last executing test programs: 40.453743492s ago: executing program 2 (id=970): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 40.363265722s ago: executing program 2 (id=973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 40.243805207s ago: executing program 2 (id=974): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) (async) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x138, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd2, 0xa8, @random="edafa9790ceb0aa1a4065076cb08fcea8ffc225949ffcdcbd628c24d291d4c14bb16bdb865b384bd63624461fe1debbf2ec7942e10231b1777b035641bfb25952fc3519d93f33bbef583651f569e73e25c0d1180109da951f9e93dbc4efbf340096d43377afd2d86ebf3de9abb2247ee7ae0b0668cd84c22909e5c8c73d6a87139838c83ecdb2aeffab9afad19c48e071b480ea06910421bdf92317e9770622f187e4451fefb9d236414ada7e210079efc26dc802611f7549f62b2ce82ca1783e3aa1c40ee8c801f9e37f1529eeb"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xe728}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0x6, 0x7, 0x2, 0x8, 0x1, "79ec6041880c708a"}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xa0812194}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfff2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) ioctl$TIOCCONS(r0, 0x541d) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4e}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x200, 0x0, 0xfff, 0x3, 0x1, 0xffff]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x7d5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x109b, 0x2]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000700)={0x9, 0x5, 0x6254, 0x94, 0x5, "db4978c5debd615628cae21c8aa28034a7101d", 0xfffffffe}) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xcc, r4, 0x418, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900)='/dev/bsg/0:0:0:0\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000940)={0xb8, 0xff, 0x0, "72b368438cf4c7cc2f8b099489569d05e5231bb70e51d2f6d1b1f9b18c80420153a7a663a5826c057c72d55d2bf0440e1dad8c3f6d6d9b463e53a6c264261f466ec7b2e57512b71a9fe50e52d15e133cdff399c05798e5689dac2dadd680709ba5842ab112989bb9eb4069c18ff319604d908ee7a1e6a2150e3e24ab380be725905eb3d190d06e1e29684ea730085f79f2e0a608ede35197c7598da792dbe4b87cfc87c42724085fe413d80a5597f20330ea57c7cbaf80d2"}) (async) openat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x321400, 0x12c) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a80), 0x20a400, 0x0) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r1) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd8, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb5, 0x3, "e3071ae622f88ccf63876a42d29c371ac16231bc1fc9d33e607103457f96fbd8119d353f2d86139e53ea5773a796ddcd4751d3a46691cfd1ddf1b562e0a28af55ef157b6ea8af66d3d4e5a41cf5c3251a2c53a860ed23bb5b8e28bf02f8a6cdff800a15fe5600e1e83e7731f214eac163ef56d32db0fcef6be2c6642d3b656ea1239b058f1b69671acbf5405ffa58daf26ebc7cd492583fd604b64422c8a4752238d3cdf501393d40de9ee5d2b62f24bbc"}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) ioctl$PPPIOCSMRU(r7, 0x40047452, &(0x7f0000000cc0)=0x9) (async) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000d00)) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f0000000d40)=0xc) (async) r9 = syz_open_dev$audion(&(0x7f0000000d80), 0x8, 0x80200) getpeername$ax25(r9, &(0x7f0000000dc0)={{0x3, @netrom}, [@default, @netrom, @default, @null, @remote, @default, @bcast, @default]}, &(0x7f0000000e40)=0x48) (async) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000e80)=0x61) 40.243464619s ago: executing program 2 (id=975): rt_sigaction(0x7, &(0x7f0000000180)={&(0x7f0000000000)="c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c00000c, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef69, 0x4}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000001f00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3, 0x90, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffbff, 0xfff7, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x7ff, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x18, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xe, 0xf8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x4, 0x7}}}}}}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcac1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000000f9ff07001d00ca0e0000e7e8bbb808b7056aa9d667bad7b3067d3f384aaee7ae8b5e18490164e47d60b97f149cd38ab21a5c54faa041cc02fdaca06c5adb316e5407e2abb8b5a9eb2f42818c93abb138e44a62195ffc83519b6e835f06db532d4a11326296"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0x2100, 0x18) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000000)='erofs\x00', 0x0, &(0x7f0000000380)='acl') sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x7, 0x1, 0x8, 0x9, 0x5, 0x9}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xf, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 39.673535406s ago: executing program 2 (id=986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write$sndseq(r1, &(0x7f00000000c0)=[{0x4, 0x6, 0xd, 0x5, @time={0xa3, 0x4}, {0x9}, {0xb7, 0x8}, @raw32={[0x1ff, 0x6, 0x7]}}], 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r4, &(0x7f0000000300)) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000280)=0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xc}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 39.513572291s ago: executing program 2 (id=990): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x30}, 0x94) r1 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x80, 0x8, 0x178}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000340)=0x1, &(0x7f0000000500)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x1}, {0x7}, 0x9, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="c53c56212b40ed5b4b04c7fd9d1fd179378d12591aef5ff8022d1974fd61c2874e045dbfd61e7f256c43a2bdbd4bb7c9242345f53ec27fecfaaa7f452eebc9ddbad25771cf03416bffb4178e7b15fcf202e59cd872f815126c124b26b372980535eee10bdd5ec91103dfa6ae480082ce2119fc2a75b9cafa761b", 0x7a, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x184}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x5b20, 0x0, 0x0, 0x0, 0x0) 24.242894577s ago: executing program 32 (id=990): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x30}, 0x94) r1 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x80, 0x8, 0x178}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000340)=0x1, &(0x7f0000000500)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x1}, {0x7}, 0x9, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="c53c56212b40ed5b4b04c7fd9d1fd179378d12591aef5ff8022d1974fd61c2874e045dbfd61e7f256c43a2bdbd4bb7c9242345f53ec27fecfaaa7f452eebc9ddbad25771cf03416bffb4178e7b15fcf202e59cd872f815126c124b26b372980535eee10bdd5ec91103dfa6ae480082ce2119fc2a75b9cafa761b", 0x7a, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x184}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x5b20, 0x0, 0x0, 0x0, 0x0) 6.98366987s ago: executing program 0 (id=1518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x18, 0x140e, 0x3fca440fc5d735f5, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c818}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x1, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x4000800) 6.978244576s ago: executing program 0 (id=1520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x80, 0x2, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x10000, 0x80a0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.763512492s ago: executing program 0 (id=1525): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000500)={0x1, 0x0, '\x00', {0x0, @reserved}}) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) r4 = accept4$ax25(r0, 0x0, &(0x7f00000000c0), 0x80000) accept4(r4, &(0x7f0000000000)=@ethernet, &(0x7f0000000100)=0x80, 0xc00) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e23, @multicast1}}}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000500)={0x1, 0x0, '\x00', {0x0, @reserved}}) (async) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) accept4$ax25(r0, 0x0, &(0x7f00000000c0), 0x80000) (async) accept4(r4, &(0x7f0000000000)=@ethernet, &(0x7f0000000100)=0x80, 0xc00) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e23, @multicast1}}}, 0x90) (async) 6.762649925s ago: executing program 0 (id=1527): socket$inet(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$CDROMEJECT(r3, 0x5382) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x1, 0x81, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[{0x6, 0x0, 0x5, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.892501586s ago: executing program 0 (id=1537): r0 = socket$can_raw(0x1d, 0x3, 0x1) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@empty, @private=0xa010102, 0x1e, 0x12}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="a0b2536b0513", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$can_raw(0x1d, 0x3, 0x1) (async) close(r0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@empty, @private=0xa010102, 0x1e, 0x12}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="a0b2536b0513", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) 5.697562981s ago: executing program 0 (id=1544): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r1) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000c40)) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc1100001}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d40000ff", @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf250800000008000600000000462c00028006000e004e240000080008000500000006000f000f00000008000300030000000800040001000000340003800800030005000000060004006a070000060004000002000008000500ac1e0101060004000400000005000800b60000002000038008000500ac1414aa14000600fe8000000000000000000000000000bb080005000800000030000380060007004e24000014000600fc01000000000000000000000000000006000400040000000800010001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0xff0d, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000400)="2f18fa23a597234259306cd46effe7a9682fbf797917cd07e814ee23d6e5875223544e75f47bed06bf5a82b7f86c647a6b44953c86984409a73aee0fc69d765e926836ef98488c36a34576", 0x4b}, {&(0x7f0000000540)="5f025953dea8fee873ffc70dc4144f373a5fa85d35863a2efb4b2a5d0a505e2f7c1978714f6a7f5be22631e18fc99d41cc647f7f4fef9c64e8d1495dbdbb82fe5ebbb1470130b89b8fcca2f3c68e0e52ec6e00addb58cec6f19a5a519584843dc949c2068b43386b3e77c4189aa6920f262cbf5eb52110182b4a6670e03d3f5b234e737a7be61afc575ae9cf301bd5b93e726183f32f9e1e155e066ba3774af9cfd0849579717283505f0f2efa5c0bfddca8", 0xb2}, {&(0x7f0000000480)="421dfd526f1f", 0x6}, {&(0x7f0000000600)="bb28b395fe9b647e1378a452205dcfbd3d2ad599aabb09a0c464abaea0d0e5b7f625a75f9e701dc8cc13cfea413e8c74a4939a93e14c95f8d2a53e01898ef778822284ed9ece28b831abdc22eec5e83875df986614073ae67bc645ad7572e0c415ff73486340d1156d5477030a59115f869af056cc4b231579cf196a1fdc54af0e6c875ea5206c", 0x87}], 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="300000000000000029000000360000008902005c0f93b08100000000000401090512000e0001000106000000000000000000000000980000000000000029000000390000003c10000800000000fc020000000000000000000000000000fe80000000000000000000000000001b00000000000000000000000000000001fc010000000000000000000000000000fe800000000000000000000000000028fe88000000000000000100000000010100000000000000000000ffffac1414bb00000000000000000000ffffac141411"], 0xc8}}], 0x1, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x47, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500001400028005000d0002000000050004000100000008000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.614035433s ago: executing program 33 (id=1544): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r1) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000c40)) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc1100001}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d40000ff", @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf250800000008000600000000462c00028006000e004e240000080008000500000006000f000f00000008000300030000000800040001000000340003800800030005000000060004006a070000060004000002000008000500ac1e0101060004000400000005000800b60000002000038008000500ac1414aa14000600fe8000000000000000000000000000bb080005000800000030000380060007004e24000014000600fc01000000000000000000000000000006000400040000000800010001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0xff0d, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000400)="2f18fa23a597234259306cd46effe7a9682fbf797917cd07e814ee23d6e5875223544e75f47bed06bf5a82b7f86c647a6b44953c86984409a73aee0fc69d765e926836ef98488c36a34576", 0x4b}, {&(0x7f0000000540)="5f025953dea8fee873ffc70dc4144f373a5fa85d35863a2efb4b2a5d0a505e2f7c1978714f6a7f5be22631e18fc99d41cc647f7f4fef9c64e8d1495dbdbb82fe5ebbb1470130b89b8fcca2f3c68e0e52ec6e00addb58cec6f19a5a519584843dc949c2068b43386b3e77c4189aa6920f262cbf5eb52110182b4a6670e03d3f5b234e737a7be61afc575ae9cf301bd5b93e726183f32f9e1e155e066ba3774af9cfd0849579717283505f0f2efa5c0bfddca8", 0xb2}, {&(0x7f0000000480)="421dfd526f1f", 0x6}, {&(0x7f0000000600)="bb28b395fe9b647e1378a452205dcfbd3d2ad599aabb09a0c464abaea0d0e5b7f625a75f9e701dc8cc13cfea413e8c74a4939a93e14c95f8d2a53e01898ef778822284ed9ece28b831abdc22eec5e83875df986614073ae67bc645ad7572e0c415ff73486340d1156d5477030a59115f869af056cc4b231579cf196a1fdc54af0e6c875ea5206c", 0x87}], 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="300000000000000029000000360000008902005c0f93b08100000000000401090512000e0001000106000000000000000000000000980000000000000029000000390000003c10000800000000fc020000000000000000000000000000fe80000000000000000000000000001b00000000000000000000000000000001fc010000000000000000000000000000fe800000000000000000000000000028fe88000000000000000100000000010100000000000000000000ffffac1414bb00000000000000000000ffffac141411"], 0xc8}}], 0x1, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x47, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500001400028005000d0002000000050004000100000008000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.553128551s ago: executing program 4 (id=1582): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070002000000000000000000060005000d101000", 0x24) (async, rerun: 32) r2 = socket(0x5, 0x80805, 0x0) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(r2) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000002540)=[@in6={0xa, 0x4e22, 0x179, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}]}, &(0x7f0000000140)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmsg$AUDIT_USER(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)=ANY=[@ANYBLOB="28000000ed03000829bd7000ff07000000000000001957f2f22ff2756ea09b42f045a202b6570000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f0000001680), 0x0, 0x40) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (rerun: 32) recvmmsg(r0, &(0x7f0000006b00)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)}, {&(0x7f0000002580)=""/155, 0x9b}, {&(0x7f0000002640)=""/129, 0x81}], 0x3, &(0x7f0000002700)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003700)=@x25={0x9, @remote}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003780)=""/245, 0xf5}, {&(0x7f00000002c0)=""/42, 0x2a}], 0x2, &(0x7f00000038c0)=""/4096, 0x1000}, 0xfffffffb}, {{&(0x7f00000048c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004940)=""/236, 0xec}, {&(0x7f0000004a40)=""/224, 0xe0}], 0x2, &(0x7f0000004b80)=""/136, 0x88}, 0x9}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000004c40)=""/72, 0x48}, {&(0x7f0000004cc0)=""/62, 0x3e}, {&(0x7f0000004d00)=""/205, 0xcd}, {&(0x7f0000004e00)=""/68, 0x44}, {&(0x7f0000004e80)=""/220, 0xdc}, {&(0x7f0000004f80)=""/2, 0x2}, {&(0x7f0000004fc0)=""/22, 0x16}, {&(0x7f0000005000)=""/36, 0x24}, {&(0x7f0000005040)=""/218, 0xda}], 0x9}, 0xf618}, {{&(0x7f0000005200)=@caif=@dbg, 0x80, &(0x7f0000005380)=[{&(0x7f0000005280)=""/250, 0xfa}], 0x1, &(0x7f00000053c0)=""/147, 0x93}, 0x5}, {{&(0x7f0000005480)=@sco, 0x80, &(0x7f0000005880)=[{&(0x7f0000005500)=""/137, 0x89}, {&(0x7f00000055c0)=""/153, 0x99}, {&(0x7f0000005680)=""/204, 0xcc}, {&(0x7f0000005780)=""/157, 0x9d}, {&(0x7f0000005840)=""/48, 0x30}], 0x5, &(0x7f0000005900)=""/227, 0xe3}, 0x6}, {{&(0x7f0000005a00)=@l2tp, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005a80)=""/4096, 0x1000}], 0x1, &(0x7f0000006ac0)=""/42, 0x2a}, 0x4}], 0x7, 0x2021, &(0x7f0000006cc0)) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x810c5a, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02003e0001e103000000000002000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000600000000002000010000000000"], 0x2c, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e", @ANYRES8=0x0, @ANYRES8=r0], 0x0, 0x37}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000400"/28], 0x48) (async) close_range(r1, r2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x2020) (async) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000002580), 0xfff, r8}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r9, 0x28, 0x1, &(0x7f00000012c0)=""/4096, &(0x7f0000000000)=0x1000) 3.467360552s ago: executing program 4 (id=1583): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05003e20", @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES64=0x0], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x6, 0x1, 0x3, 0x8001}, {0x0, 0x6, 0xe9, 0xfffffffc}, {0x4, 0x0, 0xfc, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0xbb8}, 0x1, 0x0, 0x0, 0xa001}, 0x4048000) 2.473297463s ago: executing program 4 (id=1585): syz_open_dev$vcsu(&(0x7f0000000000), 0xffff, 0x529181) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x608cc1, 0x0) sendto$inet(r0, &(0x7f0000000100)="14b4", 0x2, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000280)={0x9, 0x3, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000000c0)=0x2) close(r3) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000002c0)=""/73, 0x304000, 0x800, 0x7fffff01, 0x3}, 0x20) mremap(&(0x7f0000216000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000875000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x1}) mknod$loop(0x0, 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) 1.521642417s ago: executing program 4 (id=1586): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000042c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000002400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000800090005ac0f00110007"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) 1.521396172s ago: executing program 4 (id=1587): r0 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0xfaf, 