: connection closed [ 89.287718][ T1102] vhci_hcd: stop threads [ 89.290284][ T1102] vhci_hcd: release socket [ 89.291635][ T1102] vhci_hcd: disconnect device [ 89.322129][ T39] kauditd_printk_skb: 107 callbacks suppressed [ 89.322140][ T39] audit: type=1400 audit(1728188112.291:480): avc: denied { ioctl } for pid=6398 comm="syz.3.275" path="socket:[12556]" dev="sockfs" ino=12556 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.330673][ T39] audit: type=1400 audit(1728188112.301:481): avc: denied { write } for pid=6398 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.363694][ T39] audit: type=1400 audit(1728188112.331:482): avc: denied { write } for pid=6400 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.575013][ T1294] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 89.674850][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.729765][ T1294] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.732812][ T1294] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.736302][ T1294] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.739308][ T1294] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.744228][ T1294] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.750265][ T1294] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.752958][ T1294] usb 7-1: Product: syz [ 89.754440][ T1294] usb 7-1: Manufacturer: syz [ 89.758584][ T1294] cdc_wdm 7-1:1.0: skipping garbage [ 89.759971][ T1294] cdc_wdm 7-1:1.0: skipping garbage [ 89.762199][ T1294] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 89.764179][ T1294] cdc_wdm 7-1:1.0: Unknown control protocol [ 89.817706][ T39] audit: type=1400 audit(1728188112.791:483): avc: denied { getopt } for pid=6407 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.834843][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 89.837651][ T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.842103][ T35] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.845587][ T35] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.847806][ T35] usb 8-1: Product: syz [ 89.849072][ T35] usb 8-1: Manufacturer: syz [ 89.850331][ T35] usb 8-1: SerialNumber: syz [ 89.852471][ T35] usb 8-1: config 0 descriptor?? [ 89.854604][ T6406] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.912715][ T6413] fuse: Bad value for 'fd' [ 89.962300][ T1294] usb 7-1: USB disconnect, device number 8 [ 89.989960][ T6395] wireguard0: entered promiscuous mode [ 89.991987][ T6395] wireguard0: entered allmulticast mode [ 90.067732][ T39] audit: type=1400 audit(1728188113.041:484): avc: denied { write } for pid=6405 comm="syz.3.277" name="task" dev="proc" ino=12186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 90.074880][ T39] audit: type=1400 audit(1728188113.041:485): avc: denied { add_name } for pid=6405 comm="syz.3.277" name="freezer.self_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 90.085180][ T39] audit: type=1400 audit(1728188113.041:486): avc: denied { create } for pid=6405 comm="syz.3.277" name="freezer.self_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 90.090730][ T4773] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 90.092488][ T39] audit: type=1400 audit(1728188113.041:487): avc: denied { associate } for pid=6405 comm="syz.3.277" name="freezer.self_freezing" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 90.107645][ T35] usb 8-1: USB disconnect, device number 4 [ 90.544895][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 90.662442][ T39] audit: type=1400 audit(1728188113.631:488): avc: denied { ioctl } for pid=6424 comm="syz.3.284" path="socket:[11191]" dev="sockfs" ino=11191 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.697786][ T6425] raw_sendmsg: syz.3.284 forgot to set AF_INET. Fix it! [ 90.706077][ T8] usb 6-1: config index 0 descriptor too short (expected 106, got 36) [ 90.708186][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.710929][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.713414][ T8] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 90.715899][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.720153][ T8] usb 6-1: config 0 descriptor?? [ 90.927682][ T39] audit: type=1400 audit(1728188113.901:489): avc: denied { getopt } for pid=6433 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.962446][ T6437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.288'. [ 91.127201][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 91.128947][ T8] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 91.131878][ T8] usb 6-1: USB disconnect, device number 4 [ 91.592955][ T6441] fuse: Bad value for 'fd' [ 91.804220][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 91.952813][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 91.991657][ T6451] input: syz0 as /devices/virtual/input/input9 [ 92.229526][ T6467] sp0: Synchronizing with TNC [ 92.254382][ T6471] fuse: Bad value for 'fd' [ 93.401848][ T6508] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.309'. [ 93.404244][ T6508] openvswitch: netlink: IP tunnel dst address not specified [ 93.588727][ T6518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.313'. [ 93.653404][ T6522] netlink: 64 bytes leftover after parsing attributes in process `syz.3.316'. [ 94.127231][ T4773] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 94.541428][ T6537] fuse: Unknown parameter 'grou00000000000000000000' [ 94.553666][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 94.553680][ T39] audit: type=1400 audit(1728188117.521:496): avc: denied { create } for pid=6538 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.596472][ T6546] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.324'. [ 94.599914][ T6546] openvswitch: netlink: IP tunnel dst address not specified [ 94.601243][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.323'. [ 94.765655][ T5349] Bluetooth: hci3: command 0x0405 tx timeout [ 94.823875][ T6554] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.326'. [ 94.828046][ T6554] openvswitch: netlink: IP tunnel dst address not specified [ 95.374643][ T6572] fuse: Unknown parameter 'grou00000000000000000000' [ 95.532535][ T6579] input: syz0 as /devices/virtual/input/input10 [ 95.910285][ T5345] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 96.557196][ T39] audit: type=1400 audit(1728188119.531:497): avc: denied { ioctl } for pid=6587 comm="syz.0.336" path="socket:[14049]" dev="sockfs" ino=14049 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.559486][ T6590] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.337'. [ 96.568539][ T6590] openvswitch: netlink: IP tunnel dst address not specified [ 96.921692][ T6598] fuse: Unknown parameter 'grou00000000000000000000' [ 97.161425][ T39] audit: type=1400 audit(1728188120.131:498): avc: denied { bind } for pid=6604 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.166736][ T39] audit: type=1400 audit(1728188120.131:499): avc: denied { name_bind } for pid=6604 comm="syz.1.341" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 97.174835][ T39] audit: type=1400 audit(1728188120.131:500): avc: denied { node_bind } for pid=6604 comm="syz.1.341" saddr=::ffff:100.1.1.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 97.566224][ T39] audit: type=1400 audit(1728188120.541:501): avc: denied { block_suspend } for pid=6613 comm="syz.0.345" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.737779][ T39] audit: type=1400 audit(1728188120.711:502): avc: denied { create } for pid=6620 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.744837][ T39] audit: type=1400 audit(1728188120.711:503): avc: denied { write } for pid=6620 comm="syz.2.346" path="socket:[14512]" dev="sockfs" ino=14512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.752004][ T39] audit: type=1400 audit(1728188120.711:504): avc: denied { nlmsg_read } for pid=6620 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 98.273374][ T6628] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.348'. [ 98.278210][ T6628] openvswitch: netlink: IP tunnel dst address not specified [ 100.026124][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 101.600034][ T6670] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.359'. [ 101.603259][ T6670] openvswitch: netlink: IP tunnel dst address not specified [ 101.949164][ T39] audit: type=1400 audit(1728188124.921:505): avc: denied { map } for pid=6675 comm="syz.1.361" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.965660][ T39] audit: type=1400 audit(1728188124.921:506): avc: denied { execute } for pid=6675 comm="syz.1.361" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.972994][ T39] audit: type=1400 audit(1728188124.931:507): avc: denied { ioctl } for pid=6675 comm="syz.1.361" path="socket:[14124]" dev="sockfs" ino=14124 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.985764][ T1204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.988780][ T39] audit: type=1400 audit(1728188124.951:508): avc: denied { execute } for pid=6677 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 101.995406][ T39] audit: type=1400 audit(1728188124.951:509): avc: denied { execute_no_trans } for pid=6677 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 102.074234][ T5345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.079316][ T5345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.083313][ T5345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.086625][ T5345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.088795][ T5345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.090818][ T5345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.148357][ T1204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.238641][ T1204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.329995][ T6685] chnl_net:caif_netlink_parms(): no params data found [ 102.421713][ T1204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.427202][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.429420][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.431755][ T6685] bridge_slave_0: entered allmulticast mode [ 102.434373][ T6685] bridge_slave_0: entered promiscuous mode [ 102.441061][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.442913][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.444787][ T6685] bridge_slave_1: entered allmulticast mode [ 102.446943][ T6685] bridge_slave_1: entered promiscuous mode [ 102.468120][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.472053][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.503327][ T6685] team0: Port device team_slave_0 added [ 102.510308][ T6685] team0: Port device team_slave_1 added [ 102.546620][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.548600][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.558451][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.563838][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.565907][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.573490][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.652731][ T6685] hsr_slave_0: entered promiscuous mode [ 102.657079][ T6685] hsr_slave_1: entered promiscuous mode [ 102.659804][ T6685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.662766][ T6685] Cannot create hsr debugfs directory [ 102.664648][ T1204] bridge_slave_1: left allmulticast mode [ 102.666392][ T1204] bridge_slave_1: left promiscuous mode [ 102.668099][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.672597][ T1204] bridge_slave_0: left allmulticast mode [ 102.674182][ T1204] bridge_slave_0: left promiscuous mode [ 102.676038][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.731185][ T39] audit: type=1400 audit(1728188125.701:510): avc: granted { setsecparam } for pid=6704 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 103.011812][ T1204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.018511][ T1204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.028476][ T1204] bond0 (unregistering): Released all slaves [ 103.034882][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 103.666994][ T6711] trusted_key: syz.3.369 sent an empty control message without MSG_MORE. [ 103.673261][ T6711] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 103.675447][ T6711] audit: out of memory in audit_log_start [ 103.775911][ T6717] FAULT_INJECTION: forcing a failure. [ 103.775911][ T6717] name failslab, interval 1, probability 0, space 0, times 0 [ 103.779533][ T6717] CPU: 3 UID: 0 PID: 6717 Comm: syz.2.370 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 103.782307][ T6717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.785130][ T6717] Call Trace: [ 103.786021][ T6717] [ 103.786791][ T6717] dump_stack_lvl+0x16c/0x1f0 [ 103.788041][ T6717] should_fail_ex+0x497/0x5b0 [ 103.789243][ T6717] should_failslab+0xc2/0x120 [ 103.790490][ T6717] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 103.791889][ T6717] ? skb_clone+0x190/0x3f0 [ 103.793061][ T6717] skb_clone+0x190/0x3f0 [ 103.794179][ T6717] netlink_deliver_tap+0xab3/0xd90 [ 103.795555][ T6717] netlink_unicast+0x5e1/0x7f0 [ 103.796826][ T6717] ? __pfx_netlink_unicast+0x10/0x10 [ 103.798186][ T6717] netlink_sendmsg+0x8b8/0xd70 [ 103.799422][ T6717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.801044][ T6717] ? __import_iovec+0x1fd/0x6e0 [ 103.802364][ T6717] ____sys_sendmsg+0xaaf/0xc90 [ 103.803693][ T6717] ? copy_msghdr_from_user+0x10b/0x160 [ 103.805145][ T6717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.806572][ T6717] ? __pfx___lock_acquire+0x10/0x10 [ 103.807967][ T6717] ___sys_sendmsg+0x135/0x1e0 [ 103.809226][ T6717] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.810621][ T6717] ? lock_acquire+0x2f/0xb0 [ 103.811825][ T6717] ? __fget_files+0x40/0x3f0 [ 103.813067][ T6717] ? fdget+0x176/0x210 [ 103.814179][ T6717] __sys_sendmsg+0x117/0x1f0 [ 103.815421][ T6717] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.816751][ T6717] ? __fget_files+0x244/0x3f0 [ 103.818012][ T6717] do_syscall_64+0xcd/0x250 [ 103.819185][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.820694][ T6717] RIP: 0033:0x7ff83f97dff9 [ 103.821920][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.826840][ T6717] RSP: 002b:00007ff8407df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.829015][ T6717] RAX: ffffffffffffffda RBX: 00007ff83fb35f80 RCX: 00007ff83f97dff9 [ 103.831089][ T6717] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 103.833077][ T6717] RBP: 00007ff8407df090 R08: 0000000000000000 R09: 0000000000000000 [ 103.835265][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.837233][ T6717] R13: 0000000000000000 R14: 00007ff83fb35f80 R15: 00007ffc12834718 [ 103.839168][ T6717] [ 104.116519][ T5349] Bluetooth: hci0: command tx timeout [ 104.311894][ T1204] tipc: Left network mode [ 104.457598][ T39] audit: type=1400 