last executing test programs: 1.017335224s ago: executing program 1 (id=989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0xfffffffffffffff7, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x2e8, 0xa, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x35, 0x0, [{0xe, 0x5}, {0x7, 0xae, 0xe, 0x3}, {0x5, 0x6, 0x1, 0x8}, {0x50, 0xc0, 0x0, 0x9}, {0x8, 0x7, 0x3, 0x91}, {0xd, 0x10, 0x21, 0x6}, {0x8001, 0x1, 0xff, 0x401}, {0x0, 0x8d, 0x9, 0x9fc}, {0xfffe, 0x0, 0xc1, 0xfffffff7}, {0x10, 0x59, 0x6, 0x2}, {0x400, 0x7, 0x6a, 0x2}, {0x8, 0xb6, 0xf, 0x6}, {0x6, 0x9, 0x4, 0xc}, {0x7, 0x80, 0x1, 0x3}, {0x1ff, 0xe, 0x5}, {0x100, 0x0, 0x4}, {0x1, 0x3, 0x6e, 0xc}, {0x2ff, 0x8, 0x80, 0x3}, {0xcc, 0x3, 0x10, 0x80}, {0x401, 0xfe, 0xfb, 0xfffff386}, {0x5, 0x9, 0x4, 0x8001}, {0x584, 0xfc, 0x6, 0x3}, {0x4695, 0xa, 0xc5, 0x3}, {0x2, 0x8, 0x80, 0x4}, {0x7, 0x23, 0x6, 0x400}, {0x2, 0x7, 0x0, 0xfffffffd}, {0x3, 0xf, 0x0, 0x8b}, {0xa36c, 0x9, 0x8, 0x2}, {0x5, 0x56, 0x0, 0x8}, {0x1, 0x4, 0x10, 0xbe6}, {0x3, 0xea, 0x1c, 0x6}, {0xf8, 0x6, 0x0, 0x200}, {0x2, 0x40, 0x5, 0xac6}, {0x1, 0x4, 0x4, 0x80000001}, {0x7, 0x2, 0x0, 0x6ffb}, {0xa, 0xf0, 0x7a, 0xc}, {0x5, 0x2, 0x70, 0x7f}, {0x8, 0x5, 0x4, 0x3}, {0x1, 0x2c, 0x9, 0x1}, {0x3ff, 0x97, 0x2, 0x9}, {0xff, 0x2, 0x2, 0x4}, {0x9, 0x4, 0xf, 0xf5}, {0x9, 0x8, 0x1, 0x9}, {0xf, 0x6, 0x7f, 0x80000000}, {0x1ff, 0x1, 0x8, 0x3}, {0x5, 0x4, 0x0, 0x5}, {0x6, 0x4, 0x3, 0x400}, {0x8, 0x2, 0x10, 0x1}, {0xfff9, 0x9, 0x5, 0x80}, {0xfffc, 0x0, 0x6, 0x7}, {0xa4, 0x7, 0x1, 0x10}, {0x8, 0xd, 0x1, 0xfffff40b}, {0xfff, 0x46, 0xf5, 0x8}, {0xd4d4, 0x1, 0x1, 0x8}, {0xfff8, 0x4, 0x9, 0x5}, {0x3, 0x8, 0x1, 0x7}, {0x2, 0x4, 0xd5, 0xaf0}, {0x0, 0x3, 0x3, 0x5}, {0x8, 0x4, 0xb, 0x200}, {0x9b5, 0x4, 0x8, 0x1000}, {0x8001, 0x7, 0x4, 0x3}, {0x1, 0xe, 0xf9, 0xde7}, {0xd, 0x4, 0xe5}, {0x8001, 0x5, 0x80, 0xa4}], {0x2}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth1_to_hsr\x00', 'syzkaller0\x00', {}, {0xff}, 0xc, 0x2, 0x1}, 0x3202, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x68f, 0x6, 0x101, '\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 959.714877ms ago: executing program 1 (id=990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) 958.754356ms ago: executing program 1 (id=992): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) socket$phonet(0x23, 0x2, 0x1) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000040)={@mcast2, r6}, 0x14) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10840, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r3, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 729.97241ms ago: executing program 1 (id=993): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x10004, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x989) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) 729.76187ms ago: executing program 1 (id=994): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1000) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) (async) close(r4) (async) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c4600"], 0x40) (async) close(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 723.69181ms ago: executing program 1 (id=998): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x4) fchdir(r5) mkdirat(r5, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') syz_usb_connect$cdc_ecm(0x5, 0x12e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x1, 0x1, 0x3, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xf7, {{0x7, 0x24, 0x6, 0x0, 0x0, "c762"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xb9d1, 0xf3c6, 0x6, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x3ff, 0x2c6}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xe0, 0x2, 0x6, 0x5, 0x9}, @mdlm_detail={0xc3, 0x24, 0x13, 0xfe, "6c11e143035da105aea4cda4e8e4ad2ed7fa2b2f41ddf1a37e625a97c645c0772982700e5edba624745f0c9904e0876b2470d64dcb6b0574913dc5bc608893717d166879bccbb182b22dc2c15e8ff4f245b315afd24432cd7757152b87ddc8a1e6599dfd0137caa2aad74bb7649278b201b2646a718b20ba2b898438e3961b554cf9846bdc64f046cf9c01bdb5df736713caa1051a201d5da80bd55bc062620db8a14609eccc61ba4f5c17602f301bda9d8aebbeb60a33eb2f366509fae1b2"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xdc, 0x6, 0x38}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x5, 0x64}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x5, 0xff, 0x6, 0xff, 0xc}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x5, [{0x51, &(0x7f0000000380)=@string={0x51, 0x3, "704671cbdae8572ce0f7a6e367b26e13c5f9c09fd8f80f20845011790bf10d9d0cb8e3fa12ecac27427e64e5004bbfa3979f3da78800d156af95905fc7d65ed333081d5f4ebe5ba730512b0a0a6ce6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x814}}, {0x6e, &(0x7f0000000440)=@string={0x6e, 0x3, "e516cd0c2010c06298a367e524960cc8ea4ff59bdac710aa1599a13d792af36a762961d9a87d26310819ab6f7bf3462e1d1b2a74052604d2395d2d0f1035e286128158eb63e55d0f4db1255e3ef5f018f43fd547ba8c9e78a665ca52fcc18142e92087c9ca1156dd9ef87cb5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x430}}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 569.946889ms ago: executing program 0 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000200012800b0001006d61637365630000bac4ab141608c9ef960a100002800c000100ffff", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 569.386509ms ago: executing program 0 (id=1007): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) mmap$xdp(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3, 0x12, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x0, {0xfff, 0xffff, "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", 0xc, 0x10, 0x7, 0x9, 0x7f, 0x4, 0x5}, r2}}, 0x128) socket$unix(0x1, 0x5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0x2020) 488.121574ms ago: executing program 0 (id=1009): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0xac}}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a6d42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r5, 0x0) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='vlan1\x00', 0x10) 430.22031ms ago: executing program 0 (id=1011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="010028bd70000000000001000000840008808000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b580009801c000003060001000200000008000200ac1e000105030300000000001c000080060001000200000008000200ac1e030105000300020000001c000080060001000200000008000200e000000205000300010000001400020077673000000000000000000000000000080005"], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4080080}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2503000000f9d79f808a0000000800010000000000080002000200000008000100030000003e08376b292e08c3e0dad20301c2e1979c9cacc59c689588b5802454887141fca898f9bd7d4917e6cdb2f6b9ca6354ce018d718854701752c314fcc418afeab9"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40010) 430.04803ms ago: executing program 2 (id=1012): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0x3) r3 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x11) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000002c0)='net/packet\x00', &(0x7f0000000300)='./file0\x00', r3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f0000001040)='net/packet\x00') pread64(r4, &(0x7f0000000000)=""/232, 0xe8, 0x40) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="61a5abd55c26f79ed98f80ee4188b1978f74d70a315a965ac891f54a34dcc68a0bf556cb83805bd20dacb19e3f75bf8d50ead73fa7bc6fbde6fc433921093fa5fece650ae69f2866e8570058ec418a32797cbe4e3d8c77755a4cefe8774ef87efd539f77cefdc0a1f719d8ddf81c5507dc471c333993d6f166fbf1925e", 0x7d}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x0) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000100), &(0x7f0000000140)=0x4) 429.413523ms ago: executing program 0 (id=1013): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="020d0000180000002cbd700000000000080012000000020000000000000000000600000000000000fdffffff00000000ac1efa01000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000700000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000004000300", @ANYRESDEC], 0xc0}}, 0x0) 350.113743ms ago: executing program 2 (id=1014): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000100)={0x1, @private=0xa010100, 0x4e22, 0x0, 'fo\x00', 0x30, 0x1, 0x14}, 0x2c) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x20, 0x68, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x20}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x278, 0x278, 0x1e0, 0x1e0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'sit0\x00', 'wg2\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 343.441047ms ago: executing program 0 (id=1015): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000180)) 342.418504ms ago: executing program 3 (id=1016): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsopen(&(0x7f0000000240)='hostfs\x00', 0x1) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x1, @win={{0x0, 0xfffffff8, 0x8, 0x3}, 0x9, 0xbd7, 0x0, 0x8001, 0x0, 0x4}}) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) r4 = accept(r0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x1, r7, 0x1000000, r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001f0f008f7a955120fa79f79392c32af3", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000980000006fb1f8ff10000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000008000085000000060000008520000004000000183a000001000000000000000000000085000000d2000000b753f4ff100000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x9, 0x72, &(0x7f0000000600)=""/114, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0x1, 0x8001}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x4, 0x3, 0x2, 0x2}, {0x1, 0x3, 0xf, 0x5}, {0x2, 0x5, 0xf}], 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%+9llu \x00'}, 0x20) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="d25902001000000018490000e71400"/24], &(0x7f0000000140)='GPL\x00', 0x589, 0x75, &(0x7f00000001c0)=""/117, 0x40f00, 0x10, '\x00', r8, 0x0, r11, 0x8, &(0x7f0000000340)={0x80000001, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x10, 0x39, 0x7}, 0x10, 0x1d695, r9, 0x0, &(0x7f00000008c0)=[r10], 0x0, 0x10, 0x6d9}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x310, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0xe5, &(0x7f0000000a00)=""/229, 0x40f00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[r10, r10, r10, r10, r10], &(0x7f0000000b80)=[{0x4, 0x4, 0x7}, {0x0, 0x4, 0x4, 0x4}, {0x5, 0x1, 0xd, 0x2}, {0x4, 0x5, 0x7, 0x4}, {0x4, 0x2, 0x6, 0x8}], 0x10, 0xf3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x0, 0x0], 0x0, 0x0, 0xf8, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0xffffffd6, 0x8, 0x0, 0x0}}, 0x10) 342.183972ms ago: executing program 2 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x2b, 0x3, 0x7fc6) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x9}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x34}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 220.225533ms ago: executing program 3 (id=1018): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) (async) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup(r0) (async) lchown(&(0x7f0000000180)='./bus\x00', r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x270, 0x33, 0x2, 0x301, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x3}, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x4f}]}, @generic="a7f1ef4a3f2557d757d2ac20001a937fcf142427b836d01e6e7b37442cea0d0d1b280813867d2e940fc8509a5723c63524c22aeea8c9e0e5397b5d8ea4a033c6c4e0c29be9df820f29083643d3fc78fd55b650fa72634cd9b2214d95f9ceb5cf63e8425398869d4cf1a39484fe399bff72763ded14023f4737a9b83bbc", @generic="0ed4142d195acfce21c0661aaab0fbf5ec238c22521548cba38f20d3df55da5e890237f7ead8292afde605", @typed={0x8, 0x4d, 0x0, 0x0, @u32=0xfff}, @typed={0x3d, 0x54, 0x0, 0x0, @binary="7d16bfaa6de69bf18c0c200c150331433739dd9b0f04384d2ea6413d2e324d43eaa6265a02106e240443787db52c54814d18a7b36f5a34eaea"}, @nested={0x14a, 0x71, 0x0, 0x1, [@generic="49d736e538542f483487741e7310c469ec674dea18f4d0c13eeb424c46e68eeb0f65933930b3167d233c86c38aca01db1dd9e70b548fceff38d82092e3bd1f4cf522794a93d21f4070ab0002021c8b4c8e7949e7fa6a8707ab74d5917486d7a1ef2f39de8406960f7f87429a646c748f29c75dabbcfdadfa44cc201941f72dc37dc95aae0fd22653ee4708c665344e1072a3b9f4c869edc0b7d0a1c441ef3b98da7a6fcd7747204d431ca35d790b9109d0c1120534e1", @typed={0x8, 0x32, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x6c}, @nested={0x4, 0x136}, @generic="0006525cdd191904fbae1d6fadb800ca3da0c909cf53787bfc7e8b903faceefe1b2a00936feb8967eaafd4e7263f6b5c6d33db7fed94e11f8b7e9e249c9232f6cbaa25b50abae900162a5563a70fee368e8d9577c20543100430dabdf30b4bf87012a05910ca6ac4a156d8c94bc56fb1b30a305f6b9b806a", @typed={0x4, 0x14c}, @nested={0x4, 0x11}]}, @typed={0x8, 0x149, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x12e, 0x0, 0x0, @pid=r4}]}, 0x270}, 0x1, 0x0, 0x0, 0x99474cc7f240396f}, 0x42010) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) getsockname$netrom(r3, &(0x7f0000000500)={{}, [@rose, @remote, @default, @null, @remote, @remote, @remote, @default]}, &(0x7f0000000200)=0x48) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 219.962927ms ago: executing program 3 (id=1019): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 158.671797ms ago: executing program 2 (id=1020): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1da40006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f00000001c0)={@private=0xa010101, @empty}) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x44) (async) io_setup(0x2278, &(0x7f0000000200)=0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x440d, 0x100) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) (async) io_submit(r4, 0x2, &(0x7f0000000140)=[&(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x2, r5, 0x0, 0x0, 0x100000}]) (async) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0}) connect$unix(r5, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 158.366153ms ago: executing program 3 (id=1021): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2503fefffbffe9eb93e006bf86a0c25fd6d1fa873091255c5559a013fa013c0ab08befa405015709cc419ab60d0a43ccebebeda2ddd8ceac3be4819949d8dc7d4c"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) lseek(r0, 0x0, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000020000103000000000000000002000000000000001c8000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1ad5b055824221cb5cdf62f2e64e296feb9112fc9ba5d18152dcb7c7c64c0fb90971d62edc9d489846d17f9d2aa55ae54e4b0380418ef5815e034945304573d065b5cb04b87cd99d13ba9b89a993c51ae258c01b478ce47888a44a5e3d30b7d0c359b24811bdd5112b00ac7ff817f445754e45000000000000004bcc6b"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="17000000720001030000000000000000070000005aa981eb9dd6add03cad486959e529edb6d82f32d1f3e464db05000000e5075f15aff3974042314ef1709758d5", @ANYRES32=0x0, @ANYBLOB="0800010012000000"], 0x20}, 0x1, 0xf00, 0x0, 0x24000845}, 0x0) r5 = socket(0x1f, 0x2, 0x7) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r8, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x29, 0x0, @empty, @empty}}}}) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000180)='macvlan1\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 156.359043ms ago: executing program 2 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001680)=@generic={0x0, 0xffffffff, 0x9}) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x9, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x4802004c8, 0x1004, 0x45c5, 0xc591, 0x7, 0x4, 0x2, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x383991}) (async) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0x12, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80040000000000, 0x0, 0x4, 0x0, 0x0, 0x8000000040, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x3ffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) (async) sendmmsg$inet(r5, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="f4de585a84f6894b16fc806f412cf93901d1f91e41579014244919a3af2f6a53d9b4922120e88859028e09ba2d4d2846e82d7a", 0x33}, {0x0}, {0x0}], 0x3, &(0x7f0000000b00)=[@ip_ttl={{0x14}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000540)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000039c0)}}], 0x3, 0x10814) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 32) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r9, &(0x7f0000000040)=""/138, 