0xa]) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x800) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a880000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x59, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x10, {0x9, 0x21, 0xb55a, 0x8, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x3, 0x40, 0x87, 0xef}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x5, 0x7, 0x6, 0xb}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x1f, &(0x7f0000000200)=@string={0x1f, 0x3, "53a7db6d962f33ee80bebd2f7dd42e9dfeba029df5d3cc4bca9cc70506"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1409}}, {0x4f, &(0x7f00000002c0)=@string={0x4f, 0x3, "e839d064522d9e67b028f8d7581ee82fbd20c9f24a4067d92cd98aa486734690186efda30415a5427f39c638c6b0c8aa1d8c877d77b3a4f21031a5b74e527742a5345ea7402f7d0ece4a7f6961"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44d}}, {0xc8, &(0x7f00000003c0)=@string={0xc8, 0x3, "5d931c7689db14540eff2608765dda20cfcaf3d32060b9909d9b8541de57f63ceb635d937810a232ea9940caf670eb5526d7a27b46e52e2b7ed4bdf1718a751aa1a8e13b180ae3429b4e156e88d9c0dea661a562976a88b7509c9b6d95afb7e4da03119e14039a2fafd45483b6fbe8fc24860cba18777aad8be345e37adf0420b6cc67fabb2dff0df7b82e4b3a1c53209e2141a8f791cd6edf019f205e1aa54139bbe3b7ad326558da0e07483b5ec993962678fff4a1705777a193c1f99c44d28bf1a19e5dc2"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b8080000000f23c80f21f835000010000f23f836f20f70b09d81dfb6f2c4c17b707905019a0080000038000f20e035100000000f22e0c4c2a1a822b9800000c00f3235000400000f30440f20c03503000000440f22c0b805000000b9c2f800000f01c1b8000000000f23d00f21f8351000000b0f23f8", 0x76}], 0x1, 0x9068599780ad7837, &(0x7f00000000c0), 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x2, 0x0, 0x3, 0x0}) 1.057510498s ago: executing program 3 (id=1593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x4, 0x0, &(0x7f00000006c0)="1371977c"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x17) tkill(r3, 0x23) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x7}) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000240)) (async) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000240)) 1.057399725s ago: executing program 3 (id=1594): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000002180)={'IDLETIMER\x00'}, &(0x7f00000021c0)=0x1e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.056688415s ago: executing program 3 (id=1595): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x6, 0x4) (async, rerun: 32) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) (async, rerun: 64) r3 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r4, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000c00)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) write$dsp(r1, 0x0, 0xfffffe59) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x3) 365.964246ms ago: executing program 1 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x7, 0x500}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) 249.13434ms ago: executing program 1 (id=1600): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="9454acad4312b70035c159e5d7dd0a6d4451542e21990398ce8e1b8e4f7046c2b91f31a270b40524f7d19aa69ada860cbe0f24f4cfe4941674755bd894137e068579a42a2197ab2939278151786456fe09443703955c3f27e55c6c7c1de74f9e72bd4b55039a7b573cac7fa95f7054b8cba18ee9e7ac2229254943a2649097aea50a87f084738aabfb04c4115903d684ce071bf0d1fc64fbb8548e5c6fce120b907e3a021d3e3e2907996be0d2713feba44843cb9191e8490c804cd79f85684d647b22208a4cdfd2a4", @ANYRES8=r0], 0x10) 246.704726ms ago: executing program 5 (id=1601): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x10100, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xe6, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', r1, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffd05, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="e400000043000701feff0500fcdbdf25017c000004004580cad201800f005a00252b2727290087217ff54db5d62aefeaea064dfd78", @ANYRES32=0x0, @ANYBLOB], 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 246.472872ms ago: executing program 1 (id=1602): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="d88b2da578720f", 0x7}, {&(0x7f0000000140)}], 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000340)=""/198, 0xc6, 0x0, &(0x7f0000000180)=""/69, 0x45}}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x39) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000fc00000040"]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) unshare(0x2c020400) r8 = msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x2000, 0x0) msgrcv(r8, &(0x7f0000000000), 0x8, 0xffffff7f00000000, 0x3000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x1402, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x4) keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={'xcbc(aes)\x00'}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@tracing={r3, 0x5}}, 0x20) 241.621747ms ago: executing program 5 (id=1603): r0 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000280)=""/127, &(0x7f0000000180)=0x7f) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x9, @sdr={0x35315258, 0x8}}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x50}, 0x1, 0x7}, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9bea", 0x3a, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x5, 0x5, 0x9, 0x80, 0xc9, @remote}, 0x10) 232.164607ms ago: executing program 5 (id=1604): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x2, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) 231.999495ms ago: executing program 3 (id=1605): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0x40}, 0xb5}}}, 0x7) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x8000, 0x3, 0xfb}, {0x6, 0xf7, 0x6, 0x3}, {0x0, 0x6, 0x4, 0x7}, {0x92, 0x1, 0x0, 0x27}]}) 219.981059ms ago: executing program 4 (id=1606): r0 = fanotify_init(0x2, 0x8000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x0) fanotify_mark(r0, 0x441, 0x8000029, r1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002280), 0x602, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0x7, 0x1ff, 0x4, 0x600, 0x7, "53929f1a7a6c851a"}) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35b", 0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffc99, r7, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000000080)={r8}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x800, 0x0, 0xff, 0x1, 0x0, 0xffff}, 0x20) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r9, 0x100000000) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4c24, 0x3, 'lc\x00', 0x2c, 0x323b, 0x55}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4e23, 0x10000, 0x44, 0x8, 0x12d5c}}, 0x44) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x400) 152.426767ms ago: executing program 3 (id=1607): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001000010000000000fcdbdf25fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000006000000000000000900000000000000000000000000000000000000000000000e000000000000000600000000000000000000000000000000000000000000001a390000000000000400000000000000000000000a0000feaf0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002dbd70000000000002000000"], 0x154}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc4f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) 151.94503ms ago: executing program 5 (id=1608): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r0) (async) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) socket(0x2c, 0x3, 0x0) (async) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0xfbc}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000100)}, 0x40000001) 151.67475ms ago: executing program 1 (id=1609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb, 0x30}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) 151.025679ms ago: executing program 3 (id=1610): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mknod$loop(0x0, 0x9000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x70bd2d, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xb, 0x3}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x1, 0x1, 0x1001, 0x472, 0x6000000000000000, 0xfffffffffffffffc, 0x23, 0x100000, 0xfeff}) fchown(r2, 0xee01, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000480)={@local, @private=0xa010100, 0x14, 0x20}}) syz_usbip_server_init(0x5) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f0000000400)={{&(0x7f0000000380)={'Accelerator0\x00', {&(0x7f0000000140)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingEnabled\x00'}, {0x2400000000000000}}}, {&(0x7f0000000080)={'Accelerator\x00', {&(0x7f00000002c0)=@adf_dec={@format={'Cy', '1', 'RingAsymRx\x00'}, {0x10}, {&(0x7f0000000200)=@adf_str={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {"ece0a1511ba26b955985e717e84ef64125624f717cb66d0d28b5df9af54bf91a03041a1de85caa1c49ce14a227677192dc2c2244b2ddcb88f8cc9bffe1f8bbda"}}}}}}}}}, 0x3}) 53.575213ms ago: executing program 5 (id=1611): syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) (async) r0 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0xe454, 0x13290, 0x2}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.350062ms ago: executing program 5 (id=1612): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000180)}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) 314.454µs ago: executing program 1 (id=1613): syz_io_uring_setup(0x2dda, &(0x7f0000000280)={0x0, 0xa5ca, 0x2, 0x2, 0x283}, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x7ff, 0x401, 0x8, 0x7, 0xc, 0x5, 0xd716, 0x1, 0xfffffffffffffffb, 0x9, 0x77, 0xfffffffffffffffa, 0x81, 0xb5c, 0x7]}, &(0x7f0000000300)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x2, 0x7ff, 0x100, 0x7fffffff, 0x9d, 0x5, 0x4}, 0x9c) syz_emit_ethernet(0x4e, &(0x7f0000001340)={@link_local, @random="70a245d5cde0", @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x2, 0x6, 0x40, 0x1064, 0x0, 0xc, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x7c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0x8, 0x0, 0x9}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) 0s ago: executing program 1 (id=1614): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) socket$inet(0x2, 0x5, 0x9) 0s ago: executing program 4 (id=1615): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x40000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r2], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f00000000c0)={&(0x7f0000000000)=[r2], 0x0, 0x3, 0x1, 0x3}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6a, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f00000002c0)={&(0x7f0000000240)=[r2], &(0x7f0000000280)=[0x5, 0x6, 0x9, 0x6, 0x5, 0xf], 0x3, 0x1, 0x3}) kernel console output (not intermixed with test programs): th: hci2: Error when powering off device on rfkill (-110) [ 86.824966][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.825187][ T6003] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 86.829603][ T6003] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 100.551919][ T40] audit: type=1400 audit(1762202904.500:444): avc: denied { ioctl } for pid=7618 comm="syz.2.496" path="socket:[17886]" dev="sockfs" ino=17886 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.573084][ T40] audit: type=1400 audit(1762202904.520:445): avc: denied { setopt } for pid=7625 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.576273][ T7622] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 100.768889][ T40] audit: type=1400 audit(1762202904.720:446): avc: denied { call } for pid=7650 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.906857][ T6003] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 101.005349][ T6289] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 101.057502][ T6003] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 101.061512][ T6003] usb 8-1: config 1 has no interface number 0 [ 101.063383][ T6003] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 101.066605][ T6003] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 101.071866][ T6003] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 101.075614][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.078103][ T6003] usb 8-1: Product: syz [ 101.079383][ T6003] usb 8-1: Manufacturer: syz [ 101.081229][ T6003] usb 8-1: SerialNumber: syz [ 101.087208][ T7639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.090355][ T7639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.096557][ T6003] usb 8-1: Error in usbnet_get_endpoints (-22) [ 101.143078][ T7667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.511'. [ 101.145071][ T6289] usb 6-1: device descriptor read/64, error -71 [ 101.149018][ T7667] 8021q: VLANs not supported on ip_vti0 [ 101.193188][ T7671] xt_hashlimit: size too large, truncated to 1048576 [ 101.302149][ T6003] usb 8-1: USB disconnect, device number 2 [ 101.394929][ T6289] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 101.544964][ T6289] usb 6-1: device descriptor read/64, error -71 [ 101.568178][ T40] audit: type=1800 audit(1762202905.520:447): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.522" name="bus" dev="overlay" ino=897 res=0 errno=0 [ 101.617262][ T40] audit: type=1400 audit(1762202905.570:448): avc: denied { write } for pid=7698 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.665002][ T6289] usb usb6-port1: attempt power cycle [ 101.798925][ T40] audit: type=1400 audit(1762202905.750:449): avc: denied { map } for pid=7702 comm="syz.2.524" path="socket:[17114]" dev="sockfs" ino=17114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.810243][ T40] audit: type=1400 audit(1762202905.750:450): avc: denied { read } for pid=7702 comm="syz.2.524" path="socket:[17114]" dev="sockfs" ino=17114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.939846][ T7719] tmpfs: Cannot change global quota limit on remount [ 102.004823][ T6289] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 102.026815][ T6289] usb 6-1: device descriptor read/8, error -71 [ 102.100523][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.530'. [ 102.265232][ T6289] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.295284][ T6289] usb 6-1: device descriptor read/8, error -71 [ 102.415994][ T6289] usb usb6-port1: unable to enumerate USB device [ 102.688653][ T40] audit: type=1400 audit(1762202906.640:451): avc: denied { bind } for pid=7746 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.696665][ T40] audit: type=1400 audit(1762202906.640:452): avc: denied { name_bind } for pid=7746 comm="syz.2.539" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 102.705512][ T40] audit: type=1400 audit(1762202906.640:453): avc: denied { node_bind } for pid=7746 comm="syz.2.539" saddr=d813:1000:728f:102:301:902:1200:100 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 102.999467][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 103.011529][ T7766] bond2: option primary_reselect: invalid value (133) [ 103.015951][ T7766] bond2 (unregistering): Released all slaves [ 103.123994][ T7766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.201166][ T7776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7776 comm=syz.0.546 [ 103.217250][ T7766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.304883][ T6289] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 103.321439][ T7766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.431070][ T7766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.467097][ T6289] usb 8-1: Using ep0 maxpacket: 16 [ 103.470095][ T6289] usb 8-1: config 0 has no interfaces? [ 103.471968][ T6289] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.475213][ T6289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.479939][ T6289] usb 8-1: config 0 descriptor?? [ 103.559966][ T6882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.568615][ T6882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.578023][ T6882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.586636][ T6882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.637914][ T7803] fuse: Unknown parameter '0x0000000000000003' [ 103.646584][ T7803] qnx4: no qnx4 filesystem (no root dir). [ 103.768031][ T34] usb 8-1: USB disconnect, device number 3 [ 103.903313][ T7837] netlink: 9 bytes leftover after parsing attributes in process `syz.0.561'. [ 103.991300][ T7847] binder: 7846:7847 ioctl c0306201 200000000640 returned -22 [ 104.139378][ T7859] overlayfs: failed to resolve './file1': -2 [ 104.142795][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'. [ 104.146814][ T7859] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 104.202176][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 104.207113][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 104.245937][ T7874] UHID_CREATE from different security context by process 367 (syz.2.571), this is not allowed. [ 104.297586][ T7876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7876 comm=syz.0.572 [ 104.395673][ T6004] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 104.554878][ T6004] usb 6-1: Using ep0 maxpacket: 32 [ 104.558686][ T6004] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 104.561912][ T6004] usb 6-1: config 0 has no interface number 0 [ 104.563159][ T7885] bridge_slave_0: left allmulticast mode [ 104.566802][ T7885] bridge_slave_0: left promiscuous mode [ 104.567026][ T6004] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 104.570425][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.572485][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.578619][ T6004] usb 6-1: Product: syz [ 104.580312][ T6004] usb 6-1: Manufacturer: syz [ 104.582207][ T6004] usb 6-1: SerialNumber: syz [ 104.583768][ T7885] bridge_slave_1: left allmulticast mode [ 104.588161][ T6004] usb 6-1: config 0 descriptor?? [ 104.589932][ T7885] bridge_slave_1: left promiscuous mode [ 104.592425][ T6004] smsc95xx v2.0.0 [ 104.594331][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.602875][ T7885] bond0: (slave bond_slave_0): Releasing backup interface [ 104.611695][ T7885] bond0: (slave bond_slave_1): Releasing backup interface [ 104.622722][ T7885] team0: Port device team_slave_0 removed [ 104.635712][ T7885] team0: Port device team_slave_1 removed [ 104.640353][ T7885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.810227][ T7897] netlink: 'syz.2.579': attribute type 12 has an invalid length. [ 105.880596][ T7921] FAULT_INJECTION: forcing a failure. [ 105.880596][ T7921] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.884640][ T7921] CPU: 0 UID: 0 PID: 7921 Comm: syz.0.587 Not tainted syzkaller #0 PREEMPT(full) [ 105.884655][ T7921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.884661][ T7921] Call Trace: [ 105.884676][ T7921] [ 105.884680][ T7921] dump_stack_lvl+0x16c/0x1f0 [ 105.884725][ T7921] should_fail_ex+0x512/0x640 [ 105.884748][ T7921] _copy_from_user+0x2e/0xd0 [ 105.884762][ T7921] get_bitmap+0xdf/0x1a0 [ 105.884774][ T7921] get_nodes+0x1df/0x210 [ 105.884789][ T7921] ? __pfx_get_nodes+0x10/0x10 [ 105.884812][ T7921] ? __fget_files+0x20e/0x3c0 [ 105.884825][ T7921] kernel_mbind+0x139/0x1f0 [ 105.884841][ T7921] ? __pfx_kernel_mbind+0x10/0x10 [ 105.884859][ T7921] do_syscall_64+0xcd/0xfa0 [ 105.884876][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.884904][ T7921] RIP: 0033:0x7fb34d98f6c9 [ 105.884914][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.884924][ T7921] RSP: 002b:00007fb34e778038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 105.884934][ T7921] RAX: ffffffffffffffda RBX: 00007fb34dbe5fa0 RCX: 00007fb34d98f6c9 [ 105.884940][ T7921] RDX: 0000000000004002 RSI: 0000000000004000 RDI: 00002000000a2000 [ 105.884946][ T7921] RBP: 00007fb34e778090 R08: 0000000000000005 R09: 0000000000000001 [ 105.884952][ T7921] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 105.884958][ T7921] R13: 00007fb34dbe6038 R14: 00007fb34dbe5fa0 R15: 00007ffe43d649b8 [ 105.884972][ T7921] [ 105.979359][ T7925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 106.023078][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 106.023088][ T40] audit: type=1400 audit(1762202909.970:463): avc: denied { watch watch_reads } for pid=7926 comm="syz.3.590" path="pipe:[18395]" dev="pipefs" ino=18395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 106.153253][ T7933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.170807][ T7933] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 106.191264][ T7933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.427359][ T7950] FAULT_INJECTION: forcing a failure. [ 106.427359][ T7950] name failslab, interval 1, probability 0, space 0, times 1 [ 106.432380][ T7950] CPU: 2 UID: 0 PID: 7950 Comm: syz.3.597 Not tainted syzkaller #0 PREEMPT(full) [ 106.432400][ T7950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.432410][ T7950] Call Trace: [ 106.432431][ T7950] [ 106.432438][ T7950] dump_stack_lvl+0x16c/0x1f0 [ 106.432486][ T7950] should_fail_ex+0x512/0x640 [ 106.432517][ T7950] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 106.432544][ T7950] should_failslab+0xc2/0x120 [ 106.432563][ T7950] kmem_cache_alloc_noprof+0x75/0x6e0 [ 106.432585][ T7950] ? mpol_new+0x11b/0x2d0 [ 106.432604][ T7950] ? mpol_new+0x11b/0x2d0 [ 106.432618][ T7950] mpol_new+0x11b/0x2d0 [ 106.432636][ T7950] do_mbind+0x211/0xf20 [ 106.432663][ T7950] ? find_held_lock+0x2b/0x80 [ 106.432683][ T7950] ? __might_fault+0xe3/0x190 [ 106.432705][ T7950] ? __might_fault+0xe3/0x190 [ 106.432727][ T7950] ? __pfx_do_mbind+0x10/0x10 [ 106.432753][ T7950] ? _copy_from_user+0x59/0xd0 [ 106.432779][ T7950] ? __pfx_get_nodes+0x10/0x10 [ 106.432798][ T7950] ? __fget_files+0x20e/0x3c0 [ 106.432822][ T7950] kernel_mbind+0x1e3/0x1f0 [ 106.432845][ T7950] ? __pfx_kernel_mbind+0x10/0x10 [ 106.432873][ T7950] do_syscall_64+0xcd/0xfa0 [ 106.432918][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.432933][ T7950] RIP: 0033:0x7f9f4b58f6c9 [ 106.432948][ T7950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.432965][ T7950] RSP: 002b:00007f9f4c3d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 106.432981][ T7950] RAX: ffffffffffffffda RBX: 00007f9f4b7e5fa0 RCX: 00007f9f4b58f6c9 [ 106.432992][ T7950] RDX: 0000000000004002 RSI: 0000000000004000 RDI: 00002000000a2000 [ 106.433003][ T7950] RBP: 00007f9f4c3d4090 R08: 0000000000000005 R09: 0000000000000001 [ 106.433012][ T7950] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 106.433021][ T7950] R13: 00007f9f4b7e6038 R14: 00007f9f4b7e5fa0 R15: 00007ffd3d02d548 [ 106.433049][ T7950] [ 106.476357][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'. [ 106.510740][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'. [ 106.590557][ T7956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'. [ 106.593517][ T7956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'. [ 106.908125][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 106.920854][ T40] audit: type=1400 audit(1762202910.870:464): avc: denied { write } for pid=7971 comm="syz.0.605" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 106.927855][ T7974] FAULT_INJECTION: forcing a failure. [ 106.927855][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.938352][ T7974] CPU: 3 UID: 0 PID: 7974 Comm: syz.3.606 Not tainted syzkaller #0 PREEMPT(full) [ 106.938375][ T7974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.938383][ T7974] Call Trace: [ 106.938402][ T7974] [ 106.938408][ T7974] dump_stack_lvl+0x16c/0x1f0 [ 106.938454][ T7974] should_fail_ex+0x512/0x640 [ 106.938484][ T7974] _copy_to_user+0x32/0xd0 [ 106.938504][ T7974] simple_read_from_buffer+0xcb/0x170 [ 106.938528][ T7974] proc_fail_nth_read+0x197/0x240 [ 106.938544][ T7974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.938561][ T7974] ? rw_verify_area+0xcf/0x6c0 [ 106.938582][ T7974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.938600][ T7974] vfs_read+0x1e4/0xcf0 [ 106.938619][ T7974] ? __pfx___mutex_lock+0x10/0x10 [ 106.938635][ T7974] ? __pfx_vfs_read+0x10/0x10 [ 106.938658][ T7974] ? __fget_files+0x20e/0x3c0 [ 106.938684][ T7974] ksys_read+0x12a/0x250 [ 106.938698][ T7974] ? __pfx_ksys_read+0x10/0x10 [ 106.938723][ T7974] do_syscall_64+0xcd/0xfa0 [ 106.938750][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.938768][ T7974] RIP: 0033:0x7f9f4b58e0dc [ 106.938780][ T7974] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.938794][ T7974] RSP: 002b:00007f9f4c3d4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.938809][ T7974] RAX: ffffffffffffffda RBX: 00007f9f4b7e5fa0 RCX: 00007f9f4b58e0dc [ 106.938819][ T7974] RDX: 000000000000000f RSI: 00007f9f4c3d40a0 RDI: 0000000000000003 [ 106.938827][ T7974] RBP: 00007f9f4c3d4090 R08: 0000000000000000 R09: 0000000000000001 [ 106.938836][ T7974] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 106.938847][ T7974] R13: 00007f9f4b7e6038 R14: 00007f9f4b7e5fa0 R15: 00007ffd3d02d548 [ 106.938871][ T7974] [ 107.102179][ T40] audit: type=1400 audit(1762202911.050:465): avc: denied { nlmsg_read } for pid=7977 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.159143][ T6004] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 107.164157][ T6004] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 107.171350][ T6004] usb 6-1: USB disconnect, device number 9 [ 123.396610][ T7994] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.404176][ T40] audit: type=1400 audit(1762202927.350:466): avc: denied { mount } for pid=7992 comm="syz.2.612" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.415038][ T40] audit: type=1400 audit(1762202927.360:467): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.457187][ T8004] netlink: 'syz.0.615': attribute type 4 has an invalid length. [ 123.576272][ T40] audit: type=1400 audit(1762202927.530:468): avc: denied { read } for pid=8023 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.753788][ T8033] fuse: Unknown parameter 'growp_id' [ 123.756805][ T40] audit: type=1400 audit(1762202927.700:469): avc: denied { mounton } for pid=8031 comm="syz.2.624" path="/136/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 124.282054][ T40] audit: type=1400 audit(1762202928.230:470): avc: denied { execmem } for pid=8061 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 124.343221][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 124.346096][ T8062] bridge_slave_1: left allmulticast mode [ 124.347927][ T8062] bridge_slave_1: left promiscuous mode [ 124.349856][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.356903][ T8062] bridge_slave_0: left allmulticast mode [ 124.359434][ T8062] bridge_slave_0: left promiscuous mode [ 124.361994][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.498608][ T8073] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.616215][ T8072] mmap: syz.0.637 (8072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.630246][ T8077] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.636005][ T8077] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 124.642252][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 124.998436][ T8098] overlayfs: upper fs does not support file handles, falling back to index=off. [ 125.006169][ T8098] sctp: [Deprecated]: syz.2.646 (pid 8098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.006169][ T8098] Use struct sctp_sack_info instead [ 125.027521][ T8100] netlink: 'syz.1.647': attribute type 11 has an invalid length. [ 125.030078][ T8100] netlink: 'syz.1.647': attribute type 11 has an invalid length. [ 125.032570][ T8100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.647'. [ 125.106168][ T8107] binder: 8106:8107 ioctl c018937e 2000000000c0 returned -22 [ 125.110356][ T40] audit: type=1400 audit(1762202929.060:471): avc: denied { create } for pid=8108 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.111976][ T8109] netlink: 196 bytes leftover after parsing attributes in process `syz.1.650'. [ 125.116644][ T40] audit: type=1400 audit(1762202929.060:472): avc: denied { write } for pid=8108 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.126020][ T40] audit: type=1400 audit(1762202929.060:473): avc: denied { nlmsg_read } for pid=8108 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.135189][ T40] audit: type=1326 audit(1762202929.070:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 125.143248][ T40] audit: type=1326 audit(1762202929.070:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 125.423170][ T8126] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.656'. [ 125.476161][ T8132] XFS (nbd1): SB validate failed with error -5. [ 125.599368][ T8145] Invalid logical block size (2) [ 125.624942][ T6022] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 125.796621][ T6022] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.800904][ T6022] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.805812][ T6022] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.809239][ T6022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.811841][ T6022] usb 8-1: SerialNumber: syz [ 126.022708][ T8117] bridge3: entered promiscuous mode [ 126.024635][ T8117] bridge3: entered allmulticast mode [ 126.032051][ T6022] usb 8-1: 0:2 : does not exist [ 126.033799][ T6022] usb 8-1: unit 14 not found! [ 126.044233][ T6022] usb 8-1: USB disconnect, device number 4 [ 126.073855][ T8157] udevd[8157]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.563976][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 126.568550][ T8177] openvswitch: netlink: Flow actions attr not present in new flow. [ 126.576947][ T8177] fuse: Unknown parameter ' [ 126.576947][ T8177] 0x000000000000000b' [ 126.621186][ T8185] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 127.039995][ T8213] kvm: kvm [8209]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 127.158591][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.686'. [ 127.264998][ T53] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 127.416472][ T53] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 127.419694][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 127.423507][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 127.426715][ T53] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 127.429628][ T53] usb 6-1: Product: syz [ 127.431019][ T53] usb 6-1: Manufacturer: syz [ 127.432600][ T53] usb 6-1: SerialNumber: syz [ 127.436087][ T53] usb 6-1: config 0 descriptor?? [ 127.440404][ T53] usb 6-1: selecting invalid altsetting 0 [ 127.645281][ T6004] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 127.659340][ T53] usb 6-1: USB disconnect, device number 10 [ 127.816701][ T6004] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 127.819374][ T6004] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 127.822646][ T6004] usb 7-1: config 0 interface 0 has no altsetting 0 [ 127.826338][ T6004] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 127.829266][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 127.831911][ T6004] usb 7-1: Product: syz [ 127.833286][ T6004] usb 7-1: Manufacturer: syz [ 127.834830][ T6004] usb 7-1: SerialNumber: syz [ 127.837691][ T6004] usb 7-1: config 0 descriptor?? [ 127.843135][ T6004] hub 7-1:0.0: bad descriptor, ignoring hub [ 127.846068][ T6004] hub 7-1:0.0: probe with driver hub failed with error -5 [ 127.849627][ T6004] usb 7-1: selecting invalid altsetting 0 [ 128.097439][ T8262] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.699'. [ 128.100843][ T8262] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.699'. [ 128.145326][ T7369] usb 7-1: USB disconnect, device number 12 [ 128.192767][ T8268] bridge0: entered promiscuous mode [ 128.194551][ T8268] bridge0: entered allmulticast mode [ 128.406834][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 128.456391][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 128.456403][ T40] audit: type=1400 audit(1762202932.410:612): avc: denied { bind } for pid=8298 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.466857][ T40] audit: type=1400 audit(1762202932.410:613): avc: denied { write } for pid=8298 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.590707][ T8308] openvswitch: netlink: Missing key (keys=40, expected=80) [ 128.651508][ T8312] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 128.815747][ T8320] program syz.2.717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.836842][ T8324] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 128.877184][ T40] audit: type=1400 audit(1762202932.830:614): avc: denied { create } for pid=8331 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.885674][ T40] audit: type=1400 audit(1762202932.830:615): avc: denied { ioctl } for pid=8331 comm="syz.1.721" path="socket:[21139]" dev="sockfs" ino=21139 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.893646][ T40] audit: type=1400 audit(1762202932.830:616): avc: denied { setopt } for pid=8331 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.974614][ T8344] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 128.979765][ T40] audit: type=1400 audit(1762202932.930:617): avc: denied { relabelto } for pid=8337 comm="syz.1.723" name="149" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 128.988960][ T40] audit: type=1400 audit(1762202932.930:618): avc: denied { associate } for pid=8337 comm="syz.1.723" name="149" dev="tmpfs" ino=814 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 128.990672][ T8346] overlayfs: regular lower layers cannot follow data lower layers [ 129.331256][ T8375] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.346566][ T40] audit: type=1400 audit(1762202933.300:619): avc: denied { write } for pid=8374 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.378671][ T40] audit: type=1400 audit(1762202933.330:620): avc: denied { remove_name } for pid=5941 comm="syz-executor" name="binderfs" dev="tmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 129.390452][ T40] audit: type=1400 audit(1762202933.330:621): avc: denied { rmdir } for pid=5941 comm="syz-executor" name="149" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 129.533401][ T8385] __nla_validate_parse: 3 callbacks suppressed [ 129.533413][ T8385] netlink: 59 bytes leftover after parsing attributes in process `syz.1.738'. [ 129.538330][ T8385] netlink: 59 bytes leftover after parsing attributes in process `syz.1.738'. [ 130.289662][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 130.292465][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 130.295501][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 130.298277][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 130.377254][ T8431] batadv_slave_0: entered promiscuous mode [ 130.382488][ T8431] batman_adv: batadv0: Adding interface: macsec1 [ 130.385976][ T8431] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.394338][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.398371][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.401380][ T8431] batman_adv: batadv0: Interface activated: macsec1 [ 130.511952][ T8442] xt_hashlimit: max too large, truncated to 1048576 [ 130.516837][ T8442] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 130.526515][ T8442] ipip0: entered promiscuous mode [ 130.532825][ T8442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.759'. [ 130.587279][ T8444] xt_TPROXY: Can be used only with -p tcp or -p udp [ 130.590530][ T8444] netlink: 128 bytes leftover after parsing attributes in process `syz.2.760'. [ 130.594070][ T8444] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 130.973964][ T8458] trusted_key: encrypted_key: insufficient parameters specified [ 131.169814][ T8463] can: request_module (can-proto-3) failed. [ 131.179602][ T5944] block nbd3: Receive control failed (result -32) [ 131.184675][ T8433] block nbd3: shutting down sockets [ 131.315081][ T8477] bridge0: port 1(veth0_to_bridge) entered blocking state [ 131.318638][ T8477] bridge0: port 1(veth0_to_bridge) entered disabled state [ 131.321546][ T8477] veth0_to_bridge: entered allmulticast mode [ 131.324588][ T8477] veth0_to_bridge: entered promiscuous mode [ 131.328610][ T8477] bridge0: port 1(veth0_to_bridge) entered blocking state [ 131.331217][ T8477] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 131.344592][ T8481] (syz.1.772,8481,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 131.348038][ T8481] (syz.1.772,8481,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 131.495297][ T8487] program syz.1.774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.556995][ T8498] FAT-fs (loop0): unable to read boot sector [ 132.021907][ T8523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8523 comm=syz.0.784 [ 132.254207][ T8534] overlay: filesystem on ./file0 not supported as upperdir [ 132.404534][ T8545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.409205][ T8548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.450303][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 132.456585][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 132.512070][ T8558] nbd: must specify an index to disconnect [ 132.586936][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.588993][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.806464][ T8582] gtp0: entered promiscuous mode [ 132.844422][ T8587] program syz.0.