audit(1728188127.431:511): avc: denied { read } for pid=6725 comm="syz.1.374" dev="sockfs" ino=14701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.552777][ T1204] hsr_slave_0: left promiscuous mode [ 104.555738][ T1204] hsr_slave_1: left promiscuous mode [ 104.557754][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.559856][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.562853][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.564858][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.592378][ T1204] veth1_macvtap: left promiscuous mode [ 104.594443][ T1204] veth0_macvtap: left promiscuous mode [ 104.601024][ T1204] veth1_vlan: left promiscuous mode [ 104.603535][ T1204] veth0_vlan: left promiscuous mode [ 104.649206][ T5400] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 104.814651][ T39] audit: type=1400 audit(1728188127.781:512): avc: denied { connect } for pid=6748 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.820836][ T5400] usb 7-1: Using ep0 maxpacket: 8 [ 104.823799][ T5400] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 104.826893][ T5400] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.829729][ T5400] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.832778][ T5400] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.836744][ T5400] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.841387][ T5400] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.845155][ T5400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.061338][ T5400] usb 7-1: usb_control_msg returned -32 [ 105.062895][ T5400] usbtmc 7-1:16.0: can't read capabilities [ 105.518970][ T1204] team0 (unregistering): Port device team_slave_1 removed [ 105.615884][ T1204] team0 (unregistering): Port device team_slave_0 removed [ 105.783510][ T6762] usbtmc 7-1:16.0: usb_clear_halt returned -32 [ 105.992119][ T35] usb 7-1: USB disconnect, device number 9 [ 106.194849][ T5349] Bluetooth: hci0: command tx timeout [ 106.570240][ T6790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.383'. [ 106.899787][ T6685] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.903342][ T6685] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.909490][ T6685] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.912899][ T6685] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.957486][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.965847][ T6685] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.971004][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.973608][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.980357][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.982787][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.125162][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.773962][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 107.773978][ T39] audit: type=1400 audit(1728188130.741:521): avc: denied { connect } for pid=6810 comm="syz.2.386" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.284832][ T5349] Bluetooth: hci0: command tx timeout [ 108.336098][ T6685] veth0_vlan: entered promiscuous mode [ 108.342697][ T6685] veth1_vlan: entered promiscuous mode [ 108.362264][ T6685] veth0_macvtap: entered promiscuous mode [ 108.367227][ T6685] veth1_macvtap: entered promiscuous mode [ 108.374408][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.377463][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.379992][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.383150][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.386200][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.389157][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.395594][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.400971][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.403708][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.413217][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.416903][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.420308][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.423922][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.428514][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.432982][ T6685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.435355][ T6685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.437510][ T6685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.439605][ T6685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.468413][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.470380][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.482567][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.484569][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.494036][ T39] audit: type=1400 audit(1728188131.461:522): avc: denied { mounton } for pid=6685 comm="syz-executor" path="/syzkaller.OHtNHY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 108.534891][ T39] audit: type=1400 audit(1728188131.501:523): avc: denied { ioctl } for pid=6817 comm="syz.2.388" path="/dev/vhost-net" dev="devtmpfs" ino=1114 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 108.623345][ T6824] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 108.833401][ T39] audit: type=1400 audit(1728188131.801:524): avc: denied { unmount } for pid=5649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.916239][ T39] audit: type=1400 audit(1728188131.891:525): avc: denied { shutdown } for pid=6833 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.924636][ T39] audit: type=1400 audit(1728188131.891:526): avc: denied { validate_trans } for pid=6833 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 108.925465][ T6834] netlink: 'syz.2.391': attribute type 9 has an invalid length. [ 108.932809][ T6834] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.391'. [ 108.946460][ T6834] netlink: 'syz.2.391': attribute type 9 has an invalid length. [ 108.948535][ T6834] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.391'. [ 109.377053][ T39] audit: type=1400 audit(1728188132.351:527): avc: denied { read write } for pid=6843 comm="syz.3.394" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.385360][ T39] audit: type=1400 audit(1728188132.351:528): avc: denied { open } for pid=6843 comm="syz.3.394" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.394077][ T39] audit: type=1400 audit(1728188132.361:529): avc: denied { read } for pid=6836 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.647672][ T39] audit: type=1400 audit(1728188132.621:530): avc: denied { setopt } for pid=6851 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.667588][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'. [ 109.689796][ T6857] input: syz0 as /devices/virtual/input/input13 [ 110.154585][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 110.157272][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 110.271157][ T6876] FAULT_INJECTION: forcing a failure. [ 110.271157][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 110.275814][ T6876] CPU: 0 UID: 0 PID: 6876 Comm: syz.0.403 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 110.279301][ T6876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.282772][ T6876] Call Trace: [ 110.283897][ T6876] [ 110.284914][ T6876] dump_stack_lvl+0x16c/0x1f0 [ 110.286569][ T6876] should_fail_ex+0x497/0x5b0 [ 110.288181][ T6876] should_failslab+0xc2/0x120 [ 110.289751][ T6876] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 110.291568][ T6876] ? skb_clone+0x190/0x3f0 [ 110.293080][ T6876] skb_clone+0x190/0x3f0 [ 110.294531][ T6876] netlink_deliver_tap+0xab3/0xd90 [ 110.296268][ T6876] netlink_unicast+0x5e1/0x7f0 [ 110.297902][ T6876] ? __pfx_netlink_unicast+0x10/0x10 [ 110.299707][ T6876] netlink_sendmsg+0x8b8/0xd70 [ 110.301376][ T6876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.303154][ T6876] ? stack_trace_save+0x95/0xd0 [ 110.304779][ T6876] ? stack_depot_save_flags+0x28/0x8f0 [ 110.306535][ T6876] sock_sendmsg+0x3cb/0x470 [ 110.307755][ T6876] ? __kasan_slab_free+0x51/0x70 [ 110.309075][ T6876] ? __pfx_sock_sendmsg+0x10/0x10 [ 110.310592][ T6876] ? splice_direct_to_actor+0x2a4/0xa40 [ 110.312641][ T6876] splice_to_socket+0xaac/0x1040 [ 110.314453][ T6876] ? __pfx_splice_to_socket+0x10/0x10 [ 110.315869][ T6876] ? kasan_quarantine_put+0x10a/0x240 [ 110.317353][ T6876] ? __pfx_splice_to_socket+0x10/0x10 [ 110.318798][ T6876] direct_splice_actor+0x18f/0x6c0 [ 110.320203][ T6876] splice_direct_to_actor+0x346/0xa40 [ 110.322189][ T6876] ? __pfx_direct_splice_actor+0x10/0x10 [ 110.323696][ T6876] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 110.325280][ T6876] ? __pfx_file_has_perm+0x10/0x10 [ 110.326577][ T6876] do_splice_direct+0x178/0x250 [ 110.327873][ T6876] ? __pfx_do_splice_direct+0x10/0x10 [ 110.329352][ T6876] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 110.331250][ T6876] ? bpf_lsm_file_permission+0x9/0x10 [ 110.333243][ T6876] ? security_file_permission+0x71/0x210 [ 110.335069][ T6876] do_sendfile+0xb0c/0xe40 [ 110.336238][ T6876] ? __pfx_do_sendfile+0x10/0x10 [ 110.337556][ T6876] ? __fget_files+0x244/0x3f0 [ 110.338796][ T6876] __x64_sys_sendfile64+0x1da/0x220 [ 110.340208][ T6876] ? ksys_write+0x1ad/0x260 [ 110.341582][ T6876] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 110.343082][ T6876] do_syscall_64+0xcd/0x250 [ 110.344285][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.345835][ T6876] RIP: 0033:0x7f0bab17dff9 [ 110.347017][ T6876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.352293][ T6876] RSP: 002b:00007f0babea8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 110.354394][ T6876] RAX: ffffffffffffffda RBX: 00007f0bab335f80 RCX: 00007f0bab17dff9 [ 110.356454][ T6876] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 110.358515][ T6876] RBP: 00007f0babea8090 R08: 0000000000000000 R09: 0000000000000000 [ 110.360721][ T6876] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 110.362813][ T6876] R13: 0000000000000000 R14: 00007f0bab335f80 R15: 00007fff8303dcc8 [ 110.364902][ T6876] [ 110.366082][ T5345] Bluetooth: hci0: command tx timeout [ 110.664953][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.814804][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 110.821884][ T30] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 110.823934][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.827211][ T30] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.830341][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 173, changing to 11 [ 110.833178][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.839268][ T30] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 110.841252][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.844193][ T30] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.847491][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 173, changing to 11 [ 110.850271][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.853897][ T30] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 110.856077][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.858985][ T30] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.861939][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 173, changing to 11 [ 110.864893][ T30] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.870004][ T30] usb 5-1: string descriptor 0 read error: -22 [ 110.871673][ T30] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.874098][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.893679][ T30] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 111.174813][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.199185][ T8] usb 5-1: USB disconnect, device number 5 [ 111.199818][ T6907] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 111.346389][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.350027][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 111.352920][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 111.355914][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.358504][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.368284][ T6901] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.371978][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.578130][ T35] usb 6-1: USB disconnect, device number 5 [ 112.323269][ T6930] fuse: Bad value for 'fd' [ 112.434920][ T5345] Bluetooth: hci0: command 0x0405 tx timeout [ 112.654863][ T5400] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 112.803506][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 112.817821][ T39] kauditd_printk_skb: 478 callbacks suppressed [ 112.817836][ T39] audit: type=1400 audit(1728188135.791:1009): avc: granted { setsecparam } for pid=6938 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.831227][ T5400] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.834676][ T5400] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.838793][ T5400] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 112.842016][ T5400] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 112.848355][ T5400] usb 7-1: Manufacturer: syz [ 112.852822][ T5400] usb 7-1: config 0 descriptor?? [ 113.117955][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.120828][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.130562][ T6942] bridge_slave_1: left allmulticast mode [ 113.132237][ T6942] bridge_slave_1: left promiscuous mode [ 113.135450][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.141841][ T6942] bridge_slave_0: left allmulticast mode [ 113.143749][ T6942] bridge_slave_0: left promiscuous mode [ 113.145576][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.410109][ T39] audit: type=1400 audit(1728188136.381:1010): avc: denied { connect } for pid=6933 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.463288][ T5349] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 113.687581][ T39] audit: type=1400 audit(1728188136.661:1011): avc: denied { read write } for pid=6951 comm="syz.0.427" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.695203][ T5397] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 113.697765][ T39] audit: type=1400 audit(1728188136.661:1012): avc: denied { open } for pid=6951 comm="syz.0.427" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.856566][ T5397] usb 8-1: config index 0 descriptor too short (expected 106, got 36) [ 113.859223][ T5397] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.862221][ T5397] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.865166][ T5397] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 113.867760][ T5397] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.872033][ T5397] usb 8-1: config 0 descriptor?? [ 114.077734][ T39] audit: type=1400 audit(1728188137.051:1013): avc: denied { nlmsg_write } for pid=6962 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 114.103830][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.431'. [ 