0x8a) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 79.193873ms ago: executing program 3 (id=1023): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c000280080018"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'nicvf0\x00', 0x200}) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008b9"], 0x125) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b020000000000000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000040)=0x4, 0x4) 341.998µs ago: executing program 3 (id=1024): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r1, r1, 0x0, 0x30) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) (async) sendfile(r1, r1, 0x0, 0x30) (async) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) (async) 0s ago: executing program 2 (id=1025): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r3 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f0000000400)=0xb8e7) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000200)={0x4, @win={{0x8000, 0x8001, 0x7fffffff, 0x4}, 0x5, 0x101, 0x0, 0x3, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000280)={0x7, "86332264c387c289ad22ee4f9fd8afcd6837c5b16a939593cedb08c0c565adda", 0x1, 0x4, 0x483, 0x0, 0x8, 0x1, 0x4, 0x7}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x200, 0x4) r7 = fsopen(&(0x7f0000000000)='dax\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_io_uring_setup(0x2dda, &(0x7f0000000280)={0x0, 0xa5ca, 0x2, 0x2, 0x283}, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r10, &(0x7f0000000080)=""/237, 0xed, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=@framed={{}, [@exit]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): vtmpfs" ino=2869 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 75.647783][ T40] audit: type=1400 audit(1762279385.761:391): avc: denied { open } for pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2869 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 75.657494][ T40] audit: type=1400 audit(1762279385.761:392): avc: denied { ioctl } for pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2869 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 75.685371][ T6962] pimreg: entered allmulticast mode [ 75.865052][ T6023] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.892142][ T6974] bond0: Unable to set up delay as MII monitoring is disabled [ 75.899156][ T6974] bond0 (unregistering): Released all slaves [ 75.900417][ T6978] overlayfs: failed to resolve './file0': -2 [ 75.931648][ T6973] bond0: Unable to set up delay as MII monitoring is disabled [ 75.936489][ T6973] bond0 (unregistering): Released all slaves [ 75.997565][ T6987] erofs (device nbd3): cannot find valid erofs superblock [ 76.003051][ T40] audit: type=1400 audit(1762279386.121:393): avc: denied { connect } for pid=6986 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.004237][ T6987] netlink: 'syz.3.294': attribute type 23 has an invalid length. [ 76.015062][ T6023] usb 6-1: Using ep0 maxpacket: 32 [ 76.019564][ T6023] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 76.024294][ T6023] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 76.028556][ T6023] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 76.032684][ T6023] usb 6-1: config 1 interface 0 has no altsetting 0 [ 76.041768][ T6023] usb 6-1: string descriptor 0 read error: -22 [ 76.042171][ T40] audit: type=1400 audit(1762279386.161:394): avc: denied { write } for pid=6986 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.044613][ T6023] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.057671][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.062270][ T6957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.065690][ T6957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.216881][ T7000] Invalid ELF header type: 2 != 1 [ 76.265668][ T7005] overlayfs: failed to resolve './file0': -2 [ 76.269345][ T7007] netlink: 52 bytes leftover after parsing attributes in process `syz.0.300'. [ 76.270757][ T6023] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 76.278112][ T6023] usb 6-1: USB disconnect, device number 4 [ 76.361556][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.303'. [ 76.616887][ T5984] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 76.632791][ T7036] overlayfs: failed to resolve './file0': -2 [ 76.739491][ T7047] input: syz1 as /devices/virtual/input/input6 [ 76.768591][ T5984] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.771856][ T5984] usb 8-1: config 0 has no interface number 0 [ 76.774505][ T5984] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.778905][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.784373][ T5984] usb 8-1: config 0 descriptor?? [ 76.794773][ T7046] sp0: Synchronizing with TNC [ 76.799402][ T5984] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 76.803019][ T7046] [U] [ 77.039105][ T5969] usb 8-1: USB disconnect, device number 5 [ 77.046570][ T840] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 77.078694][ T7063] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 77.141161][ T7063] netlink: 228 bytes leftover after parsing attributes in process `syz.0.321'. [ 77.196878][ T840] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.200584][ T840] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.204186][ T840] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.207775][ T840] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 77.212844][ T840] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 77.218166][ T840] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.221204][ T840] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.223733][ T840] usb 7-1: Product: syz [ 77.225280][ T840] usb 7-1: Manufacturer: syz [ 77.229040][ T840] cdc_wdm 7-1:1.0: skipping garbage [ 77.230719][ T840] cdc_wdm 7-1:1.0: skipping garbage [ 77.235635][ T840] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 77.237839][ T840] cdc_wdm 7-1:1.0: Unknown control protocol [ 77.333516][ T7070] ptrace attach of "/syz-executor exec"[5928] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 77.334549][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 77.376212][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 77.429800][ T839] usb 7-1: USB disconnect, device number 8 [ 77.436292][ T6132] Process accounting resumed [ 77.447862][ T7073] Process accounting resumed [ 77.738907][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 77.742516][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 77.780285][ T7085] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 77.783361][ T7085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.905104][ T6132] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 78.018781][ T7095] overlay: Unknown parameter 'acl' [ 78.075592][ T7097] program syz.1.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.080566][ T6132] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 78.084472][ T6132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.088191][ T6132] usb 7-1: Product: syz [ 78.090139][ T6132] usb 7-1: Manufacturer: syz [ 78.092203][ T6132] usb 7-1: SerialNumber: syz [ 78.099832][ T6132] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 78.128657][ T1339] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.158187][ T7075] syz.0.326 (7075): drop_caches: 2 [ 78.472539][ T5969] usb 7-1: USB disconnect, device number 9 [ 78.998707][ T7137] syzkaller0: entered promiscuous mode [ 79.000473][ T7137] syzkaller0: entered allmulticast mode [ 79.027549][ T7143] syzkaller0: entered promiscuous mode [ 79.029381][ T7143] syzkaller0: entered allmulticast mode [ 79.032708][ T7143] 0: reclassify loop, rule prio 0, protocol 800 [ 79.066943][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 79.066958][ T40] audit: type=1400 audit(1762279389.191:534): avc: denied { mount } for pid=7144 comm="syz.1.344" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.071383][ T7145] devtmpfs: Cannot change global quota limit on remount [ 79.076939][ T40] audit: type=1400 audit(1762279389.191:535): avc: denied { remount } for pid=7144 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.085299][ T7145] syzkaller1: entered promiscuous mode [ 79.088727][ T7145] syzkaller1: entered allmulticast mode [ 79.105483][ T7145] syz_tun: entered promiscuous mode [ 79.126165][ T7147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=7147 comm=syz.2.345 [ 79.195018][ T1339] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 79.197887][ T1339] ath9k_htc: Failed to initialize the device [ 79.200554][ T5969] usb 7-1: ath9k_htc: USB layer deinitialized [ 79.342654][ T40] audit: type=1400 audit(1762279389.461:536): avc: denied { add_name } for pid=7164 comm="syz.0.351" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.350277][ T40] audit: type=1400 audit(1762279389.461:537): avc: denied { create } for pid=7164 comm="syz.0.351" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.354504][ T7165] netfs: Couldn't get user pages (rc=-14) [ 79.357671][ T40] audit: type=1400 audit(1762279389.461:538): avc: denied { associate } for pid=7164 comm="syz.0.351" name="pids.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.357695][ T40] audit: type=1400 audit(1762279389.471:539): avc: denied { read append open } for pid=7164 comm="syz.0.351" path="/88/file0/pids.current" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.357718][ T40] audit: type=1400 audit(1762279389.471:540): avc: denied { map } for pid=7164 comm="syz.0.351" path="/88/file0/pids.current" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.357739][ T40] audit: type=1400 audit(1762279389.471:541): avc: denied { execute } for pid=7164 comm="syz.0.351" path="/88/file0/pids.current" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.404418][ T7165] netfs: Zero-sized read [R=1] [ 79.429269][ T7174] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 79.484059][ T7186] 9pnet_virtio: no channels available for device syz [ 79.502638][ T7185] xt_TPROXY: Can be used only with -p tcp or -p udp [ 79.590357][ T40] audit: type=1400 audit(1762279389.711:542): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.668951][ T40] audit: type=1400 audit(1762279389.791:543): avc: denied { map } for pid=7191 comm="syz.2.358" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.788567][ T7199] fuse: Unknown parameter '0x0000000000000008' [ 80.455736][ T7211] overlayfs: failed to resolve './file0': -2 [ 80.469028][ T7203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.604674][ T7222] random: crng reseeded on system resumption [ 80.676752][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 80.825210][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 80.829069][ T9] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 80.832811][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 80.838758][ T9] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 80.843744][ T9] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 80.850339][ T9] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 80.855777][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.857777][ T7248] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 80.860552][ T7247] IPVS: stopping master sync thread 7248 ... [ 80.866837][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 80.870739][ T9] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 80.874601][ T9] usb 8-1: Product: syz [ 80.877161][ T9] usb 8-1: Manufacturer: syz [ 80.878957][ T9] usb 8-1: SerialNumber: syz [ 80.885665][ T9] usb 8-1: config 0 descriptor?? [ 80.891071][ T9] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 80.897212][ T9] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 81.091126][ T6023] usb 8-1: USB disconnect, device number 6 [ 81.101803][ T6023] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 81.210059][ T7285] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 81.212390][ T7285] PKCS7: Only support pkcs7_signedData type [ 81.426532][ T60] cfg80211: failed to load regulatory.db [ 81.445847][ T7297] netlink: 'syz.1.389': attribute type 12 has an invalid length. [ 81.576249][ T7303] netlink: ct family unspecified [ 81.578436][ T7303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.620047][ T7309] syz.1.394: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 81.686320][ T7312] syz.3.395 (7312): drop_caches: 2 [ 81.759897][ T7324] syz.1.398 (7324) used obsolete PPPIOCDETACH ioctl [ 82.025292][ T6015] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 82.095450][ T6132] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 82.175215][ T6015] usb 5-1: Using ep0 maxpacket: 32 [ 82.179992][ T6015] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 82.184111][ T6015] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 82.188676][ T6015] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 82.192507][ T6015] usb 5-1: config 1 interface 0 has no altsetting 0 [ 82.197357][ T6015] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.201015][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.204263][ T6015] usb 5-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 82.211142][ T6015] usb 5-1: Manufacturer: ࠔ [ 82.212612][ T6015] usb 5-1: SerialNumber: Є [ 82.217378][ T7326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.220496][ T7326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.257256][ T6132] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.261397][ T6132] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 82.265057][ T6132] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 82.268793][ T6132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.275184][ T6132] usb 6-1: config 0 descriptor?? [ 82.281216][ T6132] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 82.284306][ T6132] dvb-usb: bulk message failed: -22 (3/0) [ 82.290442][ T6132] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 82.293998][ T6132] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 82.296840][ T6132] usb 6-1: media controller created [ 82.300161][ T6132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.307523][ T6132] dvb-usb: bulk message failed: -22 (6/0) [ 82.310123][ T6132] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 82.315700][ T6132] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input8 [ 82.323204][ T6132] dvb-usb: schedule remote query interval to 150 msecs. [ 82.326074][ T6132] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 82.430607][ T6015] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 82.438915][ T6015] usb 5-1: USB disconnect, device number 7 [ 82.487009][ T9] usb 6-1: USB disconnect, device number 5 [ 82.504496][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 83.188226][ T7374] netlink: 140 bytes leftover after parsing attributes in process `syz.0.413'. [ 83.193363][ T7374] omfs: Invalid superblock (0) [ 83.245455][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 83.270767][ T7370] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 83.318362][ T6616] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 83.410749][ T7385] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 83.675017][ T6000] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 83.695089][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.835033][ T6000] usb 7-1: Using ep0 maxpacket: 32 [ 83.839665][ T6000] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 83.844029][ T6000] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 83.848249][ T6000] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 83.852082][ T6000] usb 7-1: config 1 interface 0 has no altsetting 0 [ 83.857395][ T6000] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.859955][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.861083][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.864397][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.867837][ T6000] usb 7-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 83.867862][ T6000] usb 7-1: Manufacturer: ࠔ [ 83.867875][ T6000] usb 7-1: SerialNumber: Є [ 83.870797][ T7392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.872132][ T9] usb 5-1: Product: syz [ 83.878907][ T7392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.880660][ T9] usb 5-1: Manufacturer: syz [ 83.892184][ T9] usb 5-1: SerialNumber: syz [ 83.899191][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 83.914215][ T6023] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 84.026855][ T7401] netlink: 124 bytes leftover after parsing attributes in process `syz.1.419'. [ 84.030477][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 84.089848][ T6000] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 84.094660][ T6000] usb 7-1: USB disconnect, device number 10 [ 84.118893][ T60] usb 5-1: USB disconnect, device number 8 [ 84.123775][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 84.147770][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 84.163044][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 84.163053][ T40] audit: type=1400 audit(1762279394.281:565): avc: denied { bind } for pid=7406 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.400141][ T7410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18147 sclass=netlink_route_socket pid=7410 comm=syz.3.423 [ 84.440549][ T40] audit: type=1800 audit(1762279394.561:566): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.424" name="file0" dev="9p" ino=71827877 res=0 errno=0 [ 84.449699][ T40] audit: type=1400 audit(1762279394.561:567): avc: denied { setattr } for pid=7411 comm="syz.3.424" name="file0" dev="9p" ino=71827877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.456810][ T40] audit: type=1400 audit(1762279394.571:568): avc: denied { write } for pid=7411 comm="syz.3.424" name="file0" dev="9p" ino=71827877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.459405][ T7413] netfs: Couldn't get user pages (rc=-14) [ 84.466292][ T40] audit: type=1804 audit(1762279394.571:569): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.424" name="/newroot/93/file0/file0" dev="9p" ino=71827877 res=1 errno=0 [ 84.475533][ T40] audit: type=1804 audit(1762279394.571:570): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.424" name="/newroot/93/file0/file0" dev="9p" ino=71827877 res=1 errno=0 [ 84.659039][ T40] audit: type=1400 audit(1762279394.781:571): avc: denied { wake_alarm } for pid=7421 comm="syz.0.427" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.666979][ T40] audit: type=1400 audit(1762279394.781:572): avc: denied { append } for pid=7421 comm="syz.0.427" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.782264][ T40] audit: type=1400 audit(1762279394.901:573): avc: denied { map } for pid=7431 comm="syz.2.430" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.805206][ T40] audit: type=1400 audit(1762279394.921:574): avc: denied { execute } for pid=7431 comm="syz.2.430" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.945072][ T6023] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 84.947384][ T6023] ath9k_htc: Failed to initialize the device [ 84.950659][ T60] usb 5-1: ath9k_htc: USB layer deinitialized [ 85.051046][ T7443] overlayfs: failed to resolve './file0': -2 [ 85.313689][ T7459] ip6t_REJECT: ECHOREPLY is not supported [ 85.319453][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 85.327158][ T7461] ip6t_REJECT: ECHOREPLY is not supported [ 85.399447][ T7468] Bluetooth: MGMT ver 1.23 [ 85.402690][ T7468] Bluetooth: hci0: invalid len left 7, exp >= 100 [ 85.792326][ T7518] overlayfs: conflicting options: userxattr,redirect_dir=on [ 86.297420][ T7550] PM: Enabling pm_trace changes system date and time during resume. [ 86.297420][ T7550] PM: Correct system time has to be restored manually after resume. [ 86.308733][ T7552] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 86.317298][ T7552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.464'. [ 86.425981][ T7568] overlayfs: failed to resolve './file1': -2 [ 86.655032][ T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 86.699632][ T7578] futex_wake_op: syz.0.473 tries to shift op by -1; fix this program [ 86.701604][ T7580] SELinux: policydb string length 14080 does not match expected length 8 [ 86.705821][ T7580] SELinux: failed to load policy [ 86.788074][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 86.804240][ T7589] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 86.806785][ T7589] netlink: 'syz.1.477': attribute type 7 has an invalid length. [ 86.809314][ T7589] netlink: 'syz.1.477': attribute type 8 has an invalid length. [ 86.811708][ T7589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.477'. [ 86.825922][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 86.832347][ T60] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 86.836243][ T60] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 86.839277][ T60] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 86.842423][ T60] usb 8-1: config 1 interface 0 has no altsetting 0 [ 86.846383][ T60] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.849951][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.852533][ T60] usb 8-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 86.858835][ T60] usb 8-1: Manufacturer: ࠔ [ 86.859936][ T6616] syzkaller0: tun_net_xmit 76 [ 86.860299][ T60] usb 8-1: SerialNumber: Є [ 86.861998][ T7562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.862019][ T7594] syzkaller0: create flow: hash 343952015 index 1 [ 86.862538][ T6616] syzkaller0: tun_net_xmit 48 [ 86.863825][ T7562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.867215][ T7596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.479'. [ 86.885178][ T6015] syzkaller0: tun_net_xmit 76 [ 86.911483][ T7590] syzkaller0: delete flow: hash 343952015 index 1 [ 86.980174][ T7598] overlayfs: failed to resolve './file1': -2 [ 87.073964][ T60] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 87.078708][ T60] usb 8-1: USB disconnect, device number 7 [ 87.786455][ T7624] netlink: 'syz.3.488': attribute type 2 has an invalid length. [ 88.036664][ T7646] can0: slcan on ttyprintk. [ 88.096143][ T7644] can0 (unregistered): slcan off ttyprintk. [ 88.105779][ T7655] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 88.173519][ T7664] bond0: (slave bond_slave_0): Releasing backup interface [ 88.182543][ T7664] bond0: (slave bond_slave_1): Releasing backup interface [ 88.192725][ T7664] team0: Port device team_slave_0 removed [ 88.200581][ T7664] team0: Port device team_slave_1 removed [ 88.202753][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.206272][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.210946][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.214096][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.222031][ T7664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.354020][ T7670] __nla_validate_parse: 6 callbacks suppressed [ 88.354035][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 88.368592][ T7670] XFS (nbd1): SB validate failed with error -5. [ 88.466508][ T7702] ntfs3(sr0): Primary boot signature is not NTFS. [ 88.468861][ T7702] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 88.505968][ T7704] netlink: 'syz.3.512': attribute type 4 has an invalid length. [ 88.512748][ T7704] binder: 7699:7704 ioctl c0306201 200000000640 returned -22 [ 88.671195][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.515'. [ 89.293819][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 89.293830][ T40] audit: type=1400 audit(1762279399.411:611): avc: denied { associate } for pid=7723 comm="syz.2.521" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.408933][ T7732] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 89.445143][ T6132] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 89.588135][ T40] audit: type=1400 audit(1762279399.711:612): avc: denied { listen } for pid=7748 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 89.594351][ T40] audit: type=1400 audit(1762279399.711:613): avc: denied { write } for pid=7748 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.626031][ T6132] usb 5-1: Using ep0 maxpacket: 32 [ 89.631318][ T6132] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 89.632151][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 89.634712][ T6132] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 89.634727][ T6132] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 89.634738][ T6132] usb 5-1: config 1 interface 0 has no altsetting 0 [ 89.636827][ T6132] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.638815][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 89.641989][ T6132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.656674][ T6132] usb 5-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 89.662281][ T6132] usb 5-1: Manufacturer: ࠔ [ 89.663756][ T6132] usb 5-1: SerialNumber: Є [ 89.670406][ T7720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.672753][ T7720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.746286][ T7762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7762 comm=syz.2.534 [ 89.796013][ T7766] macsec0: entered promiscuous mode [ 89.798422][ T7766] macsec0: entered allmulticast mode [ 89.800635][ T7766] veth1_macvtap: entered allmulticast mode [ 89.808949][ T7766] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 89.824968][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.825423][ T5931] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 89.881770][ T6132] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 89.886810][ T6132] usb 5-1: USB disconnect, device number 9 [ 90.065144][ T40] audit: type=1400 audit(1762279400.181:614): avc: denied { create } for pid=7773 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.072408][ T40] audit: type=1400 audit(1762279400.191:615): avc: denied { connect } for pid=7773 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.123566][ T40] audit: type=1400 audit(1762279400.241:616): avc: denied { attach_queue } for pid=7780 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.203983][ T7785] netlink: 'syz.3.543': attribute type 32 has an invalid length. [ 90.246252][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 90.251355][ T40] audit: type=1400 audit(1762279400.371:617): avc: denied { connect } for pid=7786 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.415818][ T5984] Process accounting resumed [ 90.434172][ T7805] Process accounting resumed [ 90.486131][ T7809] Illegal XDP return value 4294967262 on prog (id 67) dev syz_tun, expect packet loss! [ 90.681580][ T7833] hfsplus: Unknown parameter 'discard' [ 90.775555][ T40] audit: type=1400 audit(1762279400.891:618): avc: denied { setattr } for pid=7844 comm="syz.2.562" name="" dev="pipefs" ino=20126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 90.888617][ T7843] program syz.0.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.964999][ T6132] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 91.087385][ T7861] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 91.125004][ T6132] usb 8-1: Using ep0 maxpacket: 32 [ 91.129433][ T6132] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 91.133756][ T6132] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 91.139348][ T6132] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 91.143318][ T6132] usb 8-1: config 1 interface 0 has no altsetting 0 [ 91.147635][ T6132] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.151253][ T6132] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.154468][ T6132] usb 8-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 91.161169][ T6132] usb 8-1: Manufacturer: ࠔ [ 91.162970][ T6132] usb 8-1: SerialNumber: Є [ 91.166380][ T7842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.169135][ T7842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.385676][ T6132] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 91.392641][ T6132] usb 8-1: USB disconnect, device number 8 [ 91.393268][ T7871] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 91.407448][ T40] audit: type=1400 audit(1762279401.531:619): avc: denied { relabelto } for pid=7870 comm="syz.2.571" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 91.418077][ T40] audit: type=1400 audit(1762279401.531:620): avc: denied { associate } for pid=7870 comm="syz.2.571" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 91.457904][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.461828][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.462114][ T7871] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 91.895438][ T6023] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 91.970674][ T7879] dlm: no local IP address has been set [ 91.974304][ T7879] dlm: cannot start dlm midcomms -107 [ 91.979364][ T5931] Bluetooth: hci1: Malformed HCI Event [ 92.045613][ T6023] usb 7-1: Using ep0 maxpacket: 8 [ 92.049545][ T6023] usb 7-1: config 162 has an invalid interface number: 197 but max is 0 [ 92.052134][ T6023] usb 7-1: config 162 has no interface number 0 [ 92.054251][ T6023] usb 7-1: config 162 interface 197 has no altsetting 0 [ 92.059967][ T6023] usb 7-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 92.062812][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.065657][ T6023] usb 7-1: Product: syz [ 92.066984][ T6023] usb 7-1: Manufacturer: syz [ 92.068565][ T6023] usb 7-1: SerialNumber: syz [ 92.335668][ T7887] netlink: 'syz.0.576': attribute type 12 has an invalid length. [ 92.347319][ T7887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7887 comm=syz.0.576 [ 92.352797][ T7889] fuse: Bad value for 'fd' [ 92.397559][ T7893] overlayfs: missing 'lowerdir' [ 92.479128][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.482044][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.485921][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.488805][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.496809][ T7876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=7876 comm=syz.2.572 [ 92.507542][ T6023] usb 7-1: USB disconnect, device number 11 [ 92.517504][ T7902] netlink: 'syz.3.581': attribute type 12 has an invalid length. [ 92.653786][ T7902] netlink: 'syz.3.581': attribute type 11 has an invalid length. [ 92.834982][ T839] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.837259][ T7918] tmpfs: Bad value for 'mpol' [ 92.846666][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.586'. [ 92.955533][ T7923] overlayfs: missing 'lowerdir' [ 92.985009][ T839] usb 5-1: Using ep0 maxpacket: 32 [ 92.987889][ T839] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.990463][ T839] usb 5-1: config 0 has no interface number 0 [ 92.995033][ T839] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 92.998498][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.001497][ T839] usb 5-1: Product: syz [ 93.003023][ T839] usb 5-1: Manufacturer: syz [ 93.004652][ T839] usb 5-1: SerialNumber: syz [ 93.015398][ T839] usb 5-1: config 0 descriptor?? [ 93.019069][ T839] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 93.021690][ T839] usb 5-1: selecting invalid altsetting 1 [ 93.023489][ T839] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 93.030171][ T839] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 93.033453][ T839] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 93.036914][ T839] usb 5-1: media controller created [ 93.047148][ T839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.219221][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.222887][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.230386][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.233679][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.245601][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.248858][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.252460][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.256121][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.259059][ T7941] netlink: 'syz.3.592': attribute type 9 has an invalid length. [ 93.259528][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.261156][ T7926] could not allocate digest TFM handle cryptd(blake2b-160) [ 93.262456][ T7941] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.592'. [ 93.270627][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.416132][ T7957] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 93.443339][ T7961] overlayfs: missing 'lowerdir' [ 94.148323][ T839] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 94.156542][ T839] zl10353_read_register: readreg error (reg=127, ret==-110) [ 94.156760][ T7909] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 94.179619][ T839] usb 5-1: USB