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.851769][ T8587] overlayfs: overlapping lowerdir path [ 132.858081][ T8587] overlayfs: failed to verify upper (238/file0, ino=1282, err=-116) [ 132.860941][ T8587] overlayfs: failed to verify index dir 'upper' xattr [ 132.863795][ T8587] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 132.876323][ T8587] overlayfs: failed to verify upper root origin [ 132.927454][ T8589] dvmrp0: entered allmulticast mode [ 132.968715][ T8591] binder: 8590:8591 ioctl c0306201 200000000640 returned -22 [ 133.211386][ T8593] netlink: 'syz.1.808': attribute type 11 has an invalid length. [ 133.540278][ T8614] bond2: entered allmulticast mode [ 133.542803][ T8614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.914162][ T8628] netlink: 'syz.2.818': attribute type 10 has an invalid length. [ 133.917708][ T8628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.922890][ T8628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.281324][ T8648] random: crng reseeded on system resumption [ 134.388855][ T8655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=8655 comm=syz.1.828 [ 134.398798][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 134.398812][ T40] audit: type=1400 audit(1762202938.350:636): avc: denied { connect } for pid=8656 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.459705][ T40] audit: type=1400 audit(1762202938.410:637): avc: denied { remount } for pid=8667 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 134.521385][ T40] audit: type=1400 audit(1762202938.470:638): avc: denied { map } for pid=8673 comm="syz.3.834" path="socket:[23225]" dev="sockfs" ino=23225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.552110][ T8679] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 134.555344][ T8679] __nla_validate_parse: 4 callbacks suppressed [ 134.555352][ T8679] netlink: 152 bytes leftover after parsing attributes in process `syz.3.836'. [ 134.562926][ T8679] .`: renamed from bond0 (while UP) [ 134.577495][ T8681] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 134.580499][ T8681] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 134.629595][ T8688] 8021q: VLANs not supported on syzkaller1 [ 134.633357][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 134.636991][ T40] audit: type=1400 audit(1762202938.590:639): avc: denied { accept } for pid=8675 comm="syz.0.835" lport=51080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.804842][ T6002] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 134.902520][ T8696] tipc: New replicast peer: 255.255.255.255 [ 134.905023][ T8696] tipc: Enabled bearer , priority 10 [ 134.907970][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'. [ 134.910856][ T8696] tipc: Disabling bearer [ 134.947225][ T8696] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.976658][ T6002] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 134.981198][ T6002] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.985643][ T6002] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 134.990003][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 134.993045][ T6002] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 134.999488][ T8702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.000182][ T6002] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 135.005908][ T6002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.009085][ T6002] usb 8-1: Product: syz [ 135.010400][ T6002] usb 8-1: Manufacturer: syz [ 135.012010][ T6002] usb 8-1: SerialNumber: syz [ 135.015778][ T6002] usb 8-1: config 0 descriptor?? [ 135.104276][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.844'. [ 135.108185][ T8711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.844'. [ 135.209334][ T40] audit: type=1400 audit(1762202939.160:640): avc: denied { read } for pid=8719 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.223107][ T6002] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 135.233550][ T6289] usb 8-1: USB disconnect, device number 5 [ 135.391793][ T8739] netlink: 44 bytes leftover after parsing attributes in process `syz.0.852'. [ 135.466386][ T8741] syz.1.853: vmalloc error: size 141557760, failed to allocated page array size 276480, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.475765][ T8741] CPU: 3 UID: 0 PID: 8741 Comm: syz.1.853 Not tainted syzkaller #0 PREEMPT(full) [ 135.475787][ T8741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.475798][ T8741] Call Trace: [ 135.475822][ T8741] [ 135.475829][ T8741] dump_stack_lvl+0x16c/0x1f0 [ 135.475879][ T8741] warn_alloc+0x248/0x3a0 [ 135.475907][ T8741] ? __pfx_warn_alloc+0x10/0x10 [ 135.475946][ T8741] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.475968][ T8741] ? __vmalloc_node_noprof+0xad/0xf0 [ 135.475995][ T8741] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 135.476027][ T8741] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.476056][ T8741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.476088][ T8741] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.476110][ T8741] vmalloc_user_noprof+0x9e/0xe0 [ 135.476131][ T8741] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.476153][ T8741] vb2_vmalloc_alloc+0x135/0x3f0 [ 135.476176][ T8741] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 135.476197][ T8741] __vb2_queue_alloc+0x8c9/0x1280 [ 135.476232][ T8741] vb2_core_reqbufs+0xa90/0xfe0 [ 135.476260][ T8741] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 135.476299][ T8741] __vb2_init_fileio+0x3f1/0x1100 [ 135.476319][ T8741] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.476345][ T8741] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.476370][ T8741] ? __pollwait+0x271/0x490 [ 135.476400][ T8741] vb2_core_poll+0x5ec/0x700 [ 135.476423][ T8741] vb2_poll+0x4b/0xe0 [ 135.476441][ T8741] vb2_fop_poll+0x10f/0x2c0 [ 135.476462][ T8741] ? __pfx_vb2_fop_poll+0x10/0x10 [ 135.476480][ T8741] v4l2_poll+0x163/0x320 [ 135.476506][ T8741] ? __pfx_v4l2_poll+0x10/0x10 [ 135.476528][ T8741] do_sys_poll+0x55c/0xdf0 [ 135.476564][ T8741] ? __pfx_do_sys_poll+0x10/0x10 [ 135.476591][ T8741] ? __lock_acquire+0x622/0x1c90 [ 135.476665][ T8741] ? futex_unqueue+0x13d/0x2c0 [ 135.476692][ T8741] ? __pfx___pollwait+0x10/0x10 [ 135.476722][ T8741] ? __pfx_pollwake+0x10/0x10 [ 135.476790][ T8741] ? do_futex+0x122/0x350 [ 135.476806][ T8741] ? __pfx_do_futex+0x10/0x10 [ 135.476826][ T8741] ? set_user_sigmask+0x21b/0x2b0 [ 135.476844][ T8741] ? find_held_lock+0x2b/0x80 [ 135.476864][ T8741] ? __pfx_set_user_sigmask+0x10/0x10 [ 135.476890][ T8741] __x64_sys_ppoll+0x254/0x2d0 [ 135.476907][ T8741] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 135.476935][ T8741] do_syscall_64+0xcd/0xfa0 [ 135.476963][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.476980][ T8741] RIP: 0033:0x7f21d9f8f6c9 [ 135.476994][ T8741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.477011][ T8741] RSP: 002b:00007f21dae9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 135.477027][ T8741] RAX: ffffffffffffffda RBX: 00007f21da1e5fa0 RCX: 00007f21d9f8f6c9 [ 135.477038][ T8741] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 135.477048][ T8741] RBP: 00007f21da011f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.477058][ T8741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.477068][ T8741] R13: 00007f21da1e6038 R14: 00007f21da1e5fa0 R15: 00007ffe82edd598 [ 135.477093][ T8741] [ 135.477100][ T8741] Mem-Info: [ 135.500925][ T8739] could not allocate digest TFM handle cryptd(blake2b-160) [ 135.501093][ T8741] active_anon:12721 inactive_anon:0 isolated_anon:0 [ 135.501093][ T8741] active_file:16717 inactive_file:41043 isolated_file:0 [ 135.501093][ T8741] unevictable:1790 dirty:17 writeback:0 [ 135.501093][ T8741] slab_reclaimable:12280 slab_unreclaimable:69802 [ 135.501093][ T8741] mapped:27641 shmem:5221 pagetables:1336 [ 135.501093][ T8741] sec_pagetables:307 bounce:0 [ 135.501093][ T8741] kernel_misc_reclaimable:0 [ 135.501093][ T8741] free:436755 free_pcp:26210 free_cma:0 [ 135.511291][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 135.512654][ T8741] Node 0 active_anon:50884kB inactive_anon:0kB active_file:66812kB inactive_file:163968kB unevictable:3624kB isolated(anon):0kB isolated(file):0kB mapped:110524kB dirty:68kB writeback:0kB shmem:17348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14032kB pagetables:5156kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 135.512683][ T8741] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.512707][ T8741] Node 0 [ 135.514446][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 135.516126][ T8741] DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.528430][ T40] audit: type=1400 audit(1762202939.470:641): avc: denied { load_policy } for pid=8728 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 135.528840][ T8741] lowmem_reserve[]: 0 [ 135.568214][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 135.570201][ T8741] 1239 [ 135.620993][ T8729] SELinux: failed to load policy [ 135.626092][ T8741] 1239 [ 135.640355][ T8729] bpf: Bad value for 'uid' [ 135.660025][ T8741] 1239 1239 [ 135.661420][ T8741] Node 0 DMA32 free:135956kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50696kB inactive_anon:0kB active_file:66812kB inactive_file:163968kB unevictable:3544kB writepending:72kB zspages:0kB present:2080628kB managed:1269484kB mlocked:8kB bounce:0kB free_pcp:80592kB local_pcp:17748kB free_cma:0kB [ 135.674938][ T8741] lowmem_reserve[]: 0 0 0 0 0 [ 135.676500][ T8741] Node 1 Normal free:1597296kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:22076kB local_pcp:2392kB free_cma:0kB [ 135.686920][ T8741] lowmem_reserve[]: 0 0 0 0 0 [ 135.688440][ T8741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.692657][ T8741] Node 0 DMA32: 204*4kB (UME) 69*8kB (UME) 10*16kB (UME) 24*32kB (UME) 6*64kB (ME) 64*128kB (ME) 29*256kB (UME) 38*512kB (UM) 18*1024kB (UM) 9*2048kB (UME) 15*4096kB (M) = 136056kB [ 135.698365][ T8741] Node 1 Normal: 4*4kB (ME) 8*8kB (UME) 10*16kB (UE) 64*32kB (UME) 30*64kB (UME) 10*128kB (UME) 6*256kB (U) 4*512kB (UM) 1*1024kB (E) 1*2048kB (M) 387*4096kB (M) = 1597296kB [ 135.703774][ T8741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.707656][ T8741] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 135.710736][ T8741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.713758][ T8741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 135.717199][ T8741] 60165 total pagecache pages [ 135.719029][ T8741] 0 pages in swap cache [ 135.720398][ T8741] Free swap = 124996kB [ 135.721758][ T8741] Total swap = 124996kB [ 135.723102][ T8741] 1048443 pages RAM [ 135.723108][ T8741] 0 pages HighMem/MovableOnly [ 135.723112][ T8741] 281759 pages reserved [ 135.723116][ T8741] 0 pages cma reserved [ 135.768329][ T8763] loop6: detected capacity change from 0 to 524288000 [ 135.804251][ T40] audit: type=1400 audit(1762202939.750:642): avc: denied { link } for pid=8761 comm="syz.0.858" name="file1" dev="9p" ino=71827787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.820794][ T8762] Falling back ldisc for ttyS3. [ 135.866733][ T8767] program syz.3.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.868468][ T8763] loop6: detected capacity change from 524288000 to 524287951 [ 135.871474][ T40] audit: type=1400 audit(1762202939.820:643): avc: denied { map } for pid=8766 comm="syz.3.860" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.077437][ T40] audit: type=1400 audit(1762202940.030:644): avc: denied { getopt } for pid=8780 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 136.130670][ T40] audit: type=1400 audit(1762202940.080:645): avc: denied { ioctl } for pid=8788 comm="syz.1.867" path="socket:[24939]" dev="sockfs" ino=24939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.182239][ T8800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26214 sclass=netlink_tcpdiag_socket pid=8800 comm=syz.1.872 [ 136.356796][ T8812] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 136.401500][ T8818] netlink: 'syz.2.878': attribute type 1 has an invalid length. [ 136.423068][ T8818] gretap1: entered promiscuous mode [ 136.428821][ T8818] bond4: (slave gretap1): making interface the new active one [ 136.435474][ T8818] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 136.515972][ T8830] qnx6: unable to set blocksize [ 136.574916][ T53] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 136.736720][ T53] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 136.740140][ T53] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 136.743448][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 136.747830][ T53] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 136.751105][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 136.754122][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 136.757504][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 136.764181][ T53] usb 8-1: string descriptor 0 read error: -22 [ 136.766875][ T53] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 136.774963][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.782975][ T53] usb 8-1: config 0 descriptor?? [ 136.786126][ T53] hub 8-1:0.0: bad descriptor, ignoring hub [ 136.788644][ T53] hub 8-1:0.0: probe with driver hub failed with error -5 [ 136.792824][ T8854] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 136.795321][ T8854] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 136.799594][ T8854] vhci_hcd vhci_hcd.0: Device attached [ 136.801278][ T53] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 136.803723][ T8855] vhci_hcd: connection closed [ 136.813145][ T6875] vhci_hcd: stop threads [ 136.817569][ T6875] vhci_hcd: release socket [ 136.821128][ T6875] vhci_hcd: disconnect device [ 137.048166][ T7369] usb 8-1: USB disconnect, device number 6 [ 137.212014][ T8874] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 137.215565][ T8874] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 137.219248][ T8874] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 137.222395][ T8874] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 137.720251][ T8916] bad cache= option: none [ 137.720251][ T8916] [ 137.722518][ T8916] CIFS: VFS: bad cache= option: none [ 137.749968][ T8914] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.956384][ T8921] xt_connbytes: Forcing CT accounting to be enabled [ 137.958765][ T8921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.338009][ T8930] sd 0:0:0:0: PR command failed: 1026 [ 138.339880][ T8930] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 138.342143][ T8930] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 138.457374][ T8937] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 138.594274][ T8957] netlink: zone id is out of range [ 138.596156][ T8957] netlink: zone id is out of range [ 138.598072][ T8957] netlink: set zone limit has 8 unknown bytes [ 138.883921][ T8973] netlink: 'syz.2.931': attribute type 20 has an invalid length. [ 138.905727][ T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 139.054949][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 139.058855][ T53] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.062345][ T53] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.066464][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.069638][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.073433][ T53] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.077724][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 139.082257][ T53] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 139.088497][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.093159][ T53] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.096265][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.100495][ T53] usb 6-1: config 0 descriptor?? [ 139.102877][ T8961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.223762][ T8985] bond5: entered promiscuous mode [ 139.226292][ T8985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.311471][ T53] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.356890][ T8993] binder: 8992:8993 ioctl 4018620d 0 returned -22 [ 139.465195][ T9001] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 139.479375][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.482469][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 139.482478][ T40] audit: type=1400 audit(1762202943.430:661): avc: denied { accept } for pid=8999 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 139.484290][ T9001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9001 comm=syz.3.941 [ 139.492784][ T9003] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 139.501355][ T9003] bond4 (unregistering): Released all slaves [ 139.515853][ T40] audit: type=1400 audit(1762202943.470:662): avc: denied { read write } for pid=8960 comm="syz.1.924" name="lp0" dev="devtmpfs" ino=3121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 139.524966][ T40] audit: type=1400 audit(1762202943.470:663): avc: denied { open } for pid=8960 comm="syz.1.924" path="/dev/usb/lp0" dev="devtmpfs" ino=3121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 139.525592][ C3] usblp0: nonzero read bulk status received: -71 [ 139.537556][ T56] usb 6-1: USB disconnect, device number 11 [ 139.541673][ T56] usblp0: removed [ 139.603186][ T9011] __nla_validate_parse: 4 callbacks suppressed [ 139.603198][ T9011] netlink: 96 bytes leftover after parsing attributes in process `syz.3.944'. [ 139.860634][ T9021] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.946'. [ 140.163909][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 140.169788][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'. [ 140.176662][ T40] audit: type=1400 audit(1762202944.130:664): avc: denied { mount } for pid=9037 comm="syz.1.951" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 140.189932][ T9039] bond2 (unregistering): Released all slaves [ 140.214920][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 140.364817][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 140.366727][ T40] audit: type=1800 audit(1762202944.320:665): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.953" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 140.367765][ T56] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.376044][ T56] usb 8-1: config 0 has no interface number 0 [ 140.379553][ T56] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 140.382341][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.384920][ T56] usb 8-1: Product: syz [ 140.386261][ T56] usb 8-1: Manufacturer: syz [ 140.387656][ T56] usb 8-1: SerialNumber: syz [ 140.393507][ T56] usb 8-1: config 0 descriptor?? [ 140.400663][ T56] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 140.403456][ T56] usb 8-1: selecting invalid altsetting 1 [ 140.405524][ T56] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 140.411685][ T56] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.415908][ T56] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 140.418630][ T56] usb 8-1: media controller created [ 140.428526][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.430782][ T9051] /dev/nullb0: Can't open blockdev [ 140.521782][ T40] audit: type=1400 audit(1762202944.470:666): avc: denied { create } for pid=9061 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 140.787803][ T40] audit: type=1400 audit(1762202944.740:667): avc: denied { getopt } for pid=9073 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.817648][ T9076] cgroup: subsys name conflicts with all [ 140.896787][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 140.900494][ T40] audit: type=1400 audit(1762202944.850:668): avc: denied { read } for pid=9075 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.900604][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 140.912963][ T9078] netlink: 'syz.0.964': attribute type 11 has an invalid length. [ 140.916996][ T9078] netlink: 'syz.0.964': attribute type 7 has an invalid length. [ 140.953448][ T40] audit: type=1400 audit(1762202944.900:669): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 140.994276][ T40] audit: type=1400 audit(1762202944.940:670): avc: denied { create } for pid=9081 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 141.175242][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.971'. [ 141.180338][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 141.231089][ T9103] IPv6: sit1: Disabled Multicast RS [ 141.233317][ T9103] sit1: entered allmulticast mode [ 141.331471][ T9106] syz.2.974: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 141.389411][ T9111] netlink: 'syz.2.975': attribute type 29 has an invalid length. [ 141.414600][ T9115] netlink: 'syz.0.977': attribute type 21 has an invalid length. [ 141.417163][ T9115] netlink: 'syz.0.977': attribute type 6 has an invalid length. [ 141.419540][ T9115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.977'. [ 141.474958][ T56] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 141.480182][ T56] zl10353_read_register: readreg error (reg=127, ret==-110) [ 141.483638][ T56] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 141.484448][ T9116] XFS (nbd0): SB validate failed with error -5. [ 141.516516][ T9118] XFS (nbd0): SB validate failed with error -5. [ 141.534148][ T56] usb 8-1: USB disconnect, device number 7 [ 141.872066][ T9141] netlink: 36 bytes leftover after parsing attributes in process `syz.1.984'. [ 142.089989][ T9148] cdrom: dropping to single frame dma [ 142.105481][ T6289] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.162284][ T9161] program syz.3.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.198557][ T9162] program syz.3.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.275751][ T6289] usb 5-1: Using ep0 maxpacket: 32 [ 142.279465][ T6289] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 142.285858][ T6289] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 142.292062][ T6289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.295893][ T6289] usb 5-1: Product: syz [ 142.297752][ T6289] usb 5-1: Manufacturer: syz [ 142.299770][ T6289] usb 5-1: SerialNumber: syz [ 142.306877][ T6289] usb 5-1: config 0 descriptor?? [ 142.309780][ T9138] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.317549][ T6289] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input14 [ 142.346033][ T9174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.501080][ T9185] bond4: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 142.506109][ T9185] bond4 (unregistering): Released all slaves [ 142.590846][ T7369] usb 5-1: USB disconnect, device number 2 [ 142.590917][ C2] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 142.834042][ T9201] zonefs (nbd3) ERROR: Not a zoned block device [ 143.441943][ T9235] input: syz1 as /devices/virtual/input/input15 [ 143.834931][ T6002] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 143.974872][ T6002] usb 6-1: device descriptor read/64, error -71 [ 144.215202][ T6002] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 144.336947][ T9258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9258 comm=syz.3.1024 [ 144.344956][ T6002] usb 6-1: device descriptor read/64, error -71 [ 144.406780][ T9265] NILFS (nbd0): device size too small [ 144.455185][ T6002] usb usb6-port1: attempt power cycle [ 144.659325][ T9274] loop2: detected capacity change from 0 to 7 [ 144.661847][ T9274] loop2: p1 [ 144.663233][ T9274] loop2: partition table partially beyond EOD, truncated [ 144.666293][ T9274] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 144.685861][ T8157] udevd[8157]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 144.804850][ T6002] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 144.825311][ T6002] usb 6-1: device descriptor read/8, error -71 [ 145.074883][ T6002] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 145.095549][ T6002] usb 6-1: device descriptor read/8, error -71 [ 145.215046][ T6002] usb usb6-port1: unable to enumerate USB device [ 145.224991][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 145.225007][ T40] audit: type=1400 audit(1762202949.170:681): avc: denied { connect } for pid=9285 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.226044][ T9286] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1032'. [ 145.744027][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 145.748126][ T40] audit: type=1400 audit(1762202949.700:682): avc: denied { ioctl } for pid=9313 comm="syz.0.1040" path="socket:[27276]" dev="sockfs" ino=27276 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.530933][ T9326] openvswitch: netlink: IP tunnel dst address not specified [ 146.536349][ T9326] openvswitch: netlink: IP tunnel dst address not specified [ 146.726026][ T9340] netlink: 'syz.0.1049': attribute type 4 has an invalid length. [ 146.729213][ T9340] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1049'. [ 146.733781][ T9340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 146.755969][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 146.763639][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 146.768023][ T9345] netlink: 'syz.1.1050': attribute type 19 has an invalid length. [ 146.912351][ T9360] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 146.917041][ T40] audit: type=1400 audit(1762202950.870:683): avc: denied { relabelto } for pid=9359 comm="syz.1.1054" name="239" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 146.919431][ T9360] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 146.927790][ T40] audit: type=1400 audit(1762202950.870:684): avc: denied { associate } for pid=9359 comm="syz.1.1054" name="239" dev="tmpfs" ino=1298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 146.931952][ T9360] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 146.945168][ T9360] netlink: 'syz.1.1054': attribute type 21 has an invalid length. [ 147.431087][ T9371] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1058'. [ 147.628224][ T9384] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3596000302 (14384001208 ns) > initial count (4696682236 ns). Using initial count to start timer. [ 147.725946][ T9390] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 147.894865][ T6003] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 148.034965][ T6003] usb 6-1: device descriptor read/64, error -71 [ 148.052450][ T9401] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 148.052512][ T9402] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 148.066999][ T9401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.086979][ T9402] bond2: (slave veth3): Enslaving as an active interface with a down link [ 148.095332][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.098205][ T9401] bond2: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 148.274830][ T6003] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 148.401526][ T9407] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 148.404569][ T9407] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1071'. [ 148.414824][ T6003] usb 6-1: device descriptor read/64, error -71 [ 148.504222][ T9416] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 148.508532][ T40] audit: type=1400 audit(1762202952.460:685): avc: denied { read } for pid=9415 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.544886][ T6003] usb usb6-port1: attempt power cycle [ 148.894858][ T6003] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 148.925840][ T6003] usb 6-1: device descriptor read/8, error -71 [ 149.043787][ T40] audit: type=1400 audit(1762202952.990:686): avc: denied { listen } for pid=9434 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.049676][ T40] audit: type=1400 audit(1762202953.000:687): avc: denied { accept } for pid=9434 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.174849][ T6003] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 149.195204][ T6003] usb 6-1: device descriptor read/8, error -71 [ 149.320363][ T6003] usb usb6-port1: unable to enumerate USB device [ 149.454951][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 149.584918][ T10] usb 6-1: device descriptor read/64, error -71 [ 149.834836][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 149.856112][ T9442] syzkaller0: entered promiscuous mode [ 149.857867][ T9442] syzkaller0: entered allmulticast mode [ 149.974903][ T10] usb 6-1: device descriptor read/64, error -71 [ 150.085029][ T10] usb usb6-port1: attempt power cycle [ 150.444952][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 150.465505][ T10] usb 6-1: device descriptor read/8, error -71 [ 150.794415][ T9453] netlink: zone id is out of range [ 150.797636][ T9453] netlink: zone id is out of range [ 150.801347][ T9453] netlink: set zone limit has 8 unknown bytes [ 150.801354][ T40] audit: type=1400 audit(1762202954.750:688): avc: denied { create } for pid=9454 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 150.819068][ T40] audit: type=1400 audit(1762202954.770:689): avc: denied { sys_admin } for pid=9454 comm="syz.3.1085" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 151.272843][ T9472] bond2: (slave bond_slave_1): Device is not our slave [ 151.276598][ T9472] bond2: option active_slave: invalid value (bond_slave_1) [ 151.280144][ T9472] bond2 (unregistering): Released all slaves [ 151.431452][ T9478] tmpfs: Cannot change global quota limit on remount [ 151.636492][ T9487] vivid-003: disconnect [ 151.642573][ T9489] netlink: zone id is out of range [ 151.644225][ T9489] netlink: zone id is out of range [ 151.649189][ T9486] vivid-003: reconnect [ 151.654950][ T9489] netlink: set zone limit has 8 unknown bytes [ 151.726190][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 151.736780][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1097'. [ 151.775435][ T9495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1099'. [ 151.858541][ T9508] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 152.832266][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 152.837137][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 152.840401][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 152.843217][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 152.929367][ T9546] overlayfs: failed to get inode (-116) [ 152.931620][ T9546] overlayfs: failed to get inode (-116) [ 152.968349][ T9549] hfs: can't find a HFS filesystem on dev sr0 [ 152.973670][ T40] audit: type=1400 audit(1762202956.920:690): avc: denied { read write } for pid=9548 comm="syz.1.1116" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 152.994835][ T40] audit: type=1400 audit(1762202956.920:691): avc: denied { open } for pid=9548 comm="syz.1.1116" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 153.072480][ T9561] sit0: entered promiscuous mode [ 153.079823][ T9561] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 153.082468][ T9561] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1121'. [ 153.084296][ T9568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 153.091864][ T9568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1124'. [ 153.092747][ T29] hid-generic 0362:07FF:7FFFFFFF.0005: item fetching failed at offset 0/2 [ 153.098646][ T29] hid-generic 0362:07FF:7FFFFFFF.0005: probe with driver hid-generic failed with error -22 [ 153.104222][ T40] audit: type=1400 audit(1762202957.050:692): avc: denied { kexec_image_load } for pid=9560 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 153.125118][ T9561] openvswitch: netlink: Flow key attr not present in new flow. [ 153.127890][ T9561] netlink: 'syz.1.1121': attribute type 4 has an invalid length. [ 153.130058][ T40] audit: type=1400 audit(1762202957.080:693): avc: denied { ioctl } for pid=9567 comm="syz.3.1124" path="socket:[30926]" dev="sockfs" ino=30926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.264463][ T9586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.573403][ T40] audit: type=1400 audit(1762202957.520:694): avc: denied { read } for pid=9609 comm="syz.1.1135" path="socket:[30943]" dev="sockfs" ino=30943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.632248][ T40] audit: type=1400 audit(1762202957.580:695): avc: denied { ioctl } for pid=9611 comm="syz.1.1136" path="socket:[28604]" dev="sockfs" ino=28604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.798361][ T9612] team0: Port device team_slave_1 removed [ 153.929884][ T9627] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 154.098684][ T9638] netlink: zone id is out of range [ 154.100495][ T9638] netlink: zone id is out of range [ 154.102252][ T9638] netlink: set zone limit has 8 unknown bytes [ 154.133941][ T40] audit: type=1400 audit(1762202958.080:696): avc: denied { setopt } for pid=9641 comm="syz.1.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 154.181175][ T40] audit: type=1400 audit(1762202958.130:697): avc: denied { read } for pid=9645 comm="syz.1.1148" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 154.181255][ T9646] random: crng reseeded on system resumption [ 154.371528][ T9654] efs: cannot read volume header [ 155.633854][ T9672] netlink: zone id is out of range [ 155.638165][ T9672] netlink: zone id is out of range [ 155.642087][ T9672] netlink: set zone limit has 8 unknown bytes [ 155.825202][ T9685] netlink: 'syz.1.1159': attribute type 2 has an invalid length. [ 155.828035][ T9685] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 156.242513][ T9709] veth1_macvtap: left promiscuous mode [ 156.245729][ T9709] macsec0: entered promiscuous mode [ 156.331671][ T9721] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 156.337277][ T9721] tipc: Enabling of bearer rejected, failed to enable media [ 156.340828][ T9721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9721 comm=syz.1.1171 [ 156.628262][ T9723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9723 comm=syz.3.1172 [ 156.633242][ T9723] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 156.721949][ T9727] net_ratelimit: 3 callbacks suppressed [ 156.721960][ T9727] netlink: zone id is out of range [ 156.725505][ T9727] netlink: zone id is out of range [ 156.727291][ T9727] netlink: set zone limit has 8 unknown bytes [ 157.327910][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 157.327921][ T40] audit: type=1400 audit(1762202961.280:701): avc: denied { execute } for pid=9744 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 157.337893][ T40] audit: type=1400 audit(1762202961.280:702): avc: denied { execute_no_trans } for pid=9744 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 157.391306][ T9747] __nla_validate_parse: 7 callbacks suppressed [ 157.391321][ T9747] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1182'. [ 157.452834][ T9755] netlink: zone id is out of range [ 157.454941][ T9755] netlink: zone id is out of range [ 157.458186][ T9755] netlink: set zone limit has 8 unknown bytes [ 157.504988][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.508677][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.513015][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.518264][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.520929][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.534478][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.538263][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.541534][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.546045][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.548794][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.667528][ T9770] geneve2: entered promiscuous mode [ 157.713333][ T9781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9781 comm=syz.1.1190 [ 157.717572][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 157.786432][ T9784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1191'. [ 157.837133][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.839429][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.841801][ T9759] bridge_slave_0: entered allmulticast mode [ 157.844532][ T9759] bridge_slave_0: entered promiscuous mode [ 157.848149][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.850471][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.853510][ T9759] bridge_slave_1: entered allmulticast mode [ 157.857532][ T9759] bridge_slave_1: entered promiscuous mode [ 157.907354][ T9793] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 157.908527][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.916709][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.951881][ T9797] atomic_op ffff88805620d998 conn xmit_atomic 0000000000000000 [ 157.951979][ T40] audit: type=1400 audit(1762202961.900:703): avc: denied { read } for pid=9798 comm="syz.1.1197" path="socket:[29621]" dev="sockfs" ino=29621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.967158][ T9759] team0: Port device team_slave_0 added [ 157.971542][ T9759] team0: Port device team_slave_1 added [ 157.987336][ T40] audit: type=1400 audit(1762202961.940:704): avc: denied { watch_sb } for pid=9800 comm="syz.3.1198" path="/314" dev="tmpfs" ino=1691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 157.994397][ T40] audit: type=1326 audit(1762202961.940:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9800 comm="syz.3.1198" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4b58f6c9 code=0x0 [ 158.030251][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.033214][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.043882][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.050517][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.053464][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.063566][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.137765][ T9759] hsr_slave_0: entered promiscuous mode [ 158.140371][ T9759] hsr_slave_1: entered promiscuous mode [ 158.143266][ T9759] debugfs: 'hsr0' already exists in 'hsr' [ 158.145706][ T9759] Cannot create hsr debugfs directory [ 158.184054][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 158.187070][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 158.189762][ T9809] netlink: 'syz.1.1200': attribute type 20 has an invalid length. [ 158.193684][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 158.196834][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 158.200096][ T9809] netlink: 'syz.1.1200': attribute type 20 has an invalid length. [ 158.289833][ T9759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.298922][ T9759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.303856][ T9759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.310761][ T9759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.319906][ T9813] openvswitch: netlink: EtherType 53b is less than min 600 [ 158.360648][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.380444][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.390668][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.393121][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.401876][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.404356][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.434189][ T9826] pim6reg1: entered promiscuous mode [ 158.436110][ T9826] pim6reg1: entered allmulticast mode [ 158.528358][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.646795][ T9847] netlink: zone id is out of range [ 158.648544][ T9847] netlink: zone id is out of range [ 158.650444][ T9847] netlink: set zone limit has 8 unknown bytes [ 158.690551][ T9759] veth0_vlan: entered promiscuous mode [ 158.708298][ T9856] ip6erspan0: entered promiscuous mode [ 158.716790][ T9759] veth1_vlan: entered promiscuous mode [ 158.738665][ T9759] veth0_macvtap: entered promiscuous mode [ 158.743354][ T9759] veth1_macvtap: entered promiscuous mode [ 158.753991][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.765543][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.773821][ T6883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.780439][ T6883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.784242][ T6883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.787929][ T6883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.837172][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1211'. [ 158.839353][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.849689][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.869450][ T6882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.870141][ T40] audit: type=1400 audit(1762202962.820:706): avc: denied { lock } for pid=9865 comm="syz.3.1214" path="socket:[32801]" dev="sockfs" ino=32801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 158.871993][ T6882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.872996][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 158.902095][ T40] audit: type=1400 audit(1762202962.850:707): avc: denied { mounton } for pid=9759 comm="syz-executor" path="/syzkaller.9VbPtC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 158.910871][ T40] audit: type=1400 audit(1762202962.850:708): avc: denied { mounton } for pid=9759 comm="syz-executor" path="/syzkaller.9VbPtC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 158.931728][ T9869] netlink: 'syz.1.1215': attribute type 2 has an invalid length. [ 158.934268][ T9869] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1215'. [ 159.006498][ T40] audit: type=1326 audit(1762202962.960:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.4.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c7d8f6c9 code=0x7ffc0000 [ 159.014034][ T40] audit: type=1326 audit(1762202962.960:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.4.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c7d8f6c9 code=0x7ffc0000 [ 159.267467][ T9909] geneve2: entered promiscuous mode [ 159.269202][ T9909] geneve2: entered allmulticast mode [ 159.274864][ T7984] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.434891][ T7984] usb 5-1: Using ep0 maxpacket: 8 [ 159.438589][ T7984] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.442954][ T7984] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.446882][ T7984] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.449961][ T7984] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.454002][ T7984] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.457157][ T7984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.625025][ T5942] Bluetooth: hci4: command tx timeout [ 159.664802][ T7984] usb 5-1: GET_CAPABILITIES returned 0 [ 159.667356][ T7984] usbtmc 5-1:16.0: can't read capabilities [ 159.674198][ T7984] usb 5-1: USB disconnect, device number 3 [ 159.757106][ T9925] vfat: Unknown parameter 'discardmmu' [ 160.062937][ T9952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1242'. [ 160.184700][ T9971] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 160.187510][ T9971] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.192804][ T9971] vhci_hcd vhci_hcd.0: Device attached [ 160.196797][ T9974] vhci_hcd: connection closed [ 160.197770][ T6880] vhci_hcd: stop threads [ 160.201560][ T6880] vhci_hcd: release socket [ 160.203212][ T6880] vhci_hcd: disconnect device [ 160.444308][ T839] IPVS: starting estimator thread 0... [ 160.534937][ T9990] IPVS: using max 43 ests per chain, 103200 per kthread [ 160.858496][T10006] No source specified [ 160.862578][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.866084][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.972337][ T9999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.981641][ T9999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.112065][ T6881] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.116100][ T6881] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.124181][ T6881] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.129144][ T6881] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.240354][ T54] hid_parser_main: 119 callbacks suppressed [ 161.240395][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.245205][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.247661][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.250068][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.252549][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.255169][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.257621][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.260057][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.262549][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.265290][ T54] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 161.287862][ T54] hid-generic 0005:00B6:0009.0006: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 161.301007][ T5346] udevd[5346]: worker [8157] terminated by signal 33 (Unknown signal 33) [ 161.303723][ T5346] udevd[5346]: worker [8157] failed while handling '/devices/virtual/misc/uhid/0005:00B6:0009.0006/hidraw/hidraw1' [ 161.468813][T10054] MINIX-fs: blocksize too small for device [ 161.714926][ T5942] Bluetooth: hci4: command tx timeout [ 161.824822][ T56] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 161.964822][ T56] usb 5-1: device descriptor read/64, error -71 [ 162.215075][ T56] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 162.238810][T10086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 162.354852][ T56] usb 5-1: device descriptor read/64, error -71 [ 162.475064][ T56] usb usb5-port1: attempt power cycle [ 162.493473][T10107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 162.496251][T10107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.499766][T10107] vhci_hcd vhci_hcd.0: Device attached [ 162.505282][T10109] vhci_hcd: unknown pdu 2 [ 162.508567][ T6879] vhci_hcd: stop threads [ 162.510587][ T6879] vhci_hcd: release socket [ 162.512516][ T6879] vhci_hcd: disconnect device [ 162.835280][ T56] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 162.855589][ T56] usb 5-1: device descriptor read/8, error -71 [ 163.114845][ T56] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 163.135624][ T56] usb 5-1: device descriptor read/8, error -71 [ 163.135749][T10130] __nla_validate_parse: 9 callbacks suppressed [ 163.135765][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 163.144337][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 163.148172][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 163.151684][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 163.245268][ T56] usb usb5-port1: unable to enumerate USB device [ 163.281966][T10140] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1304'. [ 163.535470][ T40] kauditd_printk_skb: 141 callbacks suppressed [ 163.535486][ T40] audit: type=1400 audit(1762202967.490:852): avc: denied { accept } for pid=10166 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.643713][T10189] vlan0: entered promiscuous mode [ 163.646052][T10189] vlan0: entered allmulticast mode [ 163.647743][T10189] hsr_slave_1: entered allmulticast mode [ 163.650174][T10191] tipc: Enabled bearer , priority 0 [ 163.652081][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 163.661854][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 163.666412][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 163.669516][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 163.672462][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 163.904988][ T40] audit: type=1400 audit(1762202967.850:853): avc: denied { setopt } for pid=10215 comm="syz.3.1326" lport=54150 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 163.914563][ T40] audit: type=1400 audit(1762202967.860:854): avc: denied { write } for pid=10215 comm="syz.3.1326" lport=54150 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 164.338676][T10167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.341857][T10167] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.357852][T10167] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.361813][T10221] program syz.1.1327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.529348][T10240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40699 sclass=netlink_route_socket pid=10240 comm=syz.3.1332 [ 164.621402][T10245] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 164.754873][ T29] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 164.775042][ T6289] tipc: Node number set to 2835921379 [ 164.790759][T10260] net_ratelimit: 4 callbacks suppressed [ 164.790858][T10260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.911536][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.915948][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 164.919783][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 164.924164][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.936326][ T29] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 164.940318][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.943775][ T29] usb 6-1: Product: syz [ 164.946054][ T29] usb 6-1: Manufacturer: syz [ 164.948777][ T29] usb 6-1: SerialNumber: syz [ 164.953328][ T29] usb 6-1: config 0 descriptor?? [ 164.960989][ T29] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17 [ 164.968853][T10271] /dev/sg0: Can't lookup blockdev [ 164.974916][ T40] audit: type=1400 audit(1762202968.920:855): avc: denied { name_connect } for pid=10270 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 164.983284][ C3] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 164.991205][T10271] 9pnet_fd: p9_fd_create_tcp (10271): problem connecting socket to 127.0.0.1 [ 164.995694][T10276] /dev/sg0: Can't lookup blockdev [ 165.045425][T10280] ip6erspan0: entered promiscuous mode [ 165.249803][ T29] usb 6-1: USB disconnect, device number 24 [ 165.288757][T10321] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 165.291842][T10321] SELinux: failed to load policy [ 165.294813][T10323] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 165.297689][T10323] SELinux: failed to load policy [ 165.350163][T10331] : renamed from wg0 (while UP) [ 165.452669][T10351] tmpfs: Unknown parameter 'usruota_inode_hardlimit' [ 165.556446][ T40] audit: type=1400 audit(1762202969.510:856): avc: denied { read } for pid=10370 comm="syz.3.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.600596][T10374] tipc: Enabling of bearer rejected, failed to enable media [ 165.601650][ T5942] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 165.603800][T10374] tipc: Enabled bearer , priority 10 [ 165.624946][ T5942] Bluetooth: hci4: command 0x0419 tx timeout [ 165.638703][ T40] audit: type=1400 audit(1762202969.590:857): avc: denied { create } for pid=10377 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.646497][ T40] audit: type=1400 audit(1762202969.590:858): avc: denied { bind } for pid=10377 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.653744][ T40] audit: type=1400 audit(1762202969.590:859): avc: denied { connect } for pid=10377 comm="syz.3.1362" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.748168][T10390] overlayfs: failed to clone upperpath [ 166.016721][T10546] xt_l2tp: v2 doesn't support IP mode [ 166.020073][ T40] audit: type=1400 audit(1762202969.970:860): avc: denied { ioctl } for pid=10545 comm="syz.1.1374" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 166.075402][ T40] audit: type=1400 audit(1762202970.030:861): avc: denied { map } for pid=10551 comm="syz.3.1375" path="socket:[32720]" dev="sockfs" ino=32720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.126861][ T6289] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 166.254805][ T6289] usb 9-1: device descriptor read/64, error -71 [ 166.365130][ T6884] bond0: (slave wlan1): interface is now down [ 166.367696][T10576] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 166.371440][ T6884] bond0: now running without any active interface! [ 166.372301][T10576] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 166.379427][T10576] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 166.382024][T10576] UDF-fs: Scanning with blocksize 512 failed [ 166.384860][T10576] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 166.387787][T10576] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 166.391286][T10576] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 166.393692][T10576] UDF-fs: Scanning with blocksize 1024 failed [ 166.397003][T10576] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 166.400059][T10576] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 166.403043][T10576] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 166.405600][T10576] UDF-fs: Scanning with blocksize 2048 failed [ 166.407875][T10576] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 166.410895][T10576] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 166.413830][T10576] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 166.416720][T10576] UDF-fs: Scanning with blocksize 4096 failed [ 166.419089][T10576] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 166.494921][ T6289] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 166.634915][ T6289] usb 9-1: device descriptor read/64, error -71 [ 166.755099][ T6289] usb usb9-port1: attempt power cycle [ 167.016104][T10609] nbd0: detected capacity change from 0 to 549764202496 [ 167.023352][ T5942] block nbd0: Receive control failed (result -32) [ 167.023810][ T9766] block nbd0: Send control failed (result -32) [ 167.030596][ T9766] block nbd0: Request send failed, requeueing [ 167.036999][ T1323] block nbd0: Dead connection, failed to find a fallback [ 167.040136][ T1323] block nbd0: shutting down sockets [ 167.042540][ T1323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.046893][ T1323] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.051309][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.056037][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.059497][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.063428][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.067581][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.071322][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.075069][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.079046][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.082564][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.089372][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.092996][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.096952][ T6289] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 167.097297][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.101861][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.104881][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.107341][ T9766] ldm_validate_partition_table(): Disk read failed. [ 167.109475][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.112297][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.115973][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.116941][ T6289] usb 9-1: device descriptor read/8, error -71 [ 