114.107205][ T6965] FAULT_INJECTION: forcing a failure. [ 114.107205][ T6965] name failslab, interval 1, probability 0, space 0, times 0 [ 114.110970][ T6965] CPU: 1 UID: 0 PID: 6965 Comm: syz.1.431 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 114.114365][ T6965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.117083][ T6965] Call Trace: [ 114.118165][ T6965] [ 114.119045][ T6965] dump_stack_lvl+0x16c/0x1f0 [ 114.120691][ T6965] should_fail_ex+0x497/0x5b0 [ 114.122250][ T6965] ? fs_reclaim_acquire+0xae/0x160 [ 114.123686][ T6965] should_failslab+0xc2/0x120 [ 114.124949][ T6965] __kmalloc_node_noprof+0xd1/0x430 [ 114.126334][ T6965] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 114.127731][ T6965] __kvmalloc_node_noprof+0xad/0x1a0 [ 114.129059][ T6965] bucket_table_alloc.isra.0+0x86/0x460 [ 114.130471][ T6965] rhashtable_init_noprof+0x41a/0x7e0 [ 114.131766][ T6965] ? __pfx_br_dev_init+0x10/0x10 [ 114.132983][ T6965] br_dev_init+0x29/0x400 [ 114.134057][ T6965] ? kasan_save_track+0x14/0x30 [ 114.135287][ T6965] ? __pfx_br_dev_init+0x10/0x10 [ 114.136774][ T6965] register_netdevice+0x672/0x1e90 [ 114.138119][ T6965] ? __pfx_register_netdevice+0x10/0x10 [ 114.139463][ T6965] ? validate_linkmsg+0x6d2/0x9a0 [ 114.140722][ T6965] br_dev_newlink+0x27/0x110 [ 114.141862][ T6965] ? __pfx_br_dev_newlink+0x10/0x10 [ 114.143149][ T6965] __rtnl_newlink+0x1197/0x1920 [ 114.144372][ T6965] ? __pfx___rtnl_newlink+0x10/0x10 [ 114.145676][ T6965] rtnl_newlink+0x67/0xa0 [ 114.146788][ T6965] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.148055][ T6965] rtnetlink_rcv_msg+0x3c7/0xea0 [ 114.149316][ T6965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.150670][ T6965] netlink_rcv_skb+0x16b/0x440 [ 114.151838][ T6965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.153205][ T6965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.154565][ T6965] ? netlink_deliver_tap+0x1ae/0xd90 [ 114.155972][ T6965] netlink_unicast+0x53c/0x7f0 [ 114.157246][ T6965] ? __pfx_netlink_unicast+0x10/0x10 [ 114.158633][ T6965] netlink_sendmsg+0x8b8/0xd70 [ 114.159900][ T6965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.161303][ T6965] ? __import_iovec+0x1fd/0x6e0 [ 114.162591][ T6965] ____sys_sendmsg+0xaaf/0xc90 [ 114.163850][ T6965] ? copy_msghdr_from_user+0x10b/0x160 [ 114.165298][ T6965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.166684][ T6965] ? __pfx___lock_acquire+0x10/0x10 [ 114.168048][ T6965] ___sys_sendmsg+0x135/0x1e0 [ 114.169303][ T6965] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.170669][ T6965] ? lock_acquire+0x2f/0xb0 [ 114.171780][ T6965] ? __fget_files+0x40/0x3f0 [ 114.172941][ T6965] ? fdget+0x176/0x210 [ 114.173934][ T6965] __sys_sendmsg+0x117/0x1f0 [ 114.175139][ T6965] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.176385][ T6965] ? __fget_files+0x244/0x3f0 [ 114.177642][ T6965] do_syscall_64+0xcd/0x250 [ 114.178838][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.180381][ T6965] RIP: 0033:0x7f28a757dff9 [ 114.181567][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.186533][ T6965] RSP: 002b:00007f28a83a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.188701][ T6965] RAX: ffffffffffffffda RBX: 00007f28a7735f80 RCX: 00007f28a757dff9 [ 114.190767][ T6965] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 114.192819][ T6965] RBP: 00007f28a83a0090 R08: 0000000000000000 R09: 0000000000000000 [ 114.194908][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.197014][ T6965] R13: 0000000000000000 R14: 00007f28a7735f80 R15: 00007ffdd1958b38 [ 114.199086][ T6965] [ 114.277154][ T5397] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 114.279125][ T5397] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 114.281101][ T5397] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 114.283011][ T5397] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 114.285308][ T5397] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 114.287447][ T5397] corsair 0003:1B1C:1B3E.0007: failed to start in urb: -90 [ 114.290127][ T5397] corsair 0003:1B1C:1B3E.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 114.403637][ T6970] FAULT_INJECTION: forcing a failure. [ 114.403637][ T6970] name failslab, interval 1, probability 0, space 0, times 0 [ 114.408225][ T6970] CPU: 3 UID: 0 PID: 6970 Comm: syz.1.433 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 114.411819][ T6970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.415524][ T6970] Call Trace: [ 114.416697][ T6970] [ 114.417753][ T6970] dump_stack_lvl+0x16c/0x1f0 [ 114.419451][ T6970] should_fail_ex+0x497/0x5b0 [ 114.421091][ T6970] ? fs_reclaim_acquire+0xae/0x160 [ 114.422730][ T6970] should_failslab+0xc2/0x120 [ 114.423979][ T6970] __kmalloc_noprof+0xcb/0x400 [ 114.425269][ T6970] tomoyo_encode2+0x100/0x3e0 [ 114.426506][ T6970] tomoyo_encode+0x29/0x50 [ 114.427721][ T6970] tomoyo_realpath_from_path+0x19d/0x720 [ 114.429198][ T6970] ? tomoyo_path_number_perm+0x232/0x590 [ 114.430660][ T6970] tomoyo_path_number_perm+0x245/0x590 [ 114.432085][ T6970] ? tomoyo_path_number_perm+0x232/0x590 [ 114.433567][ T6970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.435146][ T6970] ? trace_lock_acquire+0x14a/0x1d0 [ 114.436514][ T6970] ? lock_acquire+0x2f/0xb0 [ 114.437752][ T6970] ? __fget_files+0x40/0x3f0 [ 114.438971][ T6970] ? __fget_files+0x244/0x3f0 [ 114.440214][ T6970] security_file_ioctl+0x9b/0x240 [ 114.441595][ T6970] __x64_sys_ioctl+0xbb/0x220 [ 114.442833][ T6970] do_syscall_64+0xcd/0x250 [ 114.444031][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.445622][ T6970] RIP: 0033:0x7f28a757dff9 [ 114.446795][ T6970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.451827][ T6970] RSP: 002b:00007f28a83a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.453998][ T6970] RAX: ffffffffffffffda RBX: 00007f28a7735f80 RCX: 00007f28a757dff9 [ 114.456042][ T6970] RDX: 0000000000000000 RSI: 000000008010aa01 RDI: 0000000000000003 [ 114.458125][ T6970] RBP: 00007f28a83a0090 R08: 0000000000000000 R09: 0000000000000000 [ 114.460114][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.462769][ T6970] R13: 0000000000000000 R14: 00007f28a7735f80 R15: 00007ffdd1958b38 [ 114.465514][ T6970] [ 114.467643][ T6970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.469863][ T6971] FAULT_INJECTION: forcing a failure. [ 114.469863][ T6971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.477118][ T5397] usb 8-1: USB disconnect, device number 5 [ 114.483349][ T6971] CPU: 2 UID: 0 PID: 6971 Comm: syz.0.432 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 114.486497][ T6971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.489491][ T6971] Call Trace: [ 114.490544][ T6971] [ 114.491331][ T6971] dump_stack_lvl+0x16c/0x1f0 [ 114.492580][ T6971] should_fail_ex+0x497/0x5b0 [ 114.493842][ T6971] _copy_from_iter+0x2a1/0x1540 [ 114.495190][ T6971] ? __pfx__copy_from_iter+0x10/0x10 [ 114.496587][ T6971] ? __virt_addr_valid+0x1a4/0x590 [ 114.498000][ T6971] ? __virt_addr_valid+0x5e/0x590 [ 114.499330][ T6971] ? __phys_addr_symbol+0x30/0x80 [ 114.501023][ T6971] ? __check_object_size+0x488/0x710 [ 114.502864][ T6971] file_tty_write.constprop.0+0x48d/0x9a0 [ 114.504850][ T6971] vfs_write+0x6b5/0x1140 [ 114.506367][ T6971] ? __pfx_tty_write+0x10/0x10 [ 114.508042][ T6971] ? trace_lock_acquire+0x14a/0x1d0 [ 114.509846][ T6971] ? __pfx_vfs_write+0x10/0x10 [ 114.511528][ T6971] ? __fget_files+0x40/0x3f0 [ 114.513159][ T6971] ksys_write+0x12f/0x260 [ 114.514699][ T6971] ? __pfx_ksys_write+0x10/0x10 [ 114.516416][ T6971] do_syscall_64+0xcd/0x250 [ 114.518024][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.520046][ T6971] RIP: 0033:0x7f0bab17dff9 [ 114.521611][ T6971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.528070][ T6971] RSP: 002b:00007f0baabff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.531031][ T6971] RAX: ffffffffffffffda RBX: 00007f0bab336058 RCX: 00007f0bab17dff9 [ 114.533796][ T6971] RDX: 00000000fffffdef RSI: 0000000020001040 RDI: 0000000000000008 [ 114.536526][ T6971] RBP: 00007f0baabff090 R08: 0000000000000000 R09: 0000000000000000 [ 114.539256][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.541986][ T6971] R13: 0000000000000000 R14: 00007f0bab336058 R15: 00007fff8303dcc8 [ 114.544680][ T6971] [ 114.719694][ T6977] evm: overlay not supported [ 114.722551][ T39] audit: type=1804 audit(1728188137.691:1014): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.436" name="/newroot/12/bus/file0" dev="overlay" ino=88 res=1 errno=0 [ 115.383678][ T5400] usb 7-1: USB disconnect, device number 10 [ 115.775629][ T5349] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 116.014880][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.177511][ T35] usb 6-1: config index 0 descriptor too short (expected 106, got 36) [ 116.180362][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.183827][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.187324][ T35] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 116.189702][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.199409][ T35] usb 6-1: config 0 descriptor?? [ 116.608327][ T35] corsair 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 116.610218][ T35] corsair 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 116.612192][ T35] corsair 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 116.614103][ T35] corsair 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 116.617819][ T35] corsair 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 116.619878][ T35] corsair 0003:1B1C:1B3E.0008: failed to start in urb: -90 [ 116.623735][ T35] corsair 0003:1B1C:1B3E.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 116.816163][ T63] usb 6-1: USB disconnect, device number 6 [ 117.024670][ T7041] fuse: Bad value for 'fd' [ 117.200927][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 117.262984][ T39] audit: type=1400 audit(1728188140.231:1015): avc: denied { mounton } for pid=7051 comm="syz.3.459" path="/136/file0" dev="tmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 117.377027][ T39] audit: type=1400 audit(1728188140.351:1016): avc: denied { ioctl } for pid=7057 comm="syz.2.460" path="socket:[16851]" dev="sockfs" ino=16851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.470662][ T39] audit: type=1400 audit(1728188140.441:1017): avc: denied { create } for pid=7064 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.393104][ T39] audit: type=1400 audit(1728188141.361:1018): avc: denied { read } for pid=7085 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.401303][ T7086] futex_wake_op: syz.2.468 tries to shift op by 32; fix this program [ 118.405688][ T7086] fuse: Unknown parameter 'use00000000000000000000' [ 118.472250][ T7088] binder: 7087:7088 ioctl c0306201 200003c0 returned -14 [ 118.474412][ T39] audit: type=1400 audit(1728188141.441:1019): avc: denied { watch } for pid=7092 comm="syz.2.471" path="/80" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.652905][ T39] audit: type=1400 audit(1728188141.621:1020): avc: denied { read } for pid=7101 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.023687][ T39] audit: type=1400 audit(1728188141.991:1021): avc: denied { bind } for pid=7117 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.073518][ T39] audit: type=1400 audit(1728188142.041:1022): avc: denied { bind } for pid=7119 comm="syz.0.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.203389][ T7122] FAULT_INJECTION: forcing a failure. [ 119.203389][ T7122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.209189][ T7122] CPU: 3 UID: 0 PID: 7122 Comm: syz.0.479 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 119.211935][ T7122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.214806][ T7122] Call Trace: [ 119.215689][ T7122] [ 119.216466][ T7122] dump_stack_lvl+0x16c/0x1f0 [ 119.217764][ T7122] should_fail_ex+0x497/0x5b0 [ 119.219009][ T7122] _copy_to_user+0x30/0xc0 [ 119.220203][ T7122] simple_read_from_buffer+0xd0/0x160 [ 119.221597][ T7122] proc_fail_nth_read+0x198/0x270 [ 119.222924][ T7122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.225172][ T7122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.226653][ T7122] vfs_read+0x1ce/0xbd0 [ 119.227786][ T7122] ? __fget_files+0x23a/0x3f0 [ 119.229019][ T7122] ? fdget_pos+0x24c/0x360 [ 119.230239][ T7122] ? __pfx_lock_release+0x10/0x10 [ 119.231759][ T7122] ? trace_lock_acquire+0x14a/0x1d0 [ 119.233162][ T7122] ? __pfx_vfs_read+0x10/0x10 [ 119.234395][ T7122] ? __pfx___mutex_lock+0x10/0x10 [ 119.235720][ T7122] ? __fget_files+0x244/0x3f0 [ 119.237025][ T7122] ksys_read+0x12f/0x260 [ 119.238164][ T7122] ? __pfx_ksys_read+0x10/0x10 [ 119.239431][ T7122] do_syscall_64+0xcd/0x250 [ 119.240672][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.242296][ T7122] RIP: 0033:0x7f0bab17ca3c [ 119.243461][ T7122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 119.248433][ T7122] RSP: 002b:00007f0babea8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.250758][ T7122] RAX: ffffffffffffffda RBX: 00007f0bab335f80 RCX: 00007f0bab17ca3c [ 119.253507][ T7122] RDX: 000000000000000f RSI: 00007f0babea80a0 RDI: 0000000000000004 [ 119.255552][ T7122] RBP: 00007f0babea8090 R08: 0000000000000000 R09: 0000000000000000 [ 119.257603][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.259643][ T7122] R13: 0000000000000000 R14: 00007f0bab335f80 R15: 00007fff8303dcc8 [ 119.261737][ T7122] [ 119.613828][ T39] audit: type=1400 audit(1728188142.571:1023): avc: denied { setattr } for pid=7123 comm="syz.0.480" name="RAWv6" dev="sockfs" ino=19562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.654408][ T39] audit: type=1400 audit(1728188142.621:1024): avc: denied { map } for pid=7136 comm="syz.2.482" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.664768][ T39] audit: type=1400 audit(1728188142.621:1025): avc: denied { execute } for pid=7136 comm="syz.2.482" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.795568][ T63] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.987477][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 121.004263][ T63] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.007493][ T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.015333][ T63] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 121.037901][ T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 121.040825][ T63] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.049402][ T63] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.052526][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.320965][ T63] usb 5-1: GET_CAPABILITIES returned 0 [ 121.323484][ T63] usbtmc 5-1:16.0: can't read capabilities [ 121.920823][ T8] usb 5-1: USB disconnect, device number 6 [ 122.284399][ T39] audit: type=1400 