last executing test programs: 14.773406611s ago: executing program 2 (id=1599): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="cba18bd0862081d01f20503aa747", @ANYRES16=0x0, @ANYBLOB="000000000002000000000100000008000100", @ANYRES32=r0, @ANYBLOB="3c000280380001"], 0x58}, 0x1, 0xf000, 0x0, 0x810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa08, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001200)={0x2, {0xc, 0xa03, 0x100}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 13.566805268s ago: executing program 0 (id=1600): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) socket$inet(0x2, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x100}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000040c017d8000000000000000008000000"], 0x14}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5d80, "300b7832ceefd131b8e6498c250000ad91e74392c700bd18cf501922de974a27"}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f00000021c0)={@null, 0x1000000f, 'vlan0\x00'}) syz_open_dev$dri(0x0, 0x9, 0x7db97b316e0e57cd) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000180)=0x800) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x440ec63, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "e538cf63e2f39e40a721b1e84a0dc14c7eb42cee76729c91c8595fbdf627e447"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "19f1a301000000000080001cca535b8671bd44f6f600000000000000000400", 0x31303553}) 12.29635106s ago: executing program 0 (id=1605): creat(0x0, 0x83) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x280a}]}, 0x24}}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000340)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000004500)={0x0, 0x20000, 0xff, 0x0, 0x6}) 11.999059956s ago: executing program 3 (id=1607): r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x10000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) timerfd_settime(0xffffffffffffffff, 0x5, &(0x7f0000000340), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) 10.670978762s ago: executing program 3 (id=1608): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r1, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xffffffffffffffff, &(0x7f0000001180)=""/4102, &(0x7f00000003c0)=0x1006) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x101ff, 0x1, 0x2000, 0x2000, &(0x7f0000feb000/0x2000)=nil}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) write$sndseq(r2, 0x0, 0x0) read$snapshot(r2, 0x0, 0xffffffbf) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r3, 0x29, 0x16, 0x0, &(0x7f0000000040)) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000400)="0f01c33626a3fff2670ffeb45e00000080baf80c66b8a683f28a66efbafc0cb80000ef66660f388154ef0f060f20dc66b91d03000066b80500000066ba000000000f30650f01d1f4", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff03f}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000740)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffffffffffd, 0x5, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) 9.458269324s ago: executing program 3 (id=1609): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x10, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r4, &(0x7f0000000000), 0x100000}]) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x0, 0x0, 0x32) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7}, 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) 9.314320453s ago: executing program 2 (id=1610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) memfd_create(&(0x7f0000000480)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xaa\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x8c\xef\xbf\xb7\xb1*\x91R\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d`+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x82Xa2fo\x7f\x92G\x0e.\xce\x01\x00\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6/`\xab>\xcf\x7f\b\x94 2.{\xc1\xbe\x9bh~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x92\x03K\xf4@\x84\x1d\xc8&^Q\xcf&\xf2\x9f\xf4\x83\xac]S\xce\xa55\x98\xa5\x97\xb3\xa6\r:L\x10\xb3;\x18G\r\xd8\xee4\xa3\xacI\xfc\xf6a\xde\rL\xcb\xbbE\xfe&&xL\xc49\x02\xe8A\x91\xfd\x15\xaeY:^E^>a\xd8\xdcJu\x16B!\x0et\xf0c\xc3W\x9c\xb8\xc2c\xbc\x99\xcb\x91xA2^\xe3\xfeq\xac2X\xd1\x1cG\x1b\xe0\x8d\x1a\x11\xddX\x16H\xae\x00#\x92\nW9C\v\xbf\xe7Q\xe7\x06\x81v\x15Y\x1bY\x0f+b\xb5\xa63\xc4\x1bx\xfd< \a\x01\x00\x00\x00^f\x11]&\"\xd5\x84/\xab\xac\xeaB\xa2V3\xdd.\x8c\xe0\xb8\xf8\x8c\xf4\r\t\xcd9\xacNW:\xcauJ\x1b\xf3\xefj\xac\xf3\a\xdc\x9a\x05\x14\xa6\xc1\xe9\xe1\xab\xb7\xe0\x95\xa0U\xb8\xc1\x17\x81\x1ad\xbf\x90\xb0\x93\xf7Bsw\xb3\xa1\x1e\xb5\xc5gw\x9cpk4\'en\xc28\xe5!\x00\x00\x00&\x82\xe9:;\xa9(xf\x9b\xd3a\x15\xb4W\"Y\x8f5Q\x13R\x84\x83H\xb2n\xbc\\\x11\xd4\xb4}O*\xab6\xf5Ym\xe3\xdf\x17\xcc\xb0o9\xff\xe7G\x0e\x1d\xfcH\xe9J\xeefu\x04\xfb\x9b\xc1\xfao\xaf;\xb1c\x92mI\xf8\x9cq7N%\xcc\xab7\xfdI\xe7y\xcd\x1eT\xe0]\xa5\xc2l\x1a\x81\x87p\xf3\xcfc]\xe7)\x9fp_O~\x93]\x9bF\x16\x02m\xa0\xf9\xae_\xbf\xd2\xc9\xc8\xa6\xde\x17MTB\x9d\x99\xfa\xaa\x92\xd0\xbc\xd2\xcae\xf4\xe4\\1\xe0v\xcc\x12f\xd5\xbf\xe9\x9d\x9cI*\x9aS\xeba9\xb7k\xe36\x14\x1a\xb8<\xf9ZV\xe7\xe0\xe5\x82\xe6\xc2\x17\xb4k7\x9d\x8dy\x0f\xa9\x19q\xcd\x9c\x93\xfe>\x92@gg\xf1\x05\xcb\xab\xab\x88T/\xd3\bHK\x88\x99K\xaa\xect\xcf\xd4\xbb9\x94d\xc5\xaf\xbe\xde\x83]k\xfa\x0f\x8cC9#r\xaf\x80+c_\xaa\xbb\xcd\xa0A\xebK}!\x8a\xb6\x11\x0e\xf1\x03\x01\x05\x16!L\x8b\x98\x1cW\xe8\xdd\xc5T\xfb\x1b\x0f\x83\x01_\xaaT\xa0\a;\xc2%\xae;>\x00'/1391, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff51, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000), 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x3, 0x4, 0x103, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000200)={'syz0\x00', {0x6, 0x0, 0x0, 0x5e6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x24b2, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0xd1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3], [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc], [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x86, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) close_range(r5, 0xffffffffffffffff, 0x0) 8.009201111s ago: executing program 2 (id=1611): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x10c045f55bed3d0e, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="5aee41dea43e63a3f75e64fb7ff2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, 0x0}) r3 = openat$snapshot(0xffffff9c, &(0x7f0000002080), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x1670c0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3302) 7.948588687s ago: executing program 3 (id=1612): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x28, &(0x7f00000000c0)={&(0x7f0000000380)="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", 0x18}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000001f80)={0x29, 0x4, 0x0, {0x1, 0xffffffff, 0x1, 0x0, [0x0]}}, 0x29) open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) socket$key(0xf, 0x3, 0x2) 6.103699537s ago: executing program 0 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r1 = gettid() r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000480), 0x5005) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000780)=""/117, 0x75, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r5, @ANYBLOB=',wfdno=']) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000440)={r1}) sched_setscheduler(0x0, 0x2, 0x0) 5.999127384s ago: executing program 1 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x9, 0x2, 0xfc0, 0xc00, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xf, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="0303000000010000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x894f, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=@base={0x6, 0x4, 0x5, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000e1250000008611000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000001f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$rtc(&(0x7f0000000080), 0x4, 0x2000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) getdents(r9, &(0x7f0000000fc0)=""/4096, 0x1000) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.889223281s ago: executing program 2 (id=1615): timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8802, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000300)=0x5) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @remote, 0xffbffffc}, 0x1c) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = getpid() getpgrp(r2) syz_clone3(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) inotify_init1(0x0) 5.342443637s ago: executing program 1 (id=1616): r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x10000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) timerfd_settime(0xffffffffffffffff, 0x5, &(0x7f0000000340), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) 5.342015754s ago: executing program 3 (id=1617): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, 0xfffffffffffffffe, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x68040, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b65, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000280)={{0x6, 0x6, 0x2, 0x2}, 0x1, [0xfffffffffffffffb, 0x1, 0x5, 0x6, 0x3, 0x46053c58, 0x0, 0x3da01594, 0x20a3, 0xffffffff, 0x6, 0x7, 0x3, 0x3, 0x9, 0x0, 0x7fffffff, 0x800, 0x9, 0x9, 0x91, 0x7f, 0x1, 0x3, 0xfffffffffffffffe, 0x9, 0x8, 0x400, 0x9, 0x10000, 0x2, 0xe84, 0x7, 0x0, 0x9, 0x5e, 0xdad, 0x33, 0x2, 0x2, 0x1, 0x0, 0x80000001, 0x4, 0x6, 0xfffffffffffffff7, 0x0, 0xe, 0x8000, 0xfffffffffffffffe, 0x10, 0x4, 0x405, 0x8, 0x8, 0x4, 0x6, 0x1e, 0x6, 0x800, 0x8, 0xffffffffffffffff, 0x2, 0x7fffffffffffffff, 0x5, 0x58e0, 0xc, 0x3d2, 0x0, 0x100, 0x7, 0x6, 0x4, 0x7, 0x6a, 0x100000001, 0x3, 0x5, 0x10001, 0x2, 0x4, 0x1, 0xffffffffffffffff, 0x2, 0x101, 0x100, 0x430, 0x3, 0xffffffffffffff45, 0x1f9, 0x70826f92, 0x8b93, 0x4a, 0xfffffffffffffff8, 0x0, 0x4, 0x9, 0x3ff, 0xcfff, 0x0, 0xb, 0x3, 0x80000000, 0x1771, 0x3, 0x7, 0x5, 0x4, 0x6ea, 0x6, 0x7fffffff, 0x3, 0xf, 0x8, 0xd, 0x6, 0xd, 0x4, 0x800, 0xffffffffffffffff, 0x1000000000, 0x2, 0xff, 0x7, 0xe18a, 0x4, 0x2, 0xffff]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) 4.404586354s ago: executing program 0 (id=1618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x300, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000bc0)=@newtaction={0x148, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x134, 0x1, [@m_bpf={0x130, 0x1, 0x0, 0x0, {{0xffffffffffffffc7}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x45, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x7ff}, {0x800, 0x2, 0x7}, {0x6}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0xba, 0x6, "099b33dec06a8f8ac63a61c6bceec8799da3b2cfdf91add489b156ddee84d06ab5b897d447afff9a359b418fd30afd367c8083595ed4ab5b36e9da78af9334317d264b5607362298cdcdd304a20d5dfd051bdeff325c00ebbec8e443043c79ccc9e62a5fee2291147f1721317ec3262333d6994eb4305403ae857fbca0d0c327bba29d6abef409086609ff74de591d4ee27f7ad1819a6e80ce0a8fa4100045bcc1a7138f85f310c11592b141ac47f78cd5d06a7eddd8"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x148}}, 0x0) 4.069674798s ago: executing program 2 (id=1619): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) init_module(0x0, 0x3f00, 0x0) r1 = socket(0x0, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000000129bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="1000000000000014000300627253db05002700"/42], 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x20000800) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0x9, 0x2) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.198845157s ago: executing program 1 (id=1620): r0 = syz_io_uring_setup(0x543c, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000a00), 0x7737573d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x0, 0x0, @stepwise={0x3, 0x0, 0x0, 0x0, 0xffff0001, 0x4}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={0x0}, 0x10) io_uring_enter(r0, 0x0, 0x10a5, 0x3, &(0x7f0000000040), 0x8) io_uring_enter(r0, 0x81e, 0x0, 0x0, 0x0, 0x0) 3.171534241s ago: executing program 0 (id=1621): syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0xffffffffffffff7c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xd}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000200)) lseek(r4, 0x8001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000300009000000000000000000020000000c0001"], 0x28}}, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000300)={0x51ee35a2, 0x5, 0x2, 0x0, 0x0, [{{r5}, 0x2}, {{r0}, 0x7ff}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0xff) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r7, &(0x7f0000000280)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000240)=""/23, 0x17}], 0x3, 0x9, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000002c0)='u', 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000440)="f8", 0x1}, {&(0x7f0000000000)="ef0f041885", 0x5}], 0x3}, 0x0) recvmsg(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r6, 0x0, 0x8000002b) setresuid(0xee01, 0xffffffffffffffff, 0xee01) 2.42134576s ago: executing program 2 (id=1622): creat(0x0, 0x83) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x280a}]}, 0x24}}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000340)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000004500)={0x0, 0x20000, 0xff, 0x0, 0x6}) 2.42093335s ago: executing program 3 (id=1623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0], 0xc4}}, 0x0) gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x1d, 0x2, @thr={&(0x7f0000000480)="2391f26fd56a100c14777beea2baded9798c9c76465046c5bf2b61ee6861e44b770b173f6e64471879c4778e9bf66a35256f43866cfb1910c516ce14638a5eb8ed9cfda682930b8aebd9729cf8f35ce602c69d7cad", &(0x7f0000000200)}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d9010203010902"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r2, 0x5) flock(0xffffffffffffffff, 0x2) dup3(r1, r2, 0x80000) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r3, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000540)={{0x8, 0x9}, 0x100, './file0\x00'}) recvmmsg(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x1}}], 0x1, 0xfa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) dup2(r5, r6) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f0000000440)) 2.364234199s ago: executing program 0 (id=1624): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet6(0xa, 0xa, 0x4f) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x20000005) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x102}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) msync(&(0x7f00004a4000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4008040) r5 = socket$xdp(0x2c, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.231629512s ago: executing program 1 (id=1625): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x400c855) prlimit64(r4, 0xd, &(0x7f0000000340)={0x1, 0x8b}, &(0x7f0000000300)) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 1.069199035s ago: executing program 1 (id=1626): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r1 = fanotify_init(0x200, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_trace', 0x40801, 0x0) r2 = dup(r0) socket(0x1e, 0xa, 0x3e03) fanotify_mark(r1, 0x1, 0x40001056, r2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ftruncate(r0, 0x5) 0s ago: executing program 1 (id=1627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x130, 0x4c, 0x1a, 0x130, 0x2d, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r2) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x2882012, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB='7wfdno9', @ANYBLOB="1b1d57f83e7f76d9ec84a3e52c578ce3c1a1f7f060d6c7be76cce0e6fce9c23107471835c705ac4f3babdb0c39ca25421eb46fb22be4a0d9ba2e7af7af675d228ad7431912ac04f0a3c9ee25dd7aef219ec7162dac79df960af3f22043409dbe2d469ba1f90c9dc8b0f2ea671af6a0e5871847312805b0ef1d37e38a2a28306f76f13e1671fe085015f61f14d9ce9d8215f2e79084d4fc2c7345f5a5d41739b58a789cb9f7a03693d47fe50801c1464a68e95f7215b8af642379db2a0595775cda7b06860c"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x20, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffde2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x80, 0x20, 0x8, 0x8, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x3, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1b}, {[@cipso={0x86, 0x34, 0x3, [{0x5, 0xc, "fa9a2a0fad4c3d2da38c"}, {0x1, 0x3, "c2"}, {0x0, 0x10, "0d04085b53e2d258c96e05a2ac47"}, {0x0, 0xc, "6ff112ff941639f32434"}, {0x0, 0x3, "18"}]}]}}}}}) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) kernel console output (not intermixed with test programs): netlink: 'syz.3.961': attribute type 4 has an invalid length. [ 393.801151][ T5391] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 393.811020][ T5391] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz1 [ 393.842220][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 393.987496][ T1158] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.084244][ T39] audit: type=1400 audit(1726086872.517:577): avc: denied { ioctl } for pid=9510 comm="syz.1.968" path="socket:[25406]" dev="sockfs" ino=25406 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 394.162389][ T39] audit: type=1400 audit(1726086872.587:578): avc: denied { setopt } for pid=9510 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 394.187196][ T39] audit: type=1400 audit(1726086872.617:579): avc: denied { connect } for pid=9508 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 394.215841][ T39] audit: type=1400 audit(1726086872.617:580): avc: denied { bind } for pid=9508 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 397.590737][ T9550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.593893][ T39] audit: type=1400 audit(1726086876.007:581): avc: denied { ioctl } for pid=9547 comm="syz.3.976" path="socket:[25419]" dev="sockfs" ino=25419 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 397.602158][ T9550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.655171][ T9550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.696125][ T39] audit: type=1400 audit(1726086876.117:582): avc: denied { setopt } for pid=9547 comm="syz.3.