disconnect, device number 10 [ 94.451462][ T7972] sit0: entered promiscuous mode [ 94.457166][ T7972] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 94.460355][ T7972] netlink: 1 bytes leftover after parsing attributes in process `syz.1.603'. [ 94.538932][ T7984] vlan2: entered promiscuous mode [ 94.541327][ T7984] vlan2: entered allmulticast mode [ 94.543518][ T7984] hsr_slave_1: entered allmulticast mode [ 94.556557][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 94.556574][ T40] audit: type=1400 audit(1762279404.681:629): avc: denied { map } for pid=7986 comm="syz.2.607" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.570514][ T40] audit: type=1400 audit(1762279404.681:630): avc: denied { execute } for pid=7986 comm="syz.2.607" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.594641][ T7989] overlayfs: missing 'lowerdir' [ 94.629748][ T40] audit: type=1400 audit(1762279404.751:631): avc: denied { write } for pid=7990 comm="syz.1.609" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.630688][ T7992] netlink: 'syz.1.609': attribute type 58 has an invalid length. [ 94.636425][ T7993] netlink: 'syz.2.610': attribute type 1 has an invalid length. [ 94.636636][ T7993] netlink: 'syz.2.610': attribute type 1 has an invalid length. [ 94.637196][ T40] audit: type=1400 audit(1762279404.751:632): avc: denied { read } for pid=7991 comm="syz.2.610" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.654488][ T40] audit: type=1400 audit(1762279404.751:633): avc: denied { open } for pid=7991 comm="syz.2.610" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.692503][ T40] audit: type=1400 audit(1762279404.811:634): avc: denied { ioctl } for pid=7991 comm="syz.2.610" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.715555][ T7999] overlayfs: regular lower layers cannot follow data lower layers [ 94.918884][ T8017] overlayfs: missing 'lowerdir' [ 94.920810][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 94.969582][ T40] audit: type=1400 audit(1762279405.091:635): avc: denied { setopt } for pid=8020 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.012427][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.016691][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.076353][ T40] audit: type=1400 audit(1762279405.201:636): avc: denied { create } for pid=8034 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 95.099362][ T8035] openvswitch: netlink: Actions may not be safe on all matching packets [ 95.245036][ T839] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 95.256933][ T8049] bridge0: port 3(syz_tun) entered blocking state [ 95.263815][ T8049] bridge0: port 3(syz_tun) entered disabled state [ 95.266965][ T8049] syz_tun: entered allmulticast mode [ 95.270716][ T8049] syz_tun: entered promiscuous mode [ 95.273567][ T8049] bridge0: port 3(syz_tun) entered blocking state [ 95.275028][ T60] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 95.276703][ T8049] bridge0: port 3(syz_tun) entered forwarding state [ 95.383297][ T8058] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 95.385069][ T6023] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 95.396606][ T839] usb 5-1: config index 0 descriptor too short (expected 64832, got 72) [ 95.401120][ T839] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.403876][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.406848][ T839] usb 5-1: Product: syz [ 95.408226][ T839] usb 5-1: Manufacturer: syz [ 95.409716][ T839] usb 5-1: SerialNumber: syz [ 95.413728][ T839] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 95.420052][ T8058] hfsplus: unable to find HFS+ superblock [ 95.425081][ T60] usb 6-1: device descriptor read/64, error -71 [ 95.431697][ T839] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 95.454785][ T8060] overlayfs: missing 'lowerdir' [ 95.534995][ T6023] usb 8-1: Using ep0 maxpacket: 32 [ 95.540620][ T6023] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 95.544345][ T6023] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 95.547672][ T6023] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 95.550687][ T6023] usb 8-1: config 1 interface 0 has no altsetting 0 [ 95.556214][ T6023] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.559051][ T6023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.561632][ T6023] usb 8-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 95.567218][ T6023] usb 8-1: Manufacturer: ࠔ [ 95.568883][ T6023] usb 8-1: SerialNumber: Є [ 95.572889][ T8043] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 95.575846][ T8043] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 95.667724][ T60] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 95.791241][ T6023] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 95.796953][ T60] usb 6-1: device descriptor read/64, error -71 [ 95.799087][ T6023] usb 8-1: USB disconnect, device number 9 [ 95.905397][ T60] usb usb6-port1: attempt power cycle [ 95.910210][ T40] audit: type=1804 audit(1762279406.031:637): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.638" name="/newroot/203/file0" dev="tmpfs" ino=1188 res=1 errno=0 [ 95.913208][ T8074] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'. [ 95.922693][ T8074] netem: unknown loss type 13 [ 95.925048][ T8074] netem: change failed [ 96.215013][ T6132] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 96.244946][ T60] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 96.265707][ T60] usb 6-1: device descriptor read/8, error -71 [ 96.324400][ T40] audit: type=1800 audit(1762279406.441:638): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.640" name="file0" dev="overlay" ino=831 res=0 errno=0 [ 96.367638][ T6132] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 96.371276][ T6132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.374165][ T6132] usb 7-1: Product: syz [ 96.375560][ T6132] usb 7-1: Manufacturer: syz [ 96.377163][ T6132] usb 7-1: SerialNumber: syz [ 96.465094][ T839] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 96.468166][ T839] ath9k_htc: Failed to initialize the device [ 96.477367][ T8083] fuse: Unknown parameter '' [ 96.480213][ T8083] overlayfs: failed to resolve './file1': -2 [ 96.494668][ T839] usb 5-1: ath9k_htc: USB layer deinitialized [ 96.505934][ T60] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 96.525442][ T60] usb 6-1: device descriptor read/8, error -71 [ 96.635108][ T60] usb usb6-port1: unable to enumerate USB device [ 96.840259][ T6015] usb 5-1: USB disconnect, device number 11 [ 96.909107][ T6132] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 96.912912][ T6132] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 96.916680][ T6132] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 96.920403][ T6132] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 96.923702][ T6132] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 96.929077][ T6132] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 96.933726][ T6132] usb 7-1: USB disconnect, device number 12 [ 97.486551][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 97.490123][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 97.557818][ T8099] netlink: 38148 bytes leftover after parsing attributes in process `syz.2.644'. [ 97.561700][ T8099] ksmbd: Unknown IPC event: 1, ignore. [ 97.564521][ T8099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.644'. [ 97.663162][ T8118] netlink: 48 bytes leftover after parsing attributes in process `syz.0.650'. [ 97.666742][ T8105] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 97.675515][ T8116] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 97.725839][ T8121] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 98.229777][ T8145] batadv_slave_1: entered promiscuous mode [ 98.248912][ T8144] batadv_slave_1: left promiscuous mode [ 98.334171][ T8156] sctp: [Deprecated]: syz.2.663 (pid 8156) Use of int in max_burst socket option. [ 98.334171][ T8156] Use struct sctp_assoc_value instead [ 98.396792][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 98.551131][ T8167] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 98.553772][ T8167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.572696][ T8169] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 98.575397][ T8169] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.667'. [ 98.723882][ T8186] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.728507][ T8186] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.830440][ T8195] loop2: detected capacity change from 0 to 7 [ 98.835414][ T8195] Dev loop2: unable to read RDB block 7 [ 98.837458][ T8195] loop2: AHDI p2 p3 [ 98.839075][ T8195] loop2: partition table partially beyond EOD, truncated [ 98.842004][ T8195] loop2: p3 start 335544320 is beyond EOD, truncated [ 98.987919][ T8206] 8021q: VLANs not supported on ip_vti0 [ 99.028098][ T8205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.033413][ T8211] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 99.038374][ T8211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 99.040836][ T8205] uprobe: syz.2.680:8205 failed to unregister, leaking uprobe [ 99.115500][ T6023] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 99.154979][ T8218] qnx6: unable to set blocksize [ 99.265478][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 99.271403][ T6023] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 99.276291][ T6023] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 99.280297][ T6023] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 99.284231][ T6023] usb 5-1: config 1 interface 0 has no altsetting 0 [ 99.289328][ T6023] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.293167][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.297192][ T6023] usb 5-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 99.303427][ T6023] usb 5-1: Manufacturer: ࠔ [ 99.306809][ T6023] usb 5-1: SerialNumber: Є [ 99.313147][ T8199] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.316333][ T8199] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.525548][ T6023] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 99.531290][ T6023] usb 5-1: USB disconnect, device number 12 [ 99.626473][ T8236] FAT-fs (nullb0): bogus number of reserved sectors [ 99.629484][ T8236] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 99.673793][ T8240] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 99.677450][ T40] kauditd_printk_skb: 581 callbacks suppressed [ 99.677465][ T40] audit: type=1400 audit(1762279409.801:1220): avc: denied { relabelto } for pid=8239 comm="syz.1.688" name="156" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 99.691866][ T40] audit: type=1400 audit(1762279409.801:1221): avc: denied { associate } for pid=8239 comm="syz.1.688" name="156" dev="tmpfs" ino=932 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 99.723360][ T40] audit: type=1400 audit(1762279409.841:1222): avc: denied { append } for pid=8244 comm="syz.3.691" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 99.807955][ T40] audit: type=1400 audit(1762279409.931:1223): avc: denied { remove_name } for pid=5941 comm="syz-executor" name="binderfs" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 99.816640][ T40] audit: type=1400 audit(1762279409.931:1224): avc: denied { rmdir } for pid=5941 comm="syz-executor" name="156" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 99.825344][ T8249] __nla_validate_parse: 2 callbacks suppressed [ 99.825354][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 99.906308][ T40] audit: type=1400 audit(1762279410.031:1225): avc: denied { module_request } for pid=8253 comm="syz.3.694" kmod=7463702D756C702D746C73BB scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 99.931453][ T40] audit: type=1400 audit(1762279410.051:1226): avc: denied { bind } for pid=8253 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.305258][ T5931] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.315145][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.322756][ T8277] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 100.325206][ T8277] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 100.329397][ T8277] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 100.329947][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 100.331468][ T8277] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 100.334758][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 100.342000][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 100.490347][ T5931] Bluetooth: Wrong link type (-71) [ 100.685004][ T5984] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 100.737064][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 100.787937][ T40] audit: type=1400 audit(1762279410.911:1227): avc: denied { read } for pid=8300 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.855000][ T5984] usb 5-1: Using ep0 maxpacket: 32 [ 100.861290][ T5984] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 100.866308][ T5984] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 100.869533][ T5984] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 100.872605][ T5984] usb 5-1: config 1 interface 0 has no altsetting 0 [ 100.877646][ T5984] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.880678][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.883216][ T5984] usb 5-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 100.888680][ T5984] usb 5-1: Manufacturer: ࠔ [ 100.890275][ T5984] usb 5-1: SerialNumber: Є [ 100.893739][ T8289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.896339][ T8289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.018584][ T40] audit: type=1400 audit(1762279411.141:1228): avc: denied { create } for pid=8312 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.026984][ T40] audit: type=1400 audit(1762279411.141:1229): avc: denied { write } for pid=8312 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.090444][ T8317] ptrace attach of "/syz-executor exec"[5936] was attempted by "/syz-executor exec"[8317] [ 101.103455][ T5984] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 101.108364][ T5984] usb 5-1: USB disconnect, device number 13 [ 101.239616][ T8333] option changes via remount are deprecated (pid=8332 comm=syz.2.716) [ 101.340057][ T8338] netlink: 32 bytes leftover after parsing attributes in process `syz.2.718'. [ 101.506429][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 101.511330][ T8351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.722'. [ 101.512225][ T8363] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 101.514177][ T8351] netlink: 43 bytes leftover after parsing attributes in process `syz.1.722'. [ 101.521287][ T8351] netlink: 'syz.1.722': attribute type 5 has an invalid length. [ 101.523660][ T8351] netlink: 43 bytes leftover after parsing attributes in process `syz.1.722'. [ 101.588210][ T8351] bond0 (unregistering): Released all slaves [ 101.626344][ T8363] veth3: entered promiscuous mode [ 101.635382][ T8367] x_tables: duplicate underflow at hook 1 [ 101.681831][ T8373] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 101.835051][ T5931] Bluetooth: hci3: command 0x0419 tx timeout [ 101.844704][ T8389] netlink: 'syz.1.735': attribute type 29 has an invalid length. [ 102.029762][ T8397] nftables ruleset with unbound chain [ 102.275416][ T8408] xt_CT: No such helper "syz1" [ 102.286605][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 102.360234][ T8413] 9pnet_fd: p9_fd_create_tcp (8413): problem binding to privport [ 102.436812][ T60] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 102.440336][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.444204][ T60] usb 5-1: config 0 descriptor?? [ 102.448335][ T60] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 102.648352][ T839] usb 5-1: USB disconnect, device number 14 [ 102.855029][ T6023] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 102.936497][ T8431] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 102.940251][ T8431] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 103.008673][ T6023] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.017085][ T6023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.020443][ T6023] usb 8-1: Product: syz [ 103.022187][ T6023] usb 8-1: Manufacturer: syz [ 103.024106][ T6023] usb 