audit(1728188145.251:1026): avc: denied { accept } for pid=7175 comm="syz.1.491" lport=33467 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.292430][ T39] audit: type=1400 audit(1728188145.251:1027): avc: denied { setopt } for pid=7175 comm="syz.1.491" lport=33467 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 122.622924][ T7192] 9pnet_fd: Insufficient options for proto=fd [ 122.697928][ T7197] netlink: 68 bytes leftover after parsing attributes in process `syz.1.498'. [ 122.882696][ T5349] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 122.885966][ T5349] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 123.134770][ T7212] FAULT_INJECTION: forcing a failure. [ 123.134770][ T7212] name failslab, interval 1, probability 0, space 0, times 0 [ 123.138177][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: syz.1.502 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 123.141146][ T7212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.144640][ T7212] Call Trace: [ 123.145554][ T7212] [ 123.146376][ T7212] dump_stack_lvl+0x16c/0x1f0 [ 123.147576][ T7212] should_fail_ex+0x497/0x5b0 [ 123.148767][ T7212] ? fs_reclaim_acquire+0xae/0x160 [ 123.150058][ T7212] should_failslab+0xc2/0x120 [ 123.151494][ T7212] __kmalloc_cache_noprof+0x6b/0x300 [ 123.153195][ T7212] ? copy_mount_options+0x55/0x190 [ 123.154633][ T7212] copy_mount_options+0x55/0x190 [ 123.155937][ T7212] __x64_sys_mount+0x1ad/0x320 [ 123.157251][ T7212] ? __pfx___x64_sys_mount+0x10/0x10 [ 123.158555][ T7212] do_syscall_64+0xcd/0x250 [ 123.159716][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.161324][ T7212] RIP: 0033:0x7f28a757dff9 [ 123.162471][ T7212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.167489][ T7212] RSP: 002b:00007f28a835e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.169676][ T7212] RAX: ffffffffffffffda RBX: 00007f28a7736130 RCX: 00007f28a757dff9 [ 123.172245][ T7212] RDX: 0000000020000000 RSI: 0000000020000480 RDI: 00000000200000c0 [ 123.174688][ T7212] RBP: 00007f28a835e090 R08: 0000000020000c00 R09: 0000000000000000 [ 123.176822][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.178916][ T7212] R13: 0000000000000000 R14: 00007f28a7736130 R15: 00007ffdd1958b38 [ 123.181045][ T7212] [ 123.764083][ T7235] netlink: 68 bytes leftover after parsing attributes in process `syz.3.509'. [ 123.834123][ T7242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.847769][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 123.847779][ T39] audit: type=1400 audit(1728188146.821:1029): avc: denied { listen } for pid=7239 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.035337][ T39] audit: type=1400 audit(1728188147.001:1030): avc: denied { remount } for pid=7236 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.110612][ T7266] mmap: syz.0.518 (7266): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 125.150093][ T7274] netlink: 'syz.0.521': attribute type 2 has an invalid length. [ 125.217441][ T7276] FAULT_INJECTION: forcing a failure. [ 125.217441][ T7276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.221131][ T7276] CPU: 3 UID: 0 PID: 7276 Comm: syz.1.519 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 125.223945][ T7276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.226770][ T7276] Call Trace: [ 125.227648][ T7276] [ 125.228678][ T7276] dump_stack_lvl+0x16c/0x1f0 [ 125.230045][ T7276] should_fail_ex+0x497/0x5b0 [ 125.231285][ T7276] _copy_from_user+0x30/0xf0 [ 125.232409][ T7276] __sys_bpf+0x21c/0x49a0 [ 125.233454][ T7276] ? finish_task_switch.isra.0+0x217/0xcc0 [ 125.234922][ T7276] ? __switch_to+0x670/0x1180 [ 125.236178][ T7276] ? __pfx___sys_bpf+0x10/0x10 [ 125.237433][ T7276] ? __schedule+0xefd/0x5750 [ 125.238655][ T7276] ? fput+0x30/0x390 [ 125.239690][ T7276] ? ksys_write+0x1ad/0x260 [ 125.240897][ T7276] __x64_sys_bpf+0x78/0xc0 [ 125.242074][ T7276] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.243427][ T7276] do_syscall_64+0xcd/0x250 [ 125.244898][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.246965][ T7276] RIP: 0033:0x7f28a757dff9 [ 125.248140][ T7276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.254474][ T7276] RSP: 002b:00007f28a837f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.257342][ T7276] RAX: ffffffffffffffda RBX: 00007f28a7736058 RCX: 00007f28a757dff9 [ 125.260020][ T7276] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 125.262747][ T7276] RBP: 00007f28a837f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.265450][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.267849][ T7276] R13: 0000000000000000 R14: 00007f28a7736058 R15: 00007ffdd1958b38 [ 125.269926][ T7276] [ 125.827981][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 125.856349][ T39] audit: type=1400 audit(1728188148.831:1031): avc: granted { setsecparam } for pid=7282 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 126.016881][ T7269] dccp_close: ABORT with 106 bytes unread [ 126.086794][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 126.104285][ T39] audit: type=1400 audit(1728188149.071:1032): avc: granted { setsecparam } for pid=7288 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 126.971896][ T7312] netlink: 'syz.1.531': attribute type 2 has an invalid length. [ 127.609810][ T39] audit: type=1400 audit(1728188150.581:1033): avc: denied { write } for pid=7321 comm="syz.2.534" path="socket:[19157]" dev="sockfs" ino=19157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.613664][ T7324] netlink: 108 bytes leftover after parsing attributes in process `syz.2.534'. [ 127.618892][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 127.621666][ T7323] netlink: 108 bytes leftover after parsing attributes in process `syz.2.534'. [ 127.624233][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 127.658398][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 127.677835][ T39] audit: type=1400 audit(1728188150.651:1034): avc: granted { setsecparam } for pid=7326 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 128.264814][ T5399] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 128.418265][ T7337] program syz.2.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.422253][ T39] audit: type=1400 audit(1728188151.391:1035): avc: denied { read } for pid=7335 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.445350][ T5399] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 128.448110][ T5399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.451712][ T5399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.455147][ T5399] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 128.458917][ T5399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.482947][ T5399] usb 5-1: config 0 descriptor?? [ 128.495858][ T7340] fuse: Bad value for 'rootmode' [ 128.499277][ T39] audit: type=1400 audit(1728188151.471:1036): avc: denied { setopt } for pid=7335 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 128.501980][ T5349] Bluetooth: hci4: unexpected subevent 0x01 length: 25 > 18 [ 128.912207][ T5399] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 128.914308][ T5399] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 128.924528][ T5399] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 128.927410][ T5399] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 128.929337][ T5399] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 128.940526][ T5399] corsair 0003:1B1C:1B3E.0009: failed to start in urb: -90 [ 129.037867][ T5399] corsair 0003:1B1C:1B3E.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 129.128024][ T5399] usb 5-1: USB disconnect, device number 7 [ 130.044853][ T5349] Bluetooth: hci0: command 0x0405 tx timeout [ 130.494907][ T5399] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 130.605111][ T5349] Bluetooth: hci4: command 0x041b tx timeout [ 130.718604][ T7376] netlink: 'syz.0.547': attribute type 3 has an invalid length. [ 130.721469][ T7376] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.547'. [ 130.796233][ T5399] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 130.798498][ T5399] usb 7-1: config 0 has no interface number 0 [ 130.803325][ T5399] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 130.805948][ T5399] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.808195][ T5399] usb 7-1: Product: syz [ 130.809394][ T5399] usb 7-1: Manufacturer: syz [ 130.810708][ T5399] usb 7-1: SerialNumber: syz [ 130.814870][ T5399] usb 7-1: config 0 descriptor?? [ 130.817376][ T5399] usb-storage 7-1:0.20: USB Mass Storage device detected [ 130.827871][ T5399] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 130.829663][ T7382] bridge0: port 3(team0) entered blocking state [ 130.832690][ T7382] bridge0: port 3(team0) entered disabled state [ 130.837150][ T7382] team0: entered allmulticast mode [ 130.838954][ T7382] team_slave_0: entered allmulticast mode [ 130.841085][ T7382] team_slave_1: entered allmulticast mode [ 130.845642][ T7382] team0: entered promiscuous mode [ 130.847435][ T7382] team_slave_0: entered promiscuous mode [ 130.850211][ T7382] team_slave_1: entered promiscuous mode [ 130.853009][ T7382] bridge0: port 3(team0) entered blocking state [ 130.855449][ T7382] bridge0: port 3(team0) entered forwarding state [ 131.022949][ T5339] usb 7-1: USB disconnect, device number 11 [ 131.588481][ T5349] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 131.591353][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: kworker/u33:5 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 131.594230][ T5349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.597304][ T5349] Workqueue: hci4 hci_rx_work [ 131.598550][ T5349] Call Trace: [ 131.599422][ T5349] [ 131.600196][ T5349] dump_stack_lvl+0x16c/0x1f0 [ 131.601500][ T5349] sysfs_warn_dup+0x7f/0xa0 [ 131.602686][ T5349] sysfs_create_dir_ns+0x24d/0x2b0 [ 131.604011][ T5349] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 131.605475][ T5349] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 131.606864][ T5349] ? kobject_add_internal+0x12d/0x990 [ 131.608264][ T5349] ? do_raw_spin_unlock+0x172/0x230 [ 131.609617][ T5349] kobject_add_internal+0x2c8/0x990 [ 131.611004][ T5349] kobject_add+0x16f/0x240 [ 131.612177][ T5349] ? __pfx_kobject_add+0x10/0x10 [ 131.613480][ T5349] ? class_to_subsys+0x3e/0x160 [ 131.614759][ T5349] ? do_raw_spin_unlock+0x172/0x230 [ 131.616117][ T5349] ? kobject_put+0xab/0x5a0 [ 131.617308][ T5349] device_add+0x289/0x1a70 [ 131.618468][ T5349] ? __pfx_dev_set_name+0x10/0x10 [ 131.619769][ T5349] ? __pfx_device_add+0x10/0x10 [ 131.621090][ T5349] ? mgmt_send_event_skb+0x2f2/0x460 [ 131.622485][ T5349] hci_conn_add_sysfs+0x17e/0x230 [ 131.623811][ T5349] le_conn_complete_evt+0x1078/0x1d80 [ 131.625229][ T5349] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 131.626720][ T5349] ? trace_contention_end+0xea/0x140 [ 131.628143][ T5349] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 131.629702][ T5349] ? skb_pull_data+0x166/0x210 [ 131.631168][ T5349] hci_le_meta_evt+0x2e2/0x5d0 [ 131.632719][ T5349] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 131.634781][ T5349] hci_event_packet+0x666/0x1180 [ 131.636065][ T5349] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 131.637535][ T5349] ? __pfx_hci_event_packet+0x10/0x10 [ 131.638938][ T5349] ? mark_held_locks+0x9f/0xe0 [ 131.640195][ T5349] ? kcov_remote_start+0x3cf/0x6e0 [ 131.641571][ T5349] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.642948][ T5349] hci_rx_work+0x2c6/0x16c0 [ 131.644158][ T5349] ? lock_acquire+0x2f/0xb0 [ 131.645360][ T5349] ? process_one_work+0x921/0x1ba0 [ 131.646706][ T5349] process_one_work+0x9c5/0x1ba0 [ 131.648017][ T5349] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 131.649514][ T5349] ? __pfx_process_one_work+0x10/0x10 [ 131.650942][ T5349] ? assign_work+0x1a0/0x250 [ 131.652188][ T5349] worker_thread+0x6c8/0xf00 [ 131.653475][ T5349] ? __pfx_worker_thread+0x10/0x10 [ 131.654825][ T5349] kthread+0x2c1/0x3a0 [ 131.655907][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.657303][ T5349] ? __pfx_kthread+0x10/0x10 [ 131.658554][ T5349] ret_from_fork+0x45/0x80 [ 131.659742][ T5349] ? __pfx_kthread+0x10/0x10 [ 131.661005][ T5349] ret_from_fork_asm+0x1a/0x30 [ 131.662318][ T5349] [ 131.664690][ T5349] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 131.668388][ T5349] Bluetooth: hci4: failed to register connection device [ 131.824865][ T8] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 132.016794][ T8] usb 7-1: config index 0 descriptor too short (expected 106, got 36) [ 132.018878][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.021591][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.023941][ T8] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 132.026536][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.030622][ T8] usb 7-1: config 0 descriptor?? [ 132.259536][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.552'. [ 132.454957][ T8] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 132.456925][ T8] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 132.458792][ T8] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 132.460607][ T8] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 132.462448][ T8] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 132.464438][ T8] corsair 0003:1B1C:1B3E.000A: failed to start in urb: -90 [ 132.467363][ T8] corsair 0003:1B1C:1B3E.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 132.527936][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.530446][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.653076][ T5399] usb 7-1: USB disconnect, device number 12 [ 132.671235][ T7387] tipc: Started in network mode [ 132.673047][ T7387] tipc: Node identity ac141441, cluster identity 4711 [ 132.675315][ T5345] Bluetooth: hci4: command 0x041b tx timeout [ 132.678003][ T7387] tipc: Enabled bearer , priority 10 [ 133.094392][ T7415] netlink: 'syz.1.560': attribute type 3 has an invalid length. [ 133.097234][ T7415] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.560'. [ 133.318715][ T39] audit: type=1400 audit(1728188156.291:1037): avc: denied { getopt } for pid=7418 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.677374][ T5399] tipc: Node number set to 2886997057 [ 133.688052][ T7427] netlink: 84 bytes leftover after parsing attributes in process `syz.3.565'. [ 134.024618][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 134.030063][ T39] audit: type=1400 audit(1728188157.001:1038): avc: denied { ioctl } for pid=7431 comm="syz.0.567" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 134.040795][ T39] audit: type=1326 audit(1728188157.011:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7431 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bab17dff9 code=0x7ffc0000 [ 134.047775][ T39] audit: type=1326 audit(1728188157.011:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7431 comm="syz.0.