167.119382][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.124550][ T9766] Dev nbd0: unable to read RDB block 0 [ 167.127077][ T9766] nbd0: unable to read partition table [ 167.131343][ T9766] ldm_validate_partition_table(): Disk read failed. [ 167.134172][ T9766] Dev nbd0: unable to read RDB block 0 [ 167.136225][ T9766] nbd0: unable to read partition table [ 167.142666][T10629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10629 comm=syz.1.1400 [ 167.374916][ T6289] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 167.395524][ T6289] usb 9-1: device descriptor read/8, error -71 [ 167.505154][ T6289] usb usb9-port1: unable to enumerate USB device [ 167.689021][T10652] xt_l2tp: v2 sid > 0xffff: 1114112 [ 167.704938][ T5942] Bluetooth: hci4: command 0x0419 tx timeout [ 167.733786][T10660] xt_cgroup: xt_cgroup: no path or classid specified [ 167.922352][T10682] afs: Unknown parameter 'd' [ 168.035596][T10684] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.135355][T10684] nbd1: detected capacity change from 0 to 127 [ 168.151246][ T5942] block nbd1: Receive control failed (result -104) [ 168.174158][T10699] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 168.240045][T10704] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 168.240353][T10706] raw_sendmsg: syz.3.1420 forgot to set AF_INET. Fix it! [ 168.246668][T10704] __nla_validate_parse: 40 callbacks suppressed [ 168.246682][T10704] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1418'. [ 168.252976][T10704] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 168.310080][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 168.312284][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 168.316898][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 168.318879][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 168.372597][T10741] bond3: ARP target 4.0.0.0 is already present [ 168.376521][T10741] bond3: option arp_ip_target: invalid value (4) [ 168.380535][T10741] bond3 (unregistering): Released all slaves [ 168.415843][ T6289] libceph: connect (1)[b::]:6789 error -101 [ 168.417872][ T6289] libceph: mon0 (1)[b::]:6789 connect error [ 168.543726][T10816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.553749][T10816] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 168.558942][T10818] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 168.577748][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 168.579737][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 168.598052][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 168.598066][ T40] audit: type=1400 audit(168.525:866): avc: denied { write } for pid=10820 comm="syz.1.1423" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 168.610382][T10821] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1423'. [ 168.614412][ T40] audit: type=1400 audit(168.525:867): avc: denied { ioctl } for pid=10820 comm="syz.1.1423" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 168.676216][ T6289] libceph: connect (1)[b::]:6789 error -101 [ 168.678213][ T6289] libceph: mon0 (1)[b::]:6789 connect error [ 168.831189][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1426'. [ 168.834020][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1426'. [ 169.086439][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 169.088584][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 169.114379][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'. [ 169.195364][ T6289] libceph: connect (1)[b::]:6789 error -101 [ 169.197389][ T6289] libceph: mon0 (1)[b::]:6789 connect error [ 169.805558][T10892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 169.916659][T10811] ceph: No mds server is up or the cluster is laggy [ 169.916745][T10714] ceph: No mds server is up or the cluster is laggy [ 170.001242][T10922] tmpfs: Too few inodes for current use [ 170.145928][ T40] audit: type=1326 audit(170.065:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.1440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 170.155147][ T40] audit: type=1326 audit(170.075:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.1440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 170.162122][ T40] audit: type=1326 audit(170.075:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.1440" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 170.170140][ T40] audit: type=1326 audit(170.075:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.1440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 170.179019][ T40] audit: type=1326 audit(170.075:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.1440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 170.188823][ T40] audit: type=1326 audit(170.075:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.1440" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 170.197196][ T40] audit: type=1326 audit(170.075:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.1440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 170.204262][ T40] audit: type=1326 audit(170.075:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.1440" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21d9f8f6c9 code=0x7ffc0000 [ 170.205472][T10955] kvm: user requested TSC rate below hardware speed [ 170.216656][T10955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 170.493885][T10992] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1450'. [ 170.494218][T10993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1450'. [ 170.587583][T11012] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1454'. [ 170.590720][T11012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.593175][T11012] IPv6: NLM_F_CREATE should be set when creating new route [ 170.595451][T11012] IPv6: NLM_F_CREATE should be set when creating new route [ 170.599670][T11012] program syz.4.1454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.661499][T11015] tipc: Can't bind to reserved service type 2 [ 170.661964][ T6881] nci: nci_rsp_packet: unknown rsp opcode 0xb04 [ 171.031052][T11043] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 171.034087][T11044] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 171.144822][ T5942] Bluetooth: hci4: command 0x0419 tx timeout [ 171.424010][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1463'. [ 171.755717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 171.830595][T11080] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 171.833327][T11080] PKCS7: Only support pkcs7_signedData type [ 172.163581][T11093] random: crng reseeded on system resumption [ 172.268333][T11118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.300957][T11132] x_tables: duplicate underflow at hook 1 [ 172.339554][T11129] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 172.407044][T11154] netlink: 'syz.3.1487': attribute type 10 has an invalid length. [ 172.407195][T11150] No such timeout policy "syz1" [ 172.414694][T11154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.418314][T11154] .`: (slave batadv0): Enslaving as an active interface with an up link [ 172.427510][T11154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.429852][T11154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.439392][T11154] .`: (slave batadv0): Releasing backup interface [ 172.787042][T11178] kvm_intel: kvm [11177]: vcpu2, guest rIP: 0x9101 Unhandled WRMSR(0x1d9) = 0x1 [ 173.050251][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1495'. [ 173.234882][ T5942] Bluetooth: hci4: command 0x0419 tx timeout [ 173.475024][ T6289] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 173.505015][T11244] netlink: zone id is out of range [ 173.506727][T11244] netlink: zone id is out of range [ 173.508622][T11244] netlink: set zone limit has 8 unknown bytes [ 173.576313][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 173.637226][ T839] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 173.645043][ T6289] usb 6-1: Using ep0 maxpacket: 8 [ 173.651962][ T6289] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.654212][ T6289] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 173.657345][ T6289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.662945][ T6289] usb 6-1: config 0 descriptor?? [ 173.689357][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 173.689371][ T40] audit: type=1400 audit(173.605:904): avc: denied { listen } for pid=11273 comm="syz.3.1512" path=0066224E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 173.789127][ T40] audit: type=1326 audit(173.705:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.0.1515" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb34d98f6c9 code=0x0 [ 173.798890][ T839] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.801556][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.803822][ T839] usb 9-1: Product: syz [ 173.805574][ T839] usb 9-1: Manufacturer: syz [ 173.807903][ T839] usb 9-1: SerialNumber: syz [ 173.812622][ T839] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.820085][ T40] audit: type=1400 audit(173.735:906): avc: denied { firmware_load } for pid=29 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 173.831558][ T29] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.076955][ T6289] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 174.241105][ T6289] usb 9-1: USB disconnect, device number 6 [ 174.285271][T11207] netlink: 'syz.1.1497': attribute type 6 has an invalid length. [ 174.287859][T11207] netlink: 'syz.1.1497': attribute type 5 has an invalid length. [ 174.292006][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 174.295655][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 174.302662][ T6003] usb 6-1: USB disconnect, device number 25 [ 174.992596][T11387] netlink: zone id is out of range [ 174.994889][T11387] netlink: zone id is out of range [ 174.997924][T11387] netlink: set zone limit has 8 unknown bytes [ 175.064837][ T29] usb 9-1: Service connection timeout for: 256 [ 175.066829][ T29] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 175.069521][ T29] ath9k_htc: Failed to initialize the device [ 175.071629][ T6289] usb 9-1: ath9k_htc: USB layer deinitialized [ 175.394946][ T6289] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 175.493634][T11399] netlink: 'syz.3.1532': attribute type 2 has an invalid length. [ 175.496560][T11399] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 175.499187][T11398] netlink: 'syz.3.1532': attribute type 2 has an invalid length. [ 175.501692][T11398] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 175.555103][ T6289] usb 9-1: Using ep0 maxpacket: 32 [ 175.559350][ T6289] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 175.560670][ T40] audit: type=1400 audit(175.475:907): avc: denied { shutdown } for pid=11402 comm="syz.3.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 175.562716][ T6289] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 175.570770][ T40] audit: type=1800 audit(175.475:908): pid=11403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1534" name="bus" dev="tmpfs" ino=2199 res=0 errno=0 [ 175.575135][ T6289] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 175.588150][ T6289] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 175.594093][ T6289] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.603511][ T6289] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 175.607732][ T6289] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 175.611560][ T6289] usb 9-1: Product: syz [ 175.613333][ T6289] usb 9-1: Manufacturer: syz [ 175.615449][ T6289] usb 9-1: SerialNumber: syz [ 175.620053][ T6289] usb 9-1: config 0 descriptor?? [ 175.624413][ T6289] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 175.631273][ T6289] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 175.778641][ T40] audit: type=1400 audit(175.695:909): avc: denied { setopt } for pid=11425 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.786358][ T40] audit: type=1400 audit(175.695:910): avc: denied { ioctl } for pid=11425 comm="syz.3.1540" path="socket:[34698]" dev="sockfs" ino=34698 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.836261][ T6002] usb 9-1: USB disconnect, device number 7 [ 175.841003][ T6002] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 175.901541][T11442] netlink: zone id is out of range [ 175.903367][T11442] netlink: zone id is out of range [ 175.905898][T11442] netlink: set zone limit has 8 unknown bytes [ 176.009985][T11446] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1546'. [ 176.127703][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 176.140790][ T40] audit: type=1400 audit(176.055:911): avc: denied { connect } for pid=11453 comm="syz.1.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.161747][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.165229][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.168077][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.171550][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.175089][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.241546][T11486] macsec1: entered promiscuous mode [ 176.271164][T11523] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1551'. [ 176.311237][T11456] chnl_net:caif_netlink_parms(): no params data found [ 176.335162][T11573] kvm: user requested TSC rate below hardware speed [ 176.341067][T11573] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 176.416663][T11749] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1554'. [ 176.437365][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.439670][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.442046][T11456] bridge_slave_0: entered allmulticast mode [ 176.444890][T11456] bridge_slave_0: entered promiscuous mode [ 176.457288][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.459559][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.460639][T11783] rdma_op ffff888056ed79f0 conn xmit_rdma 0000000000000000 [ 176.461889][T11456] bridge_slave_1: entered allmulticast mode [ 176.467877][T11456] bridge_slave_1: entered promiscuous mode [ 176.502498][T11848] qrtr: Invalid version 0 [ 176.506490][T11749] geneve2: entered promiscuous mode [ 176.511713][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.514542][ T6879] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.519540][ T6879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.525503][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.529044][ T6879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.531859][ T6879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.559067][T11939] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 176.589533][T11456] team0: Port device team_slave_0 added [ 176.593269][T11456] team0: Port device team_slave_1 added [ 176.661362][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.663755][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.664348][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 176.674096][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.680656][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.683015][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.691499][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.699523][T12157] hsr_slave_0: left promiscuous mode [ 176.717876][T12175] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 176.726840][T12175] CIFS mount error: No usable UNC path provided in device string! [ 176.726840][T12175] [ 176.730234][T12175] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 176.783642][T11456] hsr_slave_0: entered promiscuous mode [ 176.786685][T11456] hsr_slave_1: entered promiscuous mode [ 176.789005][T11456] debugfs: 'hsr0' already exists in 'hsr' [ 176.790912][T11456] Cannot create hsr debugfs directory [ 176.793186][ T5942] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 177.038279][T11456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.049005][T11456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.059181][T11456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.065773][T11456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.074603][T12547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1568'. [ 177.077851][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 177.118768][T11456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.127816][T11456] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.133894][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.136240][ T6882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.140917][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.143137][ T6882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.145119][T12567] overlay: Unknown parameter 'fsname' [ 177.331005][T11456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.453090][T12612] syz_tun: entered allmulticast mode [ 177.472831][T12612] syz_tun (unregistering): left allmulticast mode [ 177.540782][T11456] veth0_vlan: entered promiscuous mode [ 177.545647][T11456] veth1_vlan: entered promiscuous mode [ 177.562591][T11456] veth0_macvtap: entered promiscuous mode [ 177.566855][T11456] veth1_macvtap: entered promiscuous mode [ 177.576566][T11456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.583588][T11456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.599544][ T6881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.608487][ T6881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.612438][ T6881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.615249][ T6881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.675907][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.679302][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.693001][ T6879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.696358][ T6879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.973412][T12696] net_ratelimit: 9 callbacks suppressed [ 177.973427][T12696] netlink: zone id is out of range [ 177.977823][T12696] netlink: zone id is out of range [ 177.980647][T12696] netlink: set zone limit has 8 unknown bytes [ 178.002072][ T6002] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 178.027126][ T40] audit: type=1400 audit(177.907:912): avc: denied { create } for pid=12698 comm="syz.4.