8-1: SerialNumber: syz [ 103.030164][ T6023] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.040696][ T839] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.205276][ T958] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 103.364969][ T958] usb 6-1: Using ep0 maxpacket: 32 [ 103.368931][ T958] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 103.374584][ T958] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 103.378653][ T958] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 103.382486][ T958] usb 6-1: config 1 interface 0 has no altsetting 0 [ 103.387694][ T958] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.390611][ T958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.393128][ T958] usb 6-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 103.398915][ T958] usb 6-1: Manufacturer: ࠔ [ 103.400419][ T958] usb 6-1: SerialNumber: Є [ 103.403793][ T8436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.406278][ T8436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.612518][ T958] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 103.617420][ T958] usb 6-1: USB disconnect, device number 10 [ 104.065236][ T839] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 104.067665][ T839] ath9k_htc: Failed to initialize the device [ 104.088252][ T839] usb 8-1: ath9k_htc: USB layer deinitialized [ 104.410036][ T8475] 9pnet_virtio: no channels available for device syz [ 104.535277][ T6023] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 104.686091][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 104.690956][ T6023] usb 5-1: config 0 has an invalid interface number: 149 but max is 0 [ 104.694460][ T6023] usb 5-1: config 0 has no interface number 0 [ 104.697031][ T6023] usb 5-1: config 0 interface 149 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 104.700152][ T6023] usb 5-1: config 0 interface 149 altsetting 2 endpoint 0x3 has invalid maxpacket 1032, setting to 64 [ 104.703731][ T6023] usb 5-1: config 0 interface 149 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 104.708316][ T6023] usb 5-1: config 0 interface 149 altsetting 2 bulk endpoint 0xE has invalid maxpacket 32 [ 104.711857][ T6023] usb 5-1: config 0 interface 149 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 104.715761][ T6023] usb 5-1: config 0 interface 149 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 104.719248][ T6023] usb 5-1: config 0 interface 149 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 104.722521][ T6023] usb 5-1: config 0 interface 149 has no altsetting 0 [ 104.726645][ T6023] usb 5-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=f7.22 [ 104.729608][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.732131][ T6023] usb 5-1: Product: syz [ 104.733488][ T6023] usb 5-1: Manufacturer: syz [ 104.735067][ T6023] usb 5-1: SerialNumber: syz [ 104.737702][ T6023] usb 5-1: config 0 descriptor?? [ 104.739948][ T8467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.743060][ T8467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.827491][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 104.827545][ T40] audit: type=1400 audit(1762279414.951:1254): avc: denied { getopt } for pid=8425 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 104.828173][ T8483] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 104.945025][ T958] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 105.021304][ T6023] usb 5-1: USB disconnect, device number 15 [ 105.125000][ T958] usb 7-1: Using ep0 maxpacket: 32 [ 105.132696][ T958] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 105.137663][ T958] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 105.141789][ T958] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 105.144989][ T958] usb 7-1: config 1 interface 0 has no altsetting 0 [ 105.148966][ T958] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.152018][ T958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.154543][ T958] usb 7-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 105.160233][ T958] usb 7-1: Manufacturer: ࠔ [ 105.161734][ T958] usb 7-1: SerialNumber: Є [ 105.165285][ T8489] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.168166][ T8489] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.364736][ T8503] mkiss: ax0: crc mode is auto. [ 105.377430][ T958] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 105.382331][ T958] usb 7-1: USB disconnect, device number 13 [ 105.555153][ T40] audit: type=1326 audit(1762279415.671:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.1.770" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fb07778f6c9 code=0x0 [ 105.606862][ T8522] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 105.609819][ T8522] overlayfs: missing 'lowerdir' [ 105.645889][ T40] audit: type=1400 audit(1762279415.771:1256): avc: denied { ioctl } for pid=8526 comm="syz.1.774" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.732515][ T8522] dlm: no locking on control device [ 105.909293][ T40] audit: type=1400 audit(1762279416.031:1257): avc: denied { connect } for pid=8544 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.938194][ T958] usb 8-1: USB disconnect, device number 10 [ 105.957026][ T8550] SELinux: policydb version -359413070 does not match my version range 15-35 [ 105.959933][ T8550] SELinux: failed to load policy [ 105.966264][ T8552] Bluetooth: MGMT ver 1.23 [ 105.986353][ T40] audit: type=1400 audit(1762279416.111:1258): avc: denied { bind } for pid=8540 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.036696][ T8548] __nla_validate_parse: 4 callbacks suppressed [ 106.036707][ T8548] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.779'. [ 106.055997][ T8550] block nbd0: server does not support multiple connections per device. [ 106.060257][ T8550] block nbd0: shutting down sockets [ 106.110887][ T8561] netlink: 750 bytes leftover after parsing attributes in process `syz.2.789'. [ 106.172861][ T8568] syzkaller1: entered promiscuous mode [ 106.174640][ T8568] syzkaller1: entered allmulticast mode [ 106.179659][ T8568] netlink: 'syz.2.789': attribute type 10 has an invalid length. [ 106.182179][ T8568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.789'. [ 106.565170][ T6023] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 106.616125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.715410][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 106.729949][ T6023] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 106.735199][ T6023] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 106.739747][ T6023] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 106.746402][ T6023] usb 5-1: config 1 interface 0 has no altsetting 0 [ 106.756823][ T6023] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.761747][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.766167][ T6023] usb 5-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 106.774061][ T6023] usb 5-1: Manufacturer: ࠔ [ 106.779657][ T6023] usb 5-1: SerialNumber: Є [ 106.786446][ T8585] overlayfs: overlapping lowerdir path [ 106.786708][ T8573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.791888][ T8573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.800165][ T8585] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 106.806339][ T40] audit: type=1400 audit(1762279416.931:1259): avc: denied { append } for pid=8584 comm="syz.1.793" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.942910][ T8588] overlayfs: failed to resolve './file2': -2 [ 106.996627][ T8585] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 107.003188][ T6023] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 107.008876][ T6023] usb 5-1: USB disconnect, device number 16 [ 107.058264][ T40] audit: type=1400 audit(1762279417.181:1260): avc: denied { mount } for pid=8594 comm="syz.2.795" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.060251][ T8595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.091631][ T40] audit: type=1400 audit(1762279417.211:1261): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.445667][ T8614] hfsplus: unable to find HFS+ superblock [ 107.615980][ T8588] overlayfs: statfs failed on './file0' [ 107.972986][ T8663] netlink: 'syz.1.809': attribute type 9 has an invalid length. [ 108.003968][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 108.012774][ T8671] gfs2: not a GFS2 filesystem [ 108.128937][ T8684] netlink: 328 bytes leftover after parsing attributes in process `syz.2.812'. [ 108.388281][ T8696] SELinux: failed to load policy [ 108.395149][ T6015] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 108.527098][ T40] audit: type=1400 audit(1762279418.651:1262): avc: denied { read } for pid=8707 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.555259][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 108.560764][ T6015] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 108.566683][ T6015] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 108.567067][ T8715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.820'. [ 108.571062][ T6015] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 108.574391][ T8717] netlink: 32 bytes leftover after parsing attributes in process `syz.3.820'. [ 108.578428][ T6015] usb 6-1: config 1 interface 0 has no altsetting 0 [ 108.586970][ T6015] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.590717][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.593621][ T6015] usb 6-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 108.600361][ T6015] usb 6-1: Manufacturer: ࠔ [ 108.602414][ T6015] usb 6-1: SerialNumber: Є [ 108.607408][ T8688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.609902][ T8688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.723284][ T8727] fuse: Unknown parameter 'grou00000000000000000000' [ 108.818150][ T6015] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 108.823123][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.825'. [ 108.826598][ T6015] usb 6-1: USB disconnect, device number 11 [ 109.045326][ T8749] syzkaller1: entered promiscuous mode [ 109.047630][ T8749] syzkaller1: entered allmulticast mode [ 109.130981][ T8758] fuse: Unknown parameter 'grou00000000000000000000' [ 109.263624][ T8769] xt_l2tp: v2 sid > 0xffff: 1114112 [ 109.347064][ T8778] max out of range [ 109.351662][ T8778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.356152][ T8781] Invalid logical block size (-3) [ 109.444715][ T8789] fuse: Unknown parameter 'group_i00000000000000000000' [ 109.581167][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 109.583945][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 109.595322][ T6023] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 109.623219][ T8805] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 109.627382][ T5931] Bluetooth: hci2: unexpected cc 0x0402 length: 5 > 1 [ 109.746828][ T6023] usb 6-1: no configurations [ 109.748899][ T6023] usb 6-1: can't read configurations, error -22 [ 109.845707][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 109.885010][ T6023] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 110.015152][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 110.019199][ T9] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 110.022748][ T9] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 110.025921][ T9] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 110.029057][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 110.032843][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.036522][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.039257][ T9] usb 8-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 110.044802][ T6023] usb 6-1: no configurations [ 110.046578][ T6023] usb 6-1: can't read configurations, error -22 [ 110.048731][ T9] usb 8-1: Manufacturer: ࠔ [ 110.050201][ T9] usb 8-1: SerialNumber: Є [ 110.052337][ T6023] usb usb6-port1: attempt power cycle [ 110.055625][ T8803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.057945][ T8803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.266480][ T9] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 110.271374][ T9] usb 8-1: USB disconnect, device number 11 [ 110.275138][ T8814] fuse: Unknown parameter 'group_i00000000000000000000' [ 110.385326][ T6023] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 110.405951][ T6023] usb 6-1: no configurations [ 110.407486][ T6023] usb 6-1: can't read configurations, error -22 [ 110.535277][ T6023] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 110.551196][ T8821] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 110.556068][ T6023] usb 6-1: no configurations [ 110.557714][ T6023] usb 6-1: can't read configurations, error -22 [ 110.560646][ T6023] usb usb6-port1: unable to enumerate USB device [ 111.148039][ T5969] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 111.296511][ T5969] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 111.299644][ T5969] usb 7-1: config 0 has no interface number 0 [ 111.302180][ T5969] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.305969][ T5969] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 111.310362][ T5969] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 111.315071][ T5969] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 111.318708][ T5969] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 111.322305][ T5969] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.326516][ T5969] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 111.329377][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.332933][ T5969] usb 7-1: config 0 descriptor?? [ 111.335188][ T8838] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.337569][ T8838] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.341416][ T5969] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 111.517258][ T8843] __nla_validate_parse: 2 callbacks suppressed [ 111.517276][ T8843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.865'. [ 111.522559][ T8843] tipc: Invalid UDP bearer configuration [ 111.522589][ T8843] tipc: Enabling of bearer rejected, failed to enable media [ 111.541574][ T9] usb 7-1: USB disconnect, device number 14 [ 111.547682][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 111.670974][ T8833] overlayfs: statfs failed on './file0' [ 111.822105][ T40] audit: type=1400 audit(1762279421.941:1263): avc: denied { name_bind } for pid=8854 comm="syz.0.869" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 111.912463][ T8860] bond1: Unable to set up delay as MII monitoring is disabled [ 111.917110][ T8860] bond1 (unregistering): Released all slaves [ 112.020737][ T1339] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 112.136761][ T8869] ALSA: mixer_oss: invalid OSS volume '' [ 112.185204][ T1339] usb 8-1: Using ep0 maxpacket: 32 [ 112.190223][ T1339] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 112.194809][ T1339] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 112.199192][ T1339] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 112.199217][ T1339] usb 8-1: config 1 interface 0 has no altsetting 0 [ 112.201772][ T1339] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.213261][ T1339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.213283][ T1339] usb 8-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 112.213305][ T1339] usb 8-1: Manufacturer: ࠔ [ 112.213319][ T1339] usb 8-1: SerialNumber: Є [ 112.216415][ T8853] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 112.216553][ T8853] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 112.422493][ T1339] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 112.427361][ T1339] usb 8-1: USB disconnect, device number 12 [ 112.428468][ T8888] fuse: Unknown parameter 'group_id00000000000000000000' [ 112.510156][ T8890] bond0: Unable to set down delay as MII monitoring is disabled [ 112.514822][ T8890] bond0 (unregistering): Released all slaves [ 112.556945][ T6015] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 112.714970][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 112.718067][ T6015] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 112.721302][ T6015] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.725757][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.729770][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.733811][ T6015] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.739069][ T6015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.742616][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.763767][ T40] audit: type=1400 audit(1762279422.881:1264): avc: denied { name_connect } for pid=8900 comm="syz.1.880" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 112.801730][ T8907] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 112.855515][ T40] audit: type=1804 audit(1762279422.981:1265): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.882" name="/newroot/197/bus/bus" dev="overlay" ino=1181 res=1 errno=0 [ 112.911845][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 112.918465][ T40] audit: type=1400 audit(1762279423.041:1266): avc: denied { execmem } for pid=8911 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 112.954092][ T6015] usb 5-1: usb_control_msg returned -32 [ 112.956784][ T6015] usbtmc 5-1:16.0: can't read capabilities [ 113.005777][ T8920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.009278][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 113.112789][ T8926] netlink: 'syz.2.887': attribute type 10 has an invalid length. [ 113.125870][ T8926] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 113.129324][ T8926] team0: Failed to send options change via netlink (err -105) [ 113.132378][ T8926] team0: Port device netdevsim0 added [ 113.148140][ T6616] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 113.165469][ T5969] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 113.295914][ T8931] 9pnet: Unknown protocol version 9p20\++} [ 113.336729][ T5969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.340093][ T5969] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 113.343000][ T5969] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 113.346115][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.350005][ T5969] usb 6-1: config 0 descriptor?? [ 113.354152][ T5969] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 113.356607][ T5969] dvb-usb: bulk message failed: -22 (3/0) [ 113.359907][ T5969] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 113.362930][ T5969] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 113.365834][ T5969] usb 6-1: media controller created [ 113.368761][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.373648][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 113.376707][ T5969] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 113.380418][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input11 [ 113.384680][ T5969] dvb-usb: schedule remote query interval to 150 msecs. [ 113.388051][ T5969] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 113.546774][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 113.549363][ T5969] dvb-usb: error while querying for an remote control event. [ 113.556219][ T8912] dvb-usb: bulk message failed: -22 (2/0) [ 113.576968][ T5969] usb 6-1: USB disconnect, device number 16 [ 113.595968][ T5969] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.945479][ T5969] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 114.094973][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 114.098775][ T5969] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 114.102829][ T5969] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 114.105977][ T5969] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 114.109409][ T5969] usb 6-1: config 1 interface 0 has no altsetting 0 [ 114.114337][ T5969] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.118821][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.122280][ T5969] usb 6-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 114.130671][ T5969] usb 6-1: Manufacturer: ࠔ [ 114.132761][ T5969] usb 6-1: SerialNumber: Є [ 114.138263][ T8958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.141372][ T8958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.146168][ T8969] FAT-fs (nullb0): bogus number of reserved sectors [ 114.149040][ T8969] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 114.160209][ T8969] program syz.3.896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.164376][ T8969] ata1.00: invalid command format 0 [ 114.170467][ T40] audit: type=1400 audit(1762279424.291:1267): avc: denied { mounton } for pid=8968 comm="syz.3.896" path="/222/file0" dev="9p" ino=71827745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.170614][ T8970] 9pnet_virtio: no channels available for device syz [ 114.195122][ T6003] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 114.345163][ T8958] FAULT_INJECTION: forcing a failure. [ 114.345163][ T8958] name failslab, interval 1, probability 0, space 0, times 1 [ 114.349173][ T8958] CPU: 3 UID: 0 PID: 8958 Comm: syz.1.892 Not tainted syzkaller #0 PREEMPT(full) [ 114.349187][ T8958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.349193][ T8958] Call Trace: [ 114.349197][ T8958] [ 114.349202][ T8958] dump_stack_lvl+0x16c/0x1f0 [ 114.349232][ T8958] should_fail_ex+0x512/0x640 [ 114.349250][ T8958] ? fs_reclaim_acquire+0xae/0x150 [ 114.349263][ T8958] should_failslab+0xc2/0x120 [ 114.349279][ T8958] __kmalloc_noprof+0xdd/0x880 [ 114.349301][ T8958] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 114.349323][ T8958] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 114.349343][ T8958] tomoyo_realpath_from_path+0xc2/0x6e0 [ 114.349365][ T8958] ? tomoyo_profile+0x47/0x60 [ 114.349384][ T8958] tomoyo_path_number_perm+0x245/0x580 [ 114.349400][ T8958] ? tomoyo_path_number_perm+0x237/0x580 [ 114.349418][ T8958] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.349436][ T8958] ? find_held_lock+0x2b/0x80 [ 114.349461][ T8958] ? find_held_lock+0x2b/0x80 [ 114.349473][ T8958] ? hook_file_ioctl_common+0x145/0x410 [ 114.349490][ T8958] ? __fget_files+0x20e/0x3c0 [ 114.349504][ T8958] security_file_ioctl+0x9b/0x240 [ 114.349517][ T8958] __x64_sys_ioctl+0xb7/0x210 [ 114.349533][ T8958] do_syscall_64+0xcd/0xfa0 [ 114.349550][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.349561][ T8958] RIP: 0033:0x7fb07778f6c9 [ 114.349570][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.349580][ T8958] RSP: 002b:00007fb07869f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.349590][ T8958] RAX: ffffffffffffffda RBX: 00007fb0779e5fa0 RCX: 00007fb07778f6c9 [ 114.349597][ T8958] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000006 [ 114.349603][ T8958] RBP: 00007fb07869f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.349609][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.349614][ T8958] R13: 00007fb0779e6038 R14: 00007fb0779e5fa0 R15: 00007ffef7fbf648 [ 114.349628][ T8958] [ 114.349633][ T8958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.354939][ T6003] usb 7-1: Using ep0 maxpacket: 32 [ 114.425500][ T6003] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.428773][ T5969] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 114.434698][ T6003] usb 7-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 114.439860][ T6003] usb 7-1: config 1 interface 0 has no altsetting 0 [ 114.442537][ T5969] usb 6-1: USB disconnect, device number 17 [ 114.446205][ T6003] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.449072][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.451598][ T6003] usb 7-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 114.460897][ T6003] usb 7-1: Manufacturer: ࠔ [ 114.462486][ T6003] usb 7-1: SerialNumber: Є [ 114.465702][ T8962] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.468016][ T8962] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.674994][ T6003] usb 7-1: USB disconnect, device number 15 [ 114.895556][ T8987] kvm: MWAIT instruction emulated as NOP! [ 115.034843][ T8994] xt_socket: unknown flags 0xe4 [ 115.037478][ T8994] overlay: Unknown parameter 'smackfsroot' [ 115.111942][ T8998] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.907' resets device [ 115.118111][ T40] audit: type=1400 audit(1762279425.241:1268): avc: denied { shutdown } for pid=8999 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.121775][ C2] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888012ba7c00: connection exists (fe ff). last cmd: 20 [ 115.125706][ T40] audit: type=1400 audit(1762279425.251:1269): avc: denied { read } for pid=5324 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 115.129509][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 115.135114][ T40] audit: type=1400 audit(1762279425.251:1270): avc: denied { search } for pid=5324 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.135158][ T40] audit: type=1400 audit(1762279425.251:1271): avc: denied { search } for pid=5324 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.135194][ T40] audit: type=1400 audit(1762279425.251:1272): avc: denied { add_name } for pid=5324 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.226912][ T9004] openvswitch: netlink: IP tunnel dst address not specified [ 115.298875][ T6132] usb 5-1: USB disconnect, device number 17 [ 115.495311][ T6023] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 115.570168][ T9027] fuse: Bad value for 'user_id' [ 115.572305][ T9027] fuse: Bad value for 'user_id' [ 115.645275][ T6023] usb 6-1: Using ep0 maxpacket: 32 [ 115.651929][ T6023] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 115.655602][ T6023] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 115.658651][ T6023] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 115.661509][ T6023] usb 6-1: config 1 interface 0 has no altsetting 0 [ 115.665068][ T6023] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.668010][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.670685][ T6023] usb 6-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 115.677781][ T6023] usb 6-1: Manufacturer: ࠔ [ 115.679311][ T6023] usb 6-1: SerialNumber: Є [ 115.682426][ T9008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.684730][ T9008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.686170][ T9034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.690849][ T9034] random: crng reseeded on system resumption [ 115.716552][ T9037] comedi: valid board names for 8255 driver are: [ 115.718831][ T9037] 8255 [ 115.719768][ T9037] comedi: valid board names for vmk80xx driver are: [ 115.721786][ T9037] vmk80xx [ 115.722807][ T9037] comedi: valid board names for usbduxsigma driver are: [ 115.725979][ T9037] usbduxsigma [ 115.727508][ T9037] comedi: valid board names for usbduxfast driver are: [ 115.730486][ T9037] usbduxfast [ 115.731980][ T9037] comedi: valid board names for usbdux driver are: [ 115.734636][ T9037] usbdux [ 115.735714][ T9037] comedi: valid board names for ni6501 driver are: [ 115.737928][ T9037] ni6501 [ 115.738999][ T9037] comedi: valid board names for dt9812 driver are: [ 115.741032][ T9037] dt9812 [ 115.741982][ T9037] comedi: valid board names for ni_labpc_cs driver are: [ 115.744507][ T9037] ni_labpc_cs [ 115.746228][ T9037] comedi: valid board names for ni_daq_700 driver are: [ 115.749204][ T9037] ni_daq_700 [ 115.750651][ T9037] comedi: valid board names for labpc_pci driver are: [ 115.753371][ T9037] labpc_pci [ 115.754803][ T9037] comedi: valid board names for adl_pci9118 driver are: [ 115.758011][ T9037] pci9118dg [ 115.759497][ T9037] pci9118hg [ 115.760996][ T9037] pci9118hr [ 115.762449][ T9037] comedi: valid board names for 8255_pci driver are: [ 115.765404][ T9037] 8255_pci [ 115.767171][ T9037] comedi: valid board names for s526 driver are: [ 115.769428][ T9037] s526 [ 115.770735][ T9037] comedi: valid board names for multiq3 driver are: [ 115.773492][ T9037] multiq3 [ 115.775167][ T9037] comedi: valid board names for pcmuio driver are: [ 115.777930][ T9037] pcmuio48 [ 115.779326][ T9037] pcmuio96 [ 115.780776][ T9037] comedi: valid board names for pcmmio driver are: [ 115.784185][ T9037] pcmmio [ 115.785680][ T9037] comedi: valid board names for pcmda12 driver are: [ 115.788576][ T9037] pcmda12 [ 115.789959][ T9037] comedi: valid board names for pcmad driver are: [ 115.792664][ T9037] pcmad12 [ 115.793990][ T9037] pcmad16 [ 115.795523][ T9037] comedi: valid board names for ni_labpc driver are: [ 115.798485][ T9037] lab-pc-1200 [ 115.800022][ T9037] lab-pc-1200ai [ 115.801637][ T9037] lab-pc+ [ 115.802974][ T9037] comedi: valid board names for atmio16 driver are: [ 115.806077][ T9037] atmio16 [ 115.807461][ T9037] atmio16d [ 115.808940][ T9037] comedi: valid board names for ni_at_ao driver are: [ 115.811742][ T9037] at-ao-6 [ 115.813128][ T9037] at-ao-10 [ 115.814841][ T9037] comedi: valid board names for ni_at_a2150 driver are: [ 115.817951][ T9037] ni_at_a2150 [ 115.819490][ T9037] comedi: valid board names for adq12b driver are: [ 115.822330][ T9037] adq12b [ 115.823649][ T9037] comedi: valid board names for mpc624 driver are: [ 115.827195][ T9037] mpc624 [ 115.828550][ T9037] comedi: valid board names for c6xdigio driver are: [ 115.831392][ T9037] c6xdigio [ 115.832850][ T9037] comedi: valid board names for aio_iiro_16 driver are: [ 115.835934][ T9037] aio_iiro_16 [ 115.837462][ T9037] comedi: valid board names for aio_aio12_8 driver are: [ 115.840491][ T9037] aio_aio12_8 [ 115.842018][ T9037] aio_ai12_8 [ 115.843504][ T9037] aio_ao12_4 [ 115.845157][ T9037] comedi: valid board names for fl512 driver are: [ 115.847939][ T9037] fl512 [ 115.849215][ T9037] comedi: valid board names for dmm32at driver are: [ 115.852029][ T9037] dmm32at [ 115.853381][ T9037] comedi: valid board names for dt282x driver are: [ 115.856217][ T9037] dt2821 [ 115.857496][ T9037] dt2821-f [ 115.858908][ T9037] dt2821-g [ 115.860298][ T9037] dt2823 [ 115.861587][ T9037] dt2824-pgh [ 115.863045][ T9037] dt2824-pgl [ 115.864543][ T9037] dt2825 [ 115.865970][ T9037] dt2827 [ 115.867288][ T9037] dt2828 [ 115.868690][ T9037] dt2829 [ 115.870000][ T9037] dt21-ez [ 115.871374][ T9037] dt23-ez [ 115.872776][ T9037] dt24-ez [ 115.874148][ T9037] dt24-ez-pgl [ 115.876205][ T9037] comedi: valid board names for dt2817 driver are: [ 115.879004][ T9037] dt2817 [ 115.880226][ T9037] comedi: valid board names for dt2815 driver are: [ 115.882566][ T9037] dt2815 [ 115.883783][ T9037] comedi: valid board names for dt2814 driver are: [ 115.886310][ T9037] dt2814 [ 115.887221][ T9037] comedi: valid board names for dt2811 driver are: [ 115.889241][ T9037] dt2811-pgh [ 115.890531][ T9037] dt2811-pgl [ 115.891935][ T9037] comedi: valid board names for dt2801 driver are: [ 115.894648][ T9037] dt2801 [ 115.896543][ T9037] comedi: valid board names for das6402 driver are: [ 115.897674][ T6023] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 115.899319][ T9037] das6402-12 [ 115.899347][ T9037] das6402-16 [ 115.899355][ T9037] comedi: valid board names for das1800 driver are: [ 115.904016][ T6023] usb 6-1: USB disconnect, device number 18 [ 115.904692][ T9037] das-1701st [ 115.910719][ T9037] das-1701st-da [ 115.912231][ T9037] das-1702st [ 115.913652][ T9037] das-1702st-da [ 115.915270][ T9037] das-1702hr [ 115.917016][ T9037] das-1702hr-da [ 115.918596][ T9037] das-1701ao [ 115.919995][ T9037] das-1702ao [ 115.921381][ T9037] das-1801st [ 115.922760][ T9037] das-1801st-da [ 115.924137][ T9037] das-1802st [ 115.925603][ T9037] das-1802st-da [ 115.927076][ T9037] das-1802hr [ 115.928484][ T9037] das-1802hr-da [ 115.929801][ T9037] das-1801hc [ 115.931148][ T9037] das-1802hc [ 115.932567][ T9037] das-1801ao [ 115.934014][ T9037] das-1802ao [ 115.935563][ T9037] comedi: valid board names for das800 driver are: [ 115.938259][ T9037] das-800 [ 115.939365][ T9037] cio-das800 [ 115.940695][ T9037] das-801 [ 115.940702][ T9037] cio-das801 [ 115.940706][ T9037] das-802 [ 115.940711][ T9037] cio-das802 [ 115.940714][ T9037] cio-das802/16 [ 115.940719][ T9037] comedi: valid board names for isa-das08 driver are: [ 115.940724][ T9037] isa-das08 [ 115.940728][ T9037] das08-pgm [ 115.940733][ T9037] das08-pgh [ 115.940737][ T9037] das08-pgl [ 115.940741][ T9037] das08-aoh [ 115.957342][ T9037] das08-aol [ 115.959239][ T9037] das08-aom [ 115.960646][ T9037] das08/jr-ao [ 115.962103][ T9037] das08jr-16-ao [ 115.963642][ T9037] pc104-das08 [ 115.965229][ T9037] das08jr/16 [ 115.966677][ T9037] comedi: valid board names for das16m1 driver are: [ 115.969522][ T9037] das16m1 [ 115.970825][ T9037] comedi: valid