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bab17dff9 code=0x7ffc0000 [ 134.765146][ T5345] Bluetooth: hci4: command 0x041b tx timeout [ 134.797802][ T39] audit: type=1400 audit(1728188157.761:1041): avc: denied { getopt } for pid=7437 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.820787][ T5345] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 135.065742][ T63] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.246081][ T63] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 135.257678][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.265739][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.268316][ T63] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 135.274866][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.281747][ T63] usb 5-1: config 0 descriptor?? [ 135.395845][ T39] audit: type=1400 audit(1728188158.371:1042): avc: denied { link } for pid=7444 comm="syz.3.572" name="file1" dev="tmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.692133][ T63] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 135.694120][ T63] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 135.696145][ T63] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 135.698124][ T63] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 135.699946][ T63] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 135.702024][ T63] corsair 0003:1B1C:1B3E.000B: failed to start in urb: -90 [ 135.706214][ T63] corsair 0003:1B1C:1B3E.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 135.896040][ T63] usb 5-1: USB disconnect, device number 8 [ 136.009686][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 136.027541][ T39] audit: type=1400 audit(1728188159.001:1043): avc: granted { setsecparam } for pid=7462 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 136.672787][ T7483] fuse: Unknown parameter 'user_i00000000000000000000' [ 136.686296][ T7484] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 136.688748][ T7484] netlink: 152 bytes leftover after parsing attributes in process `syz.0.584'. [ 136.694583][ T7484] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 136.704123][ T7484] netlink: 'syz.0.584': attribute type 33 has an invalid length. [ 136.745171][ T39] audit: type=1400 audit(1728188159.691:1044): avc: denied { create } for pid=7477 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.751051][ T39] audit: type=1400 audit(1728188159.691:1045): avc: denied { setopt } for pid=7477 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.407524][ T7465] syz.3.580 (7465) used greatest stack depth: 21360 bytes left [ 137.681718][ T7494] netlink: 'syz.3.587': attribute type 3 has an invalid length. [ 137.683986][ T7494] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.587'. [ 137.944709][ T7505] netlink: 84 bytes leftover after parsing attributes in process `syz.2.591'. [ 138.543890][ T7514] fuse: Unknown parameter 'user_id00000000000000000000' [ 138.603153][ T39] audit: type=1400 audit(1728188161.571:1046): avc: denied { getopt } for pid=7511 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.814857][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 138.964849][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 138.969848][ T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 138.976144][ T35] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.979300][ T35] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.984845][ T35] usb 6-1: Product: syz [ 138.986393][ T35] usb 6-1: Manufacturer: syz [ 138.988008][ T35] usb 6-1: SerialNumber: syz [ 138.995439][ T35] usb 6-1: config 0 descriptor?? [ 138.998582][ T7516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.319314][ T8] usb 6-1: USB disconnect, device number 7 [ 139.770778][ T39] audit: type=1400 audit(1728188162.741:1047): avc: denied { connect } for pid=7526 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.781958][ T7527] netlink: 'syz.2.597': attribute type 4 has an invalid length. [ 139.789585][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 139.841202][ T39] audit: type=1400 audit(1728188162.811:1048): avc: denied { write } for pid=7526 comm="syz.2.597" path="socket:[17185]" dev="sockfs" ino=17185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.164788][ T7535] xt_TCPMSS: Only works on TCP SYN packets [ 140.168756][ T39] audit: type=1400 audit(1728188163.141:1049): avc: denied { write } for pid=7533 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.169024][ T7535] rdma_op ffff88804a3fe1f0 conn xmit_rdma 0000000000000000 [ 140.180005][ T7535] netlink: 92 bytes leftover after parsing attributes in process `syz.1.600'. [ 140.196611][ T7535] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 140.433379][ T7539] serio: Serial port pts0 [ 140.492073][ T39] audit: type=1400 audit(1728188163.461:1050): avc: denied { getopt } for pid=7538 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 140.973978][ T7549] fuse: Unknown parameter 'user_id00000000000000000000' [ 141.018809][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 141.022124][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 141.025539][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 141.123806][ T7556] netlink: 84 bytes leftover after parsing attributes in process `syz.0.606'. [ 142.005748][ T7577] fuse: Unknown parameter 'user_id00000000000000000000' [ 142.087205][ T7580] rdma_op ffff8880301da1f0 conn xmit_rdma 0000000000000000 [ 142.091128][ T7580] netlink: 92 bytes leftover after parsing attributes in process `syz.0.614'. [ 142.109151][ T7580] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 142.275519][ T7583] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.283796][ T7585] netlink: 84 bytes leftover after parsing attributes in process `syz.1.616'. [ 142.312849][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.617'. [ 142.318493][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.617'. [ 142.364120][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 142.373746][ T39] audit: type=1400 audit(1728188165.341:1051): avc: granted { setsecparam } for pid=7597 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 142.407699][ T7599] xt_TCPMSS: Only works on TCP SYN packets [ 142.411567][ T7599] rdma_op ffff888049da19f0 conn xmit_rdma 0000000000000000 [ 142.418091][ T7599] netlink: 92 bytes leftover after parsing attributes in process `syz.3.621'. [ 142.450799][ T7599] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 142.907068][ T7606] fuse: Bad value for 'fd' [ 143.005783][ T39] audit: type=1400 audit(1728188165.981:1052): avc: denied { name_bind } for pid=7614 comm="syz.0.628" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 143.208747][ T7631] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 143.235378][ T7635] fuse: Bad value for 'fd' [ 143.277188][ T39] audit: type=1400 audit(1728188166.221:1053): avc: granted { setsecparam } for pid=7636 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 143.323176][ T7648] x_tables: ip_tables: ah match: only valid for protocol 51 [ 143.341747][ T39] audit: type=1326 audit(1728188166.311:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.2.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f97dff9 code=0x7ffc0000 [ 143.349166][ T39] audit: type=1326 audit(1728188166.321:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.2.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f97dff9 code=0x7ffc0000 [ 144.852765][ T39] kauditd_printk_skb: 63 callbacks suppressed [ 144.852777][ T39] audit: type=1400 audit(1728188167.821:1119): avc: denied { setopt } for pid=7671 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.006597][ T7676] fuse: Bad value for 'fd' [ 145.008161][ T7666] Falling back ldisc for ptm0. [ 145.257586][ T7681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7681 comm=syz.1.646 [ 145.723642][ T39] audit: type=1400 audit(1728188168.691:1120): avc: denied { mount } for pid=7696 comm="syz.1.652" name="/" dev="configfs" ino=3155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 145.765572][ T39] audit: type=1400 audit(1728188168.741:1121): avc: denied { read } for pid=7709 comm="syz.3.656" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.771613][ T39] audit: type=1400 audit(1728188168.741:1122): avc: denied { open } for pid=7709 comm="syz.3.656" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.820449][ T39] audit: type=1400 audit(1728188168.791:1123): avc: denied { setattr } for pid=7709 comm="syz.3.656" name="ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 146.390583][ T7716] 9pnet_fd: Insufficient options for proto=fd [ 146.571486][ T7710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.573832][ T7710] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.581107][ T7710] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.585778][ T7710] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.589356][ T7710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.590960][ T7710] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.597065][ T7710] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.600485][ T7710] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.603151][ T7710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.605142][ T7710] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 146.608975][ T7710] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 146.616840][ T7710] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 146.622220][ T7710] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 146.627603][ T7710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.629221][ T7710] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.631855][ T7710] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.636885][ T7710] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.719080][ T39] audit: type=1400 audit(1728188169.691:1124): avc: denied { write } for pid=7717 comm="syz.0.658" path="socket:[20171]" dev="sockfs" ino=20171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.720788][ T7728] __nla_validate_parse: 6 callbacks suppressed [ 146.720797][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.661'. [ 147.831616][ T39] audit: type=1326 audit(1728188170.801:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.0.668" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bab17dff9 code=0x0 [ 147.874874][ T5349] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.908028][ T7765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32786 sclass=netlink_route_socket pid=7765 comm=syz.3.669 [ 148.139496][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 148.153054][ T39] audit: type=1400 audit(1728188171.121:1126): avc: granted { setsecparam } for pid=7773 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 148.275895][ T7777] netlink: 84 bytes leftover after parsing attributes in process `syz.1.672'. [ 148.594992][ T5345] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.684847][ T5345] Bluetooth: hci0: command 0x0405 tx timeout [ 148.684908][ T5349] Bluetooth: hci4: command 0x041b tx timeout [ 148.732551][ T7790] netlink: 96 bytes leftover after parsing attributes in process `syz.0.676'. [ 149.522278][ T7797] tipc: Started in network mode [ 149.523680][ T7797] tipc: Node identity 9a22b9a9377c, cluster identity 4711 [ 149.526106][ T7797] tipc: Enabled bearer , priority 0 [ 149.530874][ T7798] tipc: Enabling of bearer rejected, already enabled [ 149.594509][ T7800] tipc: Disabling bearer [ 149.944980][ T39] audit: type=1400 audit(1728188172.921:1127): avc: denied { write } for pid=7817 comm="syz.3.683" name="fib_triestat" dev="proc" ino=4026533318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 149.945505][ T7818] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 149.954843][ T5349] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.961319][ T7818] CIFS mount error: No usable UNC path provided in device string! [ 149.961319][ T7818] [ 149.964444][ T7818] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 150.017682][ T7819] netlink: 'syz.1.682': attribute type 3 has an invalid length. [ 150.019791][ T7819] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.682'. [ 150.674966][ T5349] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.754814][ T5349] Bluetooth: hci0: command 0x0405 tx timeout [ 150.765389][ T5349] Bluetooth: hci4: command 0x041b tx timeout [ 150.908495][ T39] audit: type=1400 audit(1728188173.881:1128): avc: denied { mounton } for pid=7827 comm="syz.0.686" path="/70/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 151.642120][ T7840] netlink: 84 bytes leftover after parsing attributes in process `syz.0.689'. [ 151.859923][ T39] audit: type=1400 audit(1728188174.831:1129): avc: denied { module_load } for pid=7850 comm="syz.0.693" path="/sys/power/wakeup_count" dev="sysfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 152.034851][ T5349] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.137923][ T5349] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 152.699988][ T7870] netlink: 84 bytes leftover after parsing attributes in process `syz.2.699'. [ 152.754945][ T5349] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.845766][ T4773] Bluetooth: hci0: command 0x0405 tx timeout [ 152.845782][ T5349] Bluetooth: hci4: command 0x041b tx timeout [ 153.010915][ T7884] netlink: 92 bytes leftover after parsing attributes in process `syz.1.704'. [ 153.076776][ T7889] can0: slcan on ttyS3. [ 153.136538][ T7889] can0 (unregistered): slcan off ttyS3. [ 