last executing test programs: 1.819568153s ago: executing program 3 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060101000000000000000000fff50005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) 1.819051133s ago: executing program 3 (id=1035): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x280300, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0x6, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@inode32}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000000d090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20}, 0x94) socket$inet6(0x2d, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x20000000, 0x48802) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.734227343s ago: executing program 3 (id=1036): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x64, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x4}, [@typed={0x4, 0x123}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000006ac0), 0x0, 0x0) fstatfs(r1, &(0x7f0000007580)=""/19) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000240)="481462becd64ec524acf6a424bac265a0c4fbd8363f630923f4e95f680b401c4faf92f101b7faa956290bd85bd6cb983883e407c47543f887d5a3b8b6ce3", 0x3e}, {&(0x7f0000000400)="de22d3386e03f9425b04eb7ad1f9caa335cd12021936c42a52c7334bcd0e46ee90c5c3f5d50c5ed0fc2bca81d9bdcbb69d940deb94d6e5bf560b0743b05b8f22b3e8e945e88a18764024d1e1e12604f88d157a882b4f7165351b5e5e5bfe9cb3539d654a0633f0ed7e46e1f8d92456c20db9b17b4cd42c1920a8cd183eb8194bf1c26229bd1b66d0ca07798ea29662e6ce47682f6711", 0x96}, {0x0}, {&(0x7f0000000580)="25a1a1b4adcb4547ec38a910cad98b220bc1a7dca3ee17c2b45cafa56113eb3106e2c4c112a57b0c90d6282348acd5636a678f9e334137435f", 0x39}, {&(0x7f00000005c0)="d910fa99e2b63503b47d9992cabc74c23f009e5637802fedfb2868383032a8b156cc7aea34b3173f1ed42c6ae1064745411bdad0a0b67ebb868b5566f28545c200c52637a96a359cac254b025702ab50ea120b57f4c05dc74c88384fc66bc1dfc7b7bc6691c2cf3cccd3f46cb1906e82af2a99bd597d984ca568722741479d6b4ffd9de2a140f82a81b3f6a5ddb732f45657e000c27a216870a34726e072614dae73af44f91c06feadbec2a42522ee84a820372c36a9c7b8901b9f7d49", 0xbd}, {&(0x7f00000006c0)}, {0x0}, {&(0x7f0000000800)="6c969e64810ca34d06204ac25123ceaf38efb9ac7e3ee654f8dd2e95808d3dc1daad0258375a2bc509adf632551ffee1feecb71851532b96ab564ab01df5f3c0b616bcd0ba96ace0489e54ce282c9cc29e1d09e9ce3bde27ce55d42082ee00e9a746c19360723a1ce04844cbab7d11366c454361de16ce8d6f8848c9023633eebc7e40f0634e4aaf236598fd90186a594e67d219de5e42deb0d68c15ac72afcc9a63d09c1850686c9ceacaa50dbd", 0xae}, {&(0x7f00000008c0)="14f2aeebd44f422c79f8306bf36d13d4870f9aaa4960ce10377f4e9e0efe08240cee7fdb471559e434adfd00c1f5d928f01885842cab31c9e66ed5b873d534a51f7ab623771405d57143c980a56eade7615639385f5823c96c1ecacbfb310f8b23c893bad9eca4108141b333f56bf490ab51075bf1ed2b4d15e42d433e4fe1e7fc9c", 0x82}, {&(0x7f0000000a00)="9158fbb275afc370be7b2aed2ec70623a52225c2f00dc3435a38f665d570952114af109ed335d16cee61bd8c19adf3c82585c984adde8de363d5181525fa7703016ea226b386e8f9aefa26aa2802634896dd60dee91ac33a", 0x58}], 0xa}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300200000000008400800000008000300", @ANYRES32=r6, @ANYBLOB="08000600e322d60af4b58cffd26598f8f9bfaa5ca715d96fde88622feb0329ceeca783", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a3000000000050005000200000014000780050015000200000008001240000a0000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.60038004s ago: executing program 3 (id=1037): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@hyper}) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@hyper}) (async) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) (async) 830.686389ms ago: executing program 1 (id=1043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000240)="660f38804727b800018ee0f30f0986ed0f20e06635400000000f22e00f01cb65660f005e000f01320fe01c0f01c2", 0x2e}], 0x1, 0x4, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8000) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000fe00fd08"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x10}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000003c0)="b805000000b96100000067400f201b26adc4e28d92946d00780000410ff683ef00000066b83b010f00d066ba6100ecf0299baf0000000f38041766ba4200ed66400f1ad8", 0x44}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 661.164862ms ago: executing program 2 (id=1044): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x280300, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0x6, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@inode32}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000000d090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20}, 0x94) socket$inet6(0x2d, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 606.421663ms ago: executing program 2 (id=1046): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xc, 0x100) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r4, 0x0, 0x2, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x2000000, r6}) 551.146167ms ago: executing program 2 (id=1048): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0xfffffffa, @local, 0xa7ea5c6}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getrandom(0xfffffffffffffffe, 0xffffffffffffff9b, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0x1, 0x9, 0x0, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0xa}}}, 0x7) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x101, 0x2d, 0x1, 0x5149, 0x8, 0x20000006, 0xffb, 0x0, 0xffffffff, 0x100, 0x401, 0x1, 0xd, 0x1, 0x5f, 0x4, 0x0, 0x1a445, 0x3, 0x40000003, 0x85, 0xffdffffb, 0x0, 0x307, 0x400002, 0xe69, 0x8, 0x1ff, 0x109, 0x7, 0x3]}) getrandom(&(0x7f0000000000)=""/219, 0xdb, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r3, @in={{0x2, 0x4e23, @empty}}}, 0x90) socket(0x400000000010, 0x3, 0x0) 550.957024ms ago: executing program 1 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200000, 0x85) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000480)=0xffff8001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x9, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @dev, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r4, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x4000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1020000}]}}}}}}}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 481.300182ms ago: executing program 2 (id=1050): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x28, r1, 0xb1d, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x80c0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') 479.82074ms ago: executing program 1 (id=1051): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x424003, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000200)) (async) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003c80)={0x0, [{0x1, 0x6a0, 0xc18, &(0x7f00000003c0)="759fc8e0b24f5137aa4d9138daf759613a0122da5ba7992cc8d7541894cb2ed0e53095755c8f5a81f28a79c175de982bdd9ecf601ae13d0f836c0d963c4adf69c56b455dd2f649cee9d4d6a15e19923c420f39ccebb1ba406910979a0929f15578927391bf3d58eec671e79b40aaead1c156bccd329d7897af8250d901e4f610152a6dbf15057e1a15858b6b543e44006357abaf46d74883db1f59ea8d0e4273256d5385308aafaa832f195013bd2f5c8dae42aadac630174de6ed72588f204d7b60928147f576a1485e65713e1fbf54f1c93021"}, {0x3, 0x0, 0xfffffffd, &(0x7f00000001c0)}, {0x1, 0x6c8, 0x26b, &(0x7f0000000500)="5f8babe8d5c133d532def1508c523c029cfd8119466a5931f9a8512f7c4d6878ab192d185642f5ce5af7835a235572714c73a99690d048b54342bc2c49e8a50dd11fcc02570214d959cd2a1ea038e7b22913ee77fdeb41c87ea67c8911d93358c7ff0dd7698a02ad8c26ba294ff51a80d0b3f6d194e3c1cc4a05c9f7e65421a28a9fb6e223886605ae660b5c340eda5fd8596a3aa10879457b3aa988e04abb010584a8b55d2f9219daa18f0e684feb30cd73b0a36196d0fb6e4fe032e09b2a8f42ff8752d5b348e3a31937ed70c4e4796da8582a5bc851f2af"}, {0x2, 0x608, 0x2, &(0x7f0000000600)="67f1a6e8acf9e9c6310b861f2941e6b0a8c225fdafce43a35b8d1a697a5ee7d7940f9a2c05d656c6d6946182a2d82460d3749c75be0c0a62ca4bc7027212cea0f008f6f596dcdae3827051b2aa40d0be713ba9f2bd28086e3dfe221ab8894b174850f5e96291a2e8b085bf217004ada4934db350278b59a15bc10dd0ad1b40d4405a5d4ad54d6f416ea9b557598fc9f404c3236bbfe506edc57a9bb2f0055500f0570895e433bd52997e7581e885cbf85e0863c7f8479e4348a74a8914aaa3b29f"}, {0x1, 0x8000, 0x0, &(0x7f0000000800)="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"}, {0x3, 0x1f0, 0x1, &(0x7f00000002c0)="7db9c540b2b7094c61fc306fa3717ece13df29c1e8302c39e615ec10d0e0398af05a91009ef404649512453aa206b2490992bb53f27b4b02633c936fa818"}, {0x2, 0x6e0, 0x4, &(0x7f0000001800)="8962e2241364d73ac5beb3b8e010d076a1fb7c293d88529e8bb5c206bebf6635b241888ecb083c3dc7f7a6e527e30df3603bbb3a2751c5b621e7f7920b4af6b752111961c49b5b59e525997238e7f4e3416caf49cc08398b3d6c2b5b6b50f7d8fd59331a7d58a0fb6506464c2899eb267e46a15b5e7b807d92caaa7da05925943114cfd2ce8a57820d7e39c50a6bf56f585345a8cba006c43100fdcfcfeb7b37d7a9917cd90e098b5b934d946584c702d8071e0182001bc65323ef89a915abfe899bac416f4254b31bf90e29c6655b07e8fd7a8bd2aeef155043fe14"}, {0x3, 0x170, 0x1, &(0x7f0000000700)="446a6f3e406de7a31711a8cf8fa3af9e5897399d7e1b8662aff49b9583c36f723fbc53e813916dd07f3ff72fb7c8"}, {0x2, 0x488, 0x0, &(0x7f0000001900)="735696b00d0be7529597e0bb510dce48f22ad2911b8ea0b62ea5d8f6503a675957fba27e25c339522689ed629ce927d9e4965dd49afd3a1b48e30ac0401a432e7a5a4b73110d2274f16de74907fa47a064e356f5be745a50d61fbc5d78a661323522da62f758f6886a3f1d5333f3e0eae891230d2fc3ea5b3eeea5b15f6413bbffe2af44c252578646e258852a30d73920"}, {0x4, 0x8000, 0x2, &(0x7f00000019c0)="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"}, {0x2, 0x638, 0x6, &(0x7f00000029c0)="1044d650fb94d429b558b43c0ffa7f16d9612523a1ea8d459386e450b2f270837d8fa68efb626520b82c69894556c82cb9e202a9488c5aaeae6af1f30e75efdf22cc61dc3d0b496c13b905554442e8ed275dfcd5d8055c0c297f213b1f6f7845d8c41cff1aaf6e6a86dc8efc2b429bce141e65f58aa67e498354743a0e35f60e0852470c5c1a90edbbb83fd6020e08c0eb861d588e9cf027798b16b6d4f43c0b177978e48df78ac3d1b6b696869003d1708894623b7e991f97ab6c42a0b31dfb378fa148d4cb01"}, {0x2, 0x0, 0x62, &(0x7f0000000740)}, {0x1, 0x798, 0x3, &(0x7f0000002ac0)="1445eba11599ba1ab844422cc22db3974b7419ceca05ba4116308fecc57918162ddb5032652893011c87e49ac1eca1f5d944808572c59010275b7349b96eae4b96cc3325765db31e90e848bcef137da4c0f6edcec43bc413abb45d507ebe7bfb60b5cb6a50f269a79a685fc5f45c2effcdbb1f506dc1f1786845797627f9838945cd4a4374d75a786d708bcd62ca5928ad2cc4bbcbbe241fd30de18fc14078670ebbed4f7ede3ef112df69919dab14b1d878feb39483f5a3abb57bc861a05cd190842236c7c56090874be946dbb636f0dab6b0019cd05ec180b3cd1c4411254e0562da55f4b6d6e89ea8cd3c38d9d67e195541"}, {0x0, 0x8000, 0x4, &(0x7f0000002bc0)="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"}, {0x1, 0x2c0, 0x7f, &(0x7f0000003bc0)="1501380a4f52dabad293fa942c01b5bdc26edd02c787ee76a326b1432c742a9b6491c4dc66f614eca127401d0f30c2edbfa6fd03f4c5541c086f79314381b5ef11021bb22ee3e45dc9e8ce369b3c03325e75b72453ee8d2e"}, {0x3, 0x80, 0x6, &(0x7f0000003c40)="2174c7dcf438e19f7bdfa34de1ad5149"}]}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = dup(r11) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="00006003aaaaaaaaaaaabbbbbbbbbbbb080045611ea3fed62b9a962f907800009078"], 0x2e) (async) write$tun(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="00006003aaaaaaaaaaaabbbbbbbbbbbb080045611ea3fed62b9a962f907800009078"], 0x2e) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) 479.452366ms ago: executing program 0 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000020000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) 431.165663ms ago: executing program 0 (id=1053): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xc, 0x100) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r4, 0x0, 0x2, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) (fail_nth: 13) 430.971932ms ago: executing program 2 (id=1054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001800010000000000000000000200000002000009002200000600150004000000100016800c000100000000000000000f31dc0b46dd0e76aea1688ddc3bb9b52dace46032657cd5bd71286cd13141d71e1c2f49d2cf203e677e91717936067806cb0bc080684831cda652ef40a4c3984ba31de58a37acb45916798dee35f97ec0f21f0ba79e48c42b179ad48ab90c7d21f799a95d6608190fd6637ae6553efccd673200b6c7a0111303ac2411f8f8fdcc7c105be2ff8797fd559011da47c103fe1fde4422b4c322c5a89511ab16da1262deeb21f73a027117eeeaa2f840c34884f672fc23105767af6378e708edd11b472229e423c907ed01337febc012d17a5f1aebe2bd4c29b11c55851317483a8152fd1b3ed542ee39f0d404014fcd4689640d4196e9ca7697e45037d5e89fe6e678563ed9e13e6d6c827fa1958a84f135bad3f47a97954486355c2523d5c484ada5c45147af14aeaef382be7fe330d4c26eb132c03178cf38da"], 0x34}, 0x1, 0x0, 0x0, 0x10001}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x5000, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000114dbdf25080001000000000008000100000000000800010000000000080001000200"/48], 0x30}}, 0x0) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/211, 0xd3}], 0x2}, 0x10002) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000240)={r5}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 429.030966ms ago: executing program 0 (id=1055): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x280300, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0x6, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@inode32}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000000d090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20}, 0x94) socket$inet6(0x2d, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 369.104134ms ago: executing program 2 (id=1056): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 368.204561ms ago: executing program 0 (id=1057): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xc, 0x100) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r4, 0x0, 0x2, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x3000000, r6}) 310.690423ms ago: executing program 0 (id=1058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) r2 = open(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000008c0)={r4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x3}, &(0x7f0000000300)=0x8) r5 = socket$kcm(0x21, 0x2, 0xa) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x402000) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x20000054) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xc, 0x61, 0x11, 0x88}, [@ldst={0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) (async) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000008c0)={r4}, &(0x7f0000000340)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x3}, &(0x7f0000000300)=0x8) (async) socket$kcm(0x21, 0x2, 0xa) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x402000) (async) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x20000054) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xc, 0x61, 0x11, 0x88}, [@ldst={0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) (async) 231.330314ms ago: executing program 0 (id=1059): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x100, 0x4848e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x20004090) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x10101, 0x0) write(r1, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) (async) sendfile(r2, r1, &(0x7f0000000000)=0x7ff, 0xe50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) (async) syz_usb_connect(0x5, 0x2c, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0xbe, 0x67, 0x2f, 0x10, 0x5ac, 0x241, 0xd09c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x9, 0x4, 0xa0, 0xf8, [{{0x9, 0x4, 0x81, 0x2, 0x0, 0x2, 0x2, 0xff, 0xfc, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x9, 0x8}]}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r5, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 91.080966ms ago: executing program 1 (id=1060): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x8) r1 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r0, 0x37ce, 0xb148, 0x4, &(0x7f0000000000)={[0xf]}, 0x8) syz_open_dev$dri(&(0x7f00000008c0), 0xc0, 0x100) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x20000000, 0x48802) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000740)={0x0, 0x0, r4, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x804, &(0x7f00000000c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0xd074}}]}}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000380)={r5, 0x2, 0x1ff, 0x0, 0x0, [], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20800000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) close(r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r8, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x28, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0xf9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) read$char_usb(r0, &(0x7f0000000040)=""/169, 0xa9) 90.790383ms ago: executing program 1 (id=1061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000f50005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) 931.906µs ago: executing program 3 (id=1062): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 186.265µs ago: executing program 1 (id=1063): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xc, 0x100) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r4, 0x0, 0x2, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) (fail_nth: 14) 0s ago: executing program 3 (id=1064): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c25, 0xa, 0x1, 0x0, 0x2, 0x401, 0xc, 0x10001, 0x7ffd, 0xfe, 0x2, 0xffffffff, 0x200004, 0x403, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000007, 0x99, 0xfa, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="90", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000010c0)={0x0, 0x8}, &(0x7f0000001100)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c000100400000000600000082370c4ad9d73df1ff6ad058724338000c000100ff0400003f8c0000d8fd010006000000", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x47, &(0x7f0000000040)=""/71}, &(0x7f0000000180)="851666ce20db96ab0c7d83e114e7c41762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f1c4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc8075451bcd5c081a8db84ff509a2f874daf6b3ddff977834d87", 0x0, 0x10, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) kernel console output (not intermixed with test programs): ace: [ 80.683456][ T7435] [ 80.683463][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 80.683488][ T7435] should_fail_ex+0x512/0x640 [ 80.683518][ T7435] should_fail_alloc_page+0xe7/0x130 [ 80.683543][ T7435] prepare_alloc_pages+0x401/0x670 [ 80.683571][ T7435] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 80.683592][ T7435] ? __pfx_stack_trace_save+0x10/0x10 [ 80.683612][ T7435] ? stack_depot_save_flags+0x29/0x9b0 [ 80.683640][ T7435] ? kasan_save_stack+0x42/0x60 [ 80.683671][ T7435] ? kasan_save_stack+0x33/0x60 [ 80.683690][ T7435] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 80.683706][ T7435] ? security_inode_alloc+0x3b/0x2b0 [ 80.683723][ T7435] ? alloc_inode+0x86/0x240 [ 80.683741][ T7435] ? __debugfs_create_file+0x105/0x530 [ 80.683756][ T7435] ? debugfs_create_file_short+0x41/0x60 [ 80.683771][ T7435] ? ieee80211_debugfs_recreate_netdev+0x426/0x17a0 [ 80.683791][ T7435] ? ieee80211_if_change_type+0x5c9/0x7a0 [ 80.683810][ T7435] ? ieee80211_change_iface+0xa5/0x500 [ 80.683828][ T7435] ? cfg80211_change_iface+0x55d/0xce0 [ 80.683846][ T7435] ? look_up_lock_class+0x6b/0x130 [ 80.683869][ T7435] ? netlink_sendmsg+0x8c8/0xdd0 [ 80.683888][ T7435] ? __sys_sendto+0x4a3/0x520 [ 80.683912][ T7435] ? __x64_sys_sendto+0xe0/0x1c0 [ 80.683934][ T7435] ? do_syscall_64+0xcd/0xf80 [ 80.683958][ T7435] ? __lock_acquire+0x436/0x2890 [ 80.683976][ T7435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.683996][ T7435] ? policy_nodemask+0xea/0x4e0 [ 80.684020][ T7435] alloc_pages_mpol+0x1fb/0x550 [ 80.684042][ T7435] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 80.684065][ T7435] ? find_held_lock+0x2b/0x80 [ 80.684093][ T7435] alloc_pages_noprof+0x131/0x390 [ 80.684116][ T7435] get_free_pages_noprof+0x10/0xb0 [ 80.684135][ T7435] inode_doinit_with_dentry+0x8d5/0x12e0 [ 80.684162][ T7435] ? inode_set_ctime_current+0x29a/0x7f0 [ 80.684187][ T7435] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 80.684208][ T7435] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 80.684235][ T7435] ? new_inode+0x15a/0x1c0 [ 80.684260][ T7435] selinux_d_instantiate+0x26/0x30 [ 80.684281][ T7435] security_d_instantiate+0x142/0x1a0 [ 80.684304][ T7435] d_make_persistent+0x6a/0x190 [ 80.684323][ T7435] __debugfs_create_file+0x26b/0x530 [ 80.684344][ T7435] debugfs_create_file_short+0x41/0x60 [ 80.684365][ T7435] ieee80211_debugfs_recreate_netdev+0x426/0x17a0 [ 80.684386][ T7435] ? lockdep_init_map_type+0x5c/0x270 [ 80.684406][ T7435] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 80.684426][ T7435] ? __raw_spin_lock_init+0x3a/0x110 [ 80.684450][ T7435] ? ieee80211_link_setup+0x5e/0x90 [ 80.684469][ T7435] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 80.684600][ T7435] ieee80211_if_change_type+0x5c9/0x7a0 [ 80.684622][ T7435] ieee80211_change_iface+0xa5/0x500 [ 80.684640][ T7435] cfg80211_change_iface+0x55d/0xce0 [ 80.684662][ T7435] nl80211_set_interface+0x8e0/0xc80 [ 80.684688][ T7435] ? __pfx_nl80211_set_interface+0x10/0x10 [ 80.684713][ T7435] ? nl80211_pre_doit+0x71e/0xb10 [ 80.684728][ T7435] ? nl80211_pre_doit+0x1b0/0xb10 [ 80.684746][ T7435] genl_family_rcv_msg_doit+0x209/0x2f0 [ 80.684770][ T7435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 80.684801][ T7435] ? bpf_lsm_capable+0x9/0x10 [ 80.684818][ T7435] ? security_capable+0x7e/0x260 [ 80.684837][ T7435] ? ns_capable+0xd7/0x110 [ 80.684862][ T7435] genl_rcv_msg+0x55c/0x800 [ 80.684887][ T7435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.684907][ T7435] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 80.684922][ T7435] ? __pfx_nl80211_set_interface+0x10/0x10 [ 80.684941][ T7435] ? __pfx_nl80211_post_doit+0x10/0x10 [ 80.684970][ T7435] netlink_rcv_skb+0x158/0x420 [ 80.684990][ T7435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.685012][ T7435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.685043][ T7435] ? netlink_deliver_tap+0x1ae/0xd30 [ 80.685067][ T7435] genl_rcv+0x28/0x40 [ 80.685088][ T7435] netlink_unicast+0x5aa/0x870 [ 80.685111][ T7435] ? __pfx_netlink_unicast+0x10/0x10 [ 80.685141][ T7435] netlink_sendmsg+0x8c8/0xdd0 [ 80.685167][ T7435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.685197][ T7435] __sys_sendto+0x4a3/0x520 [ 80.685223][ T7435] ? __pfx___sys_sendto+0x10/0x10 [ 80.685278][ T7435] ? __pfx_fput_close_sync+0x10/0x10 [ 80.685295][ T7435] ? dnotify_flush+0x79/0x4c0 [ 80.685318][ T7435] __x64_sys_sendto+0xe0/0x1c0 [ 80.685341][ T7435] ? do_syscall_64+0x91/0xf80 [ 80.685361][ T7435] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.685379][ T7435] do_syscall_64+0xcd/0xf80 [ 80.685400][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.685417][ T7435] RIP: 0033:0x7ff12319165c [ 80.685432][ T7435] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 80.685446][ T7435] RSP: 002b:00007ff1213cbe20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 80.685462][ T7435] RAX: ffffffffffffffda RBX: 00007ff1213cbfa0 RCX: 00007ff12319165c [ 80.685474][ T7435] RDX: 0000000000000024 RSI: 00007ff1213cbff0 RDI: 0000000000000005 [ 80.685483][ T7435] RBP: 0000000000000000 R08: 00007ff1213cbe74 R09: 000000000000000c [ 80.685493][ T7435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 80.685502][ T7435] R13: 0000000000000000 R14: 00007ff1213cbff0 R15: 0000000000000000 [ 80.685531][ T7435] [ 80.687601][ T3953] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 80.737523][ T7439] netlink: 'syz.1.450': attribute type 21 has an invalid length. [ 80.858449][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 80.898071][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 80.974247][ T40] audit: type=1400 audit(1766260802.593:452): avc: denied { watch watch_reads } for pid=7466 comm="syz.3.454" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.979614][ T7468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.454'. [ 81.056523][ T7479] futex_wake_op: syz.3.455 tries to shift op by -1; fix this program [ 81.160595][ T40] audit: type=1400 audit(1766260802.783:453): avc: denied { map } for pid=7489 comm="syz.3.456" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.309126][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.312529][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.419119][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.425124][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.517536][ T7515] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 81.526959][ T7499] veth1_to_hsr: left allmulticast mode [ 81.543119][ T7496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.552429][ T7505] macvtap0: entered allmulticast mode [ 81.554210][ T7505] veth0_macvtap: entered allmulticast mode [ 81.558954][ T46] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.563056][ T46] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.566512][ T46] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.571619][ T46] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.691914][ T7527] forcing mempool usage for bio_alloc_bioset+0x3de/0x8c0 [ 81.698262][ T7527] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 81.701302][ T7527] UDF-fs: Scanning with blocksize 2048 failed [ 81.704535][ T7527] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 81.707691][ T7527] UDF-fs: Scanning with blocksize 4096 failed [ 81.792676][ T7533] FAULT_INJECTION: forcing a failure. [ 81.792676][ T7533] name failslab, interval 1, probability 0, space 0, times 0 [ 81.797051][ T7533] CPU: 1 UID: 0 PID: 7533 Comm: syz.0.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.797068][ T7533] Tainted: [L]=SOFTLOCKUP [ 81.797071][ T7533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.797077][ T7533] Call Trace: [ 81.797082][ T7533] [ 81.797086][ T7533] dump_stack_lvl+0x16c/0x1f0 [ 81.797162][ T7533] should_fail_ex+0x512/0x640 [ 81.797180][ T7533] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 81.797193][ T7533] should_failslab+0xc2/0x120 [ 81.797207][ T7533] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 81.797219][ T7533] ? alloc_inode+0x64/0x240 [ 81.797233][ T7533] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 81.797242][ T7533] ? alloc_inode+0x64/0x240 [ 81.797252][ T7533] alloc_inode+0x64/0x240 [ 81.797263][ T7533] new_inode+0x22/0x1c0 [ 81.797275][ T7533] __debugfs_create_file+0x105/0x530 [ 81.797288][ T7533] debugfs_create_file_short+0x41/0x60 [ 81.797300][ T7533] ieee80211_debugfs_recreate_netdev+0x466/0x17a0 [ 81.797315][ T7533] ? lockdep_init_map_type+0x5c/0x270 [ 81.797328][ T7533] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 81.797340][ T7533] ? __raw_spin_lock_init+0x3a/0x110 [ 81.797355][ T7533] ? ieee80211_link_setup+0x5e/0x90 [ 81.797368][ T7533] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 81.797384][ T7533] ieee80211_if_change_type+0x5c9/0x7a0 [ 81.797398][ T7533] ieee80211_change_iface+0xa5/0x500 [ 81.797412][ T7533] cfg80211_change_iface+0x55d/0xce0 [ 81.797431][ T7533] nl80211_set_interface+0x8e0/0xc80 [ 81.797448][ T7533] ? __pfx_nl80211_set_interface+0x10/0x10 [ 81.797466][ T7533] ? nl80211_pre_doit+0x71e/0xb10 [ 81.797475][ T7533] ? nl80211_pre_doit+0x1b0/0xb10 [ 81.797487][ T7533] genl_family_rcv_msg_doit+0x209/0x2f0 [ 81.797504][ T7533] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 81.797523][ T7533] ? bpf_lsm_capable+0x9/0x10 [ 81.797535][ T7533] ? security_capable+0x7e/0x260 [ 81.797547][ T7533] ? ns_capable+0xd7/0x110 [ 81.797562][ T7533] genl_rcv_msg+0x55c/0x800 [ 81.797578][ T7533] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.797592][ T7533] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 81.797602][ T7533] ? __pfx_nl80211_set_interface+0x10/0x10 [ 81.797614][ T7533] ? __pfx_nl80211_post_doit+0x10/0x10 [ 81.797630][ T7533] netlink_rcv_skb+0x158/0x420 [ 81.797643][ T7533] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.797658][ T7533] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.797679][ T7533] ? netlink_deliver_tap+0x1ae/0xd30 [ 81.797693][ T7533] genl_rcv+0x28/0x40 [ 81.797705][ T7533] netlink_unicast+0x5aa/0x870 [ 81.797723][ T7533] ? __pfx_netlink_unicast+0x10/0x10 [ 81.797741][ T7533] netlink_sendmsg+0x8c8/0xdd0 [ 81.797756][ T7533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.797774][ T7533] __sys_sendto+0x4a3/0x520 [ 81.797790][ T7533] ? __pfx___sys_sendto+0x10/0x10 [ 81.797819][ T7533] ? __pfx_fput_close_sync+0x10/0x10 [ 81.797828][ T7533] ? dnotify_flush+0x79/0x4c0 [ 81.797842][ T7533] __x64_sys_sendto+0xe0/0x1c0 [ 81.797857][ T7533] ? do_syscall_64+0x91/0xf80 [ 81.797870][ T7533] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.797882][ T7533] do_syscall_64+0xcd/0xf80 [ 81.797896][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.797907][ T7533] RIP: 0033:0x7ff12319165c [ 81.797915][ T7533] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 81.797925][ T7533] RSP: 002b:00007ff1213ece20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 81.797935][ T7533] RAX: ffffffffffffffda RBX: 00007ff1213ecfa0 RCX: 00007ff12319165c [ 81.797941][ T7533] RDX: 0000000000000024 RSI: 00007ff1213ecff0 RDI: 0000000000000005 [ 81.797947][ T7533] RBP: 0000000000000000 R08: 00007ff1213ece74 R09: 000000000000000c [ 81.797952][ T7533] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 81.797961][ T7533] R13: 0000000000000000 R14: 00007ff1213ecff0 R15: 0000000000000000 [ 81.797975][ T7533] [ 81.798055][ T7533] debugfs: out of free dentries, can not create file 'rc_rateidx_mask_5ghz' [ 81.934600][ T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 82.039385][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 82.042631][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 82.195743][ T7549] trusted_key: syz.0.475 sent an empty control message without MSG_MORE. [ 82.206041][ T7549] hub 9-0:1.0: USB hub found [ 82.207877][ T7549] hub 9-0:1.0: 1 port detected [ 82.323097][ T7557] speed is unknown, defaulting to 1000 [ 82.362848][ T40] audit: type=1400 audit(1766260803.983:454): avc: denied { append } for pid=7563 comm="syz.2.481" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.421047][ T7572] ALSA: seq fatal error: cannot create timer (-22) [ 82.462093][ T7575] ip6erspan0: entered promiscuous mode [ 82.502569][ T40] audit: type=1400 audit(1766260804.123:455): avc: denied { create } for pid=7580 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 82.580405][ T7586] FAULT_INJECTION: forcing a failure. [ 82.580405][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 82.585622][ T7586] CPU: 3 UID: 0 PID: 7586 Comm: syz.3.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.585648][ T7586] Tainted: [L]=SOFTLOCKUP [ 82.585654][ T7586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.585664][ T7586] Call Trace: [ 82.585670][ T7586] [ 82.585677][ T7586] dump_stack_lvl+0x16c/0x1f0 [ 82.585702][ T7586] should_fail_ex+0x512/0x640 [ 82.585726][ T7586] ? fs_reclaim_acquire+0xae/0x150 [ 82.585751][ T7586] should_failslab+0xc2/0x120 [ 82.585773][ T7586] kmem_cache_alloc_noprof+0x83/0x770 [ 82.585790][ T7586] ? __pfx_map_id_range_down+0x10/0x10 [ 82.585807][ T7586] ? security_inode_alloc+0x3b/0x2b0 [ 82.585831][ T7586] ? security_inode_alloc+0x3b/0x2b0 [ 82.585849][ T7586] security_inode_alloc+0x3b/0x2b0 [ 82.585870][ T7586] inode_init_always_gfp+0xced/0x1040 [ 82.585898][ T7586] alloc_inode+0x86/0x240 [ 82.585916][ T7586] new_inode+0x22/0x1c0 [ 82.585937][ T7586] __debugfs_create_file+0x105/0x530 [ 82.585959][ T7586] debugfs_create_file_short+0x41/0x60 [ 82.585999][ T7586] ieee80211_debugfs_recreate_netdev+0x466/0x17a0 [ 82.586023][ T7586] ? lockdep_init_map_type+0x5c/0x270 [ 82.586043][ T7586] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 82.586068][ T7586] ? __raw_spin_lock_init+0x3a/0x110 [ 82.586092][ T7586] ? ieee80211_link_setup+0x5e/0x90 [ 82.586113][ T7586] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 82.586135][ T7586] ieee80211_if_change_type+0x5c9/0x7a0 [ 82.586155][ T7586] ieee80211_change_iface+0xa5/0x500 [ 82.586178][ T7586] cfg80211_change_iface+0x55d/0xce0 [ 82.586202][ T7586] nl80211_set_interface+0x8e0/0xc80 [ 82.586226][ T7586] ? __pfx_nl80211_set_interface+0x10/0x10 [ 82.586253][ T7586] ? nl80211_pre_doit+0x71e/0xb10 [ 82.586269][ T7586] ? nl80211_pre_doit+0x1b0/0xb10 [ 82.586289][ T7586] genl_family_rcv_msg_doit+0x209/0x2f0 [ 82.586314][ T7586] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 82.586343][ T7586] ? bpf_lsm_capable+0x9/0x10 [ 82.586361][ T7586] ? security_capable+0x7e/0x260 [ 82.586378][ T7586] ? ns_capable+0xd7/0x110 [ 82.586401][ T7586] genl_rcv_msg+0x55c/0x800 [ 82.586425][ T7586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.586446][ T7586] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 82.586459][ T7586] ? __pfx_nl80211_set_interface+0x10/0x10 [ 82.586479][ T7586] ? __pfx_nl80211_post_doit+0x10/0x10 [ 82.586505][ T7586] netlink_rcv_skb+0x158/0x420 [ 82.586524][ T7586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.586546][ T7586] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.586578][ T7586] ? netlink_deliver_tap+0x1ae/0xd30 [ 82.586600][ T7586] genl_rcv+0x28/0x40 [ 82.586620][ T7586] netlink_unicast+0x5aa/0x870 [ 82.586642][ T7586] ? __pfx_netlink_unicast+0x10/0x10 [ 82.586671][ T7586] netlink_sendmsg+0x8c8/0xdd0 [ 82.586696][ T7586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.586725][ T7586] __sys_sendto+0x4a3/0x520 [ 82.586751][ T7586] ? __pfx___sys_sendto+0x10/0x10 [ 82.586797][ T7586] ? __pfx_fput_close_sync+0x10/0x10 [ 82.586814][ T7586] ? dnotify_flush+0x79/0x4c0 [ 82.586837][ T7586] __x64_sys_sendto+0xe0/0x1c0 [ 82.586859][ T7586] ? do_syscall_64+0x91/0xf80 [ 82.586880][ T7586] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.586899][ T7586] do_syscall_64+0xcd/0xf80 [ 82.586922][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.586939][ T7586] RIP: 0033:0x7fd7fb39165c [ 82.586953][ T7586] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 82.586967][ T7586] RSP: 002b:00007fd7fc2e1e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 82.586983][ T7586] RAX: ffffffffffffffda RBX: 00007fd7fc2e1fa0 RCX: 00007fd7fb39165c [ 82.586993][ T7586] RDX: 0000000000000024 RSI: 00007fd7fc2e1ff0 RDI: 0000000000000005 [ 82.587003][ T7586] RBP: 0000000000000000 R08: 00007fd7fc2e1e74 R09: 000000000000000c [ 82.587011][ T7586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 82.587020][ T7586] R13: 0000000000000000 R14: 00007fd7fc2e1ff0 R15: 0000000000000000 [ 82.587045][ T7586] [ 82.587078][ T7586] debugfs: out of free dentries, can not create file 'rc_rateidx_mask_5ghz' [ 82.751992][ T3953] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 82.928550][ T5560] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 82.951637][ T40] audit: type=1400 audit(1766260804.573:456): avc: denied { bind } for pid=7606 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.965234][ T40] audit: type=1400 audit(1766260804.583:457): avc: denied { write } for pid=7606 comm="syz.2.496" path="socket:[19839]" dev="sockfs" ino=19839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.990892][ T7607] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 83.007457][ T40] audit: type=1400 audit(1766260804.623:458): avc: denied { create } for pid=7608 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.051786][ T7614] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 83.079820][ T5560] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.083838][ T5560] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 83.087490][ T5560] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 83.092554][ T5560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.103463][ T5560] usb 6-1: config 0 descriptor?? [ 83.106660][ T7592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.196024][ T7619] FAULT_INJECTION: forcing a failure. [ 83.196024][ T7619] name failslab, interval 1, probability 0, space 0, times 0 [ 83.201457][ T7619] CPU: 1 UID: 0 PID: 7619 Comm: syz.3.500 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.201481][ T7619] Tainted: [L]=SOFTLOCKUP [ 83.201487][ T7619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.201497][ T7619] Call Trace: [ 83.201503][ T7619] [ 83.201510][ T7619] dump_stack_lvl+0x16c/0x1f0 [ 83.201536][ T7619] should_fail_ex+0x512/0x640 [ 83.201560][ T7619] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 83.201582][ T7619] should_failslab+0xc2/0x120 [ 83.201605][ T7619] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 83.201623][ T7619] ? alloc_inode+0x64/0x240 [ 83.201645][ T7619] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 83.201660][ T7619] ? alloc_inode+0x64/0x240 [ 83.201676][ T7619] alloc_inode+0x64/0x240 [ 83.201694][ T7619] new_inode+0x22/0x1c0 [ 83.201714][ T7619] __debugfs_create_file+0x105/0x530 [ 83.201736][ T7619] debugfs_create_file_short+0x41/0x60 [ 83.201757][ T7619] ieee80211_debugfs_recreate_netdev+0x4e6/0x17a0 [ 83.201779][ T7619] ? lockdep_init_map_type+0x5c/0x270 [ 83.201799][ T7619] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 83.201819][ T7619] ? __raw_spin_lock_init+0x3a/0x110 [ 83.201842][ T7619] ? ieee80211_link_setup+0x5e/0x90 [ 83.201862][ T7619] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 83.201883][ T7619] ieee80211_if_change_type+0x5c9/0x7a0 [ 83.201907][ T7619] ieee80211_change_iface+0xa5/0x500 [ 83.201929][ T7619] cfg80211_change_iface+0x55d/0xce0 [ 83.201954][ T7619] nl80211_set_interface+0x8e0/0xc80 [ 83.202001][ T7619] ? __pfx_nl80211_set_interface+0x10/0x10 [ 83.202030][ T7619] ? nl80211_pre_doit+0x71e/0xb10 [ 83.202044][ T7619] ? nl80211_pre_doit+0x1b0/0xb10 [ 83.202064][ T7619] genl_family_rcv_msg_doit+0x209/0x2f0 [ 83.202090][ T7619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 83.202121][ T7619] ? bpf_lsm_capable+0x9/0x10 [ 83.202140][ T7619] ? security_capable+0x7e/0x260 [ 83.202158][ T7619] ? ns_capable+0xd7/0x110 [ 83.202183][ T7619] genl_rcv_msg+0x55c/0x800 [ 83.202209][ T7619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.202232][ T7619] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 83.202247][ T7619] ? __pfx_nl80211_set_interface+0x10/0x10 [ 83.202267][ T7619] ? __pfx_nl80211_post_doit+0x10/0x10 [ 83.202301][ T7619] netlink_rcv_skb+0x158/0x420 [ 83.202322][ T7619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.202347][ T7619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.202377][ T7619] ? netlink_deliver_tap+0x1ae/0xd30 [ 83.202401][ T7619] genl_rcv+0x28/0x40 [ 83.202422][ T7619] netlink_unicast+0x5aa/0x870 [ 83.202446][ T7619] ? __pfx_netlink_unicast+0x10/0x10 [ 83.202476][ T7619] netlink_sendmsg+0x8c8/0xdd0 [ 83.202500][ T7619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.202530][ T7619] __sys_sendto+0x4a3/0x520 [ 83.202557][ T7619] ? __pfx___sys_sendto+0x10/0x10 [ 83.202605][ T7619] ? __pfx_fput_close_sync+0x10/0x10 [ 83.202621][ T7619] ? dnotify_flush+0x79/0x4c0 [ 83.202642][ T7619] __x64_sys_sendto+0xe0/0x1c0 [ 83.202667][ T7619] ? do_syscall_64+0x91/0xf80 [ 83.202689][ T7619] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.202708][ T7619] do_syscall_64+0xcd/0xf80 [ 83.202731][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.202747][ T7619] RIP: 0033:0x7fd7fb39165c [ 83.202761][ T7619] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 83.202777][ T7619] RSP: 002b:00007fd7fc2e1e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 83.202794][ T7619] RAX: ffffffffffffffda RBX: 00007fd7fc2e1fa0 RCX: 00007fd7fb39165c [ 83.202804][ T7619] RDX: 0000000000000024 RSI: 00007fd7fc2e1ff0 RDI: 0000000000000005 [ 83.202814][ T7619] RBP: 0000000000000000 R08: 00007fd7fc2e1e74 R09: 000000000000000c [ 83.202824][ T7619] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 83.202833][ T7619] R13: 0000000000000000 R14: 00007fd7fc2e1ff0 R15: 0000000000000000 [ 83.202857][ T7619] [ 83.202863][ T7619] debugfs: out of free dentries, can not create file 'rc_rateidx_mcs_mask_5ghz' [ 83.317065][ T5560] usbhid 6-1:0.0: can't add hid device: -71 [ 83.319585][ T1184] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 83.321706][ T5560] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 83.362009][ T7629] FAULT_INJECTION: forcing a failure. [ 83.362009][ T7629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.362052][ T7629] CPU: 3 UID: 0 PID: 7629 Comm: syz.3.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.362074][ T7629] Tainted: [L]=SOFTLOCKUP [ 83.362081][ T7629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.362090][ T7629] Call Trace: [ 83.362096][ T7629] [ 83.362103][ T7629] dump_stack_lvl+0x16c/0x1f0 [ 83.362128][ T7629] should_fail_ex+0x512/0x640 [ 83.362154][ T7629] should_fail_alloc_page+0xe7/0x130 [ 83.362178][ T7629] prepare_alloc_pages+0x401/0x670 [ 83.362205][ T7629] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 83.362236][ T7629] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 83.362258][ T7629] ? rcu_is_watching+0x12/0xc0 [ 83.362277][ T7629] ? mempool_alloc_noprof+0x1b4/0x2f0 [ 83.362299][ T7629] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 83.362318][ T7629] ? mempool_alloc_noprof+0x1b4/0x2f0 [ 83.362335][ T7629] ? mempool_alloc_noprof+0x1ca/0x2f0 [ 83.362352][ T7629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.362373][ T7629] ? policy_nodemask+0xea/0x4e0 [ 83.362397][ T7629] alloc_pages_mpol+0x1fb/0x550 [ 83.362419][ T7629] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 83.362441][ T7629] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 83.362461][ T7629] ? debug_objects_fill_pool+0xc1/0x660 [ 83.362484][ T7629] alloc_pages_noprof+0x131/0x390 [ 83.362506][ T7629] blk_rq_map_kern+0x4e2/0x7d0 [ 83.362535][ T7629] scsi_execute_cmd+0xbd9/0xec0 [ 83.362559][ T7629] ? do_raw_spin_lock+0x12c/0x2b0 [ 83.362584][ T7629] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 83.362604][ T7629] ? lock_acquire+0x179/0x330 [ 83.362628][ T7629] sr_check_events+0x1f1/0xac0 [ 83.362647][ T7629] ? trace_contention_end+0xdd/0x110 [ 83.362668][ T7629] ? __pfx_sr_check_events+0x10/0x10 [ 83.362700][ T7629] ? __schedule+0x2398/0x6150 [ 83.362717][ T7629] ? do_raw_spin_lock+0x12c/0x2b0 [ 83.362745][ T7629] cdrom_check_events+0x68/0x110 [ 83.362768][ T7629] sr_block_check_events+0xc4/0x100 [ 83.362788][ T7629] disk_check_events+0xc5/0x410 [ 83.362806][ T7629] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.362826][ T7629] disk_check_media_change+0x100/0x270 [ 83.362845][ T7629] ? __pfx_disk_check_media_change+0x10/0x10 [ 83.362863][ T7629] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.362882][ T7629] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.362901][ T7629] ? __pm_runtime_resume+0xc3/0x170 [ 83.362920][ T7629] sr_block_open+0x97/0x180 [ 83.362936][ T7629] ? __pfx_sr_block_open+0x10/0x10 [ 83.362955][ T7629] blkdev_get_whole+0x99/0x290 [ 83.362985][ T7629] bdev_open+0x2c7/0xe40 [ 83.363013][ T7629] bdev_file_open_by_dev+0x182/0x210 [ 83.363040][ T7629] setup_bdev_super+0x78/0x730 [ 83.363062][ T7629] get_tree_bdev_flags+0x363/0x620 [ 83.363082][ T7629] ? __pfx_udf_fill_super+0x10/0x10 [ 83.363103][ T7629] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 83.363122][ T7629] ? rcu_is_watching+0x12/0xc0 [ 83.363141][ T7629] ? bpf_lsm_capable+0x9/0x10 [ 83.363159][ T7629] ? security_capable+0x7e/0x260 [ 83.363179][ T7629] vfs_get_tree+0x8e/0x330 [ 83.363196][ T7629] path_mount+0x7bf/0x23a0 [ 83.363212][ T7629] ? rcu_is_watching+0x12/0xc0 [ 83.363229][ T7629] ? __pfx_path_mount+0x10/0x10 [ 83.363244][ T7629] ? kmem_cache_free+0x2d8/0x770 [ 83.363262][ T7629] ? putname+0xf5/0x1a0 [ 83.363290][ T7629] ? putname+0xf5/0x1a0 [ 83.363311][ T7629] ? putname+0xf5/0x1a0 [ 83.363337][ T7629] ? __x64_sys_mount+0x293/0x310 [ 83.363351][ T7629] __x64_sys_mount+0x293/0x310 [ 83.363367][ T7629] ? __pfx___x64_sys_mount+0x10/0x10 [ 83.363390][ T7629] do_syscall_64+0xcd/0xf80 [ 83.363413][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.363429][ T7629] RIP: 0033:0x7fd7fb38f7c9 [ 83.363443][ T7629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.363459][ T7629] RSP: 002b:00007fd7fc2e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.363475][ T7629] RAX: ffffffffffffffda RBX: 00007fd7fb5e5fa0 RCX: 00007fd7fb38f7c9 [ 83.363484][ T7629] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000100 [ 83.363494][ T7629] RBP: 00007fd7fc2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 83.363504][ T7629] R10: 0000000001214891 R11: 0000000000000246 R12: 0000000000000002 [ 83.363513][ T7629] R13: 00007fd7fb5e6038 R14: 00007fd7fb5e5fa0 R15: 00007ffd1da91c28 [ 83.363537][ T7629] [ 83.365953][ T5560] usb 6-1: USB disconnect, device number 7 [ 83.367011][ T7629] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 83.367023][ T7629] UDF-fs: Scanning with blocksize 2048 failed [ 83.368697][ T7629] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 83.368707][ T7629] UDF-fs: Scanning with blocksize 4096 failed [ 83.438110][ T7637] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.501122][ T24] speed is unknown, defaulting to 1000 [ 83.590073][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 83.590083][ T40] audit: type=1400 audit(1766260805.203:465): avc: denied { write } for pid=7642 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.609794][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 83.614620][ T7643] syzkaller0: entered promiscuous mode [ 83.616380][ T7643] syzkaller0: entered allmulticast mode [ 83.620224][ T7648] fuse: Unknown parameter 'gup_cd' [ 84.088606][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 84.238548][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 84.241725][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.243875][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.246811][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.253216][ T10] usb 6-1: config 0 descriptor?? [ 84.501758][ T7664] forcing mempool usage for bio_alloc_bioset+0x3de/0x8c0 [ 84.505749][ T7666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.516'. [ 84.510342][ T7664] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 84.513230][ T7664] UDF-fs: Scanning with blocksize 2048 failed [ 84.516848][ T7664] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 84.520278][ T7664] UDF-fs: Scanning with blocksize 4096 failed [ 84.560572][ T7672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7672 comm=syz.2.517 [ 84.566022][ T7670] team0: Device xfrm1 is of different type [ 84.636387][ T7678] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 84.669285][ T10] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 84.810699][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 84.825918][ T40] audit: type=1400 audit(1766260806.443:466): avc: denied { setopt } for pid=7689 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.827959][ T7694] FAULT_INJECTION: forcing a failure. [ 84.827959][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 84.837357][ T7694] CPU: 1 UID: 0 PID: 7694 Comm: syz.3.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.837380][ T7694] Tainted: [L]=SOFTLOCKUP [ 84.837386][ T7694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.837395][ T7694] Call Trace: [ 84.837401][ T7694] [ 84.837406][ T7694] dump_stack_lvl+0x16c/0x1f0 [ 84.837427][ T7694] should_fail_ex+0x512/0x640 [ 84.837451][ T7694] ? __kmalloc_cache_noprof+0x5f/0x800 [ 84.837477][ T7694] should_failslab+0xc2/0x120 [ 84.837499][ T7694] __kmalloc_cache_noprof+0x80/0x800 [ 84.837522][ T7694] ? kfree+0x2f8/0x6e0 [ 84.837531][ T7694] ? sr_read_tocentry.isra.0+0xab/0x540 [ 84.837555][ T7694] ? sr_read_tocentry.isra.0+0xab/0x540 [ 84.837573][ T7694] sr_read_tocentry.isra.0+0xab/0x540 [ 84.837589][ T7694] ? __pfx_sr_read_tocentry.isra.0+0x10/0x10 [ 84.837607][ T7694] ? __pfx_sr_read_tochdr.isra.0+0x10/0x10 [ 84.837629][ T7694] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 84.837646][ T7694] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 84.837676][ T7694] sr_audio_ioctl+0x282/0x2f0 [ 84.837690][ T7694] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 84.837711][ T7694] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 84.837737][ T7694] cdrom_count_tracks+0x3e1/0x860 [ 84.837760][ T7694] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 84.837777][ T7694] ? __pfx_sr_drive_status+0x10/0x10 [ 84.837791][ T7694] ? sd_zbc_read_zones+0xa41/0x1650 [ 84.837815][ T7694] cdrom_open+0x763/0x2ac0 [ 84.837836][ T7694] ? __pfx_cdrom_open+0x10/0x10 [ 84.837852][ T7694] ? rcu_is_watching+0x12/0xc0 [ 84.837868][ T7694] ? trace_contention_end+0xdd/0x110 [ 84.837889][ T7694] ? sr_block_open+0xbc/0x180 [ 84.837909][ T7694] ? __pfx___mutex_lock+0x10/0x10 [ 84.837933][ T7694] ? mark_held_locks+0x49/0x80 [ 84.837947][ T7694] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.837987][ T7694] ? disk_check_media_change+0x1ca/0x270 [ 84.838004][ T7694] ? __pfx_disk_check_media_change+0x10/0x10 [ 84.838021][ T7694] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.838041][ T7694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.838059][ T7694] sr_block_open+0xc8/0x180 [ 84.838077][ T7694] ? __pfx_sr_block_open+0x10/0x10 [ 84.838093][ T7694] blkdev_get_whole+0x99/0x290 [ 84.838117][ T7694] bdev_open+0x2c7/0xe40 [ 84.838144][ T7694] bdev_file_open_by_dev+0x182/0x210 [ 84.838168][ T7694] setup_bdev_super+0x78/0x730 [ 84.838189][ T7694] get_tree_bdev_flags+0x363/0x620 [ 84.838205][ T7694] ? __pfx_udf_fill_super+0x10/0x10 [ 84.838226][ T7694] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 84.838249][ T7694] ? rcu_is_watching+0x12/0xc0 [ 84.838267][ T7694] ? bpf_lsm_capable+0x9/0x10 [ 84.838285][ T7694] ? security_capable+0x7e/0x260 [ 84.838302][ T7694] vfs_get_tree+0x8e/0x330 [ 84.838318][ T7694] path_mount+0x7bf/0x23a0 [ 84.838334][ T7694] ? rcu_is_watching+0x12/0xc0 [ 84.838350][ T7694] ? __pfx_path_mount+0x10/0x10 [ 84.838363][ T7694] ? kmem_cache_free+0x2d8/0x770 [ 84.838381][ T7694] ? putname+0xf5/0x1a0 [ 84.838405][ T7694] ? putname+0xf5/0x1a0 [ 84.838425][ T7694] ? putname+0xf5/0x1a0 [ 84.838450][ T7694] ? __x64_sys_mount+0x293/0x310 [ 84.838461][ T7694] __x64_sys_mount+0x293/0x310 [ 84.838491][ T7694] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.838511][ T7694] do_syscall_64+0xcd/0xf80 [ 84.838528][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.838545][ T7694] RIP: 0033:0x7fd7fb38f7c9 [ 84.838558][ T7694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.838571][ T7694] RSP: 002b:00007fd7fc2e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.838586][ T7694] RAX: ffffffffffffffda RBX: 00007fd7fb5e5fa0 RCX: 00007fd7fb38f7c9 [ 84.838597][ T7694] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000100 [ 84.838607][ T7694] RBP: 00007fd7fc2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 84.838615][ T7694] R10: 0000000001214891 R11: 0000000000000246 R12: 0000000000000002 [ 84.838622][ T7694] R13: 00007fd7fb5e6038 R14: 00007fd7fb5e5fa0 R15: 00007ffd1da91c28 [ 84.838646][ T7694] [ 84.869833][ T40] audit: type=1400 audit(1766260806.493:467): avc: denied { bind } for pid=7656 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.879124][ T7694] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 84.987700][ T7694] UDF-fs: Scanning with blocksize 2048 failed [ 84.990344][ T10] usb 6-1: USB disconnect, device number 8 [ 84.990375][ T7694] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 84.995407][ T7694] UDF-fs: Scanning with blocksize 4096 failed [ 85.043191][ T7704] FAULT_INJECTION: forcing a failure. [ 85.043191][ T7704] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 85.047521][ T7704] CPU: 3 UID: 0 PID: 7704 Comm: syz.3.