board names for dac02 driver are: [ 115.973479][ T9037] dac02 [ 115.974744][ T9037] comedi: valid board names for rti802 driver are: [ 115.977652][ T9037] rti802 [ 115.978923][ T9037] comedi: valid board names for rti800 driver are: [ 115.981081][ T9037] rti800 [ 115.982036][ T9037] rti815 [ 115.982970][ T9037] comedi: valid board names for pcm3724 driver are: [ 115.985303][ T9037] pcm3724 [ 115.986371][ T9037] comedi: valid board names for pcl818 driver are: [ 115.988639][ T9037] pcl818l [ 115.989593][ T9037] pcl818h [ 115.990531][ T9037] pcl818hd [ 115.991530][ T9037] pcl818hg [ 115.992541][ T9037] pcl818 [ 115.993477][ T9037] pcl718 [ 115.994380][ T9037] pcm3718 [ 115.995420][ T9037] comedi: valid board names for pcl816 driver are: [ 115.997454][ T9037] pcl816 [ 115.998412][ T9037] pcl814b [ 115.999398][ T9037] comedi: valid board names for pcl812 driver are: [ 116.001419][ T9037] pcl812 [ 116.002321][ T9037] pcl812pg [ 116.003310][ T9037] acl8112pg [ 116.004369][ T9037] acl8112dg [ 116.005534][ T9037] acl8112hg [ 116.007131][ T9037] a821pgl [ 116.008557][ T9037] a821pglnda [ 116.009685][ T9037] a821pgh [ 116.010774][ T9037] a822pgl [ 116.011947][ T9037] a822pgh [ 116.013049][ T9037] a823pgl [ 116.014163][ T9037] a823pgh [ 116.015409][ T9037] pcl813 [ 116.016438][ T9037] pcl813b [ 116.017450][ T9037] acl8113 [ 116.018677][ T9037] iso813 [ 116.019631][ T9037] acl8216 [ 116.020666][ T9037] a826pg [ 116.021606][ T9037] comedi: valid board names for pcl730 driver are: [ 116.023726][ T9037] pcl730 [ 116.024821][ T9037] iso730 [ 116.026071][ T9037] acl7130 [ 116.027189][ T9037] pcm3730 [ 116.028237][ T9037] pcl725 [ 116.029215][ T9037] p8r8dio [ 116.030403][ T9037] acl7225b [ 116.031575][ T9037] p16r16dio [ 116.032832][ T9037] pcl733 [ 116.033955][ T9037] pcl734 [ 116.035062][ T9037] opmm-1616-xt [ 116.036222][ T9037] pearl-mm-p [ 116.037291][ T9037] ir104-pbf [ 116.038329][ T9037] comedi: valid board names for pcl726 driver are: [ 116.040585][ T9037] pcl726 [ 116.041590][ T9037] pcl727 [ 116.042523][ T9037] pcl728 [ 116.043460][ T9037] acl6126 [ 116.044441][ T9037] acl6128 [ 116.045494][ T9037] comedi: valid board names for pcl724 driver are: [ 116.047490][ T9037] pcl724 [ 116.048442][ T9037] pcl722 [ 116.049403][ T9037] pcl731 [ 116.050351][ T9037] acl7122 [ 116.051333][ T9037] acl7124 [ 116.052311][ T9037] pet48dio [ 116.053301][ T9037] pcmio48 [ 116.054260][ T9037] onyx-mm-dio [ 116.055385][ T9037] comedi: valid board names for pcl711 driver are: [ 116.057409][ T9037] pcl711 [ 116.058320][ T9037] pcl711b [ 116.059296][ T9037] acl8112hg [ 116.060361][ T9037] acl8112dg [ 116.061408][ T9037] comedi: valid board names for amplc_pc263 driver are: [ 116.063555][ T9037] pc263 [ 116.064504][ T9037] comedi: valid board names for amplc_pc236 driver are: [ 116.065056][ T6132] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 116.066759][ T9037] pc36at [ 116.070974][ T9037] comedi: valid board names for amplc_dio200 driver are: [ 116.073168][ T9037] pc212e [ 116.074122][ T9037] pc214e [ 116.075163][ T9037] pc215e [ 116.076151][ T9037] pc218e [ 116.077122][ T9037] pc272e [ 116.078103][ T9037] comedi: valid board names for comedi_parport driver are: [ 116.080407][ T9037] comedi_parport [ 116.081660][ T9037] comedi: valid board names for comedi_test driver are: [ 116.083963][ T9037] comedi_test [ 116.085214][ T9037] comedi: valid board names for comedi_bond driver are: [ 116.087429][ T9037] comedi_bond [ 116.235023][ T6132] usb 7-1: Using ep0 maxpacket: 32 [ 116.239090][ T6132] usb 7-1: config 128 has an invalid interface number: 158 but max is 1 [ 116.243057][ T6132] usb 7-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config [ 116.248188][ T6132] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 116.252297][ T6132] usb 7-1: config 128 has no interface number 0 [ 116.255390][ T6132] usb 7-1: config 128 interface 158 altsetting 128 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 116.260512][ T6132] usb 7-1: config 128 interface 158 altsetting 128 bulk endpoint 0xD has invalid maxpacket 64 [ 116.265088][ T6132] usb 7-1: config 128 interface 158 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 116.269867][ T6132] usb 7-1: config 128 interface 158 altsetting 128 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 116.275079][ T6132] usb 7-1: config 128 interface 158 has no altsetting 0 [ 116.280974][ T6132] usb 7-1: New USB device found, idVendor=04c5, idProduct=1058, bcdDevice=9e.2e [ 116.284590][ T6132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.288109][ T6132] usb 7-1: Product: syz [ 116.289068][ T9042] kvm_intel: kvm [9041]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x6ab9 [ 116.290018][ T6132] usb 7-1: Manufacturer: syz [ 116.290028][ T6132] usb 7-1: SerialNumber: syz [ 116.300169][ T9040] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.306800][ T9042] kvm: kvm [9041]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x9dfb [ 116.310867][ T9042] kvm: kvm [9041]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x789c [ 116.365024][ T5969] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 116.441736][ T9049] bond0: entered promiscuous mode [ 116.474955][ T9057] fuse: Bad value for 'user_id' [ 116.476739][ T9057] fuse: Bad value for 'user_id' [ 116.514743][ T6132] usb 7-1: USB disconnect, device number 16 [ 116.537433][ T5969] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.541261][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.544291][ T5969] usb 5-1: Product: syz [ 116.546007][ T5969] usb 5-1: Manufacturer: syz [ 116.547762][ T5969] usb 5-1: SerialNumber: syz [ 116.552025][ T5969] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.556723][ T9063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 116.567998][ T5969] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.762275][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 116.787360][ T9062] bridge4: port 1(veth5) entered blocking state [ 116.789774][ T9062] bridge4: port 1(veth5) entered disabled state [ 116.791917][ T9062] veth5: entered allmulticast mode [ 116.794326][ T9062] veth5: entered promiscuous mode [ 116.818276][ T9062] bridge4: port 2(veth7) entered blocking state [ 116.820459][ T9062] bridge4: port 2(veth7) entered disabled state [ 116.822689][ T9062] veth7: entered allmulticast mode [ 116.825499][ T9062] veth7: entered promiscuous mode [ 116.975332][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.978692][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.982204][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.985067][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.190162][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.193203][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.196818][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.200008][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.205183][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.208352][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.305052][ T9] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 117.368274][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 117.402024][ T9074] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 117.404562][ T9074] netlink: 2 bytes leftover after parsing attributes in process `syz.1.933'. [ 117.407951][ T9074] team0: entered promiscuous mode [ 117.410106][ T9074] bridge0: port 1(team0) entered blocking state [ 117.412763][ T9074] bridge0: port 1(team0) entered disabled state [ 117.415941][ T9074] team0: entered allmulticast mode [ 117.421510][ T6003] usb 5-1: USB disconnect, device number 18 [ 117.487320][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 117.491416][ T9] usb 7-1: config 5 has an invalid interface number: 214 but max is 0 [ 117.494636][ T9] usb 7-1: config 5 has an invalid descriptor of length 168, skipping remainder of the config [ 117.499456][ T9] usb 7-1: config 5 has no interface number 0 [ 117.501836][ T9] usb 7-1: config 5 interface 214 altsetting 6 endpoint 0x6 has invalid maxpacket 9223, setting to 1023 [ 117.506140][ T9] usb 7-1: config 5 interface 214 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 117.511211][ T9] usb 7-1: config 5 interface 214 has no altsetting 0 [ 117.516659][ T9] usb 7-1: New USB device found, idVendor=1bc7, idProduct=7010, bcdDevice=a0.ab [ 117.519961][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.523178][ T9] usb 7-1: Product: 箰꩸眃傰넓〛⠂茻㜖禣᷑伣ڎࡤギꕉ뮏秃ݕ휶褨䁭ﰂ묝㛄䰫琪﨑෰낞䅎ⲃ雾㊌㎟釓멾彣ⲙ⬺ᇱ嬝盼畈㟜䙷䈗鈋 [ 117.530280][ T9] usb 7-1: Manufacturer: ᠁ [ 117.532227][ T9] usb 7-1: SerialNumber: 䦖⪁ᒳ櫱홪暝飏弃숂賘貁鼙됵鴕⎝謭㽘ᣦ앏ብႄ孄ٿ卑ᯐڝ઀澄욷ꛦ絤膻농ᝓꨌ면┩嬟ꛈ퉎嬨칯ꞥ>凓Ḭ욥껢Ⓨ沍䆈㎘੆ᥡ⁆⛆툖ᙊ泍릾ᨛ쾈鹡袽魅騫⋩ꀂ亘垥켰낅৏Ѝ콶﯅媜ᮟ㒇࡭걈蹂㽉ౢ㈒ṥ貈뢴ꗋ侃 [ 117.695033][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 117.705111][ T6132] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 117.754289][ T9] option 7-1:5.214: GSM modem (1-port) converter detected [ 117.760580][ T9] usb 7-1: USB disconnect, device number 17 [ 117.763928][ T9] option 7-1:5.214: device disconnected [ 117.825248][ T5969] usb 5-1: Service connection timeout for: 256 [ 117.827266][ T5969] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 117.830683][ T5969] ath9k_htc: Failed to initialize the device [ 117.834082][ T6003] usb 5-1: ath9k_htc: USB layer deinitialized [ 117.844997][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 117.848723][ T10] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 117.852150][ T10] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 117.855791][ T10] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 117.859579][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 117.864938][ T6132] usb 6-1: Using ep0 maxpacket: 32 [ 117.865921][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.869595][ T6132] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 117.870795][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.875323][ T6132] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 117.875347][ T6132] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 117.878608][ T10] usb 8-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 117.882471][ T6132] usb 6-1: config 1 interface 0 has no altsetting 0 [ 117.886749][ T10] usb 8-1: Manufacturer: ࠔ [ 117.895789][ T6132] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.896777][ T10] usb 8-1: SerialNumber: Є [ 117.898062][ T6132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.906618][ T9078] raw-gadget.7 gadget.3: fail, usb_ep_enable returned -22 [ 117.909634][ T6132] usb 6-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 117.909999][ T9078] raw-gadget.7 gadget.3: fail, usb_ep_enable returned -22 [ 117.916640][ T6132] usb 6-1: Manufacturer: ࠔ [ 117.921441][ T6132] usb 6-1: SerialNumber: Є [ 117.925876][ T9076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.928975][ T9076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.121896][ T9078] FAULT_INJECTION: forcing a failure. [ 118.121896][ T9078] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.125959][ T9078] CPU: 1 UID: 0 PID: 9078 Comm: syz.3.935 Not tainted syzkaller #0 PREEMPT(full) [ 118.125973][ T9078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.125980][ T9078] Call Trace: [ 118.125983][ T9078] [ 118.125988][ T9078] dump_stack_lvl+0x16c/0x1f0 [ 118.126008][ T9078] should_fail_ex+0x512/0x640 [ 118.126022][ T9078] _copy_from_user+0x2e/0xd0 [ 118.126036][ T9078] nr_rt_ioctl+0x65a/0x29b0 [ 118.126053][ T9078] ? avc_has_perm_noaudit+0x149/0x3b0 [ 118.126069][ T9078] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 118.126092][ T9078] ? bpf_lsm_capable+0x9/0x10 [ 118.126104][ T9078] ? security_capable+0x7e/0x260 [ 118.126122][ T9078] nr_ioctl+0x19a/0x2d0 [ 118.126134][ T9078] sock_do_ioctl+0x118/0x280 [ 118.126151][ T9078] ? __pfx_sock_do_ioctl+0x10/0x10 [ 118.126170][ T9078] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.126185][ T9078] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.126200][ T9078] sock_ioctl+0x227/0x6b0 [ 118.126211][ T9078] ? __pfx_sock_ioctl+0x10/0x10 [ 118.126220][ T9078] ? hook_file_ioctl_common+0x145/0x410 [ 118.126238][ T9078] ? selinux_file_ioctl+0x180/0x270 [ 118.126249][ T9078] ? selinux_file_ioctl+0xb4/0x270 [ 118.126260][ T9078] ? __pfx_sock_ioctl+0x10/0x10 [ 118.126271][ T9078] __x64_sys_ioctl+0x18e/0x210 [ 118.126286][ T9078] do_syscall_64+0xcd/0xfa0 [ 118.126303][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.126314][ T9078] RIP: 0033:0x7ff37bb8f6c9 [ 118.126323][ T9078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.126333][ T9078] RSP: 002b:00007ff37c9bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.126343][ T9078] RAX: ffffffffffffffda RBX: 00007ff37bde5fa0 RCX: 00007ff37bb8f6c9 [ 118.126350][ T9078] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000006 [ 118.126356][ T9078] RBP: 00007ff37c9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 118.126362][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.126368][ T9078] R13: 00007ff37bde6038 R14: 00007ff37bde5fa0 R15: 00007ffec8467f58 [ 118.126381][ T9078] [ 118.130916][ T10] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 118.144223][ T6132] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 118.148925][ T10] usb 8-1: USB disconnect, device number 13 [ 118.152000][ T6132] usb 6-1: USB disconnect, device number 19 [ 118.158856][ T9080] overlayfs: failed to resolve './file0': -2 [ 118.318636][ T9090] ecryptfs: Unknown parameter 'usrquota' [ 118.323420][ T5931] Bluetooth: hci0: ACL packet for unknown connection handle 1737 [ 118.351753][ T9094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.940'. [ 118.419082][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 118.419093][ T40] audit: type=1400 audit(1762279428.541:1281): avc: denied { mounton } for pid=9095 comm="syz.0.941" path="/200/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 118.513701][ T9102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.943'. [ 118.520949][ T40] audit: type=1400 audit(1762279428.641:1282): avc: denied { setopt } for pid=9101 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.541940][ T40] audit: type=1400 audit(1762279428.661:1283): avc: denied { remount } for pid=9095 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 118.542939][ T9096] md: md2 stopped. [ 118.549534][ T40] audit: type=1400 audit(1762279428.661:1284): avc: denied { read } for pid=9095 comm="syz.0.941" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.549588][ T40] audit: type=1400 audit(1762279428.661:1285): avc: denied { open } for pid=9095 comm="syz.0.941" path="/200/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.568652][ T40] audit: type=1400 audit(1762279428.661:1286): avc: denied { ioctl } for pid=9095 comm="syz.0.941" path="/200/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.676205][ T40] audit: type=1400 audit(1762279428.801:1287): avc: denied { write } for pid=9117 comm="syz.3.947" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.677361][ T9119] autofs4:pid:9119:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 118.721156][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 118.767177][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.949'. [ 118.825380][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 118.828829][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 118.830754][ T40] audit: type=1400 audit(1762279428.951:1288): avc: denied { watch } for pid=9139 comm="syz.3.952" path="/240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.844527][ T9146] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 118.850056][ T40] audit: type=1400 audit(1762279428.951:1289): avc: denied { watch_sb watch_reads } for pid=9139 comm="syz.3.952" path="/240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.866835][ T9146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.881829][ T9146] bond1: (slave geneve2): making interface the new active one [ 118.885162][ T9146] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 118.890412][ T9146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9146 comm=syz.0.955 [ 118.891217][ T9157] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 118.891217][ T9157] program syz.1.958 not setting count and/or reply_len properly [ 118.929131][ T9163] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 119.114188][ T6015] IPVS: starting estimator thread 0... [ 119.115063][ T6003] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 119.115230][ T9177] IPVS: fo: FWM 3 0x00000003 - no destination available [ 119.215009][ T9182] IPVS: using max 26 ests per chain, 62400 per kthread [ 119.216717][ T9184] tmpfs: Unknown parameter 'grRquota_block_hardlimit' [ 119.235072][ T5969] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 119.276934][ T6003] usb 8-1: Using ep0 maxpacket: 32 [ 119.280501][ T6003] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 119.283966][ T6003] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 119.287043][ T6003] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 119.290118][ T6003] usb 8-1: config 1 interface 0 has no altsetting 0 [ 119.293693][ T6003] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.296737][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.299223][ T6003] usb 8-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 119.304557][ T6003] usb 8-1: Manufacturer: ࠔ [ 119.306170][ T6003] usb 8-1: SerialNumber: Є [ 119.309461][ T9152] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.311776][ T9152] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.406320][ T5969] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 119.409778][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.413172][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.416264][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.421073][ T5969] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.423935][ T5969] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.426590][ T5969] usb 5-1: Manufacturer: syz [ 119.429579][ T5969] usb 5-1: config 0 descriptor?? [ 119.526427][ T9152] FAULT_INJECTION: forcing a failure. [ 119.526427][ T9152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.531547][ T9152] CPU: 2 UID: 0 PID: 9152 Comm: syz.3.956 Not tainted syzkaller #0 PREEMPT(full) [ 119.531564][ T9152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.531571][ T9152] Call Trace: [ 119.531577][ T9152] [ 119.531582][ T9152] dump_stack_lvl+0x16c/0x1f0 [ 119.531603][ T9152] should_fail_ex+0x512/0x640 [ 119.531618][ T9152] _copy_to_user+0x32/0xd0 [ 119.531633][ T9152] simple_read_from_buffer+0xcb/0x170 [ 119.531651][ T9152] proc_fail_nth_read+0x197/0x240 [ 119.531690][ T9152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.531708][ T9152] ? rw_verify_area+0xcf/0x6c0 [ 119.531723][ T9152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.531735][ T9152] vfs_read+0x1e4/0xcf0 [ 119.531747][ T9152] ? __pfx___mutex_lock+0x10/0x10 [ 119.531757][ T9152] ? __pfx_vfs_read+0x10/0x10 [ 119.531770][ T9152] ? __fget_files+0x20e/0x3c0 [ 119.531785][ T9152] ksys_read+0x12a/0x250 [ 119.531794][ T9152] ? __pfx_ksys_read+0x10/0x10 [ 119.531807][ T9152] do_syscall_64+0xcd/0xfa0 [ 119.531829][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.531840][ T9152] RIP: 0033:0x7ff37bb8e0dc [ 119.531849][ T9152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.531860][ T9152] RSP: 002b:00007ff37c9bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.531870][ T9152] RAX: ffffffffffffffda RBX: 00007ff37bde5fa0 RCX: 00007ff37bb8e0dc [ 119.531877][ T9152] RDX: 000000000000000f RSI: 00007ff37c9bf0a0 RDI: 000000000000000a [ 119.531883][ T9152] RBP: 00007ff37c9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 119.531889][ T9152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.531894][ T9152] R13: 00007ff37bde6038 R14: 00007ff37bde5fa0 R15: 00007ffec8467f58 [ 119.531908][ T9152] [ 119.599468][ T6003] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 119.609406][ T6003] usb 8-1: USB disconnect, device number 14 [ 119.647677][ T5931] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 119.648679][ T40] audit: type=1400 audit(1762279429.771:1290): avc: denied { read } for pid=9187 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.832676][ T9195] Bluetooth: MGMT ver 1.23 [ 119.838510][ T5969] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 119.838654][ T9196] tmpfs: Cannot change global quota limit on remount [ 119.848098][ T5969] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 119.917004][ T6015] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 119.962400][ T9210] macvlan2: entered promiscuous mode [ 119.964720][ T9210] macvlan2: entered allmulticast mode [ 119.967875][ T9210] bond0: entered promiscuous mode [ 119.970619][ T9210] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.984689][ T9210] bond0: left promiscuous mode [ 120.071548][ T59] IPVS: stop unused estimator thread 0... [ 120.151572][ T5984] usb 5-1: USB disconnect, device number 19 [ 120.158930][ T9176] trusted_key: encrypted_key: master key parameter '(w"eoxVGy#j6Z' is invalid [ 120.423545][ T9250] overlayfs: empty lowerdir [ 120.546481][ T9259] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 120.583208][ T9259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.594264][ T9260] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 120.664450][ T9266] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.899312][ T9290] netlink: 'syz.0.995': attribute type 5 has an invalid length. [ 120.904615][ T9290] fuse: Unknown parameter '0x0000000000000008' [ 120.934100][ T9295] IPv6: Can't replace route, no match found [ 120.939372][ T9295] sp0: Synchronizing with TNC [ 121.165005][ T5984] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 121.298178][ T9336] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20002 [ 121.301855][ T9336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.325938][ T5984] usb 6-1: Using ep0 maxpacket: 32 [ 121.340996][ T5984] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 121.346319][ T5984] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 121.350786][ T5984] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 121.354802][ T5984] usb 6-1: config 1 interface 0 has no altsetting 0 [ 121.362925][ T5984] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.366805][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.369815][ T5984] usb 6-1: Product: ᛥ್ဠ拀ꎘ阤젌俪鯵쟚ꨐ餕㶡⩹櫳⥶綨ㄦᤈ澫⹆ᬝ琪★툄崹༭㔐蛢脒ཝ녍帥ᣰ㿴䟕貺碞斦勊쇼䊁⃩즇ᇊ땼 [ 121.377009][ T5984] usb 6-1: Manufacturer: ࠔ [ 121.379020][ T5984] usb 6-1: SerialNumber: Є [ 121.384033][ T9299] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.387373][ T9299] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.439967][ T9346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=563 sclass=netlink_route_socket pid=9346 comm=syz.3.1018 [ 121.490283][ T9352] netlink: 'syz.2.1020': attribute type 21 has an invalid length. [ 121.529271][ T9357] netlink: 'syz.3.1021': attribute type 10 has an invalid length. [ 121.539698][ T9357] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 121.601137][ T5984] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 121.608859][ T5984] usb 6-1: USB disconnect, device number 20 [ 121.626234][ T9364] xt_l2tp: wrong L2TP version: 0 [ 121.726672][ T9372] Invalid source name [ 121.728379][ T9372] UBIFS error (pid: 9372): cannot open "/dev/sg0", error -22 [ 121.730386][ T9368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.735699][ T9368] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 121.744705][ T9368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.747327][ T9368] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 121.751989][ T9368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.753873][ T9368] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 121.758057][ T9368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.759972][ T9368] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 121.772638][ T8068] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 121.776804][ T8068] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 121.781374][ T8068] CPU: 0 UID: 0 PID: 8068 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 121.785451][ T8068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.789749][ T8068] RIP: 0010:klist_put+0x4d/0x1b0 [ 121.791880][ T8068] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c [ 121.799609][ T8068] RSP: 0018:ffffc9000dc679a0 EFLAGS: 00010202 [ 121.802173][ T8068] RAX: dffffc0000000000 RBX: ffff888031878860 RCX: ffffffff826542fd [ 121.805474][ T8068] RDX: 000000000000000b RSI: ffffffff8b5632f5 RDI: 0000000000000058 [ 121.808763][ T8068] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 121.811934][ T8068] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 121.815043][ T8068] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 121.818155][ T8068] FS: 0000000000000000(0000) GS:ffff8880d6a08000(0000) knlGS:0000000000000000 [ 121.821709][ T8068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.824458][ T8068] CR2: 00007f82c79e7dac CR3: 0000000050e01000 CR4: 0000000000352ef0 [ 121.827791][ T8068] Call Trace: [ 121.829243][ T8068] [ 121.830509][ T8068] device_del+0x1d8/0x9f0 [ 121.832368][ T8068] ? __pfx_device_del+0x10/0x10 [ 121.834423][ T8068] ? netdev_unregister_kobject+0x2da/0x540 [ 121.836922][ T8068] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 121.839387][ T8068] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 121.841501][ T8068] ? __pfx___mutex_lock+0x10/0x10 [ 121.843155][ T8068] unregister_netdevice_queue+0x305/0x3f0 [ 121.844998][ T8068] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 121.846943][ T8068] ? rtnl_net_dev_lock+0x28/0x360 [ 121.848579][ T8068] ? rtnl_net_dev_lock+0x146/0x360 [ 121.850188][ T8068] ? rtnl_lock+0x9/0x20 [ 121.851499][ T8068] ? rtnl_net_dev_lock+0x146/0x360 [ 121.853154][ T8068] unregister_netdev+0x1f/0x60 [ 121.854666][ T8068] bnep_session+0x224e/0x2d80 [ 121.856155][ T8068] ? __pfx_bnep_session+0x10/0x10 [ 121.857779][ T8068] ? do_raw_spin_lock+0x12c/0x2b0 [ 121.859498][ T8068] ? __pfx_woken_wake_function+0x10/0x10 [ 121.861975][ T8068] ? rcu_is_watching+0x12/0xc0 [ 121.864002][ T8068] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 121.866491][ T8068] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.868819][ T8068] ? __kthread_parkme+0x19e/0x250 [ 121.870758][ T8068] ? __pfx_bnep_session+0x10/0x10 [ 121.872384][ T8068] kthread+0x3c5/0x780 [ 121.873759][ T8068] ? __pfx_kthread+0x10/0x10 [ 121.875222][ T8068] ? rcu_is_watching+0x12/0xc0 [ 121.876755][ T8068] ? __pfx_kthread+0x10/0x10 [ 121.878421][ T8068] ret_from_fork+0x675/0x7d0 [ 121.879946][ T8068] ? __pfx_kthread+0x10/0x10 [ 121.881466][ T8068] ret_from_fork_asm+0x1a/0x30 [ 121.883046][ T8068] [ 121.884086][ T8068] Modules linked in: [ 121.886871][ T8068] ---[ end trace 0000000000000000 ]--- [ 121.889228][ T8068] RIP: 0010:klist_put+0x4d/0x1b0 [ 121.891682][ T8068] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c [ 121.898412][ T8068] RSP: 0018:ffffc9000dc679a0 EFLAGS: 00010202 [ 121.900285][ T8068] RAX: dffffc0000000000 RBX: ffff888031878860 RCX: ffffffff826542fd [ 121.902747][ T8068] RDX: 000000000000000b RSI: ffffffff8b5632f5 RDI: 0000000000000058 [ 121.905702][ T8068] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 121.908342][ T8068] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 121.910871][ T8068] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 121.913352][ T8068] FS: 0000000000000000(0000) GS:ffff8880d6b08000(0000) knlGS:0000000000000000 [ 121.916312][ T8068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.918415][ T8068] CR2: 000020000000a000 CR3: 00000000331e3000 CR4: 0000000000352ef0 [ 121.920947][ T8068] Kernel panic - not syncing: Fatal exception [ 121.923588][ T8068] Kernel Offset: disabled [ 121.924984][ T8068] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:03:52 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85296435 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc9000dc673a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000002d R14=ffffffff9add8740 R15=ffffffff852963d0 RIP=ffffffff8529645f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82c79e7dac CR3=0000000050e01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef7fbf9d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb077813050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb07781305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb077813057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb07781306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0778130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0778131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000c6e9c RBX=0000000000000001 RCX=ffffffff8b6082a9 RDX=ffffed100d4a6656 RSI=ffffffff8bf06fc0 RDI=ffffffff8192579d RBP=ffffed1003bd4490 RSP=ffffc90000177de8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801dea2480 R14=ffffffff908203d0 R15=0000000000000000 RIP=ffffffff8b606d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82c86a2f98 CR3=0000000030ad5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=c68c342c7880f6c0 703499187e2ef955 c68c342c7880f6c0 703499187e2ef955 c68c342c7880f6c0 703499187e2ef955 c68c342c7880f6c0 703499187e2ef955 ZMM18=0ac11e68aace9c87 5ca6ebd17dc6e44e 0ac11e68aace9c87 5ca6ebd17dc6e44e 0ac11e68aace9c87 5ca6ebd17dc6e44e 0ac11e68aace9c87 5ca6ebd17dc6e44e ZMM19=e407000000000000 0000000000000005 e407000000000000 0000000000000004 e407000000000000 0000000000000003 e407000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00020806040475e0 00646568637301ff fffffffffffffff3 0801848003360800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000208060401 76ea00020da80004 1080a2d480080001 0000000806060125 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8800020007001000 0010000480040600 75ba0023436c6f72 746e6f632f646e73 ZMM24=7dc6e44e7dc6e44e 7dc6e44e7dc6e44e 7dc6e44e7dc6e44e 7dc6e44e7dc6e44e 7dc6e44e7dc6e44e 7dc6e44e7dc6e44e 7dc6e44e7dc6e44e 7dc6e44e7dc6e44e ZMM25=5ca6ebd15ca6ebd1 5ca6ebd15ca6ebd1 5ca6ebd15ca6ebd1 5ca6ebd15ca6ebd1 5ca6ebd15ca6ebd1 5ca6ebd15ca6ebd1 5ca6ebd15ca6ebd1 5ca6ebd15ca6ebd1 ZMM26=aace9c87aace9c87 aace9c87aace9c87 aace9c87aace9c87 aace9c87aace9c87 aace9c87aace9c87 aace9c87aace9c87 aace9c87aace9c87 aace9c87aace9c87 ZMM27=0ac11e680ac11e68 0ac11e680ac11e68 0ac11e680ac11e68 0ac11e680ac11e68 0ac11e680ac11e68 0ac11e680ac11e68 0ac11e680ac11e68 0ac11e680ac11e68 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e3070000e3070000 e3070000e3070000 e3070000e3070000 e3070000e3070000 e3070000e3070000 e3070000e3070000 e3070000e3070000 e3070000e3070000 info registers vcpu 2 CPU#2 RAX=0000004ae293c370 RBX=ffff88806a623a00 RCX=00000000000006e0 RDX=000000000000004a RSI=ffff88806a623a00 RDI=000000000004e7ad RBP=000000000004e7ad RSP=ffffc90000648ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000002 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a627c80 RIP=ffffffff81693dd5 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555588ea7808 CR3=00000000257e0000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4400213050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f440021305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4400213057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f440021306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44002130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44002131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44003b74a8 00007f44003b74a0 00007f44003b7498 00007f44003b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4400f1d100 00007f44003b7460 00007f44003b7478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44003b74b8 00007f44003b74b0 00007f44003b74a8 00007f44003b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000a264c RBX=0000000000000003 RCX=ffffffff8b6082a9 RDX=ffffed100d4e6656 RSI=ffffffff8bf06fc0 RDI=ffffffff8192579d RBP=ffffed1003bd6000 RSP=ffffc90000197de8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801deb0000 R14=ffffffff908203d0 R15=0000000000000000 RIP=ffffffff8b606d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82c85156c0 CR3=000000003108d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3e1c5f10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7813050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c781305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7813057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c781306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c78130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c78131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000