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.672118][ T39] audit: type=1400 audit(1726086877.097:583): avc: denied { shutdown } for pid=9563 comm="syz.2.980" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 398.696829][ T9566] syz.3.979: attempt to access beyond end of device [ 398.696829][ T9566] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 398.708653][ T9566] SQUASHFS error: Failed to read block 0x0: -5 [ 398.711746][ T9566] unable to read squashfs_super_block [ 398.751648][ T39] audit: type=1400 audit(1726086877.187:584): avc: denied { bind } for pid=9565 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 399.218047][ T39] audit: type=1400 audit(1726086877.647:585): avc: denied { sqpoll } for pid=9571 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 400.636606][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 400.655520][ T9589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.715919][ T9589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.242020][ T9592] fuse: Bad value for 'fd' [ 402.243879][ T9597] Bluetooth: MGMT ver 1.23 [ 403.476881][ T39] audit: type=1400 audit(1726086881.907:586): avc: denied { connect } for pid=9614 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 403.548992][ T9628] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 403.617509][ T9618] team_slave_0: left allmulticast mode [ 403.660387][ T9618] team_slave_0: entered allmulticast mode [ 404.077812][ T39] audit: type=1400 audit(1726086882.507:587): avc: denied { accept } for pid=9638 comm="syz.3.1000" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.107831][ T39] audit: type=1400 audit(1726086882.537:588): avc: denied { ioctl } for pid=9638 comm="syz.3.1000" path="socket:[27359]" dev="sockfs" ino=27359 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 404.611171][ T39] audit: type=1400 audit(1726086883.037:589): avc: denied { mount } for pid=9642 comm="syz.1.1001" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 405.272639][ T9653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1002'. [ 405.978274][ T9658] fuse: Bad value for 'fd' [ 407.206709][ T9670] syz.0.1006: attempt to access beyond end of device [ 407.206709][ T9670] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 407.213362][ T9670] SQUASHFS error: Failed to read block 0x0: -5 [ 407.217333][ T9670] unable to read squashfs_super_block [ 407.897938][ T9677] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 408.197754][ T39] audit: type=1400 audit(1726086886.627:590): avc: denied { nlmsg_read } for pid=9680 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 408.914459][ T39] audit: type=1400 audit(1726086887.347:591): avc: denied { create } for pid=9690 comm="syz.3.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 409.797214][ T9722] futex_wake_op: syz.1.1012 tries to shift op by 32; fix this program [ 409.928675][ T39] audit: type=1326 audit(1726086888.357:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9721 comm="syz.3.1011" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a0117def9 code=0x0 [ 411.095605][ T5412] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 411.130209][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.134853][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.138311][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.142551][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.147895][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.150827][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.155321][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.160227][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.166599][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.169329][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.181515][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.188361][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.192736][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.199801][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.203501][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.208895][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.213635][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.229662][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.235219][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.249218][ T9738] lo speed is unknown, defaulting to 1000 [ 411.257416][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.260721][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.273350][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.280919][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.286188][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.289703][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.293087][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.297575][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.302557][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.307212][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.310839][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.316805][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.325062][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.328282][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.331158][ T5391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 411.344863][ T5391] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 411.345007][ T5412] usb 6-1: Using ep0 maxpacket: 8 [ 411.375719][ T5412] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.379116][ T5412] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.383181][ T5412] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.391663][ T5412] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.399616][ T5412] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.404113][ T5412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.670490][ T5412] usb 6-1: usb_control_msg returned -32 [ 411.710628][ T5412] usbtmc 6-1:16.0: can't read capabilities [ 411.736756][ T5412] usb 6-1: USB disconnect, device number 7 [ 412.806174][ T9754] netlink: 'syz.1.1020': attribute type 5 has an invalid length. [ 412.863838][ T39] audit: type=1400 audit(1726086891.277:593): avc: denied { bind } for pid=9751 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 412.962880][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 414.271885][ T39] audit: type=1400 audit(1726086892.677:594): avc: denied { connect } for pid=9771 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 414.432510][ T39] audit: type=1326 audit(1726086892.867:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1024" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c8097def9 code=0x0 [ 415.415060][ T9790] nbd3: detected capacity change from 0 to 22 [ 415.431530][ T9781] block nbd3: shutting down sockets [ 415.436342][ C0] blk_print_req_error: 41 callbacks suppressed [ 415.436358][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.442707][ C0] buffer_io_error: 40 callbacks suppressed [ 415.442723][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.448749][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.459621][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.488732][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.498840][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.502589][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.509448][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.513469][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.519239][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.523310][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.529402][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.533590][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.538460][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.542085][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.548276][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.552269][ T9080] ldm_validate_partition_table(): Disk read failed. [ 415.558843][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.562872][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.576550][ T9080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.581080][ T9080] Buffer I/O error on dev nbd3, logical block 0, async page read [ 415.586502][ T9080] Dev nbd3: unable to read RDB block 0 [ 415.590496][ T9080] nbd3: unable to read partition table [ 415.593291][ T9080] nbd3: partition table beyond EOD, truncated [ 415.626177][ T9791] ldm_validate_partition_table(): Disk read failed. [ 415.630428][ T9791] Dev nbd3: unable to read RDB block 0 [ 415.633111][ T9791] nbd3: unable to read partition table [ 415.638753][ T9791] nbd3: partition table beyond EOD, truncated [ 415.646085][ T9080] ldm_validate_partition_table(): Disk read failed. [ 415.686752][ T9080] Dev nbd3: unable to read RDB block 0 [ 415.690119][ T9080] nbd3: unable to read partition table [ 415.695445][ T9080] nbd3: partition table beyond EOD, truncated [ 416.066524][ T9800] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 417.725477][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 417.733734][ T9821] ubi0: attaching mtd0 [ 417.738564][ T9821] ubi0: scanning is finished [ 417.738753][ T9823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.741274][ T9821] ubi0: empty MTD device detected [ 417.763242][ T9823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.899363][ T9821] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 417.902771][ T9821] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 417.906808][ T9821] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 417.911202][ T9821] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 417.915628][ T9821] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 417.918545][ T9821] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 417.921922][ T9821] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3033427799 [ 417.945050][ T9821] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 417.988785][ T9825] ubi0: background thread "ubi_bgt0d" started, PID 9825 [ 419.267164][ T39] audit: type=1400 audit(1726086897.697:596): avc: denied { read write } for pid=9837 comm="syz.3.1040" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 419.286408][ T39] audit: type=1400 audit(1726086897.707:597): avc: denied { open } for pid=9837 comm="syz.3.1040" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 420.665779][ T9859] netlink: 'syz.2.1044': attribute type 4 has an invalid length. [ 420.692421][ T9856] lo speed is unknown, defaulting to 1000 [ 420.704333][ T9859] netlink: 'syz.2.1044': attribute type 4 has an invalid length. [ 423.240680][ T9892] x_tables: duplicate underflow at hook 2 [ 424.820889][ T39] audit: type=1326 audit(1726086903.257:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.3.1054" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a0117def9 code=0x0 [ 425.112744][ T77] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.925449][ T39] audit: type=1400 audit(1726086904.357:599): avc: denied { ioctl } for pid=9913 comm="syz.2.1056" path="socket:[28769]" dev="sockfs" ino=28769 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 425.936218][ T39] audit: type=1400 audit(1726086904.357:600): avc: denied { map } for pid=9913 comm="syz.2.1056" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.972303][ T39] audit: type=1400 audit(1726086904.357:601): avc: denied { execute } for pid=9913 comm="syz.2.1056" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 426.213886][ T6698] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 426.394042][ T6698] usb 7-1: Using ep0 maxpacket: 8 [ 426.418255][ T6698] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.423596][ T6698] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.427585][ T6698] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.437171][ T6698] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.442899][ T6698] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.447309][ T6698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.716990][ T6698] usb 7-1: GET_CAPABILITIES returned 0 [ 426.720113][ T6698] usbtmc 7-1:16.0: can't read capabilities [ 427.258888][ T25] usb 7-1: USB disconnect, device number 9 [ 427.355019][ T9930] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1061'. [ 428.208042][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1064'. [ 429.582472][ T9951] SELinux: Context is not valid (left unmapped). [ 429.593918][ T39] audit: type=1400 audit(1726086908.017:602): avc: denied { create } for pid=9949 comm="syz.0.1067" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=EC [ 429.640771][ T39] audit: type=1400 audit(1726086908.017:603): avc: denied { associate } for pid=9949 comm="syz.0.1067" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=EC [ 429.672105][ T39] audit: type=1400 audit(1726086908.027:604): avc: denied { mounton } for pid=9949 comm="syz.0.1067" path="/39/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=EC [ 429.683483][ T39] audit: type=1400 audit(1726086908.027:605): avc: denied { create } for pid=9949 comm="syz.0.1067" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=EC [ 429.702209][ T39] audit: type=1400 audit(1726086908.027:606): avc: denied { associate } for pid=9949 comm="syz.0.1067" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon=EC [ 429.721613][ T39] audit: type=1400 audit(1726086908.027:607): avc: denied { read open } for pid=9949 comm="syz.0.1067" path="/39/file0/file0" dev="ramfs" ino=29741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=EC [ 429.891084][ T39] audit: type=1400 audit(1726086908.057:608): avc: denied { rmdir } for pid=9078 comm="syz-executor" name="file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=EC [ 429.895095][ T9952] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 429.908705][ T9952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 429.914409][ T9952] vhci_hcd vhci_hcd.0: Device attached [ 429.915494][ T39] audit: type=1400 audit(1726086908.307:609): avc: denied { append } for pid=9946 comm="syz.3.1066" name="001" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 430.264091][ T35] vhci_hcd: vhci_device speed not set [ 430.348817][ T35] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 430.401079][ T9958] vhci_hcd: connection closed [ 430.463967][ T45] vhci_hcd: stop threads [ 430.468304][ T45] vhci_hcd: release socket [ 430.471179][ T45] vhci_hcd: disconnect device [ 431.237512][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.241290][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.409511][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.420312][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.424358][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.427971][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.431304][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.434787][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.437875][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.441133][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.660186][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.663991][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.667789][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.671470][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.675128][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.678988][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.682854][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.687338][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.691829][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.695510][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.699061][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.702897][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.706562][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.710048][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.713674][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.723129][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.727625][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.731558][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.754884][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.763730][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.767148][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.770842][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.777004][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.786373][ T6698] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 431.797064][ T6698] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 432.246379][ T9983] dvmrp0: entered allmulticast mode [ 432.943858][ T57] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 433.146110][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.150859][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.160695][ T57] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.170324][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.177399][ T57] usb 7-1: config 0 descriptor?? [ 433.192265][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 433.209287][ T9998] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 433.213647][ T9998] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 433.613084][ T57] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 433.623406][ T57] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 433.634059][ T57] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 433.663985][ T57] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 435.544760][ T35] vhci_hcd: vhci_device speed not set [ 436.151425][ T5379] usb 7-1: USB disconnect, device number 10 [ 436.587849][T10033] fuse: Bad value for 'fd' [ 438.205669][ T39] audit: type=1400 audit(1726086916.577:610): avc: denied { setopt } for pid=10044 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 439.517814][ T57] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 439.537137][ T57] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 440.433808][ T39] audit: type=1400 audit(1726086918.817:611): avc: denied { map } for pid=10062 comm="syz.0.1101" path="pipe:[29859]" dev="pipefs" ino=29859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 441.723974][ T6698] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 441.914160][ T6698] usb 5-1: Using ep0 maxpacket: 8 [ 441.951980][ T6698] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.960939][ T6698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.969216][ T6698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.975566][ T6698] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.980888][ T6698] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.986257][ T6698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.241375][ T6698] usb 5-1: GET_CAPABILITIES returned 0 [ 442.259962][ T6698] usbtmc 5-1:16.0: can't read capabilities [ 442.466503][ T5391] usb 5-1: USB disconnect, device number 9 [ 444.161105][T10110] pim6reg1: entered promiscuous mode [ 444.163642][T10110] pim6reg1: entered allmulticast mode [ 444.388178][T10113] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 444.541603][T10116] futex_wake_op: syz.2.1106 tries to shift op by 32; fix this program [ 445.670790][T10127] Invalid option length (1031570) for dns_resolver key [ 445.944802][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.953655][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 445.965279][T10130] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.971900][T10130] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 446.463911][ T39] audit: type=1326 audit(1726086924.817:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="syz.1.1110" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f533677def9 code=0x0 [ 447.331350][T10135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.335581][T10135] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 447.926543][T10135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 447.959643][T10135] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 448.370955][ T39] audit: type=1400 audit(1726086926.797:613): avc: denied { create } for pid=10165 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 448.391230][ T39] audit: type=1400 audit(1726086926.807:614): avc: denied { setopt } for pid=10165 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 449.491433][ T39] audit: type=1400 audit(1726086927.927:615): avc: denied { bind } for pid=10193 comm="syz.3.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 449.595736][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.610820][T10203] batadv_slave_0: entered allmulticast mode [ 449.780953][T10196] mkiss: ax0: crc mode is auto. [ 450.296915][ T39] audit: type=1326 audit(1726086928.717:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.2.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8097def9 code=0x7ffc0000 [ 450.323329][ T39] audit: type=1326 audit(1726086928.717:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.2.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8097def9 code=0x7ffc0000 [ 450.351938][ T39] audit: type=1326 audit(1726086928.727:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.2.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f3c8097def9 code=0x7ffc0000 [ 450.385632][ T39] audit: type=1326 audit(1726086928.727:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.2.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8097def9 code=0x7ffc0000 [ 450.407582][ T39] audit: type=1326 audit(1726086928.727:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.2.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8097def9 code=0x7ffc0000 [ 450.418977][ T39] audit: type=1326 audit(1726086928.727:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.2.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3c8097def9 code=0x7ffc0000 [ 450.609731][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 450.622639][T10215] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.631768][T10215] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 451.690484][T10218] Process accounting resumed [ 452.693452][T10236] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 452.698025][T10236] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 453.689384][T10249] futex_wake_op: syz.0.1133 tries to shift op by 32; fix this program [ 454.863176][T10252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'. [ 455.043930][T10260] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 455.786518][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 455.786533][ T39] audit: type=1400 audit(1726086934.246:663): avc: denied { ioctl } for pid=10272 comm="syz.2.1138" path="/dev/input/mice" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 455.949845][T10270] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.953846][T10270] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.995704][T10270] bridge_slave_1: left allmulticast mode [ 455.998664][T10270] bridge_slave_1: left promiscuous mode [ 456.004297][T10270] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.055436][T10270] bridge_slave_0: left allmulticast mode [ 456.058059][T10270] bridge_slave_0: left promiscuous mode [ 456.061173][T10270] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.653986][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 457.658550][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 459.295051][T10308] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 459.996714][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'. [ 460.330753][T10328] overlayfs: failed to resolve './file0': -2 [ 461.523945][ T39] audit: type=1400 audit(1726086940.026:664): avc: denied { ioctl } for pid=10334 comm="syz.1.1152" path="socket:[31075]" dev="sockfs" ino=31075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 462.453385][ T39] audit: type=1400 audit(1726086940.962:665): avc: denied { append } for pid=10342 comm="syz.2.1156" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 462.607380][ T39] audit: type=1326 audit(1726086941.113:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.0.1157" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb61117def9 code=0x0 [ 463.096671][ T39] audit: type=1400 audit(1726086941.616:667): avc: denied { mounton } for pid=10363 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 463.126219][ T5352] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.132135][ T5352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.137304][ T5352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.143574][ T5352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.148077][ T5352] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.153525][ T5352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.239267][ T5356] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.263182][ T5356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.267984][ T5356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.274241][ T5356] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.278630][ T5356] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.283579][ T5356] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.410623][T10363] lo speed is unknown, defaulting to 1000 [ 463.590927][T10360] mkiss: ax0: crc mode is auto. [ 463.592979][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 463.599070][ T35] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz1 [ 464.094086][T10363] chnl_net:caif_netlink_parms(): no params data found [ 464.323732][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.333143][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.355180][T10363] bridge_slave_0: entered allmulticast mode [ 464.358576][T10363] bridge_slave_0: entered promiscuous mode [ 464.375468][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.378946][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.382172][T10363] bridge_slave_1: entered allmulticast mode [ 464.393390][T10363] bridge_slave_1: entered promiscuous mode [ 464.961357][T10363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.978464][T10363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.207027][T10363] team0: Port device team_slave_0 added [ 465.239455][T10363] team0: Port device team_slave_1 added [ 465.350343][ T5356] Bluetooth: hci5: command tx timeout [ 465.490498][T10385] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 465.504978][T10363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.507670][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.525975][T10363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.542895][T10363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.546646][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.571344][T10363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.665276][T10363] hsr_slave_0: entered promiscuous mode [ 465.677635][T10363] hsr_slave_1: entered promiscuous mode [ 465.694647][T10363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.704201][T10363] Cannot create hsr debugfs directory [ 465.985070][T10363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.236185][T10363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.381654][T10363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.485554][T10363] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.704947][T10363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 466.711723][T10363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.739517][T10363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.752219][T10363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.848486][T10363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.866650][T10363] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.944675][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.948730][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.954726][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.958033][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.211828][T10363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.259616][T10363] veth0_vlan: entered promiscuous mode [ 467.272126][T10363] veth1_vlan: entered promiscuous mode [ 467.303190][T10363] veth0_macvtap: entered promiscuous mode [ 467.327110][T10363] veth1_macvtap: entered promiscuous mode [ 467.358666][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.363288][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.368630][T10363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.388565][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.392834][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.397019][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.402000][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.406213][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.411301][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.415282][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.418613][ T5356] Bluetooth: hci5: command tx timeout [ 467.421007][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.427952][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.432438][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.439363][T10363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.462109][T10363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.466000][T10363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.469981][T10363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.473343][T10363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.567504][ T9711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.570838][ T9711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.605579][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.626239][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.709041][ T39] audit: type=1400 audit(1726086946.265:668): avc: denied { write } for pid=10400 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 467.728567][ T39] audit: type=1400 audit(1726086946.285:669): avc: denied { setcurrent } for pid=10397 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 467.747448][ T39] audit: type=1401 audit(1726086946.285:670): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 467.787214][T10402] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 467.792264][T10402] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 467.796575][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 468.918298][T10413] bridge0: port 3(syz_tun) entered disabled state [ 468.921636][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.925641][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.950503][T10419] syz_tun: left allmulticast mode [ 468.958989][T10419] syz_tun: left promiscuous mode [ 468.967287][T10419] bridge0: port 3(syz_tun) entered disabled state [ 468.979482][T10419] bridge_slave_1: left allmulticast mode [ 468.982032][T10419] bridge_slave_1: left promiscuous mode [ 468.984672][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.049023][T10419] bridge_slave_0: left allmulticast mode [ 469.053415][T10419] bridge_slave_0: left promiscuous mode [ 469.062124][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.102030][T10420] input: syz1 as /devices/virtual/input/input33 [ 469.487281][ T5356] Bluetooth: hci5: command tx timeout [ 469.987982][T10431] lo speed is unknown, defaulting to 1000 [ 471.023497][T10440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10440 comm=syz.1.1184 [ 471.536575][ T39] audit: type=1400 audit(1726086950.107:671): avc: denied { read write } for pid=10449 comm="syz.0.1186" name="file0" dev="9p" ino=36831599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 471.547396][ T39] audit: type=1400 audit(1726086950.107:672): avc: denied { ioctl open } for pid=10449 comm="syz.0.1186" path="/74/file0/file0" dev="9p" ino=36831599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 471.603192][ T5356] Bluetooth: hci5: command tx timeout [ 472.409115][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.412104][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.415593][T10467] bridge0: left promiscuous mode [ 472.417880][T10467] bridge0: left allmulticast mode [ 472.440483][T10467] bridge_slave_1: left allmulticast mode [ 472.443146][T10467] bridge_slave_1: left promiscuous mode [ 472.447103][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.456166][T10467] bridge_slave_0: left allmulticast mode [ 472.459800][T10467] bridge_slave_0: left promiscuous mode [ 472.462392][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.185900][T10491] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 473.303885][T10484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10484 comm=syz.3.1187 [ 473.898846][ T39] audit: type=1400 audit(1726086952.470:673): avc: denied { create } for pid=10503 comm="syz.3.