153.320401][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.323049][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.326416][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.329550][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.333741][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.336408][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.338978][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.341576][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.344139][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.346997][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.349655][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.352107][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.354027][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.356012][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.357985][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.359936][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.361868][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.363778][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.366316][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.369162][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.371760][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.374348][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.377124][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.380026][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.382752][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.385546][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.388317][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.391067][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.393894][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.396907][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.399619][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.402406][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.405156][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.408532][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.411243][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.414030][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.416845][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.419617][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.422281][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.424176][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.426984][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.429744][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.431822][ T1294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.441062][ T1294] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 153.783420][ T7909] fuse: Unknown parameter '0x0000000000000004' [ 153.991381][ T7914] netlink: 'syz.0.712': attribute type 3 has an invalid length. [ 153.993438][ T7914] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.712'. [ 154.201950][ T7919] syzkaller0: entered promiscuous mode [ 154.203617][ T7919] syzkaller0: entered allmulticast mode [ 154.209362][ T7919] Bluetooth: MGMT ver 1.23 [ 154.838294][ T5345] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.924888][ T4773] Bluetooth: hci4: command 0x041b tx timeout [ 154.926347][ T5345] Bluetooth: hci0: command 0x0405 tx timeout [ 156.994827][ T5345] Bluetooth: hci4: command 0x041b tx timeout [ 156.996477][ T5345] Bluetooth: hci0: command 0x0405 tx timeout [ 157.146478][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.719'. [ 157.235341][ T7939] batadv0: entered promiscuous mode [ 157.301305][ T7943] FAULT_INJECTION: forcing a failure. [ 157.301305][ T7943] name failslab, interval 1, probability 0, space 0, times 0 [ 157.306719][ T7943] CPU: 0 UID: 0 PID: 7943 Comm: syz.2.720 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 157.310274][ T7943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.313880][ T7943] Call Trace: [ 157.315021][ T7943] [ 157.316065][ T7943] dump_stack_lvl+0x16c/0x1f0 [ 157.317742][ T7943] should_fail_ex+0x497/0x5b0 [ 157.319297][ T7943] ? fs_reclaim_acquire+0xae/0x160 [ 157.321112][ T7943] should_failslab+0xc2/0x120 [ 157.322578][ T7943] __kmalloc_noprof+0xcb/0x400 [ 157.324263][ T7943] ? d_absolute_path+0x137/0x1b0 [ 157.325929][ T7943] tomoyo_encode2+0x100/0x3e0 [ 157.327580][ T7943] tomoyo_encode+0x29/0x50 [ 157.329055][ T7943] tomoyo_realpath_from_path+0x19d/0x720 [ 157.331011][ T7943] tomoyo_path2_perm+0x2a3/0x710 [ 157.332627][ T7943] ? tomoyo_path2_perm+0x295/0x710 [ 157.334426][ T7943] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 157.336234][ T7943] ? d_splice_alias+0x4d2/0xdf0 [ 157.337979][ T7943] ? current_check_refer_path+0x2be/0x710 [ 157.339854][ T7943] ? __pfx_current_check_refer_path+0x10/0x10 [ 157.342000][ T7943] tomoyo_path_rename+0x102/0x1b0 [ 157.343360][ T7943] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 157.344849][ T7943] ? _raw_spin_unlock+0x28/0x50 [ 157.346156][ T7943] security_path_rename+0x18e/0x3c0 [ 157.347548][ T7943] do_renameat2+0x7a0/0xdd0 [ 157.348799][ T7943] ? __pfx_do_renameat2+0x10/0x10 [ 157.350244][ T7943] ? trace_lock_acquire+0x14a/0x1d0 [ 157.351612][ T7943] ? lock_acquire+0x2f/0xb0 [ 157.352820][ T7943] ? __might_fault+0xe3/0x190 [ 157.354126][ T7943] ? __might_fault+0xe3/0x190 [ 157.355797][ T7943] ? getname_flags.part.0+0x1c5/0x550 [ 157.357549][ T7943] __x64_sys_rename+0x7d/0xa0 [ 157.359200][ T7943] do_syscall_64+0xcd/0x250 [ 157.360699][ T7943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.362737][ T7943] RIP: 0033:0x7ff83f97dff9 [ 157.364206][ T7943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.370751][ T7943] RSP: 002b:00007ff8407df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 157.373577][ T7943] RAX: ffffffffffffffda RBX: 00007ff83fb35f80 RCX: 00007ff83f97dff9 [ 157.376370][ T7943] RDX: 0000000000000000 RSI: 0000000020000f00 RDI: 0000000020000400 [ 157.379108][ T7943] RBP: 00007ff8407df090 R08: 0000000000000000 R09: 0000000000000000 [ 157.381439][ T7943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.383524][ T7943] R13: 0000000000000000 R14: 00007ff83fb35f80 R15: 00007ffc12834718 [ 157.385639][ T7943] [ 157.388439][ T7943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.980476][ T39] audit: type=1400 audit(1728188180.941:1130): avc: granted { setsecparam } for pid=7957 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 158.275353][ T39] audit: type=1400 audit(1728188181.251:1131): avc: denied { append } for pid=7963 comm="syz.3.727" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 158.347433][ T5345] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 158.400136][ T39] audit: type=1400 audit(1728188181.371:1132): avc: denied { name_bind } for pid=7965 comm="syz.3.728" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 158.420556][ T5345] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 158.437095][ T5345] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 159.156651][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 159.252983][ T7979] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 159.257379][ T7979] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 159.305283][ T7982] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 159.705422][ T7991] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.591505][ T8010] netlink: 144 bytes leftover after parsing attributes in process `syz.1.741'. [ 161.040687][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'. [ 161.056072][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 161.448151][ T1294] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 161.603330][ T1294] usb 7-1: device descriptor read/64, error -71 [ 161.879618][ T8014] veth0_vlan: left promiscuous mode [ 161.897142][ T8017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.742'. [ 161.914928][ T1294] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 162.053731][ T8041] netlink: 76 bytes leftover after parsing attributes in process `syz.0.749'. [ 162.056500][ T1294] usb 7-1: device descriptor read/64, error -71 [ 162.167873][ T1294] usb usb7-port1: attempt power cycle [ 162.216098][ T39] audit: type=1400 audit(1728188185.191:1133): avc: denied { ioctl } for pid=8056 comm="syz.0.754" path="socket:[21114]" dev="sockfs" ino=21114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.275710][ T8065] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.283017][ T8065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.514963][ T1294] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 162.535423][ T1294] usb 7-1: device descriptor read/8, error -71 [ 162.786305][ T1294] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 162.822604][ T1294] usb 7-1: device descriptor read/8, error -71 [ 162.927336][ T1294] usb usb7-port1: unable to enumerate USB device [ 164.012971][ T8087] netlink: 76 bytes leftover after parsing attributes in process `syz.1.760'. [ 164.198870][ T39] audit: type=1326 audit(1728188187.171:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.1.763" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28a757dff9 code=0x0 [ 164.345234][ T39] audit: type=1400 audit(1728188187.311:1135): avc: denied { ioctl } for pid=8105 comm="syz.0.764" path="socket:[23679]" dev="sockfs" ino=23679 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 164.527165][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 165.076229][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 165.274218][ T8145] FAULT_INJECTION: forcing a failure. [ 165.274218][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 165.280253][ T8145] CPU: 3 UID: 0 PID: 8145 Comm: syz.2.774 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 165.283299][ T8145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.286132][ T8145] Call Trace: [ 165.287367][ T8145] [ 165.288181][ T8145] dump_stack_lvl+0x16c/0x1f0 [ 165.289562][ T8145] should_fail_ex+0x497/0x5b0 [ 165.290811][ T8145] ? fs_reclaim_acquire+0xae/0x160 [ 165.292175][ T8145] should_failslab+0xc2/0x120 [ 165.293448][ T8145] __kmalloc_node_noprof+0xd1/0x430 [ 165.294820][ T8145] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 165.296252][ T8145] __kvmalloc_node_noprof+0xad/0x1a0 [ 165.297649][ T8145] alloc_fdtable+0xef/0x290 [ 165.298880][ T8145] dup_fd+0x7f9/0xc00 [ 165.299951][ T8145] copy_process+0x25d6/0x8db0 [ 165.301213][ T8145] ? __pfx___lock_acquire+0x10/0x10 [ 165.301661][ T5345] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 165.302629][ T8145] ? __pfx_copy_process+0x10/0x10 [ 165.302646][ T8145] ? get_pid_task+0xfc/0x250 [ 165.302660][ T8145] ? __pfx_lock_release+0x10/0x10 [ 165.302669][ T8145] ? trace_lock_acquire+0x14a/0x1d0 [ 165.307644][ T39] audit: type=1400 audit(1728188188.281:1136): avc: denied { append } for pid=8147 comm="syz.0.775" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.307808][ T8145] ? find_held_lock+0x2d/0x110 [ 165.320213][ T8145] ? find_held_lock+0x2d/0x110 [ 165.321866][ T8145] kernel_clone+0xfd/0x960 [ 165.323389][ T8145] ? __pfx_kernel_clone+0x10/0x10 [ 165.325123][ T8145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.327147][ T8145] __do_sys_clone+0xba/0x100 [ 165.328728][ T8145] ? __pfx___do_sys_clone+0x10/0x10 [ 165.330516][ T8145] do_syscall_64+0xcd/0x250 [ 165.332061][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.334065][ T8145] RIP: 0033:0x7ff83f97dff9 [ 165.335724][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.341529][ T8145] RSP: 002b:00007ff8407defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 165.344331][ T8145] RAX: ffffffffffffffda RBX: 00007ff83fb35f80 RCX: 00007ff83f97dff9 [ 165.346985][ T8145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.349001][ T8145] RBP: 00007ff8407df090 R08: 0000000000000000 R09: 0000000000000000 [ 165.350997][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.353622][ T8145] R13: 0000000000000000 R14: 00007ff83fb35f80 R15: 00007ffc12834718 [ 165.356308][ T8145] [ 165.457953][ T39] audit: type=1400 audit(1728188188.431:1137): avc: denied { bind } for pid=8159 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.646178][ T1294] libceph: connect (1)[c::]:6789 error -101 [ 165.648144][ T1294] libceph: mon0 (1)[c::]:6789 connect error [ 165.686951][ T8177] ceph: No mds server is up or the cluster is laggy [ 165.805149][ T39] audit: type=1400 audit(1728188188.771:1138): avc: denied { execute } for pid=8186 comm="syz.3.788" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=22427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 165.903307][ T8198] FAULT_INJECTION: forcing a failure. [ 165.903307][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 165.907039][ T8198] CPU: 2 UID: 0 PID: 8198 Comm: syz.0.792 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 165.909871][ T8198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.912793][ T8198] Call Trace: [ 165.913674][ T8198] [ 165.914460][ T8198] dump_stack_lvl+0x16c/0x1f0 [ 165.915719][ T8198] should_fail_ex+0x497/0x5b0 [ 165.916975][ T8198] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 165.918679][ T8198] should_failslab+0xc2/0x120 [ 165.919928][ T8198] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 165.921979][ T8198] ? sidtab_sid2str_get+0x17a/0x680 [ 165.923801][ T8198] kmemdup_noprof+0x29/0x60 [ 165.925427][ T8198] sidtab_sid2str_get+0x17a/0x680 [ 165.927211][ T8198] sidtab_entry_to_string+0x33/0x110 [ 165.928853][ T8198] security_sid_to_context_core+0x35c/0x640 [ 165.930477][ T8198] avc_audit_post_callback+0x10b/0x8c0 [ 165.931958][ T8198] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 165.933544][ T8198] ? audit_log_format+0xe9/0x130 [ 165.934851][ T8198] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 165.936418][ T8198] ? skb_put+0x138/0x1b0 [ 165.937552][ T8198] ? audit_log_n_string+0x251/0x540 [ 165.938930][ T8198] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 165.940553][ T8198] common_lsm_audit+0x260/0x2210 [ 165.941893][ T8198] ? __pfx_common_lsm_audit+0x10/0x10 [ 165.943547][ T8198] ? avc_update_node.isra.0+0x49d/0x800 [ 165.945045][ T8198] ? __pfx_avc_node_free+0x10/0x10 [ 165.946407][ T8198] ? rcu_is_watching+0x12/0xc0 [ 165.947684][ T8198] ? slow_avc_audit+0x17d/0x210 [ 165.948996][ T8198] slow_avc_audit+0x17d/0x210 [ 165.950247][ T8198] ? __pfx_slow_avc_audit+0x10/0x10 [ 165.951831][ T8198] ? avc_has_extended_perms+0x7c9/0xf70 [ 165.953295][ T8198] ? avc_denied+0x138/0x180 [ 165.954498][ T8198] ? avc_denied+0x141/0x180 [ 165.955731][ T8198] avc_has_extended_perms+0x9a1/0xf70 [ 165.957148][ T8198] ? find_held_lock+0x2d/0x110 [ 165.958413][ T8198] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 165.959971][ T8198] ? tomoyo_path_number_perm+0x292/0x590 [ 165.961509][ T8198] ? __pfx_lock_release+0x10/0x10 [ 165.962853][ T8198] ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 165.964516][ T8198] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.966534][ T8198] ? trace_lock_acquire+0x14a/0x1d0 [ 165.967900][ T8198] ? selinux_file_ioctl+0x180/0x270 [ 165.969276][ T8198] selinux_file_ioctl+0x180/0x270 [ 165.970696][ T8198] security_file_ioctl+0xc6/0x240 [ 165.972032][ T8198] __x64_sys_ioctl+0xbb/0x220 [ 165.973288][ T8198] do_syscall_64+0xcd/0x250 [ 165.974490][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.976092][ T8198] RIP: 0033:0x7f0bab17dff9 [ 165.977274][ T8198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.982822][ T8198] RSP: 002b:00007f0babea8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.985728][ T8198] RAX: ffffffffffffffda RBX: 00007f0bab335f80 RCX: 00007f0bab17dff9 [ 165.988299][ T8198] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000004 [ 165.990434][ T8198] RBP: 00007f0babea8090 R08: 0000000000000000 R09: 0000000000000000 [ 165.992539][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.994615][ T8198] R13: 0000000000000000 R14: 00007f0bab335f80 R15: 00007fff8303dcc8 [ 165.996714][ T8198] [ 165.999109][ T39] audit: type=1400 audit(1728188188.871:1139): avc: denied { ioctl } for pid=8197 