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.047546][ T7704] Tainted: [L]=SOFTLOCKUP [ 85.047551][ T7704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.047561][ T7704] Call Trace: [ 85.047567][ T7704] [ 85.047573][ T7704] dump_stack_lvl+0x16c/0x1f0 [ 85.047599][ T7704] should_fail_ex+0x512/0x640 [ 85.047624][ T7704] should_fail_alloc_page+0xe7/0x130 [ 85.047647][ T7704] prepare_alloc_pages+0x401/0x670 [ 85.047664][ T7704] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 85.047677][ T7704] ? __pfx_stack_trace_save+0x10/0x10 [ 85.047690][ T7704] ? stack_depot_save_flags+0x29/0x9b0 [ 85.047708][ T7704] ? kasan_save_stack+0x42/0x60 [ 85.047719][ T7704] ? kasan_save_stack+0x33/0x60 [ 85.047730][ T7704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 85.047740][ T7704] ? security_inode_alloc+0x3b/0x2b0 [ 85.047753][ T7704] ? alloc_inode+0x86/0x240 [ 85.047765][ T7704] ? __debugfs_create_file+0x105/0x530 [ 85.047774][ T7704] ? debugfs_create_file_short+0x41/0x60 [ 85.047783][ T7704] ? ieee80211_debugfs_recreate_netdev+0x4a6/0x17a0 [ 85.047797][ T7704] ? ieee80211_if_change_type+0x5c9/0x7a0 [ 85.047808][ T7704] ? ieee80211_change_iface+0xa5/0x500 [ 85.047822][ T7704] ? cfg80211_change_iface+0x55d/0xce0 [ 85.047837][ T7704] ? look_up_lock_class+0x6b/0x130 [ 85.047851][ T7704] ? netlink_sendmsg+0x8c8/0xdd0 [ 85.047864][ T7704] ? __sys_sendto+0x4a3/0x520 [ 85.047879][ T7704] ? __x64_sys_sendto+0xe0/0x1c0 [ 85.047894][ T7704] ? do_syscall_64+0xcd/0xf80 [ 85.047908][ T7704] ? __lock_acquire+0x436/0x2890 [ 85.047920][ T7704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.047933][ T7704] ? policy_nodemask+0xea/0x4e0 [ 85.047948][ T7704] alloc_pages_mpol+0x1fb/0x550 [ 85.047962][ T7704] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 85.047977][ T7704] ? find_held_lock+0x2b/0x80 [ 85.047994][ T7704] alloc_pages_noprof+0x131/0x390 [ 85.048011][ T7704] get_free_pages_noprof+0x10/0xb0 [ 85.048025][ T7704] inode_doinit_with_dentry+0x8d5/0x12e0 [ 85.048045][ T7704] ? inode_set_ctime_current+0x29a/0x7f0 [ 85.048062][ T7704] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 85.048075][ T7704] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 85.048092][ T7704] ? new_inode+0x15a/0x1c0 [ 85.048105][ T7704] selinux_d_instantiate+0x26/0x30 [ 85.048118][ T7704] security_d_instantiate+0x142/0x1a0 [ 85.048133][ T7704] d_make_persistent+0x6a/0x190 [ 85.048144][ T7704] __debugfs_create_file+0x26b/0x530 [ 85.048157][ T7704] debugfs_create_file_short+0x41/0x60 [ 85.048169][ T7704] ieee80211_debugfs_recreate_netdev+0x4a6/0x17a0 [ 85.048183][ T7704] ? lockdep_init_map_type+0x5c/0x270 [ 85.048195][ T7704] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 85.048213][ T7704] ? __raw_spin_lock_init+0x3a/0x110 [ 85.048228][ T7704] ? ieee80211_link_setup+0x5e/0x90 [ 85.048241][ T7704] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 85.048253][ T7704] ieee80211_if_change_type+0x5c9/0x7a0 [ 85.048267][ T7704] ieee80211_change_iface+0xa5/0x500 [ 85.048281][ T7704] cfg80211_change_iface+0x55d/0xce0 [ 85.048296][ T7704] nl80211_set_interface+0x8e0/0xc80 [ 85.048313][ T7704] ? __pfx_nl80211_set_interface+0x10/0x10 [ 85.048330][ T7704] ? nl80211_pre_doit+0x71e/0xb10 [ 85.048340][ T7704] ? nl80211_pre_doit+0x1b0/0xb10 [ 85.048352][ T7704] genl_family_rcv_msg_doit+0x209/0x2f0 [ 85.048368][ T7704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 85.048390][ T7704] ? bpf_lsm_capable+0x9/0x10 [ 85.048404][ T7704] ? security_capable+0x7e/0x260 [ 85.048415][ T7704] ? ns_capable+0xd7/0x110 [ 85.048430][ T7704] genl_rcv_msg+0x55c/0x800 [ 85.048446][ T7704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.048461][ T7704] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 85.048470][ T7704] ? __pfx_nl80211_set_interface+0x10/0x10 [ 85.048497][ T7704] ? __pfx_nl80211_post_doit+0x10/0x10 [ 85.048514][ T7704] netlink_rcv_skb+0x158/0x420 [ 85.048526][ T7704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.048541][ T7704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.048560][ T7704] ? netlink_deliver_tap+0x1ae/0xd30 [ 85.048574][ T7704] genl_rcv+0x28/0x40 [ 85.048586][ T7704] netlink_unicast+0x5aa/0x870 [ 85.048601][ T7704] ? __pfx_netlink_unicast+0x10/0x10 [ 85.048619][ T7704] netlink_sendmsg+0x8c8/0xdd0 [ 85.048634][ T7704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.048652][ T7704] __sys_sendto+0x4a3/0x520 [ 85.048668][ T7704] ? __pfx___sys_sendto+0x10/0x10 [ 85.048697][ T7704] ? __pfx_fput_close_sync+0x10/0x10 [ 85.048706][ T7704] ? dnotify_flush+0x79/0x4c0 [ 85.048720][ T7704] __x64_sys_sendto+0xe0/0x1c0 [ 85.048735][ T7704] ? do_syscall_64+0x91/0xf80 [ 85.048747][ T7704] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.048760][ T7704] do_syscall_64+0xcd/0xf80 [ 85.048779][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.048790][ T7704] RIP: 0033:0x7fd7fb39165c [ 85.048799][ T7704] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 85.048809][ T7704] RSP: 002b:00007fd7fc2e1e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 85.048819][ T7704] RAX: ffffffffffffffda RBX: 00007fd7fc2e1fa0 RCX: 00007fd7fb39165c [ 85.048825][ T7704] RDX: 0000000000000024 RSI: 00007fd7fc2e1ff0 RDI: 0000000000000005 [ 85.048831][ T7704] RBP: 0000000000000000 R08: 00007fd7fc2e1e74 R09: 000000000000000c [ 85.048837][ T7704] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 85.048842][ T7704] R13: 0000000000000000 R14: 00007fd7fc2e1ff0 R15: 0000000000000000 [ 85.048856][ T7704] [ 85.222974][ T1184] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 85.264359][ T7708] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 85.274529][ T40] audit: type=1400 audit(1766260806.893:468): avc: denied { read } for pid=7706 comm="syz.3.533" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.284201][ T40] audit: type=1400 audit(1766260806.893:469): avc: denied { open } for pid=7706 comm="syz.3.533" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.294810][ T40] audit: type=1400 audit(1766260806.893:470): avc: denied { ioctl } for pid=7706 comm="syz.3.533" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.320664][ T7712] hpfs: Bad magic ... probably not HPFS [ 85.323811][ T7711] hpfs: Bad magic ... probably not HPFS [ 85.327019][ T7712] hpfs: Bad magic ... probably not HPFS [ 85.448067][ T7721] mkiss: ax0: crc mode is auto. [ 85.454434][ T40] audit: type=1400 audit(1766260807.073:471): avc: denied { ioctl } for pid=7720 comm="syz.3.537" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.465768][ T40] audit: type=1400 audit(1766260807.083:472): avc: denied { getopt } for pid=7722 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.475292][ T40] audit: type=1400 audit(1766260807.093:473): avc: denied { bind } for pid=7720 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.486352][ T40] audit: type=1400 audit(1766260807.103:474): avc: denied { view } for pid=7720 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.521102][ T7729] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 85.605379][ T7731] IPVS: set_ctl: invalid protocol: 41 172.30.1.1:20001 [ 85.612674][ T7731] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 85.621142][ T7731] netlink: 'syz.0.542': attribute type 21 has an invalid length. [ 85.623542][ T7731] netlink: 128 bytes leftover after parsing attributes in process `syz.0.542'. [ 85.626373][ T7731] netlink: 'syz.0.542': attribute type 6 has an invalid length. [ 85.629762][ T7731] netlink: 3 bytes leftover after parsing attributes in process `syz.0.542'. [ 85.679240][ T7739] No control pipe specified [ 85.681121][ T7739] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 85.694141][ T7743] NILFS (nbd3): device size too small [ 85.696315][ T7739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.699653][ T7743] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 85.699665][ T7743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.543'. [ 85.713645][ T7740] gretap1: entered promiscuous mode [ 85.717241][ T7740] bond2: (slave gretap1): making interface the new active one [ 85.720587][ T7740] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 85.741273][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 85.878118][ T24] usb 7-1: device descriptor read/64, error -71 [ 86.012171][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 86.017139][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 86.031377][ T7762] netlink: 80 bytes leftover after parsing attributes in process `syz.3.551'. [ 86.036013][ T7762] futex_wake_op: syz.3.551 tries to shift op by 32; fix this program [ 86.118691][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 86.211633][ T7762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.214620][ T7762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.217409][ T7762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.220411][ T7762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.249001][ T24] usb 7-1: device descriptor read/64, error -71 [ 86.358775][ T24] usb usb7-port1: attempt power cycle [ 86.523963][ T7778] F2FS-fs: Conflicting test_dummy_encryption options [ 86.644204][ T7784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.559'. [ 86.647683][ T7784] netem: unknown loss type 13 [ 86.649846][ T7784] netem: change failed [ 86.698574][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 86.729280][ T24] usb 7-1: device descriptor read/8, error -71 [ 86.968585][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 86.989453][ T24] usb 7-1: device descriptor read/8, error -71 [ 87.098785][ T24] usb usb7-port1: unable to enumerate USB device [ 87.150455][ T7795] FAULT_INJECTION: forcing a failure. [ 87.150455][ T7795] name failslab, interval 1, probability 0, space 0, times 0 [ 87.155753][ T7795] CPU: 2 UID: 0 PID: 7795 Comm: syz.3.563 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.155777][ T7795] Tainted: [L]=SOFTLOCKUP [ 87.155783][ T7795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.155794][ T7795] Call Trace: [ 87.155800][ T7795] [ 87.155808][ T7795] dump_stack_lvl+0x16c/0x1f0 [ 87.155852][ T7795] should_fail_ex+0x512/0x640 [ 87.155883][ T7795] ? __kmalloc_cache_noprof+0x5f/0x800 [ 87.155913][ T7795] should_failslab+0xc2/0x120 [ 87.155934][ T7795] __kmalloc_cache_noprof+0x80/0x800 [ 87.155959][ T7795] ? kfree+0x2f8/0x6e0 [ 87.155972][ T7795] ? sr_read_tocentry.isra.0+0xab/0x540 [ 87.155996][ T7795] ? sr_read_tocentry.isra.0+0xab/0x540 [ 87.156014][ T7795] sr_read_tocentry.isra.0+0xab/0x540 [ 87.156033][ T7795] ? __pfx_sr_read_tocentry.isra.0+0x10/0x10 [ 87.156050][ T7795] ? __pfx_sr_read_tochdr.isra.0+0x10/0x10 [ 87.156074][ T7795] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 87.156092][ T7795] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 87.156121][ T7795] sr_audio_ioctl+0x282/0x2f0 [ 87.156140][ T7795] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 87.156160][ T7795] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 87.156189][ T7795] cdrom_count_tracks+0x3e1/0x860 [ 87.156213][ T7795] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 87.156231][ T7795] ? __pfx_sr_drive_status+0x10/0x10 [ 87.156249][ T7795] ? sd_zbc_read_zones+0xa41/0x1650 [ 87.156278][ T7795] cdrom_open+0x763/0x2ac0 [ 87.156300][ T7795] ? __pfx_cdrom_open+0x10/0x10 [ 87.156317][ T7795] ? rcu_is_watching+0x12/0xc0 [ 87.156334][ T7795] ? trace_contention_end+0xdd/0x110 [ 87.156359][ T7795] ? sr_block_open+0xbc/0x180 [ 87.156380][ T7795] ? __pfx___mutex_lock+0x10/0x10 [ 87.156404][ T7795] ? mark_held_locks+0x49/0x80 [ 87.156422][ T7795] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.156443][ T7795] ? disk_check_media_change+0x1ca/0x270 [ 87.156463][ T7795] ? __pfx_disk_check_media_change+0x10/0x10 [ 87.156480][ T7795] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.156500][ T7795] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.156524][ T7795] sr_block_open+0xc8/0x180 [ 87.156541][ T7795] ? __pfx_sr_block_open+0x10/0x10 [ 87.156560][ T7795] blkdev_get_whole+0x99/0x290 [ 87.156584][ T7795] bdev_open+0x2c7/0xe40 [ 87.156614][ T7795] bdev_file_open_by_dev+0x182/0x210 [ 87.156640][ T7795] setup_bdev_super+0x78/0x730 [ 87.156662][ T7795] get_tree_bdev_flags+0x363/0x620 [ 87.156681][ T7795] ? __pfx_udf_fill_super+0x10/0x10 [ 87.156702][ T7795] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.156721][ T7795] ? rcu_is_watching+0x12/0xc0 [ 87.156741][ T7795] ? bpf_lsm_capable+0x9/0x10 [ 87.156759][ T7795] ? security_capable+0x7e/0x260 [ 87.156779][ T7795] vfs_get_tree+0x8e/0x330 [ 87.156796][ T7795] path_mount+0x7bf/0x23a0 [ 87.156812][ T7795] ? rcu_is_watching+0x12/0xc0 [ 87.156830][ T7795] ? __pfx_path_mount+0x10/0x10 [ 87.156846][ T7795] ? kmem_cache_free+0x2d8/0x770 [ 87.156865][ T7795] ? putname+0xf5/0x1a0 [ 87.156893][ T7795] ? putname+0xf5/0x1a0 [ 87.156915][ T7795] ? putname+0xf5/0x1a0 [ 87.156941][ T7795] ? __x64_sys_mount+0x293/0x310 [ 87.156956][ T7795] __x64_sys_mount+0x293/0x310 [ 87.156971][ T7795] ? __pfx___x64_sys_mount+0x10/0x10 [ 87.156994][ T7795] do_syscall_64+0xcd/0xf80 [ 87.157017][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.157034][ T7795] RIP: 0033:0x7fd7fb38f7c9 [ 87.157048][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.157063][ T7795] RSP: 002b:00007fd7fc2e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.157079][ T7795] RAX: ffffffffffffffda RBX: 00007fd7fb5e5fa0 RCX: 00007fd7fb38f7c9 [ 87.157090][ T7795] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000100 [ 87.157099][ T7795] RBP: 00007fd7fc2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 87.157109][ T7795] R10: 0000000001214891 R11: 0000000000000246 R12: 0000000000000002 [ 87.157118][ T7795] R13: 00007fd7fb5e6038 R14: 00007fd7fb5e5fa0 R15: 00007ffd1da91c28 [ 87.157143][ T7795] [ 87.168340][ T7795] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 87.296308][ T7795] UDF-fs: Scanning with blocksize 2048 failed [ 87.301481][ T7795] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 87.303960][ T7795] UDF-fs: Scanning with blocksize 4096 failed [ 87.303960][ T7801] macsec0: entered promiscuous mode [ 87.308460][ T7801] macsec0: entered allmulticast mode [ 87.317508][ T7802] FAULT_INJECTION: forcing a failure. [ 87.317508][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 87.322690][ T7802] CPU: 0 UID: 0 PID: 7802 Comm: syz.0.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.322707][ T7802] Tainted: [L]=SOFTLOCKUP [ 87.322711][ T7802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.322717][ T7802] Call Trace: [ 87.322721][ T7802] [ 87.322725][ T7802] dump_stack_lvl+0x16c/0x1f0 [ 87.322744][ T7802] should_fail_ex+0x512/0x640 [ 87.322765][ T7802] ? fs_reclaim_acquire+0xae/0x150 [ 87.322786][ T7802] should_failslab+0xc2/0x120 [ 87.322807][ T7802] kmem_cache_alloc_noprof+0x83/0x770 [ 87.322824][ T7802] ? __pfx_map_id_range_down+0x10/0x10 [ 87.322840][ T7802] ? security_inode_alloc+0x3b/0x2b0 [ 87.322862][ T7802] ? security_inode_alloc+0x3b/0x2b0 [ 87.322878][ T7802] security_inode_alloc+0x3b/0x2b0 [ 87.322896][ T7802] inode_init_always_gfp+0xced/0x1040 [ 87.322921][ T7802] alloc_inode+0x86/0x240 [ 87.322937][ T7802] new_inode+0x22/0x1c0 [ 87.322954][ T7802] __debugfs_create_file+0x105/0x530 [ 87.322973][ T7802] debugfs_create_file_short+0x41/0x60 [ 87.322991][ T7802] ieee80211_debugfs_recreate_netdev+0x4e6/0x17a0 [ 87.323013][ T7802] ? lockdep_init_map_type+0x5c/0x270 [ 87.323032][ T7802] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 87.323051][ T7802] ? __raw_spin_lock_init+0x3a/0x110 [ 87.323073][ T7802] ? ieee80211_link_setup+0x5e/0x90 [ 87.323093][ T7802] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 87.323112][ T7802] ieee80211_if_change_type+0x5c9/0x7a0 [ 87.323133][ T7802] ieee80211_change_iface+0xa5/0x500 [ 87.323154][ T7802] cfg80211_change_iface+0x55d/0xce0 [ 87.323180][ T7802] nl80211_set_interface+0x8e0/0xc80 [ 87.323205][ T7802] ? __pfx_nl80211_set_interface+0x10/0x10 [ 87.323233][ T7802] ? nl80211_pre_doit+0x71e/0xb10 [ 87.323250][ T7802] ? nl80211_pre_doit+0x1b0/0xb10 [ 87.323276][ T7802] genl_family_rcv_msg_doit+0x209/0x2f0 [ 87.323301][ T7802] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 87.323333][ T7802] ? bpf_lsm_capable+0x9/0x10 [ 87.323352][ T7802] ? security_capable+0x7e/0x260 [ 87.323371][ T7802] ? ns_capable+0xd7/0x110 [ 87.323396][ T7802] genl_rcv_msg+0x55c/0x800 [ 87.323417][ T7802] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.323433][ T7802] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 87.323443][ T7802] ? __pfx_nl80211_set_interface+0x10/0x10 [ 87.323457][ T7802] ? __pfx_nl80211_post_doit+0x10/0x10 [ 87.323474][ T7802] netlink_rcv_skb+0x158/0x420 [ 87.323488][ T7802] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.323504][ T7802] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.323523][ T7802] ? netlink_deliver_tap+0x1ae/0xd30 [ 87.323538][ T7802] genl_rcv+0x28/0x40 [ 87.323552][ T7802] netlink_unicast+0x5aa/0x870 [ 87.323567][ T7802] ? __pfx_netlink_unicast+0x10/0x10 [ 87.323587][ T7802] netlink_sendmsg+0x8c8/0xdd0 [ 87.323603][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.323622][ T7802] __sys_sendto+0x4a3/0x520 [ 87.323639][ T7802] ? __pfx___sys_sendto+0x10/0x10 [ 87.323669][ T7802] ? __pfx_fput_close_sync+0x10/0x10 [ 87.323680][ T7802] ? dnotify_flush+0x79/0x4c0 [ 87.323695][ T7802] __x64_sys_sendto+0xe0/0x1c0 [ 87.323711][ T7802] ? do_syscall_64+0x91/0xf80 [ 87.323725][ T7802] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.323739][ T7802] do_syscall_64+0xcd/0xf80 [ 87.323753][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.323765][ T7802] RIP: 0033:0x7ff12319165c [ 87.323774][ T7802] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 87.323784][ T7802] RSP: 002b:00007ff1213cbe20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 87.323795][ T7802] RAX: ffffffffffffffda RBX: 00007ff1213cbfa0 RCX: 00007ff12319165c [ 87.323802][ T7802] RDX: 0000000000000024 RSI: 00007ff1213cbff0 RDI: 0000000000000005 [ 87.323808][ T7802] RBP: 0000000000000000 R08: 00007ff1213cbe74 R09: 000000000000000c [ 87.323814][ T7802] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 87.323820][ T7802] R13: 0000000000000000 R14: 00007ff1213cbff0 R15: 0000000000000000 [ 87.323835][ T7802] [ 87.323855][ T7802] debugfs: out of free dentries, can not create file 'rc_rateidx_mcs_mask_5ghz' [ 87.465983][ T7807] macsec0: entered promiscuous mode [ 87.467730][ T7807] macsec0: entered allmulticast mode [ 87.470601][ T7807] veth1_macvtap: entered allmulticast mode [ 87.472791][ T3953] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 87.518173][ T7812] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 87.671333][ T7824] afs: Unknown parameter 'Ou8Iy' [ 87.766381][ T7834] FAULT_INJECTION: forcing a failure. [ 87.766381][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 87.770496][ T7834] CPU: 1 UID: 0 PID: 7834 Comm: syz.0.