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 476.980437][T10548] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 477.800496][T10554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10554 comm=syz.0.1201 [ 478.420232][T10560] mkiss: ax0: crc mode is auto. [ 479.304632][ T56] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 479.314790][ T56] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 482.075936][ T39] audit: type=1400 audit(1726086960.702:674): avc: denied { read } for pid=10612 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 482.145593][ T39] audit: type=1400 audit(1726086960.773:675): avc: denied { recv } for pid=5327 comm="syz-executor" saddr=127.0.0.1 src=52688 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 482.149666][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 482.192425][ T39] audit: type=1400 audit(1726086960.793:676): avc: denied { recv } for pid=5325 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=52688 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 483.121861][T10629] input: syz1 as /devices/virtual/input/input34 [ 483.140030][ T39] audit: type=1400 audit(1726086961.767:677): avc: denied { getopt } for pid=10626 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 484.165959][T10649] usb usb8: usbfs: process 10649 (syz.3.1219) did not claim interface 0 before use [ 484.707814][T10653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10653 comm=syz.2.1223 [ 485.765334][T10668] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 487.081648][T10687] input: syz1 as /devices/virtual/input/input35 [ 487.621792][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 487.641621][T10696] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1231'. [ 487.665415][T10696] gretap0: entered promiscuous mode [ 487.729746][T10696] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1231'. [ 487.740783][T10696] 0XD: renamed from gretap0 [ 487.761907][T10696] 0XD: left promiscuous mode [ 487.765452][T10696] 0XD: entered allmulticast mode [ 487.775256][T10696] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 487.996560][T10699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1233'. [ 488.868650][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 488.887202][T10707] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 488.893407][T10707] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 490.017637][ T39] audit: type=1400 audit(1726086968.678:678): avc: denied { ioctl } for pid=10716 comm="syz.1.1236" path="socket:[34333]" dev="sockfs" ino=34333 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 490.232459][ T6698] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 490.421686][ T6698] usb 5-1: Using ep0 maxpacket: 8 [ 490.429333][ T6698] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 490.443953][ T6698] usb 5-1: config 0 has no interface number 0 [ 490.450482][ T6698] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.457148][ T6698] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 490.464429][ T6698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.471642][ T6698] usb 5-1: config 0 descriptor?? [ 490.493909][ T6698] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 490.732708][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 490.736480][T10734] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1241'. [ 491.826580][ T35] usb 5-1: USB disconnect, device number 10 [ 491.833189][ T35] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 493.180058][ T39] audit: type=1400 audit(1726086971.851:679): avc: denied { getopt } for pid=10754 comm="syz.1.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 493.386911][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 494.621791][T10765] mkiss: ax0: crc mode is auto. [ 494.774369][ T39] audit: type=1400 audit(1726086973.447:680): avc: denied { getopt } for pid=10778 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 494.835814][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1253'. [ 494.882335][ T5414] hid-generic 0000:0000:0000.000F: item fetching failed at offset 0/2 [ 494.886822][ T5414] hid-generic 0000:0000:0000.000F: probe with driver hid-generic failed with error -22 [ 495.464014][T10790] misc userio: Can't change port type on an already running userio instance [ 495.715487][ T39] audit: type=1400 audit(1726086974.401:681): avc: denied { bind } for pid=10789 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 496.244641][ T39] audit: type=1400 audit(1726086974.933:682): avc: denied { egress } for pid=10783 comm="syz.0.1256" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 496.278056][ T39] audit: type=1400 audit(1726086974.933:683): avc: denied { sendto } for pid=10783 comm="syz.0.1256" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 497.095872][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 497.323846][T10821] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 497.558956][ T39] audit: type=1400 audit(1726086976.248:684): avc: denied { unmount } for pid=10818 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 498.084661][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 498.158035][T10831] netlink: 'syz.2.1266': attribute type 4 has an invalid length. [ 498.504245][ T39] audit: type=1400 audit(1726086977.201:685): avc: denied { append } for pid=10836 comm="syz.0.1268" name="ppp" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 499.283312][ T39] audit: type=1400 audit(1726086977.984:686): avc: denied { ioctl } for pid=10846 comm="syz.3.1269" path="socket:[34495]" dev="sockfs" ino=34495 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 500.326221][ T39] audit: type=1326 audit(1726086979.018:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10864 comm="syz.1.1272" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f533677def9 code=0x0 [ 502.220595][T10880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1274'. [ 502.705128][ T5414] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 502.929300][ T5414] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.936862][ T5414] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.945349][ T5414] usb 7-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 502.950902][ T5414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.966202][ T5414] usb 7-1: SerialNumber: syz [ 503.078005][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 503.087327][ T39] audit: type=1400 audit(1726086981.798:688): avc: denied { listen } for pid=10890 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 503.287923][ T5414] usb 7-1: USB disconnect, device number 11 [ 503.319549][ T9080] udevd[9080]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.934943][T10903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57222 sclass=netlink_route_socket pid=10903 comm=syz.2.1280 [ 503.956315][T10903] geneve2: entered promiscuous mode [ 503.959152][T10903] geneve2: entered allmulticast mode [ 505.170447][T10932] syz.2.1285 (10932): drop_caches: 2 [ 506.821481][T10952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=10952 comm=syz.1.1291 [ 506.978277][T10959] trusted_key: encrypted_key: insufficient parameters specified [ 507.110313][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.254761][ T39] audit: type=1400 audit(1726086985.982:689): avc: denied { read } for pid=10963 comm="syz.3.1294" name="btrfs-control" dev="devtmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 507.267138][ T39] audit: type=1400 audit(1726086985.982:690): avc: denied { open } for pid=10963 comm="syz.3.1294" path="/dev/btrfs-control" dev="devtmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 507.782787][T10968] 9pnet_fd: Insufficient options for proto=fd [ 507.910701][ T39] audit: type=1400 audit(1726086986.634:691): avc: denied { create } for pid=10967 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 508.257273][T10976] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 508.919164][ T5352] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 508.967954][ T5352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 508.977856][ T5352] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 508.995188][ T5352] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 508.999207][ T5352] Bluetooth: hci5: Injecting HCI hardware error event [ 509.003556][ T5352] Bluetooth: hci5: hardware error 0x00 [ 509.016954][T10983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 509.050023][T10983] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 509.099999][T10983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 509.151364][T10979] lo speed is unknown, defaulting to 1000 [ 509.465428][T10979] chnl_net:caif_netlink_parms(): no params data found [ 509.651624][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 509.702074][T10979] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.705369][T10979] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.708792][T10979] bridge_slave_0: entered allmulticast mode [ 509.713394][T10979] bridge_slave_0: entered promiscuous mode [ 509.718688][T10979] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.722684][T10979] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.725791][T10979] bridge_slave_1: entered allmulticast mode [ 509.729709][T10979] bridge_slave_1: entered promiscuous mode [ 509.839201][T10979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.847830][T10979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.941417][T10979] team0: Port device team_slave_0 added [ 509.949560][T10979] team0: Port device team_slave_1 added [ 510.006166][T10979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.009655][T10979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.026699][T10979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.033620][T10979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.036903][T10979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.049086][T10979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.424449][T10979] hsr_slave_0: entered promiscuous mode [ 510.435078][T10979] hsr_slave_1: entered promiscuous mode [ 510.479475][T10979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.485011][T10979] Cannot create hsr debugfs directory [ 510.894604][T10979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.044437][T10979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.147651][ T5356] Bluetooth: hci6: command tx timeout [ 511.159139][ T5352] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 511.329276][T10979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.337771][T11027] usb usb8: usbfs: process 11027 (syz.1.1307) did not claim interface 0 before use [ 511.693956][T10979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.206276][T10979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 512.247172][T10979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.271232][T10979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.292266][T10979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.464830][T11021] Process accounting resumed [ 512.611345][T10979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.654043][T10979] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.691235][ T9711] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.694561][ T9711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.720499][ T9711] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.724214][ T9711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.873939][T10979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.222649][ T5352] Bluetooth: hci6: command tx timeout [ 513.557578][T10979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.646161][T10979] veth0_vlan: entered promiscuous mode [ 513.659278][T10979] veth1_vlan: entered promiscuous mode [ 513.724185][T10979] veth0_macvtap: entered promiscuous mode [ 513.739128][T10979] veth1_macvtap: entered promiscuous mode [ 513.781608][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.788173][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.796431][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.802450][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.811219][T10979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.823861][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.828169][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.840967][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.856315][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.869546][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.883264][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.889191][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.893982][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.898353][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.906155][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.919062][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.925613][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.933228][T10979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.943098][T10979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.946808][T10979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.951024][T10979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.954876][T10979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.067551][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.088201][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.128074][ T9711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.132177][ T9711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.224244][ T39] audit: type=1400 audit(1726086992.973:692): avc: denied { remount } for pid=11044 comm="syz.1.1319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 514.332814][T11053] 9pnet: Unknown protocol version 9p2000.ڴ>;1gˏӟ?u [ 514.340325][T11053] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 515.295311][ T5352] Bluetooth: hci6: command tx timeout [ 515.839621][ T39] audit: type=1326 audit(1726086994.587:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.0.1313" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3973b7def9 code=0x0 [ 516.041743][T11067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.369619][ T5352] Bluetooth: hci6: command tx timeout [ 518.385354][T11090] usb usb8: usbfs: process 11090 (syz.2.1317) did not claim interface 0 before use [ 519.603953][T11095] netlink: 'syz.2.1323': attribute type 7 has an invalid length. [ 519.675027][T11095] serio: Serial port ttynull [ 519.751687][ T39] audit: type=1400 audit(1726086998.508:694): avc: denied { getopt } for pid=11094 comm="syz.2.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 520.969229][T11119] efs: device does not support 512 byte blocks [ 521.047389][T11119] lo speed is unknown, defaulting to 1000 [ 521.828056][ T39] audit: type=1400 audit(1726087000.593:695): avc: denied { nlmsg_write } for pid=11125 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 522.187333][ T5391] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 522.369881][ T5391] usb 5-1: Using ep0 maxpacket: 16 [ 522.375167][ T5391] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 522.391858][ T5391] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 522.397013][ T5391] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 522.401713][ T5391] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 522.412285][ T5391] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 522.418537][ T5391] usb 5-1: config 1 interface 0 has no altsetting 0 [ 522.421453][ T5391] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 522.425672][ T5391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.437809][ T5391] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 523.547159][T11148] bridge0: port 1(syz_tun) entered blocking state [ 523.550181][T11148] bridge0: port 1(syz_tun) entered disabled state [ 523.553375][T11148] syz_tun: entered allmulticast mode [ 523.573410][T11148] syz_tun: entered promiscuous mode [ 524.660791][ T35] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 524.761830][ T5391] usb 5-1: USB disconnect, device number 11 [ 524.846449][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.872034][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.877875][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.887654][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.901159][ T35] usb 6-1: config 0 descriptor?? [ 524.961612][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'. [ 525.008552][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'. [ 525.356343][ T35] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 525.363980][ T35] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 525.388439][ T35] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 525.740108][ T834] usb 6-1: USB disconnect, device number 8 [ 525.862263][ T39] audit: type=1400 audit(1726087004.643:696): avc: denied { write } for pid=11171 comm="syz.3.1341" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 525.864221][T11172] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 525.895116][T11172] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 525.927281][ T39] audit: type=1400 audit(1726087004.703:697): avc: denied { connect } for pid=11171 comm="syz.3.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 525.937969][ T39] audit: type=1400 audit(1726087004.713:698): avc: denied { read } for pid=11171 comm="syz.3.1341" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 526.402202][T11176] overlayfs: missing 'workdir' [ 526.460548][T11178] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 528.080445][T11199] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 528.080445][T11199] program syz.0.1355 not setting count and/or reply_len properly [ 528.623911][T11205] IPVS: Error connecting to the multicast addr [ 529.958754][ T39] audit: type=1400 audit(1726087008.713:699): avc: denied { listen } for pid=11216 comm="syz.1.