comm="syz.0.792" path="socket:[21225]" dev="sockfs" ino=21225 ioctlcmd=0x89e4 ssid=147 tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 166.025168][ T8202] netlink: 56 bytes leftover after parsing attributes in process `syz.1.793'. [ 166.102813][ T8216] FAULT_INJECTION: forcing a failure. [ 166.102813][ T8216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.105190][ T8205] netlink: 'syz.3.794': attribute type 11 has an invalid length. [ 166.108258][ T8216] CPU: 2 UID: 0 PID: 8216 Comm: syz.0.798 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 166.112377][ T8216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.115209][ T8216] Call Trace: [ 166.116101][ T8216] [ 166.116903][ T8216] dump_stack_lvl+0x16c/0x1f0 [ 166.118157][ T8216] should_fail_ex+0x497/0x5b0 [ 166.119415][ T8216] _copy_from_user+0x30/0xf0 [ 166.120821][ T8216] video_usercopy+0xed4/0x1600 [ 166.122104][ T8216] ? __pfx___video_do_ioctl+0x10/0x10 [ 166.123519][ T8216] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.125313][ T8216] ? __pfx_video_usercopy+0x10/0x10 [ 166.126707][ T8216] v4l2_ioctl+0x1ba/0x250 [ 166.127852][ T8216] ? __pfx_v4l2_ioctl+0x10/0x10 [ 166.129145][ T8216] __x64_sys_ioctl+0x18f/0x220 [ 166.130461][ T8216] do_syscall_64+0xcd/0x250 [ 166.131655][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.133225][ T8216] RIP: 0033:0x7f0bab17dff9 [ 166.134417][ T8216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.139514][ T8216] RSP: 002b:00007f0babea8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.141778][ T8216] RAX: ffffffffffffffda RBX: 00007f0bab335f80 RCX: 00007f0bab17dff9 [ 166.143858][ T8216] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 166.145957][ T8216] RBP: 00007f0babea8090 R08: 0000000000000000 R09: 0000000000000000 [ 166.148036][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.150117][ T8216] R13: 0000000000000000 R14: 00007f0bab335f80 R15: 00007fff8303dcc8 [ 166.152279][ T8216] [ 166.211471][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 166.222444][ T39] audit: type=1400 audit(1728188189.191:1140): avc: granted { setsecparam } for pid=8222 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 166.736525][ T39] audit: type=1400 audit(1728188189.711:1141): avc: denied { bind } for pid=8240 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.753707][ T39] audit: type=1400 audit(1728188189.721:1142): avc: denied { unmount } for pid=5649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 166.832914][ T8249] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.807'. [ 167.264833][ T39] audit: type=1400 audit(1728188190.211:1143): avc: denied { connect } for pid=8253 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.283745][ T8263] FAULT_INJECTION: forcing a failure. [ 168.283745][ T8263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.287366][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.1.809 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 168.290091][ T8263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.292862][ T8263] Call Trace: [ 168.293737][ T8263] [ 168.294518][ T8263] dump_stack_lvl+0x16c/0x1f0 [ 168.295770][ T8263] should_fail_ex+0x497/0x5b0 [ 168.297011][ T8263] core_sys_select+0x91b/0xb80 [ 168.298269][ T8263] ? __pfx_core_sys_select+0x10/0x10 [ 168.299656][ T8263] ? get_pid_task+0xfc/0x250 [ 168.300899][ T8263] ? set_user_sigmask+0x217/0x2a0 [ 168.302215][ T8263] ? __pfx_set_user_sigmask+0x10/0x10 [ 168.303617][ T8263] do_pselect.constprop.0+0x1a0/0x1f0 [ 168.305002][ T8263] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 168.306477][ T8263] __x64_sys_pselect6+0x183/0x240 [ 168.307796][ T8263] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 168.309250][ T8263] do_syscall_64+0xcd/0x250 [ 168.310447][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.311964][ T8263] RIP: 0033:0x7f28a757dff9 [ 168.313109][ T8263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.318070][ T8263] RSP: 002b:00007f28a83a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 168.320216][ T8263] RAX: ffffffffffffffda RBX: 00007f28a7735f80 RCX: 00007f28a757dff9 [ 168.322268][ T8263] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 168.324311][ T8263] RBP: 00007f28a83a0090 R08: 0000000000000000 R09: 0000000000000000 [ 168.326363][ T8263] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 168.328268][ T8263] R13: 0000000000000000 R14: 00007f28a7735f80 R15: 00007ffdd1958b38 [ 168.330219][ T8263] [ 168.677832][ T8293] 9pnet_fd: Insufficient options for proto=fd [ 170.264817][ T5397] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 170.414845][ T5397] usb 7-1: Using ep0 maxpacket: 8 [ 170.425541][ T5397] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 170.426300][ T8317] 9pnet_fd: Insufficient options for proto=fd [ 170.427732][ T5397] usb 7-1: config 179 has no interface number 0 [ 170.431154][ T5397] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.442154][ T8319] Falling back ldisc for ttyS3. [ 170.444807][ T5397] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 170.447817][ T5397] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.450817][ T5397] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 170.453874][ T5397] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.457473][ T5397] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 170.459812][ T5397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.466155][ T8315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.882060][ T1294] usb 7-1: USB disconnect, device number 17 [ 170.882116][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 170.948862][ T5397] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 170.953174][ T5397] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input17 [ 170.966953][ T1294] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 171.544090][ T8350] 9pnet_fd: Insufficient options for proto=fd [ 172.290000][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 172.290014][ T39] audit: type=1400 audit(1728188195.261:1145): avc: denied { create } for pid=8354 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 172.581775][ T8362] x_tables: ip_tables: ah match: only valid for protocol 51 [ 173.408797][ T8362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.410497][ T8362] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 173.424126][ T8362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.425804][ T8362] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 173.429749][ T8362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.432491][ T8362] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 173.438314][ T8362] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.439904][ T8362] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 174.066343][ T8386] 9pnet_fd: Insufficient options for proto=fd [ 174.324902][ T8390] loop7: detected capacity change from 16383 to 16384 [ 174.424502][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 174.450092][ T39] audit: type=1400 audit(1728188197.421:1146): avc: granted { setsecparam } for pid=8399 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 175.504247][ T8413] 9pnet_fd: Insufficient options for proto=fd [ 175.788202][ T8422] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.861'. [ 175.791574][ T8422] openvswitch: netlink: IP tunnel dst address not specified [ 175.978257][ T8425] FAULT_INJECTION: forcing a failure. [ 175.978257][ T8425] name failslab, interval 1, probability 0, space 0, times 0 [ 175.982037][ T8425] CPU: 2 UID: 0 PID: 8425 Comm: syz.2.862 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 175.985215][ T8425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.988434][ T8425] Call Trace: [ 175.989483][ T8425] [ 175.990396][ T8425] dump_stack_lvl+0x16c/0x1f0 [ 175.991850][ T8425] should_fail_ex+0x497/0x5b0 [ 175.993306][ T8425] ? fs_reclaim_acquire+0xae/0x160 [ 175.994871][ T8425] should_failslab+0xc2/0x120 [ 175.996276][ T8425] __kmalloc_noprof+0xcb/0x400 [ 175.997721][ T8425] ? d_absolute_path+0x137/0x1b0 [ 175.999231][ T8425] tomoyo_encode2+0x100/0x3e0 [ 176.000696][ T8425] tomoyo_encode+0x29/0x50 [ 176.002027][ T8425] tomoyo_realpath_from_path+0x19d/0x720 [ 176.003739][ T8425] tomoyo_path_number_perm+0x245/0x590 [ 176.005392][ T8425] ? tomoyo_path_number_perm+0x232/0x590 [ 176.007082][ T8425] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.008902][ T8425] ? trace_lock_acquire+0x14a/0x1d0 [ 176.010470][ T8425] ? lock_acquire+0x2f/0xb0 [ 176.011845][ T8425] ? __fget_files+0x40/0x3f0 [ 176.013245][ T8425] ? __fget_files+0x244/0x3f0 [ 176.014665][ T8425] security_file_ioctl+0x9b/0x240 [ 176.016211][ T8425] __x64_sys_ioctl+0xbb/0x220 [ 176.017625][ T8425] do_syscall_64+0xcd/0x250 [ 176.018966][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.020792][ T8425] RIP: 0033:0x7ff83f97dff9 [ 176.022130][ T8425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.027628][ T8425] RSP: 002b:00007ff8407df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.030131][ T8425] RAX: ffffffffffffffda RBX: 00007ff83fb35f80 RCX: 00007ff83f97dff9 [ 176.032489][ T8425] RDX: 0000000000000000 RSI: 00000000400454da RDI: 0000000000000003 [ 176.034850][ T8425] RBP: 00007ff8407df090 R08: 0000000000000000 R09: 0000000000000000 [ 176.037214][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.039587][ T8425] R13: 0000000000000000 R14: 00007ff83fb35f80 R15: 00007ffc12834718 [ 176.041914][ T8425] [ 176.046522][ T8425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.135991][ T8431] loop7: detected capacity change from 0 to 6 [ 176.138046][ T8431] Dev loop7: unable to read RDB block 6 [ 176.140469][ T8431] loop7: unable to read partition table [ 176.142121][ T8431] loop7: partition table beyond EOD, truncated [ 176.143808][ T8431] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 176.143808][ T8431] ) failed (rc=-5) [ 176.209501][ T8431] Dev loop7: unable to read RDB block 6 [ 176.211604][ T8431] loop7: unable to read partition table [ 176.213785][ T8431] loop7: partition table beyond EOD, truncated [ 176.216258][ T8431] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 176.216258][ T8431] ) failed (rc=-5) [ 176.298228][ T8441] 9pnet_fd: Insufficient options for proto=fd [ 176.465350][ T8446] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.870'. [ 176.467716][ T8446] openvswitch: netlink: IP tunnel dst address not specified [ 177.347975][ T8466] loop7: detected capacity change from 0 to 6 [ 177.349774][ T8466] Dev loop7: unable to read RDB block 6 [ 177.351169][ T8466] loop7: unable to read partition table [ 177.352535][ T8466] loop7: partition table beyond EOD, truncated [ 177.353989][ T8466] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 177.353989][ T8466] ) failed (rc=-5) [ 177.409746][ T8474] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.880'. [ 177.412772][ T8474] openvswitch: netlink: IP tunnel dst address not specified [ 178.106006][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.884'. [ 178.458924][ T8505] loop7: detected capacity change from 0 to 6 [ 178.461827][ T8505] Dev loop7: unable to read RDB block 6 [ 178.463261][ T8505] loop7: unable to read partition table [ 178.465625][ T8505] loop7: partition table beyond EOD, truncated [ 178.467623][ T8505] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 178.467623][ T8505] ) failed (rc=-5) [ 178.744854][ T5339] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.770674][ T8538] netlink: 'syz.3.895': attribute type 9 has an invalid length. [ 178.773551][ T8538] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.895'. [ 178.896627][ T5339] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 178.899780][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.903701][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.909618][ T5339] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 178.912913][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.917977][ T5339] usb 5-1: config 0 descriptor?? [ 178.961501][ T39] audit: type=1400 audit(1728188201.931:1147): avc: denied { write } for pid=8541 comm="syz.1.897" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.973940][ T39] audit: type=1400 audit(1728188201.941:1148): avc: denied { ioctl } for pid=8541 comm="syz.1.897" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.323739][ T5339] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 179.326090][ T5339] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 179.328220][ T5339] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 179.330752][ T5339] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 179.333203][ T5339] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 179.335979][ T5339] corsair 0003:1B1C:1B3E.000D: failed to start in urb: -90 [ 179.339366][ T5339] corsair 0003:1B1C:1B3E.