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.770512][ T7834] Tainted: [L]=SOFTLOCKUP [ 87.770516][ T7834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.770522][ T7834] Call Trace: [ 87.770526][ T7834] [ 87.770530][ T7834] dump_stack_lvl+0x16c/0x1f0 [ 87.770547][ T7834] should_fail_ex+0x512/0x640 [ 87.770563][ T7834] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 87.770577][ T7834] should_failslab+0xc2/0x120 [ 87.770591][ T7834] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 87.770602][ T7834] ? alloc_inode+0x64/0x240 [ 87.770616][ T7834] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 87.770626][ T7834] ? alloc_inode+0x64/0x240 [ 87.770636][ T7834] alloc_inode+0x64/0x240 [ 87.770648][ T7834] new_inode+0x22/0x1c0 [ 87.770660][ T7834] __debugfs_create_file+0x105/0x530 [ 87.770673][ T7834] debugfs_create_file_short+0x41/0x60 [ 87.770685][ T7834] ieee80211_debugfs_recreate_netdev+0x526/0x17a0 [ 87.770700][ T7834] ? lockdep_init_map_type+0x5c/0x270 [ 87.770713][ T7834] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 87.770726][ T7834] ? __raw_spin_lock_init+0x3a/0x110 [ 87.770741][ T7834] ? ieee80211_link_setup+0x5e/0x90 [ 87.770754][ T7834] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 87.770768][ T7834] ieee80211_if_change_type+0x5c9/0x7a0 [ 87.770781][ T7834] ieee80211_change_iface+0xa5/0x500 [ 87.770796][ T7834] cfg80211_change_iface+0x55d/0xce0 [ 87.770812][ T7834] nl80211_set_interface+0x8e0/0xc80 [ 87.770828][ T7834] ? __pfx_nl80211_set_interface+0x10/0x10 [ 87.770846][ T7834] ? nl80211_pre_doit+0x71e/0xb10 [ 87.770856][ T7834] ? nl80211_pre_doit+0x1b0/0xb10 [ 87.770868][ T7834] genl_family_rcv_msg_doit+0x209/0x2f0 [ 87.770885][ T7834] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 87.770905][ T7834] ? bpf_lsm_capable+0x9/0x10 [ 87.770917][ T7834] ? security_capable+0x7e/0x260 [ 87.770928][ T7834] ? ns_capable+0xd7/0x110 [ 87.770944][ T7834] genl_rcv_msg+0x55c/0x800 [ 87.770960][ T7834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.770974][ T7834] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 87.770984][ T7834] ? __pfx_nl80211_set_interface+0x10/0x10 [ 87.771002][ T7834] ? __pfx_nl80211_post_doit+0x10/0x10 [ 87.771018][ T7834] netlink_rcv_skb+0x158/0x420 [ 87.771031][ T7834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.771046][ T7834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.771065][ T7834] ? netlink_deliver_tap+0x1ae/0xd30 [ 87.771079][ T7834] genl_rcv+0x28/0x40 [ 87.771092][ T7834] netlink_unicast+0x5aa/0x870 [ 87.771107][ T7834] ? __pfx_netlink_unicast+0x10/0x10 [ 87.771125][ T7834] netlink_sendmsg+0x8c8/0xdd0 [ 87.771140][ T7834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.771159][ T7834] __sys_sendto+0x4a3/0x520 [ 87.771176][ T7834] ? __pfx___sys_sendto+0x10/0x10 [ 87.771205][ T7834] ? __pfx_fput_close_sync+0x10/0x10 [ 87.771214][ T7834] ? dnotify_flush+0x79/0x4c0 [ 87.771228][ T7834] __x64_sys_sendto+0xe0/0x1c0 [ 87.771244][ T7834] ? do_syscall_64+0x91/0xf80 [ 87.771257][ T7834] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.771270][ T7834] do_syscall_64+0xcd/0xf80 [ 87.771284][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.771295][ T7834] RIP: 0033:0x7ff12319165c [ 87.771304][ T7834] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 87.771313][ T7834] RSP: 002b:00007ff1213ece20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 87.771323][ T7834] RAX: ffffffffffffffda RBX: 00007ff1213ecfa0 RCX: 00007ff12319165c [ 87.771329][ T7834] RDX: 0000000000000024 RSI: 00007ff1213ecff0 RDI: 0000000000000005 [ 87.771335][ T7834] RBP: 0000000000000000 R08: 00007ff1213ece74 R09: 000000000000000c [ 87.771341][ T7834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 87.771347][ T7834] R13: 0000000000000000 R14: 00007ff1213ecff0 R15: 0000000000000000 [ 87.771361][ T7834] [ 87.771365][ T7834] debugfs: out of free dentries, can not create file 'rc_rateidx_vht_mcs_mask_2ghz' [ 87.827978][ T7838] FAT-fs (nullb0): bogus number of reserved sectors [ 87.838595][ T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 87.839640][ T7838] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 87.921009][ T7840] FAULT_INJECTION: forcing a failure. [ 87.921009][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 87.922794][ T7837] FAT-fs (nullb0): bogus number of reserved sectors [ 87.925041][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.0.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.925057][ T7840] Tainted: [L]=SOFTLOCKUP [ 87.925061][ T7840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.925067][ T7840] Call Trace: [ 87.925071][ T7840] [ 87.925076][ T7840] dump_stack_lvl+0x16c/0x1f0 [ 87.925093][ T7840] should_fail_ex+0x512/0x640 [ 87.925108][ T7840] ? __kmalloc_cache_noprof+0x5f/0x800 [ 87.925127][ T7840] should_failslab+0xc2/0x120 [ 87.925142][ T7840] __kmalloc_cache_noprof+0x80/0x800 [ 87.925158][ T7840] ? __pfx_vsnprintf+0x10/0x10 [ 87.925169][ T7840] ? udf_fill_super+0x129/0x1ea0 [ 87.925185][ T7840] ? udf_fill_super+0x129/0x1ea0 [ 87.925197][ T7840] udf_fill_super+0x129/0x1ea0 [ 87.925210][ T7840] ? snprintf+0xc7/0x100 [ 87.925220][ T7840] ? __pfx_snprintf+0x10/0x10 [ 87.925232][ T7840] ? __pfx_udf_fill_super+0x10/0x10 [ 87.925244][ T7840] ? do_raw_spin_lock+0x12c/0x2b0 [ 87.925263][ T7840] ? find_held_lock+0x2b/0x80 [ 87.925281][ T7840] ? sb_set_blocksize+0xfe/0x320 [ 87.925296][ T7840] ? setup_bdev_super+0x369/0x730 [ 87.925309][ T7840] get_tree_bdev_flags+0x38c/0x620 [ 87.925322][ T7840] ? __pfx_udf_fill_super+0x10/0x10 [ 87.925335][ T7840] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.925347][ T7840] ? rcu_is_watching+0x12/0xc0 [ 87.925359][ T7840] ? bpf_lsm_capable+0x9/0x10 [ 87.925371][ T7840] ? security_capable+0x7e/0x260 [ 87.925383][ T7840] vfs_get_tree+0x8e/0x330 [ 87.925393][ T7840] path_mount+0x7bf/0x23a0 [ 87.925403][ T7840] ? rcu_is_watching+0x12/0xc0 [ 87.925414][ T7840] ? __pfx_path_mount+0x10/0x10 [ 87.925424][ T7840] ? kmem_cache_free+0x2d8/0x770 [ 87.925435][ T7840] ? putname+0xf5/0x1a0 [ 87.925452][ T7840] ? putname+0xf5/0x1a0 [ 87.925466][ T7840] ? putname+0xf5/0x1a0 [ 87.925482][ T7840] ? __x64_sys_mount+0x293/0x310 [ 87.925491][ T7840] __x64_sys_mount+0x293/0x310 [ 87.925501][ T7840] ? __pfx___x64_sys_mount+0x10/0x10 [ 87.925515][ T7840] do_syscall_64+0xcd/0xf80 [ 87.925529][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.925543][ T7840] RIP: 0033:0x7ff12318f7c9 [ 87.925552][ T7840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.925561][ T7840] RSP: 002b:00007ff1213ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.925572][ T7840] RAX: ffffffffffffffda RBX: 00007ff1233e5fa0 RCX: 00007ff12318f7c9 [ 87.925578][ T7840] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000100 [ 87.925584][ T7840] RBP: 00007ff1213ee090 R08: 0000000000000000 R09: 0000000000000000 [ 87.925590][ T7840] R10: 0000000001214891 R11: 0000000000000246 R12: 0000000000000002 [ 87.925595][ T7840] R13: 00007ff1233e6038 R14: 00007ff1233e5fa0 R15: 00007ffe35133378 [ 87.925609][ T7840] [ 88.025177][ T7837] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 88.108625][ T5291] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.204126][ T7860] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 88.266103][ T7862] FAULT_INJECTION: forcing a failure. [ 88.266103][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 88.268635][ T5291] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.268667][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.268691][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 88.270550][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.0.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.270567][ T7862] Tainted: [L]=SOFTLOCKUP [ 88.270570][ T7862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.270576][ T7862] Call Trace: [ 88.270580][ T7862] [ 88.270584][ T7862] dump_stack_lvl+0x16c/0x1f0 [ 88.270601][ T7862] should_fail_ex+0x512/0x640 [ 88.270616][ T7862] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 88.270629][ T7862] should_failslab+0xc2/0x120 [ 88.270643][ T7862] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 88.270654][ T7862] ? __d_lookup+0x25c/0x4a0 [ 88.270666][ T7862] ? __d_alloc+0x35/0xa80 [ 88.270677][ T7862] ? __d_alloc+0x35/0xa80 [ 88.270685][ T7862] __d_alloc+0x35/0xa80 [ 88.270695][ T7862] d_alloc+0x4a/0x1e0 [ 88.270704][ T7862] lookup_one_qstr_excl+0x175/0x250 [ 88.270732][ T7862] start_dirop+0x59/0xb0 [ 88.270745][ T7862] simple_start_creating+0xf4/0x100 [ 88.270760][ T7862] ? __pfx_simple_start_creating+0x10/0x10 [ 88.270773][ T7862] ? do_raw_spin_unlock+0x172/0x230 [ 88.270789][ T7862] ? simple_pin_fs+0xa3/0x190 [ 88.270803][ T7862] debugfs_start_creating.part.0+0x86/0x1c0 [ 88.270815][ T7862] __debugfs_create_file+0xb3/0x530 [ 88.270828][ T7862] debugfs_create_file_short+0x41/0x60 [ 88.270840][ T7862] ieee80211_debugfs_recreate_netdev+0x526/0x17a0 [ 88.270854][ T7862] ? lockdep_init_map_type+0x5c/0x270 [ 88.270867][ T7862] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 88.270879][ T7862] ? __raw_spin_lock_init+0x3a/0x110 [ 88.270894][ T7862] ? ieee80211_link_setup+0x5e/0x90 [ 88.270911][ T7862] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 88.270924][ T7862] ieee80211_if_change_type+0x5c9/0x7a0 [ 88.270938][ T7862] ieee80211_change_iface+0xa5/0x500 [ 88.270952][ T7862] cfg80211_change_iface+0x55d/0xce0 [ 88.270968][ T7862] nl80211_set_interface+0x8e0/0xc80 [ 88.270985][ T7862] ? __pfx_nl80211_set_interface+0x10/0x10 [ 88.271003][ T7862] ? nl80211_pre_doit+0x71e/0xb10 [ 88.271012][ T7862] ? nl80211_pre_doit+0x1b0/0xb10 [ 88.271024][ T7862] genl_family_rcv_msg_doit+0x209/0x2f0 [ 88.271041][ T7862] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 88.271061][ T7862] ? bpf_lsm_capable+0x9/0x10 [ 88.271072][ T7862] ? security_capable+0x7e/0x260 [ 88.271084][ T7862] ? ns_capable+0xd7/0x110 [ 88.271099][ T7862] genl_rcv_msg+0x55c/0x800 [ 88.271115][ T7862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.271130][ T7862] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 88.271139][ T7862] ? __pfx_nl80211_set_interface+0x10/0x10 [ 88.271152][ T7862] ? __pfx_nl80211_post_doit+0x10/0x10 [ 88.271169][ T7862] netlink_rcv_skb+0x158/0x420 [ 88.271181][ T7862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.271196][ T7862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.271215][ T7862] ? netlink_deliver_tap+0x1ae/0xd30 [ 88.271229][ T7862] genl_rcv+0x28/0x40 [ 88.271241][ T7862] netlink_unicast+0x5aa/0x870 [ 88.271256][ T7862] ? __pfx_netlink_unicast+0x10/0x10 [ 88.271273][ T7862] netlink_sendmsg+0x8c8/0xdd0 [ 88.271289][ T7862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.271307][ T7862] __sys_sendto+0x4a3/0x520 [ 88.271324][ T7862] ? __pfx___sys_sendto+0x10/0x10 [ 88.271353][ T7862] ? __pfx_fput_close_sync+0x10/0x10 [ 88.271362][ T7862] ? dnotify_flush+0x79/0x4c0 [ 88.271376][ T7862] __x64_sys_sendto+0xe0/0x1c0 [ 88.271391][ T7862] ? do_syscall_64+0x91/0xf80 [ 88.271404][ T7862] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.271417][ T7862] do_syscall_64+0xcd/0xf80 [ 88.271431][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.271441][ T7862] RIP: 0033:0x7ff12319165c [ 88.271450][ T7862] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 88.271460][ T7862] RSP: 002b:00007ff1213ece20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 88.271470][ T7862] RAX: ffffffffffffffda RBX: 00007ff1213ecfa0 RCX: 00007ff12319165c [ 88.271477][ T7862] RDX: 0000000000000024 RSI: 00007ff1213ecff0 RDI: 0000000000000005 [ 88.271482][ T7862] RBP: 0000000000000000 R08: 00007ff1213ece74 R09: 000000000000000c [ 88.271488][ T7862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 88.271494][ T7862] R13: 0000000000000000 R14: 00007ff1213ecff0 R15: 0000000000000000 [ 88.271508][ T7862] [ 88.278587][ T1184] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 88.378833][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 88.441420][ T7865] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 88.444536][ T7865] UDF-fs: Scanning with blocksize 2048 failed [ 88.447810][ T7865] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 88.451265][ T7865] UDF-fs: Scanning with blocksize 4096 failed [ 88.598767][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 88.601866][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 88.605035][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.608311][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.612840][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.616117][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.620370][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.623372][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.834766][ T24] usb 8-1: usb_control_msg returned -32 [ 88.837559][ T24] usbtmc 8-1:16.0: can't read capabilities [ 88.908626][ T6719] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.010793][ T7891] [U] [ 89.011923][ T7891] [U] [ 89.013070][ T7891] [U] [ 89.014268][ T7891] [U] [ 89.015615][ T7891] [U] [ 89.016810][ T7891] [U] [ 89.018017][ T7891] [U] [ 89.019156][ T7891] [U] [ 89.021298][ T7891] [U] [ 89.022495][ T7891] [U] [ 89.023632][ T7891] [U] [ 89.024788][ T7891] [U] [ 89.027419][ T7891] [U] [ 89.028615][ T7891] [U] [ 89.029800][ T7891] [U] [ 89.030973][ T7891] [U] [ 89.040758][ T7890] [U] [ 89.058569][ T6719] usb 5-1: Using ep0 maxpacket: 16 [ 89.066682][ T6719] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 89.070013][ T6719] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 89.073383][ T6719] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.079013][ T6719] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.081957][ T6719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.084547][ T6719] usb 5-1: Product: syz [ 89.086326][ T6719] usb 5-1: Manufacturer: syz [ 89.087839][ T6719] usb 5-1: SerialNumber: syz [ 89.145302][ T7899] ahci 0000:00:1f.2: Using 48-bit DMA addresses [ 89.147944][ T7899] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 89.151911][ T7899] UDF-fs: Scanning with blocksize 2048 failed [ 89.154527][ T7899] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 89.157123][ T7899] UDF-fs: Scanning with blocksize 4096 failed [ 89.222953][ T7901] binder: 7849:7901 ioctl 80049367 200000000300 returned -22 [ 89.360203][ T7913] netlink: 'syz.1.607': attribute type 33 has an invalid length. [ 89.363336][ T7913] netlink: 152 bytes leftover after parsing attributes in process `syz.1.607'. [ 89.753573][ T6000] usb 8-1: USB disconnect, device number 11 [ 89.992302][ T7927] team0 (unregistering): Port device team_slave_0 removed [ 89.998198][ T7927] team0 (unregistering): Port device team_slave_1 removed [ 90.303868][ T7931] [U] [ 90.305080][ T7931] [U] [ 90.306279][ T7931] [U] [ 90.307399][ T7931] [U] [ 90.312418][ T7931] [U] [ 90.313338][ T7931] [U] [ 90.314284][ T7931] [U] [ 90.315206][ T7931] [U] [ 90.316444][ T7931] [U] [ 90.317397][ T7931] [U] [ 90.318419][ T7931] [U] [ 90.319300][ T7931] [U] [ 90.320510][ T7931] [U] [ 90.321412][ T7931] [U] [ 90.322319][ T7931] [U] [ 90.323203][ T7931] [U] [ 90.333853][ T7930] [U] [ 90.466875][ T7937] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 90.470020][ T7937] UDF-fs: Scanning with blocksize 2048 failed [ 90.474058][ T7937] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 90.476978][ T7937] UDF-fs: Scanning with blocksize 4096 failed [ 90.638965][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 90.768550][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 90.789964][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.793410][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.797463][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.802740][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.805582][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.809747][ T24] usb 7-1: config 0 descriptor?? [ 90.930200][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 90.933622][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 90.937080][ T10] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.940005][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.944214][ T10] usb 8-1: config 0 descriptor?? [ 90.946349][ T7938] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 91.154432][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 91.157810][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 91.162520][ T10] usb 8-1: USB disconnect, device number 12 [ 91.216625][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x1 [ 91.220722][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.223847][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.232804][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 91.461741][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 91.461751][ T40] audit: type=1400 audit(1766260813.083:481): avc: denied { ioctl } for pid=7946 comm="syz.1.616" path="socket:[19164]" dev="sockfs" ino=19164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.479642][ T40] audit: type=1400 audit(1766260813.103:482): avc: denied { watch watch_reads } for pid=7946 comm="syz.1.616" path="pipe:[6076]" dev="pipefs" ino=6076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 91.481528][ T7947] ip6t_srh: unknown srh invflags 4000 [ 91.482938][ T836] usb 7-1: USB disconnect, device number 10 [ 91.498838][ T40] audit: type=1400 audit(1766260813.113:483): avc: denied { relabelfrom } for pid=7946 comm="syz.1.616" name="" dev="pipefs" ino=21473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 91.519921][ T40] audit: type=1400 audit(1766260813.143:484): avc: denied { nlmsg_read } for pid=7946 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.649182][ T6719] usb 5-1: 0:2 : does not exist [ 91.661407][ T6719] usb 5-1: USB disconnect, device number 8 [ 91.679506][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.688603][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 91.728888][ T40] audit: type=1326 audit(1766260813.353:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.0.619" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12318f7c9 code=0x0 [ 91.798707][ T5560] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 91.858542][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 91.862869][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 91.867301][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 91.871981][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 91.875647][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.881593][ T10] usb 8-1: config 0 descriptor?? [ 91.884404][ T7938] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 91.888692][ T10] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 91.894953][ T10] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 91.968872][ T5560] usb 6-1: Using ep0 maxpacket: 8 [ 91.971706][ T5560] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 91.974426][ T5560] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.977488][ T5560] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.980839][ T5560] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.984190][ T5560] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.988663][ T5560] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.991689][ T5560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.070537][ T7961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'. [ 92.081835][ T7961] sctp: [Deprecated]: syz.2.622 (pid 7961) Use of int in maxseg socket option. [ 92.081835][ T7961] Use struct sctp_assoc_value instead [ 92.089301][ T7961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.622'. [ 92.148664][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.151672][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.197227][ T5560] usb 6-1: usb_control_msg returned -32 [ 92.199542][ T5560] usbtmc 6-1:16.0: can't read capabilities [ 92.539257][ T7971] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 