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 530.277738][ T5379] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 530.496954][ T5379] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 530.501612][ T5379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.505290][ T5379] usb 5-1: Product: syz [ 530.511729][ T5379] usb 5-1: Manufacturer: syz [ 530.513782][ T5379] usb 5-1: SerialNumber: syz [ 530.539466][ T5379] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 530.583433][ T57] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 530.842379][ T39] audit: type=1400 audit(1726087009.635:700): avc: denied { execmem } for pid=11223 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 530.879156][T11224] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 530.884398][T11224] netlink: 'syz.1.1354': attribute type 1 has an invalid length. [ 531.339374][ T39] audit: type=1400 audit(1726087010.126:701): avc: denied { read } for pid=11229 comm="syz.3.1357" lport=45850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.456293][T11225] Process accounting resumed [ 531.478892][T11231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 531.483665][T11231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.654899][ T57] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 531.665169][ T57] ath9k_htc: Failed to initialize the device [ 531.700780][ T57] usb 5-1: ath9k_htc: USB layer deinitialized [ 531.722311][ T6698] usb 5-1: USB disconnect, device number 12 [ 531.726315][T11235] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 532.340116][ T39] audit: type=1400 audit(1726087011.128:702): avc: denied { create } for pid=11239 comm="syz.3.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 533.196954][T11253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 534.110571][ T5356] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 534.116213][ T5356] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 534.127296][ T5356] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 534.141559][ T5356] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 534.145692][ T5356] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 534.149690][ T5356] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 534.213144][T11263] lo speed is unknown, defaulting to 1000 [ 534.410929][ T39] audit: type=1400 audit(1726087013.212:703): avc: denied { create } for pid=11267 comm="syz.3.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 534.431352][ T39] audit: type=1400 audit(1726087013.222:704): avc: denied { setopt } for pid=11267 comm="syz.3.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 534.537776][ T39] audit: type=1400 audit(1726087013.333:705): avc: denied { setopt } for pid=11267 comm="syz.3.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 534.592995][T11263] chnl_net:caif_netlink_parms(): no params data found [ 535.115536][T11263] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.120392][T11263] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.124740][T11263] bridge_slave_0: entered allmulticast mode [ 535.139574][T11263] bridge_slave_0: entered promiscuous mode [ 535.159740][T11263] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.163281][T11263] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.171929][T11263] bridge_slave_1: entered allmulticast mode [ 535.184552][T11263] bridge_slave_1: entered promiscuous mode [ 535.480351][T11263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.507108][T11263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.717945][T11263] team0: Port device team_slave_0 added [ 535.723659][T11263] team0: Port device team_slave_1 added [ 535.887106][T11263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.890011][T11263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.926693][T11263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.933287][T11263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.936542][T11263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.965246][T11263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.160670][T11263] hsr_slave_0: entered promiscuous mode [ 536.186985][T11263] hsr_slave_1: entered promiscuous mode [ 536.204908][T11263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.207095][ T5352] Bluetooth: hci7: command tx timeout [ 536.208237][T11263] Cannot create hsr debugfs directory [ 536.445358][ T39] audit: type=1400 audit(1726087015.247:706): avc: denied { sendto } for pid=10307 comm="kworker/1:0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 536.633982][T11294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.681909][ T5352] Bluetooth: hci6: Malformed LE Event: 0x02 [ 536.825336][T11263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.013923][T11263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.131309][T11263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.265344][T11263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.615615][T11263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 537.634312][T11263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 537.644656][T11263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 537.655432][T11263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 537.710724][ T39] audit: type=1400 audit(1726087016.509:707): avc: denied { mount } for pid=11308 comm="syz.3.1373" name="/" dev="9p" ino=36831598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 537.816057][ T39] audit: type=1400 audit(1726087016.619:708): avc: denied { associate } for pid=11308 comm="syz.3.1373" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 537.830111][T11263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.861586][ T39] audit: type=1400 audit(1726087016.639:709): avc: denied { append } for pid=11308 comm="syz.3.1373" path="/50/file0/cpuacct.usage_sys" dev="9p" ino=36832077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 537.913487][T11263] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.995737][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.999133][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.038315][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.041554][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.280859][ T5352] Bluetooth: hci7: command tx timeout [ 538.712270][T11263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.767208][T11263] veth0_vlan: entered promiscuous mode [ 538.782642][T11263] veth1_vlan: entered promiscuous mode [ 538.823395][T11263] veth0_macvtap: entered promiscuous mode [ 538.846771][T11263] veth1_macvtap: entered promiscuous mode [ 538.868603][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.874800][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.879291][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.884729][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.890646][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.896387][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.902952][T11263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.918375][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.923833][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.928203][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.939829][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.944886][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.957682][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.962600][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.967198][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.979634][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.984260][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.988549][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.994488][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.998891][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.017255][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.026891][T11263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.043271][T11263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.046895][T11263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.056717][T11263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.061050][T11263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.082418][ T39] audit: type=1400 audit(1726087017.892:710): avc: denied { unmount } for pid=10363 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 539.257816][ T9711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.271870][ T9711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.327518][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.339325][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.356808][ T5352] Bluetooth: hci7: command tx timeout [ 540.437153][ T57] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 540.671046][ T57] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 540.683248][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 540.689408][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 540.755950][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 540.776122][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 540.792091][T11346] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 540.792091][T11346] program syz.3.1378 not setting count and/or reply_len properly [ 540.803590][ T57] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 540.807540][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 540.811979][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 540.816902][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 540.822270][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 540.898835][ T57] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 540.902435][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 540.907569][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 540.912208][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 540.918999][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 540.930201][ T57] usb 7-1: string descriptor 0 read error: -22 [ 540.935992][ T57] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 540.945979][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.998733][ T57] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 541.185835][T11348] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1379'. [ 541.195454][ T39] audit: type=1400 audit(1726087019.996:711): avc: denied { write } for pid=11347 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.203769][ T39] audit: type=1400 audit(1726087019.996:712): avc: denied { nlmsg_write } for pid=11347 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.225212][ T57] usb 7-1: USB disconnect, device number 12 [ 541.369759][T11342] Process accounting resumed [ 542.202603][ T6698] IPVS: starting estimator thread 0... [ 542.315324][T11357] IPVS: using max 35 ests per chain, 84000 per kthread [ 542.403153][T11355] IPVS: Error connecting to the multicast addr [ 542.523817][ T5352] Bluetooth: hci7: command tx timeout [ 543.118501][ T39] audit: type=1400 audit(1726087021.929:713): avc: denied { mount } for pid=11363 comm="syz.1.1382" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 543.188669][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 543.926173][ T39] audit: type=1326 audit(1726087022.741:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 543.967253][ T39] audit: type=1326 audit(1726087022.741:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 544.041257][ T39] audit: type=1326 audit(1726087022.741:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 544.049975][T11373] netlink: 'syz.1.1385': attribute type 4 has an invalid length. [ 544.051942][ T39] audit: type=1326 audit(1726087022.741:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 544.075842][ T39] audit: type=1326 audit(1726087022.741:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 544.111936][ T39] audit: type=1326 audit(1726087022.741:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 544.129768][ T39] audit: type=1326 audit(1726087022.741:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 544.160596][ T39] audit: type=1326 audit(1726087022.741:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 544.180076][ T39] audit: type=1326 audit(1726087022.741:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x7fc00000 [ 544.500716][T11379] input: syz0 as /devices/virtual/input/input39 [ 544.829310][T11377] netlink: 'syz.3.1386': attribute type 7 has an invalid length. [ 545.170460][ T831] IPVS: starting estimator thread 0... [ 545.208545][T11377] serio: Serial port ttynull [ 545.277727][T11389] IPVS: using max 35 ests per chain, 84000 per kthread [ 546.355828][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 546.741401][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 546.745598][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.749266][ T10] usb 5-1: Product: syz [ 546.751797][ T10] usb 5-1: Manufacturer: syz [ 546.753653][ T10] usb 5-1: SerialNumber: syz [ 546.817834][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 546.937830][T11038] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 547.337253][T11418] netlink: 81772 bytes leftover after parsing attributes in process `syz.1.1395'. [ 547.356044][T11419] mac80211_hwsim hwsim23 : renamed from wlan1 (while UP) [ 547.443881][ C0] hrtimer: interrupt took 202074 ns [ 548.038061][T11038] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 548.041582][T11038] ath9k_htc: Failed to initialize the device [ 548.126426][T11038] usb 5-1: ath9k_htc: USB layer deinitialized [ 551.012036][ T57] usb 5-1: USB disconnect, device number 13 [ 551.263223][ T39] kauditd_printk_skb: 67 callbacks suppressed [ 551.263240][ T39] audit: type=1400 audit(1726087030.093:790): avc: denied { ioctl } for pid=11435 comm="syz.2.1401" path="socket:[38009]" dev="sockfs" ino=38009 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 551.276932][T11441] batadv0: mtu less than device minimum [ 551.379730][T11438] netlink: 'syz.1.1400': attribute type 7 has an invalid length. [ 551.526591][T11438] serio: Serial port ttynull [ 552.058606][T11452] input: syz0 as /devices/virtual/input/input40 [ 552.061369][T11452] input: failed to attach handler leds to device input40, error: -6 [ 552.125837][T11451] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 553.884309][T11468] netlink: 'syz.0.1408': attribute type 4 has an invalid length. [ 555.166096][ T5352] Bluetooth: hci6: Malformed Event: 0x13 [ 555.943255][T11490] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 555.946048][T11490] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 556.372184][T11496] netlink: 'syz.0.1413': attribute type 7 has an invalid length. [ 556.423991][T11496] serio: Serial port ttynull [ 556.588021][ T39] audit: type=1326 audit(1726087035.422:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.3.1415" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f976857def9 code=0x0 [ 557.359795][T11515] 9pnet: Could not find request transport: fd1844674407370955161500000000000000000000004 [ 557.435795][ T39] audit: type=1400 audit(1726087036.273:792): avc: denied { name_bind } for pid=11510 comm="syz.2.1417" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 557.575103][T11515] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 557.608250][ T39] audit: type=1400 audit(1726087036.423:793): avc: denied { relabelto } for pid=11510 comm="syz.2.1417" name="file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 557.627212][ T39] audit: type=1400 audit(1726087036.433:794): avc: denied { associate } for pid=11510 comm="syz.2.1417" name="file0" dev="tmpfs" ino=68 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:printer_device_t:s0" [ 558.755915][T11534] lo speed is unknown, defaulting to 1000 [ 559.494520][T11535] lo speed is unknown, defaulting to 1000 [ 560.575756][ T39] audit: type=1400 audit(1726087039.417:795): avc: denied { accept } for pid=11545 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 561.058179][T11554] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 562.403314][ T5352] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 562.411220][ T5352] Bluetooth: hci6: Injecting HCI hardware error event [ 562.417647][ T5356] Bluetooth: hci6: hardware error 0x00 [ 562.445178][T11572] raw_sendmsg: syz.3.1426 forgot to set AF_INET. Fix it! [ 562.580919][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 563.230543][ T39] audit: type=1400 audit(1726087042.081:796): avc: denied { name_bind } for pid=11575 comm="syz.2.1433" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 563.347862][T11581] block nbd0: NBD_DISCONNECT [ 564.479291][ T5356] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 564.508315][ C3] sched: RT throttling activated [ 566.534284][T11622] input: syz0 as /devices/virtual/input/input42 [ 566.537505][T11622] input: failed to attach handler leds to device input42, error: -6 [ 566.733878][T11624] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 566.737374][T11624] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 567.903469][T11633] mac80211_hwsim hwsim19 : renamed from wlan1 (while UP) [ 568.398269][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.563592][ T39] audit: type=1400 audit(1726087048.419:797): avc: denied { ioctl } for pid=11637 comm="syz.2.1447" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 570.778534][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.823567][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 570.827183][T11658] bridge_slave_1: left allmulticast mode [ 570.829344][T11658] bridge_slave_1: left promiscuous mode [ 570.837445][T11658] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.846060][T11658] bridge_slave_0: left allmulticast mode [ 570.860815][T11658] bridge_slave_0: left promiscuous mode [ 570.863472][T11658] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.356725][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 571.371049][ T39] audit: type=1400 audit(1726087050.231:798): avc: denied { write } for pid=11664 comm="syz.1.