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 178.173016][ T54] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 178.186806][ T6002] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.189659][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.192098][ T6002] usb 6-1: Product: syz [ 178.193437][ T6002] usb 6-1: Manufacturer: syz [ 178.195206][ T6002] usb 6-1: SerialNumber: syz [ 178.203483][ T6002] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 178.217490][ T56] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 178.322857][ T5942] Bluetooth: hci0: command tx timeout [ 178.333551][ T54] usb 10-1: Invalid ep0 maxpacket: 64 [ 178.483008][ T54] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 178.643408][ T54] usb 10-1: Invalid ep0 maxpacket: 64 [ 178.645449][ T54] usb usb10-port1: attempt power cycle [ 178.862717][T12677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.865805][T12677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.009460][ T54] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 179.030800][ T54] usb 10-1: Invalid ep0 maxpacket: 64 [ 179.178529][ T54] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 179.210679][ T54] usb 10-1: Invalid ep0 maxpacket: 64 [ 179.212734][ T54] usb usb10-port1: unable to enumerate USB device [ 179.349226][ T56] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 179.351541][ T56] ath9k_htc: Failed to initialize the device [ 179.376981][ T56] usb 6-1: ath9k_htc: USB layer deinitialized [ 180.055131][T12737] __nla_validate_parse: 2 callbacks suppressed [ 180.055146][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1586'. [ 180.256278][T12752] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1590'. [ 180.272583][ T40] audit: type=1400 audit(180.011:913): avc: denied { associate } for pid=12753 comm="syz.3.1590" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 180.279121][ T40] audit: type=1400 audit(180.011:914): avc: denied { audit_write } for pid=12751 comm="syz.3.1590" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 180.386281][ T54] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 180.546678][ T5942] Bluetooth: hci0: command tx timeout [ 180.560126][ T54] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 180.563642][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.567811][ T54] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 180.571448][ T54] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 180.573960][ T54] usb 9-1: Manufacturer: syz [ 180.576641][ T54] usb 9-1: config 0 descriptor?? [ 180.642921][ T54] rc_core: IR keymap rc-hauppauge not found [ 180.644886][ T54] Registered IR keymap rc-empty [ 180.649015][ T54] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 180.653171][ T54] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input19 [ 180.799304][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.803011][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.807379][ T838] usb 9-1: USB disconnect, device number 8 [ 181.157677][T12796] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 181.207120][ T56] usb 6-1: USB disconnect, device number 26 [ 181.286885][T12816] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1599' sets config #1 [ 181.290980][T12816] overlay: Bad value for 'workdir' [ 181.324987][T12821] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1601'. [ 181.366392][ T40] audit: type=1400 audit(181.031:915): avc: denied { read write } for pid=11456 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.376579][ T40] audit: type=1400 audit(181.031:916): avc: denied { open } for pid=11456 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.389872][ T40] audit: type=1400 audit(181.031:917): avc: denied { ioctl } for pid=11456 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.466433][ T40] audit: type=1800 audit(181.115:918): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1610" name="nullb0" dev="tmpfs" ino=2256 res=0 errno=0 [ 181.641304][T12872] netlink: 'syz.5.1612': attribute type 39 has an invalid length. [ 181.643009][T12874] ------------[ cut here ]------------ [ 181.645875][T12874] WARNING: CPU: 1 PID: 12874 at mm/page_alloc.c:5159 __alloc_frozen_pages_noprof+0x309/0x2470 [ 181.649365][T12874] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 181.651026][T12874] CPU: 1 UID: 0 PID: 12874 Comm: syz.4.1615 Not tainted syzkaller #0 PREEMPT(full) [ 181.655982][T12874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.660263][T12874] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 181.662391][T12874] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 11 61 4b 09 83 fe 0a 0f 86 0c fe ff ff 80 3d f6 6d 52 0e 00 75 0b c6 05 ed 6d 52 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 181.669603][T12874] RSP: 0018:ffffc900031af7b8 EFLAGS: 00010246 [ 181.671686][T12874] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 181.674443][T12874] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 181.676955][T12874] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 181.679760][T12874] R10: 0000000000000016 R11: 0000000000000001 R12: 0000000000040cc0 [ 181.682534][T12874] R13: 1ffff92000635f0d R14: ffffffff9ab2e4a4 R15: 0000000000000016 [ 181.685010][T12874] FS: 00007fd6c8c566c0(0000) GS:ffff8880d6b08000(0000) knlGS:0000000000000000 [ 181.687869][T12874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.689948][T12874] CR2: 000020000000d000 CR3: 000000003aa6f000 CR4: 0000000000352ef0 [ 181.692662][T12874] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.695127][T12874] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 181.697581][T12874] Call Trace: [ 181.698632][T12874] [ 181.699575][T12874] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.701639][T12874] ? is_bpf_text_address+0x94/0x1a0 [ 181.703275][T12874] ? kernel_text_address+0x8d/0x100 [ 181.704914][T12874] ? widen_string+0xdc/0x2d0 [ 181.706466][T12874] ? __kernel_text_address+0xd/0x40 [ 181.708092][T12874] ? unwind_get_return_address+0x59/0xa0 [ 181.709866][T12874] ? arch_stack_walk+0xa6/0x100 [ 181.711467][T12874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 181.713577][T12874] ? stack_depot_save_flags+0x29/0x9c0 [ 181.715861][T12874] ? __lock_acquire+0xb8a/0x1c90 [ 181.717434][T12874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.719293][T12874] ? policy_nodemask+0xea/0x4e0 [ 181.720851][T12874] alloc_pages_mpol+0x1fb/0x550 [ 181.722419][T12874] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 181.724197][T12874] ___kmalloc_large_node+0xed/0x160 [ 181.725892][T12874] __kmalloc_large_node_noprof+0x1c/0x70 [ 181.727667][T12874] ? avc_has_extended_perms+0x47c/0x1090 [ 181.729440][T12874] __kmalloc_noprof.cold+0xc/0x62 [ 181.731025][T12874] ? drm_syncobj_array_find+0x35/0x3c0 [ 181.732746][T12874] ? drm_syncobj_array_find+0x35/0x3c0 [ 181.734535][T12874] ? kasan_quarantine_put+0x10a/0x240 [ 181.736188][T12874] drm_syncobj_array_find+0x35/0x3c0 [ 181.737830][T12874] drm_syncobj_timeline_wait_ioctl+0x238/0x390 [ 181.739756][T12874] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 181.741851][T12874] ? find_held_lock+0x2b/0x80 [ 181.743337][T12874] ? drm_dev_exit+0x41/0x60 [ 181.744889][T12874] drm_ioctl_kernel+0x1f4/0x3e0 [ 181.746487][T12874] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 181.748570][T12874] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 181.750256][T12874] drm_ioctl+0x5c9/0xc30 [ 181.751602][T12874] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 181.753687][T12874] ? __pfx_drm_ioctl+0x10/0x10 [ 181.755277][T12874] ? selinux_file_ioctl+0x180/0x270 [ 181.756915][T12874] ? selinux_file_ioctl+0xb4/0x270 [ 181.758524][T12874] ? __pfx_drm_ioctl+0x10/0x10 [ 181.760027][T12874] __x64_sys_ioctl+0x18e/0x210 [ 181.761517][T12874] do_syscall_64+0xcd/0xfa0 [ 181.762951][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.764812][T12874] RIP: 0033:0x7fd6c7d8f6c9 [ 181.766412][T12874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.772346][T12874] RSP: 002b:00007fd6c8c56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.774929][T12874] RAX: ffffffffffffffda RBX: 00007fd6c7fe5fa0 RCX: 00007fd6c7d8f6c9 [ 181.777416][T12874] RDX: 00002000000000c0 RSI: 00000000c03064ca RDI: 0000000000000004 [ 181.779873][T12874] RBP: 00007fd6c7e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.782357][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.784809][T12874] R13: 00007fd6c7fe6038 R14: 00007fd6c7fe5fa0 R15: 00007ffe760e36e8 [ 181.787383][T12874] [ 181.788378][T12874] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.790636][T12874] CPU: 1 UID: 0 PID: 12874 Comm: syz.4.1615 Not tainted syzkaller #0 PREEMPT(full) [ 181.793534][T12874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.796851][T12874] Call Trace: [ 181.797929][T12874] [ 181.798869][T12874] dump_stack_lvl+0x3d/0x1f0 [ 181.800347][T12874] vpanic+0x640/0x6f0 [ 181.801620][T12874] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 181.803523][T12874] panic+0xca/0xd0 [ 181.804728][T12874] ? __pfx_panic+0x10/0x10 [ 181.806202][T12874] ? check_panic_on_warn+0x1f/0xb0 [ 181.807803][T12874] check_panic_on_warn+0xab/0xb0 [ 181.809364][T12874] __warn+0xf6/0x3c0 [ 181.810600][T12874] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 181.812513][T12874] report_bug+0x3c3/0x580 [ 181.813873][T12874] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 181.815770][T12874] handle_bug+0x184/0x210 [ 181.817178][T12874] exc_invalid_op+0x17/0x50 [ 181.818599][T12874] asm_exc_invalid_op+0x1a/0x20 [ 181.820122][T12874] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 181.822226][T12874] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 11 61 4b 09 83 fe 0a 0f 86 0c fe ff ff 80 3d f6 6d 52 0e 00 75 0b c6 05 ed 6d 52 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 181.828108][T12874] RSP: 0018:ffffc900031af7b8 EFLAGS: 00010246 [ 181.830001][T12874] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 181.832454][T12874] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 181.834892][T12874] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 181.837338][T12874] R10: 0000000000000016 R11: 0000000000000001 R12: 0000000000040cc0 [ 181.839762][T12874] R13: 1ffff92000635f0d R14: ffffffff9ab2e4a4 R15: 0000000000000016 [ 181.842169][T12874] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.844085][T12874] ? is_bpf_text_address+0x94/0x1a0 [ 181.845772][T12874] ? kernel_text_address+0x8d/0x100 [ 181.847398][T12874] ? widen_string+0xdc/0x2d0 [ 181.848858][T12874] ? __kernel_text_address+0xd/0x40 [ 181.850477][T12874] ? unwind_get_return_address+0x59/0xa0 [ 181.852258][T12874] ? arch_stack_walk+0xa6/0x100 [ 181.853782][T12874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 181.855719][T12874] ? stack_depot_save_flags+0x29/0x9c0 [ 181.857378][T12874] ? __lock_acquire+0xb8a/0x1c90 [ 181.858885][T12874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.860709][T12874] ? policy_nodemask+0xea/0x4e0 [ 181.862233][T12874] alloc_pages_mpol+0x1fb/0x550 [ 181.863755][T12874] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 181.865465][T12874] ___kmalloc_large_node+0xed/0x160 [ 181.867116][T12874] __kmalloc_large_node_noprof+0x1c/0x70 [ 181.868870][T12874] ? avc_has_extended_perms+0x47c/0x1090 [ 181.870626][T12874] __kmalloc_noprof.cold+0xc/0x62 [ 181.872229][T12874] ? drm_syncobj_array_find+0x35/0x3c0 [ 181.873928][T12874] ? drm_syncobj_array_find+0x35/0x3c0 [ 181.875627][T12874] ? kasan_quarantine_put+0x10a/0x240 [ 181.877310][T12874] drm_syncobj_array_find+0x35/0x3c0 [ 181.878959][T12874] drm_syncobj_timeline_wait_ioctl+0x238/0x390 [ 181.880914][T12874] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 181.882982][T12874] ? find_held_lock+0x2b/0x80 [ 181.884474][T12874] ? drm_dev_exit+0x41/0x60 [ 181.885950][T12874] drm_ioctl_kernel+0x1f4/0x3e0 [ 181.887478][T12874] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 181.889552][T12874] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 181.891234][T12874] drm_ioctl+0x5c9/0xc30 [ 181.892573][T12874] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 181.894634][T12874] ? __pfx_drm_ioctl+0x10/0x10 [ 181.896136][T12874] ? selinux_file_ioctl+0x180/0x270 [ 181.897776][T12874] ? selinux_file_ioctl+0xb4/0x270 [ 181.899376][T12874] ? __pfx_drm_ioctl+0x10/0x10 [ 181.900883][T12874] __x64_sys_ioctl+0x18e/0x210 [ 181.902389][T12874] do_syscall_64+0xcd/0xfa0 [ 181.903820][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.905718][T12874] RIP: 0033:0x7fd6c7d8f6c9 [ 181.907115][T12874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.913040][T12874] RSP: 002b:00007fd6c8c56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.915619][T12874] RAX: ffffffffffffffda RBX: 00007fd6c7fe5fa0 RCX: 00007fd6c7d8f6c9 [ 181.918040][T12874] RDX: 00002000000000c0 RSI: 00000000c03064ca RDI: 0000000000000004 [ 181.920414][T12874] RBP: 00007fd6c7e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.922804][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.925232][T12874] R13: 00007fd6c7fe6038 R14: 00007fd6c7fe5fa0 R15: 00007ffe760e36e8 [ 181.927722][T12874] [ 181.929390][T12874] Kernel Offset: disabled [ 181.930740][T12874] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:49:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a740320 RCX=ffffffff81b100e1 RDX=ffff8880286ea480 RSI=ffffffff81b100bb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000359f4c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4e8065 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81b100bd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f30b4b17d60 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b3fb76c3 00007f30b3fb76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9b28b560 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574a187ae 0000555574a18630 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574a29824 0000555574a29110 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574a16da8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000700080016 a0030e0800169803 2008001690030fff ffffffffff041680 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010b800418838393 9408000100000208 0606011796000800 0bc8030608000bb8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030208000bb00306 10000ba0031e1000 0ad0030a10000ac0 030c10000ab00312 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000aa0030c1000 0a90030a10000a80 030a80040b900300 0000040806098003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0980040b800302a8 10001480040a1000 060102a200020007 00080016a0030e08 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85296275 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc900031af120 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000055 R14=ffffffff9add8740 R15=ffffffff85296210 RIP=ffffffff8529629f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd6c8c566c0 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000d000 CR3=000000003aa6f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c7e13050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c7e1305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c7e13057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c7e1306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c7e130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c7e131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c7fb74a8 00007fd6c7fb74a0 00007fd6c7fb7498 00007fd6c7fb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c8b1d100 00007fd6c7fb7460 00007fd6c7fb7478 00007fd6c7fb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6c7fb74b8 00007fd6c7fb74b0 00007fd6c7fb74a8 00007fd6c7fb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff910f5cee RBX=ffffffff908e9104 RCX=dffffc0000000000 RDX=ffffffff908e9104 RSI=0000000000000021 RDI=ffffffff908e90c4 RBP=ffffffff908e90c4 RSP=ffffc90007a0f548 R8 =ffffffff910f5dba R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff908e9148 R13=ffffffff8100012f R14=ffffffff908e90c4 R15=ffffffff908e90c4 RIP=ffffffff816c0b88 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff383f47e9c CR3=000000000dfe0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3842b78f0 00007ff3842b7310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff384278050 00007ff3842770c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff384278580 00007ff384277b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff383f7a0c0 00007ff384278ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3842b6da0 00007ff3842775f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff383f7a6b0 00007ff383f7a0c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff384278ab0 00007ff384278580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff384277b20 00007ff384278050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000158505 RBX=0000000000000003 RCX=ffffffff8b6082a9 RDX=0000000000000000 RSI=ffffffff8da2b0a2 RDI=ffffffff8bf07040 RBP=ffffed1003bd5000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801dea8000 R14=ffffffff908203d0 R15=0000000000000000 RIP=ffffffff8b606d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6c8c13f98 CR3=000000002e22c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=995ab859230cae6f 39e77de81dbac65a 995ab859230cae6f 39e77de81dbac65a 995ab859230cae6f 39e77de81dbac65a 995ab859230cae6f 39e77de81dbac65a ZMM18=5e376a4faeb5e9fa be893f1e5d4a1546 5e376a4faeb5e9fa be893f1e5d4a1546 5e376a4faeb5e9fa be893f1e5d4a1546 5e376a4faeb5e9fa be893f1e5d4a1546 ZMM19=440a000000000000 0000000000000005 440a000000000000 0000000000000004 440a000000000000 0000000000000003 440a000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03010a030000002c 0300000040020008 00000000307a7973 0001000900000002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5ff1a5e00000000 01010a0000000028 0a00000000000000 0000000000010010 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001401de080f 80030f8004088003 088004068ba00300 0800068b90030fff ZMM24=5d4a15465d4a1546 5d4a15465d4a1546 5d4a15465d4a1546 5d4a15465d4a1546 5d4a15465d4a1546 5d4a15465d4a1546 5d4a15465d4a1546 5d4a15465d4a1546 ZMM25=be893f1ebe893f1e be893f1ebe893f1e be893f1ebe893f1e be893f1ebe893f1e be893f1ebe893f1e be893f1ebe893f1e be893f1ebe893f1e be893f1ebe893f1e ZMM26=aeb5e9faaeb5e9fa aeb5e9faaeb5e9fa aeb5e9faaeb5e9fa aeb5e9faaeb5e9fa aeb5e9faaeb5e9fa aeb5e9faaeb5e9fa aeb5e9faaeb5e9fa aeb5e9faaeb5e9fa ZMM27=5e376a4f5e376a4f 5e376a4f5e376a4f 5e376a4f5e376a4f 5e376a4f5e376a4f 5e376a4f5e376a4f 5e376a4f5e376a4f 5e376a4f5e376a4f 5e376a4f5e376a4f ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=420a0000420a0000 420a0000420a0000 420a0000420a0000 420a0000420a0000 420a0000420a0000 420a0000420a0000 420a0000420a0000 420a0000420a0000