92.541583][ T7971] UDF-fs: Scanning with blocksize 2048 failed [ 92.544207][ T7971] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 92.546579][ T7971] UDF-fs: Scanning with blocksize 4096 failed [ 92.634341][ T7976] binder: 7952:7976 ioctl 80049367 200000000300 returned -22 [ 92.639652][ T40] audit: type=1400 audit(1766260814.263:486): avc: denied { connect } for pid=7979 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.645808][ T40] audit: type=1400 audit(1766260814.263:487): avc: denied { write } for pid=7979 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.744951][ T40] audit: type=1400 audit(1766260814.363:488): avc: denied { create } for pid=7992 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 92.746520][ T7993] tmpfs: Invalid uid '0x00000000ffffffff' [ 92.751750][ T40] audit: type=1400 audit(1766260814.363:489): avc: denied { getopt } for pid=7992 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 92.856089][ T7997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=219 sclass=netlink_route_socket pid=7997 comm=syz.0.629 [ 92.864609][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 92.931477][ T8004] netlink: 'syz.2.630': attribute type 39 has an invalid length. [ 93.166979][ T8013] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 93.173559][ T8013] UDF-fs: Scanning with blocksize 2048 failed [ 93.176973][ T8013] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 93.181308][ T8013] UDF-fs: Scanning with blocksize 4096 failed [ 93.317158][ T8025] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 93.320852][ T8025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.397326][ T24] usb 8-1: USB disconnect, device number 13 [ 93.410121][ T24] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 93.510159][ T40] audit: type=1400 audit(1766260815.133:490): avc: denied { write } for pid=8026 comm="syz.2.639" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.525289][ T8031] syz.3.640 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.529993][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 93.615381][ T8039] forcing mempool usage for bio_alloc_bioset+0x3de/0x8c0 [ 93.618064][ T8039] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 93.621090][ T8039] UDF-fs: Scanning with blocksize 2048 failed [ 93.623511][ T8039] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 93.625860][ T8039] UDF-fs: Scanning with blocksize 4096 failed [ 93.746151][ T8051] speed is unknown, defaulting to 1000 [ 93.768706][ T5560] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 93.796289][ T8055] netlink: 'syz.3.648': attribute type 16 has an invalid length. [ 93.799169][ T8055] netlink: 'syz.3.648': attribute type 17 has an invalid length. [ 93.817674][ T8055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.948904][ T5560] usb 7-1: Using ep0 maxpacket: 16 [ 93.952856][ T5560] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 93.956365][ T5560] usb 7-1: config 0 has no interface number 0 [ 93.960702][ T5560] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 93.963765][ T5560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.966391][ T5560] usb 7-1: Product: syz [ 93.967748][ T5560] usb 7-1: Manufacturer: syz [ 93.969424][ T5560] usb 7-1: SerialNumber: syz [ 93.972604][ T5560] usb 7-1: config 0 descriptor?? [ 93.975666][ T5560] hub 7-1:0.132: bad descriptor, ignoring hub [ 93.977694][ T5560] hub 7-1:0.132: probe with driver hub failed with error -5 [ 93.981907][ T5560] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input13 [ 94.082933][ T8064] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.651'. [ 94.272210][ T8071] forcing mempool usage for bio_alloc_bioset+0x3de/0x8c0 [ 94.274893][ T8071] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 94.277237][ T8071] UDF-fs: Scanning with blocksize 2048 failed [ 94.280296][ T8071] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 94.282632][ T8071] UDF-fs: Scanning with blocksize 4096 failed [ 94.325463][ T8073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.422348][ T8073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.509651][ T8073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.564590][ T6023] usb 6-1: USB disconnect, device number 9 [ 94.578210][ T8073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.663508][ T102] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.671799][ T1153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.680378][ T102] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.687688][ T102] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.922981][ T8101] netlink: 'syz.2.663': attribute type 10 has an invalid length. [ 94.927643][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.663'. [ 94.932729][ T8101] dummy0: entered promiscuous mode [ 94.936134][ T8101] bridge0: port 3(dummy0) entered blocking state [ 94.939228][ T8101] bridge0: port 3(dummy0) entered disabled state [ 94.942309][ T8101] dummy0: entered allmulticast mode [ 94.947662][ T8101] bridge0: port 3(dummy0) entered blocking state [ 94.950648][ T8101] bridge0: port 3(dummy0) entered forwarding state [ 94.983590][ T8104] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 94.986445][ T8104] UDF-fs: Scanning with blocksize 2048 failed [ 94.991455][ T8106] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.665'. [ 94.992053][ T8104] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 94.994660][ T8106] netlink: Conntrack attr has 4 unknown bytes [ 95.001181][ T8104] UDF-fs: Scanning with blocksize 4096 failed [ 95.025918][ T8110] binder: 8107:8110 ioctl 80049367 200000000300 returned -22 [ 95.199362][ T5941] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 95.209213][ T5941] usb 7-1: device reset changed ep0 maxpacket size! [ 95.213944][ T24] usb 7-1: USB disconnect, device number 11 [ 95.368920][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 95.440782][ T8140] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.443110][ T8140] UDF-fs: Scanning with blocksize 2048 failed [ 95.445480][ T8140] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.447942][ T8140] UDF-fs: Scanning with blocksize 4096 failed [ 95.530131][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.534782][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.538986][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.544161][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.547812][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.554878][ T24] usb 7-1: config 0 descriptor?? [ 95.638626][ T5303] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 95.798628][ T5303] usb 6-1: Using ep0 maxpacket: 8 [ 95.801667][ T5303] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.804556][ T5303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.812458][ T5303] pvrusb2: Hardware description: Terratec Grabster AV400 [ 95.815376][ T5303] pvrusb2: ********** [ 95.817028][ T5303] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 95.820382][ T5303] pvrusb2: Important functionality might not be entirely working. [ 95.822812][ T5303] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 95.826344][ T5303] pvrusb2: ********** [ 95.858646][ T55] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.962413][ T8148] overlay: ./file1 is not a directory [ 95.966293][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 95.986313][ T24] usb 7-1: USB disconnect, device number 12 [ 95.988560][ T55] usb 5-1: device descriptor read/64, error -71 [ 96.005638][ T8150] fido_id[8150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 96.012736][ T2488] pvrusb2: Invalid write control endpoint [ 96.035720][ T8155] binder: 8154:8155 ioctl 80049367 200000000300 returned -22 [ 96.044136][ T2488] pvrusb2: Invalid write control endpoint [ 96.046159][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 96.051028][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 96.055745][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 96.059590][ T2488] pvrusb2: Device being rendered inoperable [ 96.062848][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 96.065279][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 96.073375][ T2488] pvrusb2: Attached sub-driver cx25840 [ 96.075956][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.079371][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.211938][ T8133] pvrusb2: Attempted to execute control transfer when device not ok [ 96.228626][ T55] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 96.271152][ T6719] usb 6-1: USB disconnect, device number 10 [ 96.369057][ T55] usb 5-1: device descriptor read/64, error -71 [ 96.479625][ T55] usb usb5-port1: attempt power cycle [ 96.508885][ T5291] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.766203][ T8170] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 96.818636][ T55] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 96.839412][ T55] usb 5-1: device descriptor read/8, error -71 [ 97.046647][ T8189] veth0: entered promiscuous mode [ 97.059366][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 97.088772][ T55] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 97.119320][ T55] usb 5-1: device descriptor read/8, error -71 [ 97.178586][ T140] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 97.236578][ T8194] bridge_slave_0: default FDB implementation only supports local addresses [ 97.241700][ T55] usb usb5-port1: unable to enumerate USB device [ 97.266354][ T8196] xt_HMARK: spi-set and port-set can't be combined [ 97.338594][ T140] usb 6-1: Using ep0 maxpacket: 8 [ 97.341667][ T140] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 97.344369][ T140] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.347578][ T140] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.351834][ T140] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.355782][ T140] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.361037][ T140] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.364840][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.575617][ T140] usb 6-1: usb_control_msg returned -32 [ 97.577444][ T140] usbtmc 6-1:16.0: can't read capabilities [ 97.703558][ T8205] speed is unknown, defaulting to 1000 [ 98.009032][ T8225] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 98.011353][ T8225] UDF-fs: Scanning with blocksize 2048 failed [ 98.019718][ T8225] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 98.022317][ T8225] UDF-fs: Scanning with blocksize 4096 failed [ 98.069752][ T8227] netlink: 'syz.2.703': attribute type 10 has an invalid length. [ 98.076605][ T8227] bridge0: port 3(dummy0) entered disabled state [ 98.089155][ T8227] dummy0: left allmulticast mode [ 98.090764][ T8227] dummy0: left promiscuous mode [ 98.092403][ T8227] bridge0: port 3(dummy0) entered disabled state [ 98.382562][ T8235] veth0: entered promiscuous mode [ 98.391950][ T8234] veth0: left promiscuous mode [ 98.452715][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 98.466197][ T8240] bond3: Invalid ad_actor_system MAC address. [ 98.468338][ T8240] bond3: option ad_actor_system: invalid value (255) [ 98.472016][ T8240] bond3 (unregistering): Released all slaves [ 98.503932][ T6719] usb 6-1: USB disconnect, device number 11 [ 98.671888][ T8251] ip6t_rpfilter: unknown options [ 98.707170][ T8256] veth0: entered promiscuous mode [ 98.744135][ T8259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.771221][ T8255] veth0: left promiscuous mode [ 98.782065][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'. [ 98.796123][ T8263] usb 1-1: USB disconnect, device number 2 [ 99.104749][ T8288] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.108927][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.727'. [ 99.110329][ T102] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.112718][ T8288] sit0: entered allmulticast mode [ 99.123089][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 99.123101][ T40] audit: type=1400 audit(1766260820.743:497): avc: denied { append } for pid=8292 comm="syz.3.728" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.137055][ T40] audit: type=1400 audit(1766260820.753:498): avc: denied { ioctl } for pid=8292 comm="syz.3.728" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.179824][ T8296] netlink: 'syz.3.729': attribute type 15 has an invalid length. [ 99.182989][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.729'. [ 99.367966][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.732'. [ 99.378646][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.732'. [ 99.416508][ T102] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.430671][ T8310] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.433230][ T102] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.497301][ T8319] netlink: 76 bytes leftover after parsing attributes in process `syz.1.736'. [ 99.621284][ T8330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.642784][ T8330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 99.918858][ T8351] random: crng reseeded on system resumption [ 100.011328][ T40] audit: type=1400 audit(1766260821.633:499): avc: denied { append } for pid=8357 comm="syz.3.744" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 100.011889][ T8358] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 100.414340][ T40] audit: type=1400 audit(1766260822.033:500): avc: denied { execute } for pid=8364 comm="syz.1.746" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 100.427040][ T40] audit: type=1400 audit(1766260822.043:501): avc: denied { read append } for pid=8364 comm="syz.1.746" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.435495][ T40] audit: type=1400 audit(1766260822.043:502): avc: denied { open } for pid=8364 comm="syz.1.746" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.443353][ T40] audit: type=1400 audit(1766260822.043:503): avc: denied { ioctl } for pid=8364 comm="syz.1.746" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.487892][ T8367] __nla_validate_parse: 1 callbacks suppressed [ 100.487908][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 100.495607][ T8367] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 100.586094][ T8375] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.749'. [ 100.627579][ T8378] syzkaller0: entered promiscuous mode [ 100.627720][ T40] audit: type=1400 audit(1766260822.243:504): avc: denied { write } for pid=8380 comm="syz.3.750" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.629667][ T8378] syzkaller0: entered allmulticast mode [ 100.639038][ T40] audit: type=1400 audit(1766260822.253:505): avc: denied { read } for pid=8380 comm="syz.3.750" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 100.639081][ T40] audit: type=1400 audit(1766260822.253:506): avc: denied { open } for pid=8380 comm="syz.3.750" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 100.718150][ T8392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.752'. [ 100.932264][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 101.148607][ T5940] Bluetooth: hci4: command 0xfc11 tx timeout [ 101.148621][ T5946] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 101.202042][ T8412] xt_l2tp: v2 doesn't support IP mode [ 101.375795][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.379570][ T8431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.468951][ T5291] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 101.469626][ T5946] Bluetooth: hci5: command 0x1003 tx timeout [ 101.488745][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.769'. [ 101.490449][ T8435] /dev/sr0: Can't open blockdev [ 101.709129][ T8477] veth0: entered promiscuous mode [ 101.740197][ T8484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.743983][ T8484] netlink: 88 bytes leftover after parsing attributes in process `syz.2.784'. [ 101.753861][ T8486] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 101.754292][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'. [ 101.770526][ T8486] bond3 (unregistering): Released all slaves [ 101.786401][ T8475] veth0: left promiscuous mode [ 101.794570][ T8484] xfrm1: entered promiscuous mode [ 101.796335][ T8484] xfrm1: entered allmulticast mode [ 101.809197][ T8465] netlink: 60 bytes leftover after parsing attributes in process `syz.1.780'. [ 102.088317][ T8513] veth0: entered promiscuous mode [ 102.149437][ T8512] veth0: left promiscuous mode [ 102.204000][ T8518] vivid-000: disconnect [ 102.207007][ T8518] vivid-000: reconnect [ 102.218665][ T6719] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 102.294773][ T8522] pvfs2: Unknown parameter 'fd' [ 102.380002][ T6719] usb 6-1: Using ep0 maxpacket: 32 [ 102.384837][ T6719] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1023 [ 102.389194][ T6719] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 60367, setting to 1024 [ 102.393940][ T6719] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 102.398385][ T6719] usb 6-1: config 1 interface 0 has no altsetting 0 [ 102.403988][ T6719] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.407897][ T6719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.411632][ T6719] usb 6-1: Product: ࠠ [ 102.413408][ T6719] usb 6-1: Manufacturer: ᨳ鰼濒٬梱酠鮭负힤ﰛό캰羙 [ 102.416692][ T6719] usb 6-1: SerialNumber: Ѝ [ 102.421961][ T8501] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.425123][ T8501] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.622066][ T8536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.709683][ T8542] veth0: entered promiscuous mode [ 102.770894][ T8541] veth0: left promiscuous mode [ 102.956055][ T6719] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 4 proto 3 vid 0x0525 pid 0xA4A8 [ 102.961400][ T6719] usb 6-1: USB disconnect, device number 12 [ 102.965724][ T6719] usblp0: removed [ 114.953604][ T8552] speed is unknown, defaulting to 1000 [ 114.955285][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 114.955294][ T40] audit: type=1400 audit(1766260836.573:514): avc: denied { create } for pid=8551 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 114.974963][ T40] audit: type=1400 audit(1766260836.593:515): avc: denied { map } for pid=8551 comm="syz.3.807" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.983215][ T40] audit: type=1400 audit(1766260836.603:516): avc: denied { execute } for pid=8551 comm="syz.3.807" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.008840][ T8553] misc userio: No port type given on /dev/userio [ 115.282393][ T8557] __nla_validate_parse: 2 callbacks suppressed [ 115.282410][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.806'. [ 115.359918][ T8586] openvswitch: netlink: IPv4 tunnel dst address is zero [ 115.441720][ T40] audit: type=1400 audit(1766260837.063:517): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44396 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 115.454625][ T40] audit: type=1400 audit(1766260837.063:518): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=44396 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 115.680178][ T40] audit: type=1400 audit(1766260837.303:519): avc: denied { create } for pid=8611 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 115.706977][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.724250][ T8609] bond0: (slave rose0): Enslaving as an active interface with an up link [ 115.760131][ T8620] netlink: 'syz.2.826': attribute type 12 has an invalid length. [ 115.762659][ T8620] netlink: 'syz.2.826': attribute type 5 has an invalid length. [ 115.765145][ T8620] netlink: 212 bytes leftover after parsing attributes in process `syz.2.826'. [ 115.767469][ T8618] IPVS: persistence engine module ip_vs_pe_s not found [ 115.775411][ T40] audit: type=1400 audit(1766260837.393:520): avc: denied { connect } for pid=8608 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 115.802555][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'. [ 115.826032][ T40] audit: type=1400 audit(1766260837.443:521): avc: denied { write } for pid=8608 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 115.835459][ T40] audit: type=1400 audit(1766260837.453:522): avc: denied { bind } for pid=8633 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.874439][ T8638] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 115.878022][ T40] audit: type=1400 audit(1766260837.493:523): avc: denied { ioctl } for pid=8637 comm="syz.3.831" path="socket:[23380]" dev="sockfs" ino=23380 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.993597][ T8652] trusted_key: encrypted_key: insufficient parameters specified [ 116.172026][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'. [ 116.204089][ T8670] program syz.1.