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 571.550720][T11671] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1455'. [ 571.555332][T11671] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1455'. [ 571.840443][T11674] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 571.843737][T11674] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1455'. [ 572.044240][T11675] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 572.047241][T11675] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 572.099193][T11675] vhci_hcd vhci_hcd.0: Device attached [ 572.355349][T11679] vhci_hcd: connection closed [ 572.355693][ T1138] vhci_hcd: stop threads [ 572.368727][ T1138] vhci_hcd: release socket [ 572.390933][ T1138] vhci_hcd: disconnect device [ 572.420637][ T5414] usb 16-1: enqueue for inactive port 0 [ 572.460214][ T39] audit: type=1400 audit(1726087051.322:799): avc: denied { create } for pid=11683 comm="syz.0.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 572.756033][T11690] 9pnet: Could not find request transport: fd1844674407370955161500000000000000000000004 [ 572.950642][ T5414] usb usb16-port1: attempt power cycle [ 573.261400][T11698] tmpfs: Bad value for 'mpol' [ 573.280504][T11698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1459'. [ 573.655275][ T5414] usb usb16-port1: unable to enumerate USB device [ 574.560379][T11730] serio: Serial port pts1 [ 574.636503][ T39] audit: type=1400 audit(1726087053.495:800): avc: denied { getopt } for pid=11728 comm="syz.2.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 574.653966][ T39] audit: type=1400 audit(1726087053.515:801): avc: denied { name_connect } for pid=11728 comm="syz.2.1466" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 576.363746][ T39] audit: type=1400 audit(1726087054.806:802): avc: denied { mounton } for pid=11741 comm="syz.0.1469" path="/38/file1/bus/file1" dev="autofs" ino=38392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 576.386232][T11748] netlink: 'syz.1.1470': attribute type 12 has an invalid length. [ 576.398317][ T39] audit: type=1400 audit(1726087055.257:803): avc: denied { create } for pid=11743 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 577.160754][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.336698][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.403575][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.529826][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.821214][ T77] bridge_slave_1: left allmulticast mode [ 577.831186][ T77] bridge_slave_1: left promiscuous mode [ 577.844076][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.854546][ T77] bridge_slave_0: left allmulticast mode [ 577.856831][ T77] bridge_slave_0: left promiscuous mode [ 577.859309][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.295088][ T5352] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 578.374647][ T5352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 578.382404][ T5352] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 578.393090][ T5352] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 578.396995][ T5352] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 578.401353][ T5352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 578.632043][ T39] audit: type=1400 audit(1726087057.479:804): avc: denied { listen } for pid=11752 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 578.652847][ T39] audit: type=1400 audit(1726087057.509:805): avc: denied { accept } for pid=11752 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 579.594590][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.639746][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.654520][ T77] bond0 (unregistering): Released all slaves [ 579.818129][T11762] lo speed is unknown, defaulting to 1000 [ 580.475947][ T5356] Bluetooth: hci6: command tx timeout [ 581.228364][ T77] hsr_slave_0: left promiscuous mode [ 581.249106][ T77] hsr_slave_1: left promiscuous mode [ 581.260644][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.263844][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.268174][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.277054][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.320107][ T39] audit: type=1326 audit(1726087060.192:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.2.1477" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78f297def9 code=0x0 [ 581.368672][ T77] veth1_macvtap: left promiscuous mode [ 581.372159][ T77] veth0_macvtap: left promiscuous mode [ 581.374851][ T77] veth1_vlan: left promiscuous mode [ 581.377623][ T77] veth0_vlan: left promiscuous mode [ 581.391978][T11800] Bluetooth: MGMT ver 1.23 [ 581.762307][T11805] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 582.548800][ T5356] Bluetooth: hci6: command tx timeout [ 584.618727][ T5356] Bluetooth: hci6: command tx timeout [ 584.779174][ T77] team0 (unregistering): Port device team_slave_1 removed [ 585.048692][ T77] team0 (unregistering): Port device team_slave_0 removed [ 586.698639][ T5356] Bluetooth: hci6: command tx timeout [ 587.634551][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 587.756386][T11795] dvmrp1: entered allmulticast mode [ 588.090421][T11762] chnl_net:caif_netlink_parms(): no params data found [ 588.824721][T11762] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.828037][T11762] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.835479][T11762] bridge_slave_0: entered allmulticast mode [ 588.847600][T11762] bridge_slave_0: entered promiscuous mode [ 588.900191][T11762] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.904529][T11762] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.909974][T11762] bridge_slave_1: entered allmulticast mode [ 588.920136][T11762] bridge_slave_1: entered promiscuous mode [ 589.192549][ T39] audit: type=1400 audit(1726087068.063:807): avc: denied { relabelfrom } for pid=11857 comm="syz.2.1489" name="" dev="pipefs" ino=40460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 589.297276][T11762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.316894][ T77] IPVS: stop unused estimator thread 0... [ 589.332096][T11762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.506637][T11762] team0: Port device team_slave_0 added [ 589.523979][T11762] team0: Port device team_slave_1 added [ 589.654803][T11762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.658399][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.680077][T11762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.706616][T11762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.717591][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.748912][T11762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.860992][ T39] audit: type=1400 audit(1726087068.733:808): avc: denied { create } for pid=11861 comm="syz.1.1491" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 589.872497][ T39] audit: type=1400 audit(1726087068.733:809): avc: denied { map } for pid=11861 comm="syz.1.1491" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 589.893474][ T39] audit: type=1400 audit(1726087068.733:810): avc: denied { read write } for pid=11861 comm="syz.1.1491" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 589.947006][T11863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1491'. [ 589.948988][T11875] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 589.972130][T11762] hsr_slave_0: entered promiscuous mode [ 589.977832][T11762] hsr_slave_1: entered promiscuous mode [ 590.011490][T11762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.015352][T11762] Cannot create hsr debugfs directory [ 590.224266][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1493'. [ 590.346429][T11877] can: request_module (can-proto-4) failed. [ 591.119755][ T39] audit: type=1400 audit(1726087069.993:811): avc: denied { create } for pid=11889 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 591.185264][ T39] audit: type=1400 audit(1726087070.053:812): avc: denied { setopt } for pid=11889 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 591.211092][ T39] audit: type=1400 audit(1726087070.083:813): avc: denied { read } for pid=11889 comm="syz.1.1496" path="socket:[38656]" dev="sockfs" ino=38656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 591.774489][T11762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 591.783231][T11762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 591.803165][T11762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 591.812727][T11762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 591.994722][T11762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.041862][T11762] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.060452][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.063840][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.072971][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.076797][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.150562][T11915] xt_CT: No such helper "pptp" [ 592.466523][T11762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.522356][T11762] veth0_vlan: entered promiscuous mode [ 592.534599][T11762] veth1_vlan: entered promiscuous mode [ 592.591925][T11762] veth0_macvtap: entered promiscuous mode [ 592.607615][T11762] veth1_macvtap: entered promiscuous mode [ 592.639287][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.648595][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.652610][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.667719][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.674082][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.679804][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.686358][T11762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.727151][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.731741][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.735717][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.764469][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.778297][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.784486][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.790613][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.795282][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.800310][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.806725][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.812598][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.819523][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.825561][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.832855][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.844698][T11762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.858209][T11762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.863502][T11762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.868145][T11762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.873380][T11762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.043866][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.050248][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.099372][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.102829][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.402926][ T832] IPVS: starting estimator thread 0... [ 593.454087][T11939] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.490490][T11949] IPVS: using max 20 ests per chain, 48000 per kthread [ 594.269961][T11967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.397428][ T39] audit: type=1400 audit(1726087073.263:814): avc: denied { read } for pid=11964 comm="syz.3.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.464139][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 596.162507][ T39] audit: type=1400 audit(1726087075.033:815): avc: denied { getopt } for pid=11983 comm="syz.0.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 596.171090][ T39] audit: type=1400 audit(1726087075.043:816): avc: denied { connect } for pid=11983 comm="syz.0.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 596.319361][T11991] libceph: resolve '. [ 596.319361][T11991] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 596.319361][T11991] ' (ret=-3): failed [ 596.515697][ T5414] IPVS: starting estimator thread 0... [ 596.606475][T11996] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 596.618766][T11996] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 596.636445][T11995] IPVS: using max 21 ests per chain, 50400 per kthread [ 596.662489][ T39] audit: type=1400 audit(1726087075.533:817): avc: denied { write } for pid=11983 comm="syz.0.1507" lport=40791 faddr=fc00:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 597.145980][T11991] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 597.150551][T11991] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 597.154327][T11991] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 597.161410][T11991] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 597.164116][T11991] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 597.214985][T11991] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 597.991038][ T56] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 598.005028][T12006] lo speed is unknown, defaulting to 1000 [ 598.194522][ T56] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 598.199013][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.202446][ T56] usb 6-1: Product: syz [ 598.204253][ T56] usb 6-1: Manufacturer: syz [ 598.206426][ T56] usb 6-1: SerialNumber: syz [ 598.220446][ T56] usb 6-1: config 0 descriptor?? [ 598.225113][ T56] ums_eneub6250 6-1:0.0: USB Mass Storage device detected [ 598.552385][ T56] usb 6-1: USB disconnect, device number 9 [ 598.619121][ T5356] Bluetooth: hci7: command 0x0c1a tx timeout [ 598.882351][T12008] lo speed is unknown, defaulting to 1000 [ 598.988556][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 599.178985][ T5356] Bluetooth: hci6: command 0x0c1a tx timeout [ 599.844825][T12021] tmpfs: Bad value for 'mpol' [ 599.857073][T12021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1514'. [ 600.095050][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 600.698889][ T5356] Bluetooth: hci7: command 0x0c1a tx timeout [ 601.274523][ T5356] Bluetooth: hci6: command 0x0c1a tx timeout [ 601.333043][ T39] audit: type=1400 audit(1726087080.193:818): avc: denied { setattr } for pid=12029 comm="syz.3.1516" name="RAWv6" dev="sockfs" ino=41949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 601.431523][ T39] audit: type=1400 audit(1726087080.263:819): avc: denied { shutdown } for pid=12033 comm="syz.0.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 601.710693][T12046] program syz.2.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.816171][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 602.487585][T12058] input: syz0 as /devices/virtual/input/input44 [ 602.494147][T12058] input: failed to attach handler leds to device input44, error: -6 [ 602.627431][ T39] audit: type=1326 audit(1726087081.493:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12060 comm="syz.0.1523" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc7e57def9 code=0x0 [ 602.779888][ T5356] Bluetooth: hci7: command 0x0c1a tx timeout [ 603.349271][ T5356] Bluetooth: hci6: command 0x0c1a tx timeout [ 604.073319][T12077] tmpfs: Bad value for 'mpol' [ 604.091822][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1524'. [ 604.475450][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'. [ 604.520395][ T39] audit: type=1326 audit(1726087083.393:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1532" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f533677def9 code=0x0 [ 604.822129][ T39] audit: type=1400 audit(1726087083.693:822): avc: denied { lock } for pid=12095 comm="syz.3.1527" path="socket:[38757]" dev="sockfs" ino=38757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 605.748811][ T5414] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 605.969728][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.976434][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.983289][ T5414] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.008326][ T5414] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 606.016318][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.040810][ T5414] usb 5-1: config 0 descriptor?? [ 606.622013][ T5414] waltop 0003:172F:0038.0011: unknown main item tag 0xe [ 606.625668][ T5414] waltop 0003:172F:0038.0011: item fetching failed at offset 4/5 [ 606.642037][ T5414] waltop 0003:172F:0038.0011: probe with driver waltop failed with error -22 [ 606.988444][T12120] autofs: Bad value for 'fd' [ 607.041824][ T39] audit: type=1400 audit(1726087085.903:823): avc: denied { bind } for pid=12119 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 607.115790][T12122] usb usb9: check_ctrlrecip: process 12122 (syz.2.1540) requesting ep 01 but needs 81 [ 607.124480][T12122] usb usb9: usbfs: process 12122 (syz.2.1540) did not claim interface 0 before use [ 608.498190][ T35] usb 5-1: USB disconnect, device number 14 [ 611.865002][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'. [ 612.307362][T12160] befs: Unrecognized mount option "" or missing value [ 612.372365][T12160] befs: (nbd2): cannot parse mount options [ 612.705332][T12157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.870559][ T57] psmouse serio11: Failed to reset mouse on : -5 [ 613.379099][ T39] audit: type=1400 audit(1726087092.243:824): avc: denied { map } for pid=12174 comm="syz.2.1543" path="socket:[38800]" dev="sockfs" ino=38800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 613.513058][T12177] team0: Port device team_slave_1 removed [ 613.531692][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 613.629235][T12181] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1544'. [ 613.632437][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 614.266674][ T39] audit: type=1400 audit(1726087093.133:825): avc: denied { write } for pid=12188 comm="syz.3.