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 179.348929][ T8555] netlink: 'syz.3.901': attribute type 3 has an invalid length. [ 179.351490][ T8555] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.901'. [ 179.527359][ T5400] usb 5-1: USB disconnect, device number 9 [ 179.691120][ T8560] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.903'. [ 179.693568][ T8560] openvswitch: netlink: IP tunnel dst address not specified [ 179.975150][ T8565] loop7: detected capacity change from 0 to 6 [ 179.979355][ T8565] Dev loop7: unable to read RDB block 6 [ 179.980884][ T8565] loop7: unable to read partition table [ 179.982918][ T8565] loop7: partition table beyond EOD, truncated [ 179.985473][ T8565] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 179.985473][ T8565] ) failed (rc=-5) [ 180.071093][ T8569] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.906'. [ 180.074069][ T8569] openvswitch: netlink: IP tunnel dst address not specified [ 180.916509][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 180.933285][ T39] audit: type=1400 audit(1728188203.901:1149): avc: granted { setsecparam } for pid=8589 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 182.269060][ T8595] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.913'. [ 182.272280][ T8595] openvswitch: netlink: IP tunnel dst address not specified [ 182.499618][ T8599] netlink: 'syz.0.914': attribute type 9 has an invalid length. [ 182.502291][ T8599] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.914'. [ 182.588696][ T8607] fuse: Bad value for 'group_id' [ 182.590672][ T8607] fuse: Bad value for 'group_id' [ 182.922459][ T8617] netlink: 'syz.2.920': attribute type 3 has an invalid length. [ 182.924805][ T8617] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.920'. [ 184.138905][ T39] audit: type=1400 audit(1728188207.111:1150): avc: granted { setsecparam } for pid=8631 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 184.309245][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.923'. [ 184.432286][ T8636] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.924'. [ 184.435041][ T8636] openvswitch: netlink: IP tunnel dst address not specified [ 184.737817][ T8639] netlink: 'syz.1.925': attribute type 9 has an invalid length. [ 184.739896][ T8639] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.925'. [ 186.146376][ T8659] [ 186.147056][ T8659] ====================================================== [ 186.149230][ T8659] WARNING: possible circular locking dependency detected [ 186.151576][ T8659] 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 Not tainted [ 186.155263][ T8659] ------------------------------------------------------ [ 186.157319][ T8659] syz.0.932/8659 is trying to acquire lock: [ 186.158787][ T8659] ffffffff90173088 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5f/0x1a0 [ 186.161080][ T8659] [ 186.161080][ T8659] but task is already holding lock: [ 186.162916][ T8659] ffffffff90178048 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x905/0x1ca0 [ 186.165398][ T8659] [ 186.165398][ T8659] which lock already depends on the new lock. [ 186.165398][ T8659] [ 186.167922][ T8659] [ 186.167922][ T8659] the existing dependency chain (in reverse order) is: [ 186.170173][ T8659] [ 186.170173][ T8659] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 186.172813][ T8659] __mutex_lock+0x175/0x9c0 [ 186.174552][ T8659] rfcomm_dev_ioctl+0x905/0x1ca0 [ 186.176379][ T8659] rfcomm_sock_ioctl+0xb4/0xe0 [ 186.178200][ T8659] sock_do_ioctl+0x116/0x280 [ 186.179981][ T8659] sock_ioctl+0x228/0x6c0 [ 186.181560][ T8659] __x64_sys_ioctl+0x18f/0x220 [ 186.183345][ T8659] do_syscall_64+0xcd/0x250 [ 186.184953][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.187166][ T8659] [ 186.187166][ T8659] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 186.190363][ T8659] lock_sock_nested+0x3a/0xf0 [ 186.191925][ T8659] rfcomm_sk_state_change+0x6d/0x3b0 [ 186.193399][ T8659] __rfcomm_dlc_close+0x28c/0x700 [ 186.194826][ T8659] rfcomm_dlc_close+0x1eb/0x240 [ 186.196401][ T8659] __rfcomm_sock_close+0xa7/0x230 [ 186.197985][ T8659] rfcomm_sock_shutdown+0xd5/0x230 [ 186.199897][ T8659] rfcomm_sock_release+0x5d/0x140 [ 186.201759][ T8659] __sock_release+0xb0/0x270 [ 186.203475][ T8659] sock_close+0x1c/0x30 [ 186.205057][ T8659] __fput+0x3f6/0xb60 [ 186.206562][ T8659] delayed_fput+0x72/0x90 [ 186.208123][ T8659] process_one_work+0x9c5/0x1ba0 [ 186.209966][ T8659] worker_thread+0x6c8/0xf00 [ 186.211596][ T8659] kthread+0x2c1/0x3a0 [ 186.212781][ T8659] ret_from_fork+0x45/0x80 [ 186.214030][ T8659] ret_from_fork_asm+0x1a/0x30 [ 186.215391][ T8659] [ 186.215391][ T8659] -> #1 (&d->lock){+.+.}-{3:3}: [ 186.217242][ T8659] __mutex_lock+0x175/0x9c0 [ 186.218523][ T8659] __rfcomm_dlc_close+0x235/0x700 [ 186.219972][ T8659] rfcomm_dlc_close+0x1eb/0x240 [ 186.221739][ T8659] __rfcomm_sock_close+0xa7/0x230 [ 186.223395][ T8659] rfcomm_sock_shutdown+0xd5/0x230 [ 186.224846][ T8659] rfcomm_sock_release+0x5d/0x140 [ 186.226282][ T8659] __sock_release+0xb0/0x270 [ 186.227574][ T8659] sock_close+0x1c/0x30 [ 186.228786][ T8659] __fput+0x3f6/0xb60 [ 186.229860][ T8659] delayed_fput+0x72/0x90 [ 186.231068][ T8659] process_one_work+0x9c5/0x1ba0 [ 186.232302][ T8659] worker_thread+0x6c8/0xf00 [ 186.233574][ T8659] kthread+0x2c1/0x3a0 [ 186.234721][ T8659] ret_from_fork+0x45/0x80 [ 186.236047][ T8659] ret_from_fork_asm+0x1a/0x30 [ 186.237475][ T8659] [ 186.237475][ T8659] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 186.239404][ T8659] __lock_acquire+0x250b/0x3ce0 [ 186.240851][ T8659] lock_acquire.part.0+0x11b/0x380 [ 186.242319][ T8659] __mutex_lock+0x175/0x9c0 [ 186.243640][ T8659] rfcomm_dlc_exists+0x5f/0x1a0 [ 186.245059][ T8659] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 186.246557][ T8659] rfcomm_sock_ioctl+0xb4/0xe0 [ 186.247921][ T8659] sock_do_ioctl+0x116/0x280 [ 186.249257][ T8659] sock_ioctl+0x228/0x6c0 [ 186.250552][ T8659] __x64_sys_ioctl+0x18f/0x220 [ 186.252251][ T8659] do_syscall_64+0xcd/0x250 [ 186.253586][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.255241][ T8659] [ 186.255241][ T8659] other info that might help us debug this: [ 186.255241][ T8659] [ 186.258400][ T8659] Chain exists of: [ 186.258400][ T8659] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 186.258400][ T8659] [ 186.263449][ T8659] Possible unsafe locking scenario: [ 186.263449][ T8659] [ 186.265979][ T8659] CPU0 CPU1 [ 186.267813][ T8659] ---- ---- [ 186.269615][ T8659] lock(rfcomm_ioctl_mutex); [ 186.271194][ T8659] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 186.274122][ T8659] lock(rfcomm_ioctl_mutex); [ 186.276576][ T8659] lock(rfcomm_mutex); [ 186.278038][ T8659] [ 186.278038][ T8659] *** DEADLOCK *** [ 186.278038][ T8659] [ 186.280692][ T8659] 2 locks held by syz.0.932/8659: [ 186.281974][ T8659] #0: ffff88805409f258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0xa7/0xe0 [ 186.285798][ T8659] #1: ffffffff90178048 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x905/0x1ca0 [ 186.289224][ T8659] [ 186.289224][ T8659] stack backtrace: [ 186.291191][ T8659] CPU: 2 UID: 0 PID: 8659 Comm: syz.0.932 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 186.294717][ T8659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.298399][ T8659] Call Trace: [ 186.299591][ T8659] [ 186.300624][ T8659] dump_stack_lvl+0x116/0x1f0 [ 186.302265][ T8659] print_circular_bug+0x41c/0x610 [ 186.304028][ T8659] check_noncircular+0x31a/0x400 [ 186.305800][ T8659] ? __pfx_check_noncircular+0x10/0x10 [ 186.307703][ T8659] ? unwind_get_return_address+0x59/0xa0 [ 186.309690][ T8659] ? lockdep_lock+0xc6/0x200 [ 186.311262][ T8659] ? __pfx_lockdep_lock+0x10/0x10 [ 186.313054][ T8659] __lock_acquire+0x250b/0x3ce0 [ 186.314774][ T8659] ? __pfx___lock_acquire+0x10/0x10 [ 186.316595][ T8659] ? add_lock_to_list+0x17d/0x390 [ 186.318345][ T8659] lock_acquire.part.0+0x11b/0x380 [ 186.320123][ T8659] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 186.321928][ T8659] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 186.323606][ T8659] ? rcu_is_watching+0x12/0xc0 [ 186.324850][ T8659] ? trace_lock_acquire+0x14a/0x1d0 [ 186.326164][ T8659] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 186.327502][ T8659] ? lock_acquire+0x2f/0xb0 [ 186.328710][ T8659] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 186.329992][ T8659] __mutex_lock+0x175/0x9c0 [ 186.331169][ T8659] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 186.332438][ T8659] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 186.333711][ T8659] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 186.335259][ T8659] ? __pfx___mutex_lock+0x10/0x10 [ 186.336466][ T8659] ? __pfx_lock_release+0x10/0x10 [ 186.337780][ T8659] ? trace_lock_acquire+0x14a/0x1d0 [ 186.339047][ T8659] ? lock_acquire+0x2f/0xb0 [ 186.340198][ T8659] ? __might_fault+0xe3/0x190 [ 186.341408][ T8659] ? cap_capable+0x1cf/0x240 [ 186.342539][ T8659] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 186.343747][ T8659] rfcomm_dlc_exists+0x5f/0x1a0 [ 186.344931][ T8659] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 186.346160][ T8659] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 186.347541][ T8659] ? __pfx_lock_release+0x10/0x10 [ 186.348879][ T8659] ? mark_held_locks+0x9f/0xe0 [ 186.350141][ T8659] ? rfcomm_sock_ioctl+0xa7/0xe0 [ 186.351428][ T8659] ? __local_bh_enable_ip+0xa4/0x120 [ 186.352802][ T8659] rfcomm_sock_ioctl+0xb4/0xe0 [ 186.354053][ T8659] sock_do_ioctl+0x116/0x280 [ 186.355265][ T8659] ? __pfx_sock_do_ioctl+0x10/0x10 [ 186.356558][ T8659] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 186.358254][ T8659] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 186.359812][ T8659] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 186.361912][ T8659] sock_ioctl+0x228/0x6c0 [ 186.363321][ T8659] ? __pfx_sock_ioctl+0x10/0x10 [ 186.365003][ T8659] ? selinux_file_ioctl+0x180/0x270 [ 186.366785][ T8659] ? selinux_file_ioctl+0xb4/0x270 [ 186.368572][ T8659] ? __pfx_sock_ioctl+0x10/0x10 [ 186.370272][ T8659] __x64_sys_ioctl+0x18f/0x220 [ 186.371797][ T8659] do_syscall_64+0xcd/0x250 [ 186.373414][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.375485][ T8659] RIP: 0033:0x7f0bab17dff9 [ 186.377056][ T8659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.382826][ T8659] RSP: 002b:00007f0babea8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.385426][ T8659] RAX: ffffffffffffffda RBX: 00007f0bab335f80 RCX: 00007f0bab17dff9 [ 186.388143][ T8659] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 000000000000000e [ 186.390890][ T8659] RBP: 00007f0bab1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 186.393645][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.396393][ T8659] R13: 0000000000000000 R14: 00007f0bab335f80 R15: 00007fff8303dcc8 [ 186.399120][ T8659] [ 186.403688][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.932'. [ 193.956566][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.958823][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 04:16:49 Registers: info registers vcpu 0 CPU#0 RAX=00000000005c6f0f RBX=0000000000000000 RCX=ffffffff8b21cd99 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd19e40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f3408 R15=0000000000000000 RIP=ffffffff8b21e17f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0babea7f98 CR3=000000004a49e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8132b9ab ffffffff8132b9ab ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8132b9ab ffffffff8132b9ab ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8132b9ab ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28a75f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28a75f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28a75f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28a75f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28a75f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28a75f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8132b9ab ffffffff8132b9ab ffffffff8132b9ab ffffffff8132b9ab ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28a826d100 00007f28a770b440 00007f2800040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28a770b498 00007f28a770b490 00007f28a770b488 00007f28a770b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000592c24 RBX=0000000000000001 RCX=ffffffff8b21cd99 RDX=ffffed100d4e7026 RSI=ffffffff8bd19dc0 RDI=ffffffff81647d7c RBP=ffffed1003b58910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801dac4880 R14=ffffffff905f3408 R15=0000000000000000 RIP=ffffffff8b21e17f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005623fd8f68e8 CR3=000000004a49e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff83f9f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff83f9f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff83f9f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff83f9f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff83f9f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff83f9f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7286b223406864e2 98ac4f4bb51f6c52 dfaecd6129db4015 ab31169fb3eb2c03 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 af7b120b219e3dbb 56d9e2de8e7f5265 f79bad8bd01a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64e298ac4f4bb51f 6c52dfaecd6129db 4015ab31169fb3eb 2c03281b07cc7534 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a60f5 RDI=ffffffff9aae1b40 RBP=ffffffff9aae1b00 RSP=ffffc9000caef190 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=0000000000000064 R14=ffffffff850a6090 R15=0000000000000000 RIP=ffffffff850a611f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0babea86c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b4052 CR3=0000000042bb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000eeeeff00 Opmask01=0000000000000000 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bab1f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bab1f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bab1f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bab1f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bab1f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bab1f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bab30b488 00007f0bab30b480 00007f0bab30b478 00007f0bab30b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0babe6d100 00007f0bab30b440 00007f0bab30b458 00007f0bab30b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bab30b498 00007f0bab30b490 00007f0bab30b488 00007f0bab30b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff88804a390000 RCX=ffffffff89c15136 RDX=ffff8880256b0000 RSI=0000000000000000 RDI=0000000000000006 RBP=ffff888051344200 RSP=ffffc900222af808 R8 =0000000000000006 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888051344768 RIP=ffffffff818d825b RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff8407be6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff84079bf00 CR3=000000004a49e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=250e4918ad194c2c feab28cfe4b7ce92 250e4918ad194c2c feab28cfe4b7ce92 250e4918ad194c2c feab28cfe4b7ce92 250e4918ad194c2c feab28cfe4b7ce92 ZMM18=d10fc86711e1c6f8 030a26a2175cc80e d10fc86711e1c6f8 030a26a2175cc80e d10fc86711e1c6f8 030a26a2175cc80e d10fc86711e1c6f8 030a26a2175cc80e ZMM19=5f0c000000000000 000000000000005f 5f0c000000000000 000000000000005e 5f0c000000000000 000000000000005d 5f0c000000000000 000000000000005c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=feab28cffeab28cf feab28cffeab28cf feab28cffeab28cf feab28cffeab28cf feab28cffeab28cf feab28cffeab28cf feab28cffeab28cf feab28cffeab28cf ZMM22=ad194c2cad194c2c ad194c2cad194c2c ad194c2cad194c2c ad194c2cad194c2c ad194c2cad194c2c ad194c2cad194c2c ad194c2cad194c2c ad194c2cad194c2c ZMM23=250e4918250e4918 250e4918250e4918 250e4918250e4918 250e4918250e4918 250e4918250e4918 250e4918250e4918 250e4918250e4918 250e4918250e4918 ZMM24=175cc80e175cc80e 175cc80e175cc80e 175cc80e175cc80e 175cc80e175cc80e 175cc80e175cc80e 175cc80e175cc80e 175cc80e175cc80e 175cc80e175cc80e ZMM25=030a26a2030a26a2 030a26a2030a26a2 030a26a2030a26a2 030a26a2030a26a2 030a26a2030a26a2 030a26a2030a26a2 030a26a2030a26a2 030a26a2030a26a2 ZMM26=11e1c6f811e1c6f8 11e1c6f811e1c6f8 11e1c6f811e1c6f8 11e1c6f811e1c6f8 11e1c6f811e1c6f8 11e1c6f811e1c6f8 11e1c6f811e1c6f8 11e1c6f811e1c6f8 ZMM27=d10fc867d10fc867 d10fc867d10fc867 d10fc867d10fc867 d10fc867d10fc867 d10fc867d10fc867 d10fc867d10fc867 d10fc867d10fc867 d10fc867d10fc867 ZMM28=000000600000005f 0000005e0000005d 0000005c0000005b 0000005a00000059 0000005800000057 0000005600000055 0000005400000053 0000005200000051 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5f0c00005f0c0000 5f0c00005f0c0000 5f0c00005f0c0000 5f0c00005f0c0000 5f0c00005f0c0000 5f0c00005f0c0000 5f0c00005f0c0000 5f0c00005f0c0000