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.213559][ T8670] ata1.00: non-matching transfer count (666624/0) [ 116.299972][ T8682] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 116.397155][ T8690] usb usb8: usbfs: process 8690 (syz.3.840) did not claim interface 0 before use [ 116.483729][ T8705] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 116.506695][ T8705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 116.517311][ T8705] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 116.530038][ T8705] bond5: entered allmulticast mode [ 116.534444][ T8708] tap0: tun_chr_ioctl cmd 1074025675 [ 116.536576][ T8708] tap0: persist enabled [ 116.543699][ T8705] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 116.551823][ T8708] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 116.552775][ T8708] fuse: Bad value for 'fd' [ 116.560529][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 116.568879][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 116.640318][ T8733] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 116.643827][ T8733] VFS: Can't find a romfs filesystem on dev nullb0. [ 116.643827][ T8733] [ 116.657706][ T8734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.699437][ T8736] program syz.3.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.719019][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.846'. [ 116.818841][ T6023] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 116.969088][ T6023] usb 7-1: Using ep0 maxpacket: 8 [ 116.986570][ T6023] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 116.990895][ T6023] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.994386][ T6023] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.997501][ T6023] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.001508][ T6023] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.005599][ T6023] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.009149][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.219197][ T6023] usb 7-1: usb_control_msg returned -32 [ 117.224289][ T6023] usbtmc 7-1:16.0: can't read capabilities [ 117.307129][ T8795] veth0: entered promiscuous mode [ 117.373275][ T8794] veth0: left promiscuous mode [ 117.492104][ T8812] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 117.572173][ T8818] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 117.583665][ T140] usb 7-1: USB disconnect, device number 13 [ 117.619710][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 117.638066][ T1144] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.641169][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 117.646899][ T8832] veth0: entered promiscuous mode [ 117.650110][ T1144] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.652983][ T1144] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.655810][ T1144] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.698855][ T8831] veth0: left promiscuous mode [ 117.821248][ T8821] md: could not open device unknown-block(0,0). [ 117.824190][ T8821] md: md_import_device returned -6 [ 117.910710][ T8853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 118.008219][ T8864] netlink: 52 bytes leftover after parsing attributes in process `syz.3.881'. [ 118.016310][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.019346][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.153343][ T8878] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 118.197328][ T8888] overlayfs: failed to resolve './file0:/': -2 [ 118.247060][ T8900] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 118.573557][ T8925] tmpfs: Bad value for 'mpol' [ 118.738980][ T8932] program syz.0.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.742771][ T8932] ata1.00: non-matching transfer count (666624/0) [ 118.746728][ T8937] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 118.927933][ T8943] netlink: 'syz.0.908': attribute type 21 has an invalid length. [ 118.935078][ T8943] usb usb8: usbfs: process 8943 (syz.0.908) did not claim interface 0 before use [ 119.156979][ T8964] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 119.294688][ T8979] 9p: Unknown uid 00000000004294967295 [ 119.314857][ T8981] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 119.366040][ T8986] overlay: Bad value for 'uuid' [ 119.369397][ T8986] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 119.412149][ T8991] overlayfs: failed to resolve './file1': -2 [ 119.502152][ T9001] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 119.565992][ T9003] No control pipe specified [ 119.616382][ T9011] atomic_op ffff888031f5a198 conn xmit_atomic 0000000000000000 [ 119.630652][ T9013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17170 sclass=netlink_route_socket pid=9013 comm=syz.0.932 [ 119.700156][ T9024] bridge_slave_1: left allmulticast mode [ 119.702255][ T9024] bridge_slave_1: left promiscuous mode [ 119.706030][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.713131][ T9024] bridge_slave_0: left allmulticast mode [ 119.715273][ T9024] bridge_slave_0: left promiscuous mode [ 119.717291][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.736451][ T9024] bond0: (slave bridge0): Releasing backup interface [ 119.795892][ T9026] veth0: entered promiscuous mode [ 119.820894][ T9025] veth0: left promiscuous mode [ 119.867179][ T9038] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 120.005813][ T9053] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 120.034194][ T9053] IPVS: persistence engine module ip_vs_pe_s not found [ 120.077117][ T9061] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 120.097867][ T9061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 120.104358][ T9066] veth0: entered promiscuous mode [ 120.147900][ T9065] veth0: left promiscuous mode [ 120.193370][ T9071] blk_print_req_error: 138 callbacks suppressed [ 120.193382][ T9071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.199722][ T9071] buffer_io_error: 162 callbacks suppressed [ 120.199733][ T9071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.205066][ T9071] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.208669][ T9071] Buffer I/O error on dev nbd0, logical block 1, async page read [ 120.211264][ T9071] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.214314][ T9071] Buffer I/O error on dev nbd0, logical block 2, async page read [ 120.216705][ T9071] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.219906][ T9071] Buffer I/O error on dev nbd0, logical block 3, async page read [ 120.222776][ T9071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.225936][ T9071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.228259][ T9071] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.231536][ T9071] Buffer I/O error on dev nbd0, logical block 1, async page read [ 120.234178][ T9071] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.237320][ T9071] Buffer I/O error on dev nbd0, logical block 2, async page read [ 120.240101][ T9071] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.243969][ T9071] Buffer I/O error on dev nbd0, logical block 3, async page read [ 120.246552][ T9071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.249594][ T9071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.251927][ T9071] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.255000][ T9071] Buffer I/O error on dev nbd0, logical block 1, async page read [ 120.257858][ T9071] ldm_validate_partition_table(): Disk read failed. [ 120.260878][ T9071] Dev nbd0: unable to read RDB block 0 [ 120.263136][ T9071] nbd0: unable to read partition table [ 120.265923][ T9071] erofs (device nbd0): cannot read erofs superblock [ 120.318388][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 120.318398][ T40] audit: type=1400 audit(1766260841.933:553): avc: denied { ioctl } for pid=9079 comm="syz.3.953" path="socket:[27934]" dev="sockfs" ino=27934 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.361734][ T9080] __nla_validate_parse: 6 callbacks suppressed [ 120.361750][ T9080] netlink: 100 bytes leftover after parsing attributes in process `syz.3.953'. [ 120.419357][ T40] audit: type=1400 audit(1766260842.043:554): avc: denied { set_context_mgr } for pid=9087 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 120.425715][ T9088] binder: 9087:9088 ioctl c0306201 200000000440 returned -22 [ 120.452055][ T9090] veth0: entered promiscuous mode [ 120.487539][ T9089] veth0: left promiscuous mode [ 120.622194][ T40] audit: type=1400 audit(1766260842.243:555): avc: denied { block_suspend } for pid=9106 comm="syz.2.964" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.626932][ T9109] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 120.743596][ T9120] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 120.746576][ T9120] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 120.749556][ T9120] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 120.751928][ T9120] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 120.856840][ T9130] tmpfs: Cannot change global quota limit on remount [ 120.913893][ T9135] capability: warning: `syz.3.972' uses 32-bit capabilities (legacy support in use) [ 121.381384][ T40] audit: type=1400 audit(1766260843.003:556): avc: denied { listen } for pid=9149 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.388190][ T9150] overlayfs: missing 'lowerdir' [ 121.389345][ T40] audit: type=1400 audit(1766260843.003:557): avc: denied { mount } for pid=9149 comm="syz.0.976" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.418327][ T40] audit: type=1400 audit(1766260843.033:558): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.451438][ T9152] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 121.570437][ T40] audit: type=1400 audit(1766260843.193:559): avc: denied { getopt } for pid=9162 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.589807][ T40] audit: type=1400 audit(1766260843.213:560): avc: denied { lock } for pid=9162 comm="syz.0.982" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=28024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.788944][ T9175] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.791135][ T9175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.793140][ T9175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.795185][ T9175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.818922][ T9186] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 121.829835][ T9186] ptrace attach of "/syz-executor exec"[5934] was attempted by "/syz-executor exec"[9186] [ 121.834892][ T40] audit: type=1400 audit(1766260843.453:561): avc: denied { name_bind } for pid=9185 comm="syz.3.990" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 121.913829][ T9189] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 122.024847][ T9194] 9pnet_fd: Insufficient options for proto=fd [ 122.538331][ T9217] comedi comedi0: No channels found! [ 122.572746][ T9220] netlink: 'syz.3.1001': attribute type 4 has an invalid length. [ 122.944326][ T40] audit: type=1401 audit(1766260844.563:562): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 123.578854][ T9276] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c004ae02, magic ae != 6b] [ 123.868618][ T5291] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.868732][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.870706][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.875088][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 124.123399][ T9292] usb usb7: usbfs: process 9292 (syz.0.1025) did not claim interface 2 before use [ 124.448660][ T6046] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.536806][ T9304] sctp: [Deprecated]: syz.3.1031 (pid 9304) Use of int in maxseg socket option. [ 124.536806][ T9304] Use struct sctp_assoc_value instead [ 124.608543][ T6046] usb 5-1: Using ep0 maxpacket: 8 [ 124.611453][ T6046] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 124.614530][ T6046] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.617768][ T6046] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.620870][ T6046] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.623989][ T6046] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.628087][ T6046] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.631003][ T6046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.828942][ T9322] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 124.838387][ T6046] usb 5-1: usb_control_msg returned -32 [ 124.841045][ T6046] usbtmc 5-1:16.0: can't read capabilities [ 125.191007][ T9328] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 125.393052][ T6046] usb 5-1: USB disconnect, device number 13 [ 125.487117][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 125.492004][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 125.952285][ T9354] No control pipe specified [ 126.007989][ T9358] input: syz1 as /devices/virtual/input/input15 [ 126.096787][ T9372] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 126.139840][ T9379] virtio-pci 0000:00:01.0: Using 48-bit DMA addresses [ 126.142044][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 126.142054][ T40] audit: type=1400 audit(1766260847.763:567): avc: denied { append } for pid=9376 comm="syz.2.1054" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.143011][ T9378] sctp: [Deprecated]: syz.2.1054 (pid 9378) Use of int in max_burst socket option. [ 126.143011][ T9378] Use struct sctp_assoc_value instead [ 126.329785][ T40] audit: type=1400 audit(1766260847.953:568): avc: denied { shutdown } for pid=9394 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.510945][ T9325] kexec: Could not allocate control_code_buffer [ 126.548816][ T9401] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1062'. [ 126.553578][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 126.557572][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 126.560776][ T9401] netlink: 'syz.3.1062': attribute type 12 has an invalid length. [ 126.588844][ T9405] FAULT_INJECTION: forcing a failure. [ 126.588844][ T9405] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.593567][ T9405] CPU: 3 UID: 0 PID: 9405 Comm: syz.1.