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 614.872398][ T39] audit: type=1400 audit(1726087093.743:826): avc: denied { create } for pid=12208 comm="syz.1.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 615.306797][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 616.758815][ T57] misc userio: Buffer overflowed, userio client isn't keeping up [ 618.066432][ T57] input: PS/2 Generic Mouse as /devices/serio11/input/input46 [ 618.328853][ T57] psmouse serio11: Failed to enable mouse on [ 619.416320][T12249] libceph: resolve '. [ 619.416320][T12249] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 619.416320][T12249] ' (ret=-3): failed [ 620.034235][T12258] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 620.085748][T12261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.349797][T12249] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 620.352537][T12249] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 620.737473][T12266] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 621.745651][ T5352] Bluetooth: hci7: command 0x0c1a tx timeout [ 621.973967][T12272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.388801][ T5352] Bluetooth: hci6: command 0x0c1a tx timeout [ 622.691113][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 623.846966][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'. [ 623.920393][T12286] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 624.870660][ T39] audit: type=1804 audit(1726087103.723:827): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1575" name="/newroot/48/bus/file0" dev="overlay" ino=284 res=1 errno=0 [ 625.226538][T12298] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 625.573959][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 625.627721][ T39] audit: type=1400 audit(1726087104.493:828): avc: denied { map } for pid=12299 comm="syz.1.1571" path="/416/file0/blkio.bfq.io_serviced" dev="9p" ino=36832058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 625.679927][T12304] netfs: Couldn't get user pages (rc=-14) [ 625.890985][T12312] input: syz0 as /devices/virtual/input/input47 [ 625.894105][T12312] input: failed to attach handler leds to device input47, error: -6 [ 626.328866][ T39] audit: type=1400 audit(1726087105.113:829): avc: denied { ioctl } for pid=12314 comm="syz.3.1576" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 627.053321][T12308] mkiss: ax0: crc mode is auto. [ 631.836564][T12336] mac80211_hwsim hwsim25 : renamed from wlan1 (while UP) [ 632.189432][ T57] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 632.398770][ T57] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 632.402794][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.406691][ T57] usb 6-1: Product: syz [ 632.409321][ T57] usb 6-1: Manufacturer: syz [ 632.412123][ T57] usb 6-1: SerialNumber: syz [ 632.428771][ T57] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 632.483558][ T57] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 633.078328][T12350] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1583'. [ 633.589388][ T57] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 633.595074][ T57] ath9k_htc: Failed to initialize the device [ 633.726366][ T57] usb 6-1: ath9k_htc: USB layer deinitialized [ 634.246414][T12357] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 634.306971][T12357] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 634.591092][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 634.890975][T12364] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1588'. [ 634.900713][T12364] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1588'. [ 635.179384][T12365] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 635.190007][T12365] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1588'. [ 635.238752][ T39] audit: type=1326 audit(1726087114.093:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12366 comm="syz.0.1589" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc7e57def9 code=0x0 [ 635.348258][ T39] audit: type=1400 audit(1726087114.203:831): avc: denied { shutdown } for pid=12368 comm="syz.2.1590" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 635.465483][T12373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 635.468394][T12373] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 635.478580][T12373] vhci_hcd vhci_hcd.0: Device attached [ 635.809589][ T5414] usb 20-1: SetAddress Request (2) to port 0 [ 635.812049][ T5414] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 635.993516][T12375] vhci_hcd: connection reset by peer [ 635.994689][ T5356] Bluetooth: hci7: command 0x0c1a tx timeout [ 636.020186][ T77] vhci_hcd: stop threads [ 636.022292][ T77] vhci_hcd: release socket [ 636.025192][ T77] vhci_hcd: disconnect device [ 636.098341][ T57] usb 6-1: USB disconnect, device number 10 [ 636.378590][ T5356] Bluetooth: hci6: command 0x0c1a tx timeout [ 638.921014][T12400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.011965][T12400] ipt_REJECT: ECHOREPLY no longer supported. [ 639.049947][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.068848][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.165082][ T39] audit: type=1400 audit(1726087118.033:832): avc: denied { create } for pid=12399 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 639.300083][ T39] audit: type=1400 audit(1726087118.163:833): avc: denied { ioctl } for pid=12407 comm="syz.2.1599" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45170 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 640.329923][ T39] audit: type=1400 audit(1726087119.203:834): avc: denied { bind } for pid=12412 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 640.443840][T12418] syzkaller0: entered promiscuous mode [ 640.446173][T12418] syzkaller0: entered allmulticast mode [ 640.833554][ T39] audit: type=1400 audit(1726087119.703:835): avc: denied { ioctl } for pid=12414 comm="syz.0.1600" path="socket:[44196]" dev="sockfs" ino=44196 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 640.948369][ T5414] usb 20-1: device descriptor read/8, error -110 [ 641.299499][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.303249][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.345522][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.350674][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.354124][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.370642][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.374352][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.378014][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.381828][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.389412][ T5414] usb usb20-port1: attempt power cycle [ 641.396320][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.400453][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.405278][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.409509][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.413168][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.416062][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.419694][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.422943][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x4 [ 641.426140][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.429328][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.435862][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x2 [ 641.445908][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.449109][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.452159][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.455504][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.459318][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.462829][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.493326][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.496701][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.509325][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.512479][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.515652][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.519538][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 641.531531][ T10] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz0] on syz0 [ 642.042396][ T5414] usb usb20-port1: unable to enumerate USB device [ 644.903271][T12448] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 644.906729][T12448] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1610'. [ 645.125112][T12451] input: syz0 as /devices/virtual/input/input49 [ 647.831022][T12456] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 647.868511][T12456] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 648.131977][T12470] input: syz0 as /devices/virtual/input/input50 [ 648.135482][T12470] input: failed to attach handler leds to device input50, error: -6 [ 648.141501][T12463] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 649.921572][ T5356] Bluetooth: hci6: command 0x0c1a tx timeout [ 649.924353][ T5356] Bluetooth: hci7: command 0x0c1a tx timeout [ 650.051487][T12488] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1618'. [ 650.693470][T12496] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 650.697574][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 650.739450][T12497] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1620'. [ 650.774672][ T39] audit: type=1400 audit(1726087129.643:836): avc: denied { setopt } for pid=12492 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 650.788271][ T39] audit: type=1400 audit(1726087129.643:837): avc: denied { write } for pid=12492 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 650.807966][ T39] audit: type=1400 audit(1726087129.653:838): avc: denied { read } for pid=12492 comm="syz.0.1621" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 653.861060][T12524] syz.1.1627[12524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.861219][T12524] syz.1.1627[12524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.902731][T12524] [ 653.908600][T12524] ====================================================== [ 653.911328][T12524] WARNING: possible circular locking dependency detected [ 653.914384][T12524] 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 Not tainted [ 653.918538][T12524] ------------------------------------------------------ [ 653.923438][T12524] syz.1.1627/12524 is trying to acquire lock: [ 653.926178][T12524] ffff88807ffdbce0 (&pgdat->kswapd_wait){....}-{2:2}, at: __wake_up+0x1c/0x60 [ 653.930774][T12524] [ 653.930774][T12524] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 653.934532][T12524] ffff8880656a19f8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 653.938751][T12524] [ 653.938751][T12524] which lock already depends on the new lock. [ 653.938751][T12524] [ 653.943928][T12524] [ 653.943928][T12524] the existing dependency chain (in reverse order) is: [ 653.947832][T12524] [ 653.947832][T12524] -> #3 (&trie->lock){..-.}-{2:2}: [ 653.951300][T12524] _raw_spin_lock_irqsave+0x3a/0x60 [ 653.954107][T12524] trie_delete_elem+0xb0/0x820 [ 653.956847][T12524] 0xffffffffa0001fe4 [ 653.959006][T12524] bpf_trace_run4+0x245/0x5a0 [ 653.961285][T12524] __bpf_trace_sched_switch+0x13e/0x190 [ 653.964059][T12524] __traceiter_sched_switch+0x6c/0xc0 [ 653.967738][T12524] __schedule+0x17cf/0x5490 [ 653.970336][T12524] preempt_schedule_irq+0x51/0x90 [ 653.972995][T12524] irqentry_exit+0x36/0x90 [ 653.975468][T12524] asm_sysvec_call_function+0x1a/0x20 [ 653.978020][T12524] unwind_next_frame+0x3f/0x23a0 [ 653.980318][T12524] __unwind_start+0x5aa/0x880 [ 653.982692][T12524] arch_stack_walk+0xb2/0x170 [ 653.984989][T12524] stack_trace_save+0x95/0xd0 [ 653.987285][T12524] save_stack+0x162/0x1f0 [ 653.989443][T12524] __set_page_owner+0x8b/0x560 [ 653.991794][T12524] post_alloc_hook+0x2d1/0x350 [ 653.994084][T12524] get_page_from_freelist+0x1351/0x2e50 [ 653.996361][T12524] __alloc_pages_noprof+0x22b/0x2460 [ 653.998756][T12524] alloc_pages_mpol_noprof+0x275/0x610 [ 654.002177][T12524] folio_alloc_mpol_noprof+0x36/0xd0 [ 654.005009][T12524] vma_alloc_folio_noprof+0xee/0x1b0 [ 654.007593][T12524] do_wp_page+0xfd7/0x3430 [ 654.009646][T12524] __handle_mm_fault+0x2480/0x5660 [ 654.012170][T12524] handle_mm_fault+0x498/0xa60 [ 654.014449][T12524] do_user_addr_fault+0x7a3/0x13f0 [ 654.016882][T12524] exc_page_fault+0x5c/0xc0 [ 654.019045][T12524] asm_exc_page_fault+0x26/0x30 [ 654.021300][T12524] _copy_to_iter+0x4cd/0x1150 [ 654.023144][T12524] copy_page_to_iter+0xf1/0x180 [ 654.025780][T12524] process_vm_rw_core.constprop.0+0x5c9/0x9f0 [ 654.029608][T12524] process_vm_rw+0x301/0x360 [ 654.032532][T12524] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 654.035333][T12524] do_syscall_64+0xcd/0x250 [ 654.037807][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.040581][T12524] [ 654.040581][T12524] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 654.043721][T12524] _raw_spin_lock_nested+0x31/0x40 [ 654.046377][T12524] raw_spin_rq_lock_nested+0x29/0x130 [ 654.049226][T12524] task_fork_fair+0x73/0x250 [ 654.051503][T12524] sched_cgroup_fork+0x3cf/0x510 [ 654.053454][T12524] copy_process+0x43a1/0x8de0 [ 654.055540][T12524] kernel_clone+0xfd/0x960 [ 654.057638][T12524] user_mode_thread+0xb4/0xf0 [ 654.059548][T12524] rest_init+0x23/0x2b0 [ 654.061526][T12524] start_kernel+0x3df/0x4c0 [ 654.064162][T12524] x86_64_start_reservations+0x18/0x30 [ 654.067562][T12524] x86_64_start_kernel+0xb2/0xc0 [ 654.082833][T12524] common_startup_64+0x13e/0x148 [ 654.085272][T12524] [ 654.085272][T12524] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 654.088637][T12524] _raw_spin_lock_irqsave+0x3a/0x60 [ 654.091053][T12524] try_to_wake_up+0x9a/0x13e0 [ 654.093311][T12524] autoremove_wake_function+0x16/0x150 [ 654.100271][T12524] __wake_up_common+0x131/0x1e0 [ 654.103160][T12524] __wake_up+0x31/0x60 [ 654.105771][T12524] wakeup_kswapd+0x45e/0x640 [ 654.108897][T12524] get_page_from_freelist+0x9bb/0x2e50 [ 654.111962][T12524] __alloc_pages_noprof+0x22b/0x2460 [ 654.115181][T12524] alloc_pages_mpol_noprof+0x275/0x610 [ 654.117850][T12524] folio_alloc_mpol_noprof+0x36/0xd0 [ 654.120075][T12524] vma_alloc_folio_noprof+0xee/0x1b0 [ 654.122568][T12524] do_wp_page+0xfd7/0x3430 [ 654.125187][T12524] __handle_mm_fault+0x2480/0x5660 [ 654.128052][T12524] handle_mm_fault+0x498/0xa60 [ 654.130554][T12524] do_user_addr_fault+0x7a3/0x13f0 [ 654.133401][T12524] exc_page_fault+0x5c/0xc0 [ 654.136573][T12524] asm_exc_page_fault+0x26/0x30 [ 654.139864][T12524] _copy_to_iter+0x4cd/0x1150 [ 654.143051][T12524] copy_page_to_iter+0xf1/0x180 [ 654.146331][T12524] process_vm_rw_core.constprop.0+0x5c9/0x9f0 [ 654.150056][T12524] process_vm_rw+0x301/0x360 [ 654.153204][T12524] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 654.156957][T12524] do_syscall_64+0xcd/0x250 [ 654.160039][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.163309][T12524] [ 654.163309][T12524] -> #0 (&pgdat->kswapd_wait){....}-{2:2}: [ 654.167041][T12524] __lock_acquire+0x24ed/0x3cb0 [ 654.169760][T12524] lock_acquire+0x1b1/0x560 [ 654.172669][T12524] _raw_spin_lock_irqsave+0x3a/0x60 [ 654.177596][T12524] __wake_up+0x1c/0x60 [ 654.180625][T12524] wakeup_kswapd+0x45e/0x640 [ 654.183089][T12524] get_page_from_freelist+0x9bb/0x2e50 [ 654.186184][T12524] __alloc_pages_noprof+0x22b/0x2460 [ 654.189428][T12524] ___kmalloc_large_node+0x7f/0x1a0 [ 654.192836][T12524] __kmalloc_large_node_noprof+0x1c/0x70 [ 654.195787][T12524] __kmalloc_node_noprof.cold+0x5/0x5f [ 654.198681][T12524] bpf_map_kmalloc_node+0x98/0x4a0 [ 654.201209][T12524] trie_update_elem+0x1ef/0xe00 [ 654.201915][T12527] xt_l2tp: invalid flags combination: c [ 654.203420][T12524] bpf_map_update_value+0x2c1/0x6c0 [ 654.208313][T12524] map_update_elem+0x623/0x910 [ 654.210544][T12524] __sys_bpf+0x90c/0x4a00 [ 654.212593][T12524] __x64_sys_bpf+0x78/0xc0 [ 654.214804][T12524] do_syscall_64+0xcd/0x250 [ 654.217009][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.219960][T12524] [ 654.219960][T12524] other info that might help us debug this: [ 654.219960][T12524] [ 654.224435][T12524] Chain exists of: [ 654.224435][T12524] &pgdat->kswapd_wait --> &rq->__lock --> &trie->lock [ 654.224435][T12524] [ 654.231529][T12524] Possible unsafe locking scenario: [ 654.231529][T12524] [ 654.235493][T12524] CPU0 CPU1 [ 654.238395][T12524] ---- ---- [ 654.241176][T12524] lock(&trie->lock); [ 654.241190][T12524] lock(&rq->__lock); [ 654.241202][T12524] lock(&trie->lock); [ 654.241212][T12524] lock(&pgdat->kswapd_wait); [ 654.241222][T12524] [ 654.241222][T12524] *** DEADLOCK *** [ 654.241222][T12524] [ 654.241225][T12524] 2 locks held by syz.1.1627/12524: [ 654.241234][T12524] #0: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x24b/0x6c0 [ 654.241284][T12524] #1: ffff8880656a19f8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 654.241340][T12524] [ 654.241340][T12524] stack backtrace: [ 654.241347][T12524] CPU: 2 UID: 0 PID: 12524 Comm: syz.1.1627 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 654.241372][T12524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 654.241385][T12524] Call Trace: [ 654.241394][T12524] [ 654.241401][T12524] dump_stack_lvl+0x116/0x1f0 [ 654.241421][T12524] check_noncircular+0x31a/0x400 [ 654.241448][T12524] ? __pfx_check_noncircular+0x10/0x10 [ 654.241472][T12524] ? mark_lock+0xb5/0xc60 [ 654.241499][T12524] ? lockdep_lock+0xc6/0x200 [ 654.241518][T12524] ? __pfx_lockdep_lock+0x10/0x10 [ 654.241536][T12524] __lock_acquire+0x24ed/0x3cb0 [ 654.241562][T12524] ? __pfx___lock_acquire+0x10/0x10 [ 654.241585][T12524] ? set_pfnblock_flags_mask+0x290/0x480 [ 654.241610][T12524] ? __mod_zone_page_state+0xcc/0x1a0 [ 654.241634][T12524] lock_acquire+0x1b1/0x560 [ 654.241657][T12524] ? __wake_up+0x1c/0x60 [ 654.241680][T12524] ? __pfx_lock_acquire+0x10/0x10 [ 654.241698][T12524] ? rcu_is_watching+0x12/0xc0 [ 654.241718][T12524] ? trace_mm_page_alloc_zone_locked+0x123/0x190 [ 654.241741][T12524] ? find_held_lock+0x2d/0x110 [ 654.241759][T12524] ? __zone_watermark_ok+0x252/0x4d0 [ 654.241776][T12524] _raw_spin_lock_irqsave+0x3a/0x60 [ 654.241796][T12524] ? __wake_up+0x1c/0x60 [ 654.241817][T12524] __wake_up+0x1c/0x60 [ 654.241840][T12524] wakeup_kswapd+0x45e/0x640 [ 654.241868][T12524] get_page_from_freelist+0x9bb/0x2e50 [ 654.241894][T12524] ? __pfx_get_page_from_freelist+0x10/0x10 [ 654.241914][T12524] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 654.241939][T12524] ? __pfx_mark_lock+0x10/0x10 [ 654.241965][T12524] __alloc_pages_noprof+0x22b/0x2460 [ 654.241986][T12524] ? hlock_class+0x4e/0x130 [ 654.242005][T12524] ? __lock_acquire+0xbdd/0x3cb0 [ 654.242033][T12524] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 654.242053][T12524] ? __pfx___lock_acquire+0x10/0x10 [ 654.242083][T12524] ? lock_acquire+0x1b1/0x560 [ 654.242109][T12524] ? find_held_lock+0x2d/0x110 [ 654.242133][T12524] ___kmalloc_large_node+0x7f/0x1a0 [ 654.242163][T12524] __kmalloc_large_node_noprof+0x1c/0x70 [ 654.242187][T12524] __kmalloc_node_noprof.cold+0x5/0x5f [ 654.242207][T12524] ? bpf_map_kmalloc_node+0x98/0x4a0 [ 654.242232][T12524] bpf_map_kmalloc_node+0x98/0x4a0 [ 654.242255][T12524] trie_update_elem+0x1ef/0xe00 [ 654.242284][T12524] bpf_map_update_value+0x2c1/0x6c0 [ 654.242308][T12524] map_update_elem+0x623/0x910 [ 654.242332][T12524] ? __pfx_map_update_elem+0x10/0x10 [ 654.242357][T12524] ? selinux_bpf+0xee/0x130 [ 654.242380][T12524] ? bpf_lsm_bpf+0x9/0x10 [ 654.242397][T12524] __sys_bpf+0x90c/0x4a00 [ 654.242416][T12524] ? __pfx___sys_bpf+0x10/0x10 [ 654.242434][T12524] ? __pfx___lock_acquire+0x10/0x10 [ 654.242461][T12524] ? do_futex+0x123/0x350 [ 654.242485][T12524] ? __pfx_do_futex+0x10/0x10 [ 654.242512][T12524] ? xfd_validate_state+0x5d/0x180 [ 654.242543][T12524] __x64_sys_bpf+0x78/0xc0 [ 654.405871][T12524] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.408311][T12524] do_syscall_64+0xcd/0x250 [ 654.410531][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.413753][T12524] RIP: 0033:0x7f533677def9 [ 654.415647][T12524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.423986][T12524] RSP: 002b:00007f5337641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 654.427709][T12524] RAX: ffffffffffffffda RBX: 00007f5336935f80 RCX: 00007f533677def9 [ 654.431021][T12524] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000002 [ 654.443355][T12524] RBP: 00007f53367f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 654.446857][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.450417][T12524] R13: 0000000000000000 R14: 00007f5336935f80 R15: 00007ffd93712688 [ 654.454643][T12524] [ 655.096000][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.294358][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.425870][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.558089][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.767615][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.794011][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.804386][ T45] bond0 (unregistering): Released all slaves [ 656.593800][ T45] hsr_slave_0: left promiscuous mode [ 656.599361][ T45] hsr_slave_1: left promiscuous mode [ 656.602557][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.605687][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.626131][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.629428][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.634459][ T45] veth1_macvtap: left promiscuous mode [ 656.637065][ T45] veth0_macvtap: left promiscuous mode [ 656.640496][ T45] veth1_vlan: left promiscuous mode [ 656.642946][ T45] veth0_vlan: left promiscuous mode [ 657.176320][ T45] team0 (unregistering): Port device team_slave_1 removed [ 657.203943][ T45] team0 (unregistering): Port device team_slave_0 removed [ 658.203178][ T45] IPVS: stop unused estimator thread 0... [ 658.304711][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.387663][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.506007][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.561685][ T39] audit: type=1400 audit(1726087137.433:839): avc: denied { sys_chroot } for pid=12569 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 658.573950][ T39] audit: type=1400 audit(1726087137.433:840): avc: denied { setgid } for pid=12569 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 658.583929][ T39] audit: type=1400 audit(1726087137.433:841): avc: denied { setrlimit } for pid=12569 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 658.612709][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.026444][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.074868][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.150092][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.219278][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.392673][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.522127][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.623217][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.707300][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.851542][ T45] bridge_slave_1: left allmulticast mode [ 659.855312][ T45] bridge_slave_1: left promiscuous mode [ 659.860348][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.872172][ T45] bridge_slave_0: left allmulticast mode [ 659.874735][ T45] bridge_slave_0: left promiscuous mode [ 659.877350][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.886609][ T45] bridge_slave_1: left allmulticast mode [ 659.890032][ T45] bridge_slave_1: left promiscuous mode [ 659.892358][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.897222][ T45] bridge_slave_0: left allmulticast mode [ 659.901094][ T45] bridge_slave_0: left promiscuous mode [ 659.903725][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.284858][ T45] dvmrp1 (unregistering): left allmulticast mode [ 660.666041][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.674576][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.680371][ T45] bond0 (unregistering): Released all slaves [ 660.701939][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.707918][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.716270][ T45] bond0 (unregistering): Released all slaves [ 660.737463][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.748490][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.756116][ T45] bond0 (unregistering): Released all slaves [ 660.764937][ T45] bond1 (unregistering): Released all slaves [ 660.914929][ T45] tipc: Left network mode [ 661.110217][ T45] IPVS: stopping backup sync thread 10821 ... [ 662.510828][ T45] hsr_slave_0: left promiscuous mode [ 662.513926][ T45] hsr_slave_1: left promiscuous mode [ 662.516998][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.520754][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.524691][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.527702][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.535076][ T45] hsr_slave_0: left promiscuous mode [ 662.541129][ T45] hsr_slave_1: left promiscuous mode [ 662.550102][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.553262][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.557817][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.568935][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.585393][ T45] hsr_slave_0: left promiscuous mode [ 662.591297][ T45] hsr_slave_1: left promiscuous mode [ 662.594323][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.597237][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.601780][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.604965][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.626412][ T45] veth1_macvtap: left promiscuous mode [ 662.629142][ T45] veth0_macvtap: left promiscuous mode [ 662.631700][ T45] veth1_vlan: left promiscuous mode [ 662.634108][ T45] veth0_vlan: left promiscuous mode [ 662.637923][ T45] veth1_macvtap: left promiscuous mode [ 662.640968][ T45] veth0_macvtap: left promiscuous mode [ 662.643562][ T45] veth1_vlan: left promiscuous mode [ 662.645785][ T45] veth0_vlan: left promiscuous mode [ 662.650001][ T45] veth1_macvtap: left promiscuous mode [ 662.652359][ T45] veth0_macvtap: left promiscuous mode [ 662.654793][ T45] veth1_vlan: left promiscuous mode [ 662.657056][ T45] veth0_vlan: left promiscuous mode [ 663.207356][ T45] team0 (unregistering): Port device team_slave_1 removed [ 663.340186][ T45] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 02:22:47 Registers: info registers vcpu 0 CPU#0 RAX=000000000000e048 RBX=0000000000000003 RCX=ffffffff8b02c2c8 RDX=ffff88802c408000 RSI=0000000000000003 RDI=0000000000000000 RBP=ffff8880235b3420 RSP=ffffc9000599fab0 R8 =0000000000000000 R9 =0000000000000003 R10=000000000000000c R11=ffffffff8b4e5fe0 R12=000000000000000c R13=0000000000000003 R14=00007f78f36fa000 R15=00007f78f2b0ffff RIP=ffffffff818bd0e1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f78f37636c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78f3762f98 CR3=0000000033c70000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f29f181a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f29f1827 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f29f1821 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f29f1835 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f29f18bb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f29f1999 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f2b0a488 00007f78f2b0a480 00007f78f2b0a478 00007f78f2b0a450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f366d100 00007f78f2b0a440 00007f78f2b0a458 00007f78f2b0a4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78f2b0a498 00007f78f2b0a490 00007f78f2b0a488 00007f78f2b0a480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f007361645f 5f006d6963746567 5f6f7364765f5f00 656d69745f65675f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f004900414e 41005f444c005242 494c444449005f00 4c00574f4e5f444e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc90000887510 RCX=ffffffff813cef46 RDX=ffff88801def8000 RSI=ffffffff813cef6b RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90000887488 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc90000887510 R13=ffffffff81776c10 R14=ffffc900008875d0 R15=ffff88801def8000 RIP=ffffffff818bd0b6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000002 CR3=000000004bd3a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b0701ea ffffffff887cb2cd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff887cb2cd ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f181a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f1827 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f1821 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f1835 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f18bb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f1999 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813084af ffffffff813084af ffffffff8100a0d8 ffffffff8100a0af ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f533746d100 00007f533690a440 00007f5300040008 000c00000010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f533690a498 00007f533690a490 00007f533690a488 00007f533690a480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7ebe39544fcf7f1 4ac479a685a24db5 a1e1cfc6af417356 39da57c7bc1a4580 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 008b25168d2412af d9bdcd48a01def93 279d6ab0cef85c77 d9168d8d0e990867 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2da2a0810c926ab3 facb5538b3af1f6c 3baf97ab7b696a60 555f8d4464d64a06 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9824c4ebcd36e865 720fd1cceccde452 e85c444f14d5965a 45860b49a7044263 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa6b5276014c9d28 46eb6f9ea8b091bc c7ebe39544fcf7f1 4ac479a685a24db5 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f007361645f 5f006d6963746567 5f6f7364765f5f00 656d69745f65675f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f004900414e 41005f444c005242 494c444449005f00 4c00574f4e5f444e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85030e45 RDI=ffffffff9a5b4fa0 RBP=ffffffff9a5b4f60 RSP=ffffc900058d6df0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000035 R14=ffffffff85030de0 R15=0000000000000000 RIP=ffffffff85030e6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f53376416c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3210eff8 CR3=0000000029aa8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008100001 Opmask01=0000000001000001 Opmask02=00000000fcf00000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5337640bf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f181a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f1827 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f1821 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f1835 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f18bb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53367f1999 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f72702f00303030 3030310064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a57550a00151515 151514004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f007361645f 5f006d6963746567 5f6f7364765f5f00 656d69745f65675f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f004900414e 41005f444c005242 494c444449005f00 4c00574f4e5f444e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff8e8788ea RBX=ffffffff8e8788e6 RCX=ffffc9002fe70000 RDX=0000000000040000 RSI=ffffffff848efb0a RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90005916ae0 R8 =0000000000000005 R9 =0000000000000019 R10=000000000000000e R11=ffff888031fe0030 R12=dffffc0000000000 R13=0000000000000000 R14=000000000000000e R15=ffff888031fe0000 RIP=ffffffff818bd050 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbc7f2d46c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3211fffc CR3=000000004bfd8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc40033db0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97685f181a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97685f1827 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97685f1821 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97685f1835 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97685f18bb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97685f1999 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003e0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 00000000000003e0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f007361645f 5f006d6963746567 5f6f7364765f5f00 656d69745f65675f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f004900414e 41005f444c005242 494c444449005f00 4c00574f4e5f444e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000