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.593600][ T9405] Tainted: [L]=SOFTLOCKUP [ 126.593604][ T9405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.593610][ T9405] Call Trace: [ 126.593614][ T9405] [ 126.593618][ T9405] dump_stack_lvl+0x16c/0x1f0 [ 126.593648][ T9405] should_fail_ex+0x512/0x640 [ 126.593670][ T9405] should_fail_alloc_page+0xe7/0x130 [ 126.593686][ T9405] prepare_alloc_pages+0x401/0x670 [ 126.593700][ T9405] ? __lock_acquire+0x436/0x2890 [ 126.593714][ T9405] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 126.593725][ T9405] ? __lock_acquire+0x436/0x2890 [ 126.593743][ T9405] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 126.593754][ T9405] ? find_held_lock+0x2b/0x80 [ 126.593769][ T9405] ? unwind_next_frame+0x3f4/0x20b0 [ 126.593786][ T9405] ? unwind_next_frame+0x3fe/0x20b0 [ 126.593799][ T9405] ? drm_gem_prime_fd_to_handle+0x1a9/0x5c0 [ 126.593812][ T9405] ? drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 126.593823][ T9405] ? __kernel_text_address+0xd/0x40 [ 126.593836][ T9405] ? unwind_get_return_address+0x59/0xa0 [ 126.593850][ T9405] ? arch_stack_walk+0x88/0x100 [ 126.593866][ T9405] __folio_alloc_noprof+0x11/0x220 [ 126.593876][ T9405] iommu_alloc_pages_node_sz+0x11f/0x350 [ 126.593895][ T9405] ? __pfx_iommu_alloc_pages_node_sz+0x10/0x10 [ 126.593908][ T9405] ? _pt_iter_first.constprop.0+0x22b/0x510 [ 126.593923][ T9405] __map_range+0x4ec/0xa30 [ 126.593936][ T9405] ? __pfx___map_range+0x10/0x10 [ 126.593953][ T9405] ? _pt_iter_first.constprop.0+0x22b/0x510 [ 126.593966][ T9405] __map_range+0x28e/0xa30 [ 126.593980][ T9405] ? __pfx___map_range+0x10/0x10 [ 126.593990][ T9405] ? kernel_text_address+0x8d/0x100 [ 126.594003][ T9405] ? __kernel_text_address+0xd/0x40 [ 126.594016][ T9405] ? unwind_get_return_address+0x59/0xa0 [ 126.594033][ T9405] ? _pt_iter_first.constprop.0+0x22b/0x510 [ 126.594046][ T9405] __map_range+0x28e/0xa30 [ 126.594060][ T9405] ? __pfx___map_range+0x10/0x10 [ 126.594074][ T9405] ? kmem_cache_alloc_noprof+0x1b3/0x770 [ 126.594084][ T9405] ? alloc_iova+0x37/0x7e0 [ 126.594093][ T9405] ? alloc_iova_fast+0x425/0xad0 [ 126.594102][ T9405] ? iommu_dma_alloc_iova+0x1f7/0x460 [ 126.594116][ T9405] ? iommu_dma_map_sg+0xafa/0x12b0 [ 126.594124][ T9405] ? __dma_map_sg_attrs+0x269/0x540 [ 126.594136][ T9405] ? dma_map_sgtable+0x78/0x100 [ 126.594148][ T9405] ? drm_gem_map_dma_buf+0x12f/0x1f0 [ 126.594159][ T9405] pt_iommu_vtdss_map_pages+0x6f3/0xf50 [ 126.594175][ T9405] ? __pfx_pt_iommu_vtdss_map_pages+0x10/0x10 [ 126.594190][ T9405] ? __lock_acquire+0x436/0x2890 [ 126.594207][ T9405] ? iommu_pgsize+0x294/0x300 [ 126.594224][ T9405] iommu_map_nosync+0x33a/0x720 [ 126.594239][ T9405] ? __pfx_iommu_map_nosync+0x10/0x10 [ 126.594251][ T9405] ? lock_acquire+0x179/0x330 [ 126.594263][ T9405] ? find_held_lock+0x2b/0x80 [ 126.594278][ T9405] ? iommu_map_sg+0x5ee/0x9d0 [ 126.594291][ T9405] iommu_map_sg+0x1c1/0x9d0 [ 126.594306][ T9405] iommu_dma_map_sg+0xb30/0x12b0 [ 126.594322][ T9405] __dma_map_sg_attrs+0x269/0x540 [ 126.594337][ T9405] dma_map_sgtable+0x78/0x100 [ 126.594349][ T9405] ? drm_prime_pages_to_sg+0xe0/0x140 [ 126.594359][ T9405] ? __pfx_drm_gem_shmem_object_get_sg_table+0x10/0x10 [ 126.594370][ T9405] drm_gem_map_dma_buf+0x12f/0x1f0 [ 126.594380][ T9405] dma_buf_map_attachment+0x161/0x5f0 [ 126.594396][ T9405] dma_buf_map_attachment_unlocked+0x9e/0x150 [ 126.594411][ T9405] drm_gem_prime_import_dev+0x166/0x420 [ 126.594423][ T9405] virtgpu_gem_prime_import+0x16c/0x7e0 [ 126.594435][ T9405] ? __pfx_virtgpu_gem_prime_import+0x10/0x10 [ 126.594446][ T9405] ? find_held_lock+0x2b/0x80 [ 126.594461][ T9405] ? __fget_files+0x204/0x3c0 [ 126.594478][ T9405] ? __fget_files+0x20e/0x3c0 [ 126.594493][ T9405] ? __pfx_virtgpu_gem_prime_import+0x10/0x10 [ 126.594505][ T9405] drm_gem_prime_fd_to_handle+0x1a9/0x5c0 [ 126.594518][ T9405] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 126.594530][ T9405] drm_ioctl_kernel+0x1f4/0x3e0 [ 126.594544][ T9405] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 126.594556][ T9405] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 126.594575][ T9405] drm_ioctl+0x5c9/0xc30 [ 126.594590][ T9405] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 126.594603][ T9405] ? __pfx_drm_ioctl+0x10/0x10 [ 126.594622][ T9405] ? selinux_file_ioctl+0x180/0x270 [ 126.594635][ T9405] ? selinux_file_ioctl+0xb4/0x270 [ 126.594649][ T9405] ? __pfx_drm_ioctl+0x10/0x10 [ 126.594663][ T9405] __x64_sys_ioctl+0x18e/0x210 [ 126.594676][ T9405] do_syscall_64+0xcd/0xf80 [ 126.594690][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.594701][ T9405] RIP: 0033:0x7f5f1b38f7c9 [ 126.594709][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.594719][ T9405] RSP: 002b:00007f5f1c1bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.594729][ T9405] RAX: ffffffffffffffda RBX: 00007f5f1b5e5fa0 RCX: 00007f5f1b38f7c9 [ 126.594735][ T9405] RDX: 0000200000000180 RSI: 00000000c00c642e RDI: 0000000000000003 [ 126.594741][ T9405] RBP: 00007f5f1c1bd090 R08: 0000000000000000 R09: 0000000000000000 [ 126.594747][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.594752][ T9405] R13: 00007f5f1b5e6038 R14: 00007f5f1b5e5fa0 R15: 00007fffbf06b838 [ 126.594766][ T9405] [ 126.594801][ T9405] ------------[ cut here ]------------ [ 126.629490][ T9407] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 126.631206][ T9405] kernel BUG at arch/x86/mm/physaddr.c:28! [ 126.631285][ T5560] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 126.632539][ T9405] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 126.632563][ T9405] CPU: 2 UID: 0 PID: 9405 Comm: syz.1.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.632586][ T9405] Tainted: [L]=SOFTLOCKUP [ 126.632592][ T9405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.632603][ T9405] RIP: 0010:__phys_addr+0xfa/0x180 [ 126.632625][ T9405] Code: 48 d3 e8 48 89 c3 48 89 c6 e8 02 4b 50 00 48 85 db 75 11 e8 28 50 50 00 48 89 e8 5b 5d 41 5c c3 cc cc cc cc e8 17 50 50 00 90 <0f> 0b e8 0f 50 50 00 48 c7 c0 10 f0 1a 8e 48 ba 00 00 00 00 00 fc [ 126.632642][ T9405] RSP: 0018:ffffc9000373f1a0 EFLAGS: 00010293 [ 126.632664][ T9405] RAX: 0000000000000000 RBX: 0000000080000000 RCX: ffffffff816e95f3 [ 126.632675][ T9405] RDX: ffff888061308000 RSI: ffffffff816e9679 RDI: 0000000000000006 [ 126.632686][ T9405] RBP: 0000778000000000 R08: 0000000000000006 R09: 0000000080000000 [ 126.632697][ T9405] R10: 0000778000000000 R11: ffff888061308b30 R12: 0000000000000000 [ 126.632707][ T9405] R13: 0000000000000001 R14: ffffc9000373f610 R15: 1ffff920006e7e45 [ 126.632717][ T9405] FS: 00007f5f1c1bd6c0(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 126.632749][ T9405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.632762][ T9405] CR2: 0000001b2f263fff CR3: 000000005895e000 CR4: 0000000000352ef0 [ 126.632773][ T9405] Call Trace: [ 126.632779][ T9405] [ 126.632787][ T9405] iommu_pages_start_incoherent+0x1c/0x320 [ 126.632811][ T9405] __map_range+0x550/0xa30 [ 126.632831][ T9405] ? __pfx___map_range+0x10/0x10 [ 126.632852][ T9405] ? _pt_iter_first.constprop.0+0x22b/0x510 [ 126.632872][ T9405] __map_range+0x28e/0xa30 [ 126.632890][ T9405] ? __pfx___map_range+0x10/0x10 [ 126.632907][ T9405] ? kernel_text_address+0x8d/0x100 [ 126.632929][ T9405] ? __kernel_text_address+0xd/0x40 [ 126.632949][ T9405] ? unwind_get_return_address+0x59/0xa0 [ 126.632973][ T9405] ? _pt_iter_first.constprop.0+0x22b/0x510 [ 126.632993][ T9405] __map_range+0x28e/0xa30 [ 126.633011][ T9405] ? __pfx___map_range+0x10/0x10 [ 126.633032][ T9405] ? kmem_cache_alloc_noprof+0x1b3/0x770 [ 126.633048][ T9405] ? alloc_iova+0x37/0x7e0 [ 126.633062][ T9405] ? alloc_iova_fast+0x425/0xad0 [ 126.633078][ T9405] ? iommu_dma_alloc_iova+0x1f7/0x460 [ 126.633100][ T9405] ? iommu_dma_map_sg+0xafa/0x12b0 [ 126.633113][ T9405] ? __dma_map_sg_attrs+0x269/0x540 [ 126.633134][ T9405] ? dma_map_sgtable+0x78/0x100 [ 126.633152][ T9405] ? drm_gem_map_dma_buf+0x12f/0x1f0 [ 126.633169][ T9405] pt_iommu_vtdss_map_pages+0x6f3/0xf50 [ 126.633191][ T9405] ? __pfx_pt_iommu_vtdss_map_pages+0x10/0x10 [ 126.633212][ T9405] ? __lock_acquire+0x436/0x2890 [ 126.633235][ T9405] ? iommu_pgsize+0x294/0x300 [ 126.633259][ T9405] iommu_map_nosync+0x33a/0x720 [ 126.633281][ T9405] ? __pfx_iommu_map_nosync+0x10/0x10 [ 126.633298][ T9405] ? lock_acquire+0x179/0x330 [ 126.633317][ T9405] ? find_held_lock+0x2b/0x80 [ 126.633340][ T9405] ? iommu_map_sg+0x5ee/0x9d0 [ 126.633360][ T9405] iommu_map_sg+0x1c1/0x9d0 [ 126.633380][ T9405] iommu_dma_map_sg+0xb30/0x12b0 [ 126.633399][ T9405] __dma_map_sg_attrs+0x269/0x540 [ 126.633420][ T9405] dma_map_sgtable+0x78/0x100 [ 126.633449][ T9405] ? drm_prime_pages_to_sg+0xe0/0x140 [ 126.633464][ T9405] ? __pfx_drm_gem_shmem_object_get_sg_table+0x10/0x10 [ 126.633483][ T9405] drm_gem_map_dma_buf+0x12f/0x1f0 [ 126.633500][ T9405] dma_buf_map_attachment+0x161/0x5f0 [ 126.633523][ T9405] dma_buf_map_attachment_unlocked+0x9e/0x150 [ 126.633547][ T9405] drm_gem_prime_import_dev+0x166/0x420 [ 126.633566][ T9405] virtgpu_gem_prime_import+0x16c/0x7e0 [ 126.633612][ T9405] ? __pfx_virtgpu_gem_prime_import+0x10/0x10 [ 126.633630][ T9405] ? find_held_lock+0x2b/0x80 [ 126.633659][ T9405] ? __fget_files+0x204/0x3c0 [ 126.633682][ T9405] ? __fget_files+0x20e/0x3c0 [ 126.642439][ T9407] bond8: entered promiscuous mode [ 126.642585][ T9405] ? __pfx_virtgpu_gem_prime_import+0x10/0x10 [ 126.645366][ T9407] 8021q: adding VLAN 0 to HW filter on device bond8 [ 126.647054][ T9405] drm_gem_prime_fd_to_handle+0x1a9/0x5c0 [ 126.647079][ T9405] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 126.647098][ T9405] drm_ioctl_kernel+0x1f4/0x3e0 [ 126.653476][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 126.653670][ T9405] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 126.655386][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 126.657597][ T9405] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 126.659527][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'. [ 126.661794][ T9405] drm_ioctl+0x5c9/0xc30 [ 126.670343][ T9407] bond8: (slave bridge0): making interface the new active one [ 126.672122][ T9405] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 126.673832][ T9407] bridge0: entered promiscuous mode [ 126.676188][ T9405] ? __pfx_drm_ioctl+0x10/0x10 [ 126.678730][ T9407] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 126.680189][ T9405] ? selinux_file_ioctl+0x180/0x270 [ 126.680213][ T9405] ? selinux_file_ioctl+0xb4/0x270 [ 126.878641][ T5560] usb 5-1: Using ep0 maxpacket: 16 [ 126.878707][ T9405] ? __pfx_drm_ioctl+0x10/0x10 [ 126.882217][ T5560] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.883902][ T9405] __x64_sys_ioctl+0x18e/0x210 [ 126.886887][ T5560] usb 5-1: config 9 has an invalid interface number: 129 but max is 0 [ 126.887748][ T9405] do_syscall_64+0xcd/0xf80 [ 126.890057][ T5560] usb 5-1: config 9 has no interface number 0 [ 126.891509][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.893893][ T5560] usb 5-1: config 9 interface 129 has no altsetting 0 [ 126.895802][ T9405] RIP: 0033:0x7f5f1b38f7c9 [ 126.899829][ T5560] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 126.900961][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.903245][ T5560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.904742][ T9405] RSP: 002b:00007f5f1c1bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.906728][ T5560] usb 5-1: Product: syz [ 126.908238][ T9405] RAX: ffffffffffffffda RBX: 00007f5f1b5e5fa0 RCX: 00007f5f1b38f7c9 [ 126.908246][ T9405] RDX: 0000200000000180 RSI: 00000000c00c642e RDI: 0000000000000003 [ 126.908253][ T9405] RBP: 00007f5f1c1bd090 R08: 0000000000000000 R09: 0000000000000000 [ 126.908259][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.908265][ T9405] R13: 00007f5f1b5e6038 R14: 00007f5f1b5e5fa0 R15: 00007fffbf06b838 [ 126.908277][ T9405] [ 126.908281][ T9405] Modules linked in: [ 126.909474][ T9405] ---[ end trace 0000000000000000 ]--- [ 126.911116][ T5560] usb 5-1: Manufacturer: syz [ 126.912375][ T9405] RIP: 0010:__phys_addr+0xfa/0x180 [ 126.913573][ T5560] usb 5-1: SerialNumber: syz [ 126.915093][ T9405] Code: 48 d3 e8 48 89 c3 48 89 c6 e8 02 4b 50 00 48 85 db 75 11 e8 28 50 50 00 48 89 e8 5b 5d 41 5c c3 cc cc cc cc e8 17 50 50 00 90 <0f> 0b e8 0f 50 50 00 48 c7 c0 10 f0 1a 8e 48 ba 00 00 00 00 00 fc [ 127.050794][ T9405] RSP: 0018:ffffc9000373f1a0 EFLAGS: 00010293 [ 127.052719][ T9405] RAX: 0000000000000000 RBX: 0000000080000000 RCX: ffffffff816e95f3 [ 127.055234][ T9405] RDX: ffff888061308000 RSI: ffffffff816e9679 RDI: 0000000000000006 [ 127.057734][ T9405] RBP: 0000778000000000 R08: 0000000000000006 R09: 0000000080000000 [ 127.060461][ T9405] R10: 0000778000000000 R11: ffff888061308b30 R12: 0000000000000000 [ 127.062972][ T9405] R13: 0000000000000001 R14: ffffc9000373f610 R15: 1ffff920006e7e45 [ 127.065472][ T9405] FS: 00007f5f1c1bd6c0(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 127.068278][ T9405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.070868][ T9405] CR2: 0000001b2f263fff CR3: 000000005895e000 CR4: 0000000000352ef0 [ 127.073379][ T9405] Kernel panic - not syncing: Fatal exception [ 127.075904][ T9405] Kernel Offset: disabled [ 127.077269][ T9405] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:56:32 Registers: info registers vcpu 0 CPU#0 RAX=00000000001045bc RBX=0000000000000000 RCX=ffffffff8b7816d9 RDX=ffffed100d48673e RSI=ffffffff8bf2b300 RDI=ffffffff819347ed RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000000 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088b3d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd7fc2c1f98 CR3=000000003959b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fb415050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fb41505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fb415057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fb41506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fb4150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fb4151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fb5ba4a8 00007fd7fb5ba4a0 00007fd7fb5ba498 00007fd7fb5ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fc11d100 00007fd7fb5ba460 00007fd7fb5b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fb5ba4b8 00007fd7fb5ba4b0 00007fd7fb5ba4a8 00007fd7fb5ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 165c32ab37bf3926 75865b0c90b69028 c73dde800fbdc0b6 f6e26fde93212e2d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 874d8377f9df3d6b af4d872f9a50ff84 dba881c0d5bc5154 07c88c4632b0ea52 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd9a8fd5516f083d 1b51c3cb45755ee0 b8276fc6a09c1ee0 ce4f53e34febb23e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf1d3ca79f0cbb9c faf222df00ae686a 50384514076af716 b3c96ffdbb1eb7c3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4014d1c2fdc165c 32ab37bf39267586 5b0c90b69028c73d de800fbdc0b6f6e2 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000008499c RBX=0000000000000001 RCX=ffffffff8b7816d9 RDX=ffffed100d4a673e RSI=ffffffff8bf2b300 RDI=ffffffff819347ed RBP=ffffed1003bd1498 RSP=ffffc90000177de8 R8 =0000000000000000 R9 =ffffed100d4a673d R10=ffff88806a5339eb R11=0000000000000000 R12=0000000000000001 R13=ffff88801de8a4c0 R14=ffffffff9088b3d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd7fc2c2d58 CR3=000000003d7ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583298fc8 0000555583298f10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555832a354c 00005555832a3410 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555832a37c8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401c71000080449 b200336964656d6f 632f7665642f01ff ffffffffffffffe5 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080010d00300 080010c803000800 10a0030008001098 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800300080010f803 00080010f0034080 080010e803000800 10e0031e080010d8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060113f601100011 c00300100011b003 00100011a0030010 0011900300080011 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010680041880e390 dc08000100000008 06060114b600001c 070100000c080606 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9003000800068803 0804900c05048004 1880e390da080001 0000020806060114 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b800080004880300 00000a0806048003 0810a80a05108004 1886c3939c080001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040806060113 f601100011c00300 100011b003001000 11a0030010001190 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f207220643730 6335336239666666 66666666660a3934 30315f6f666e6964 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3966666666666666 660a383430315f6f 666e69646f6d5f44 495f455551494e55 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30315f6f666e6964 6f6d5f44495f4555 51494e555f5f2072 2030623063353362 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666e69646f6d5f44 495f455551494e55 5f5f207220653331 6435336239666666 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5551494e555f5f20 7220653731643533 6239666666666666 66660a3535395f6f ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6231643533623966 666666666666660a 3435395f6f666e69 646f6d5f44495f45 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666666660a333539 5f6f666e69646f6d 5f44495f45555149 4e555f5f20722065 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85326625 RDI=ffffffff9aeedc00 RBP=ffffffff9aeedbc0 RSP=ffffc9000373ea50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3a312d3520627375 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9aeedbc0 R15=ffffffff853265c0 RIP=ffffffff8532664f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f5f1c1bd6c0 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f263fff CR3=000000005895e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe35133700 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff123215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff12321505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff123215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff12321506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1232150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1232151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000e4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000e4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000093b4c RBX=0000000000000003 RCX=ffffffff8b7816d9 RDX=ffffed100d4e673e RSI=ffffffff8bf2b300 RDI=ffffffff819347ed RBP=ffffed1003bde000 RSP=ffffc90000197de8 R8 =0000000000000000 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=0000000000000000 R12=0000000000000003 R13=ffff88801def0000 R14=ffffffff9088b3d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5f1b373460 CR3=000000002d05c000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1213a9f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff123215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff12321505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff123215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff12321506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1232150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1232151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000302e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000e4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000