last executing test programs: 3.592215684s ago: executing program 2 (id=1317): syz_usb_connect(0x1, 0x2c8, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x20, 0x15, 0x58, 0x40, 0x19d2, 0x1129, 0x6c23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b6, 0x3, 0x8, 0x1, 0x0, 0x5, [{{0x9, 0x4, 0x27, 0x1, 0x3, 0xff, 0xff, 0xff, 0x9, [@generic={0x43, 0xb, "ee164fac4de9965c0f1a91fe8e6f33dd1eb56332bebe311c62270d7b36babce5f5a9b361cc2badc6d79e7a11059a2783cb2d9edf25066eed86daf8e7394908b4e9"}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x52, 0x3, 0x4}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x28, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x8, 0xf7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf6, 0xff7c}, @generic={0x83, 0x7, "43df2ace719587483aec2b125f48cafc8cffa56f917f56dfb68995e4d42154bb4676736c4c3a0085139fee43e076aa0bd7414e0c9b32bffa194eb0917b6b84bb049f2f5d51ec6df15448c67b7b7e11bccaca9a7302d5a421008433262392dff0bffafc1ff5c8a644a383d09e0506db80faf57459dba1f30a2a0d637506a259d569"}]}}]}}, {{0x9, 0x4, 0x38, 0x8, 0x2, 0xf7, 0x96, 0x99, 0x13, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2a, 0x1, 0x7, 0x7f, "a847", '`'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xb0, 0x6, 0xf}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x2b, "69cfa83af7"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0xe7, 0x76, "3d210c83"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0xb, 0x5, "84", '\r'}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e4f18794"}, {0x5, 0x24, 0x0, 0x1800}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0x39}}], [{{0x9, 0x5, 0xd77ba353bb8bd3bd, 0x0, 0x20, 0x5, 0x3, 0x8, [@generic={0x24, 0x22, "318d51ba6c3e4220ba3b689c2aed234bb83062a076a0116dbba3f4ebd5565b2a5a15"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0xa7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xa6, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}]}}, {{0x9, 0x4, 0x1b, 0x4, 0x3, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x2, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x0, 0x0, 0x9, [@generic={0xe5, 0x4, "549bc04352c89e30952d1770d5b3d0f5f1f852b4e5617260084c18bd414c5d2a8fdc33699f3f919cc91db0c1a51940d8644bd31088b7a93557c786d1d864cf5000b678b3731069258a29f84a70cd9e7fa50232babe9fcbf73266c46126205c516225aac734ff9a93b3e5d17651f300594847753b4bfe381f38aa11667f6bdbe7b63ff89aa9bdb6daffefe59e52842c022bd7cb519ad335b260a3d0a6f3bb6c8f0c07a1a1e1be87528ec6e523d46a864e067db55a082f823c3cd8233ac78e68ed9bb024afc21b0f38b7c1cc2ffc5d41b78ae4883f13fa09fae58994416b5fa84aed3a85"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x4, 0xfc}}]}}]}}]}}, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.34699094s ago: executing program 3 (id=1334): ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2d, 0x2}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x480010) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0xa700, 0x0) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000b40)={'nat\x00', 0xac, "e89d500f5c5761f1de9540a2880b51c25f6357d95cedfbef438cda42c7812cf7689a9b55eba3f916e7093a11520685830adab138b82e3a4f7ac9ebeec2c130d2c55676761891108dbd06419eb045d1f0da1ab2d50a6ab9d8cc50e071de7f60ad2772972d559ee615dc1500baeaf298e429ef37ff13b269b1ed227007acde6ee0b1341afda702262c69000413bbeb35781b4a378211a406b079311289a3fe0ee833af07934a11e2288e486ff4"}, &(0x7f0000000c40)=0xd0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000c80)=@lsk={0x4, 0x2, 'aKR\x00H'}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000cc0)) ioctl$CDROMRESUME(r0, 0x5302) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000d00)={{0x1, 0x7f}, {0xa1, 0x1d}, 0x10, 0x3, 0xc1}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000d80)=@netrom={'nr', 0x0}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000e00)={0x60, 0xfffffffffffffffe, 0x0, {{0x2, 0x0, 0x4, 0xaa, 0x5, 0x1, 0x7, 0x1000}}}, 0x60) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020050}, 0x4) unlink(&(0x7f0000000f80)='./file0\x00') ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000fc0)) connect$inet(r1, &(0x7f00000013c0)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000001400)="dc81d81826d7199935b3b0288de2c7c715fb484b9548f50b23a224a78eeb00b61e0876e8b216059390e252e7d27f44ce38e731412e2c7624d34082c85d02993769283570d4c0d15fdffe59b07c33c1ddfcca2e8607844c9ccba598f98b89864a4569b83ffb1634cd8caab5afe8e7cb5ec9b99fee4a3a49da43132122104c39d5d9c1be86332607fd850b9b734d48ab95d9f27b72db51d7905b3037301f4596d314174381b4537613bd1a064165a378f280eeb579523c0f618eada4b4f82ec915f2f6b401f7ae2b3340a87234d1ca10eaafdff515d800826f6cf5ccbfe5480dd80f92fd128da4d1") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x6c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5fa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x887, 0x1}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x439}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = syz_open_dev$usbmon(&(0x7f00000016c0), 0x4, 0x0) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000001700)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001740)=0x28) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000001780)={0x3, 0x3, 0xac, 0x3, 0x1}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000017c0)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001800)="6eda8e98d4301477a055a66e965c543bf6d6eef90ad65036b7f6eba7a38d749a181f766b7648c2ee227379a9dc261efa6919a7c080c281e87928949ff1a4d1d711003b23d758a1ef9d0291650882e999b1ebc8311983a55019c423bc7c29f27e93d7b4eb264e2911c001df59cd6ce904f712c78f291908f0c682b80d1b", 0x7d}], 0x1, &(0x7f00000018c0)=[@rthdr={{0x68, 0x29, 0x39, {0x89, 0xa, 0x1, 0x2, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x21, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x79}, @calipso={0x7, 0x50, {0x1, 0x12, 0x53, 0xa164, [0x8, 0x7, 0xffffffffffff5e52, 0x1, 0x200, 0x5, 0x54e, 0x1f, 0x2]}}, @ra]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffff12}}], 0x128}, 0x8040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20050092}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x54, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4811}, 0x40850) 1.346540847s ago: executing program 1 (id=1335): r0 = userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f6ffffff00"/19], 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043e1301", @ANYRES8=r2], 0x29) syz_emit_vhci(0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101602, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) write$tun(r3, &(0x7f0000000d80)={@val={0x0, 0x9000}, @void, @ipv6=@tcp={0x7, 0x6, "38a673", 0x451, 0x6, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, {[@fragment={0x2c, 0x0, 0x8, 0x0, 0x0, 0x9, 0x64}, @hopopts={0x8, 0xf, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x7f, 0x6814, [0x8, 0x5, 0xf1, 0x3, 0x6]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xc}]}, @dstopts={0x0, 0x2, '\x00', [@generic={0x3e}, @hao={0xc9, 0x10, @empty}]}, @hopopts={0x0, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x7, 0xdc, "d69d3b279401810a82966c638c0b0c9e9fa5ad6adb5b38ef4218050ef98e57c1f4e97feef74f425a0c709d17a0adb5a2c54c2ad537dd6de93dd625f56b08800a4b1ca5d2098bbcc09e8f995d079a3522018c9e36a0b71c9133b1cc94b226c3b7105d7887c277a18e1ddeb109163d574a7b9b3626674505aa0d43114ef694afbbd130f3f7b61d22098f262e8f69f1c92b8ad4a460dc13946263ffd7e27112326bb26feeaca8e7e39be94b2b855e0155bb2204d7908b87870a24ac0612e33b802f9173795296dd7fcb69eed959f132e35ba7c771719a0d026b732f7473"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x2, [0xf]}}]}, @srh={0x67, 0xe, 0x4, 0x7, 0x10, 0x0, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, @hopopts={0x87, 0x27, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x1, 0xe, 0x6, 0x6, [0x1000, 0x0, 0x8001, 0x7f, 0x7ff, 0xfff, 0x7]}}, @generic={0x5, 0xc3, "2721f56740e66c6c60a9b16205c2d19be5844a29925e82f36a16c16fd55bfe537c7150da69401cd1e46afd28665b0871e13c0c3efcb36a985c5864948a60f3441c6cc8410294408767410dcd5f0bf24ca315ba08b3d4cb02381ee42e5eb5e57879494c89ce2a14bf4d21bc2265f037bbaeb50b7c205b0609882ddd4001114c24daf67ac8f9a3eee0cf471be834f6eafcff6d12eaee09622ab9ab30a07ff866d59a307bc83b1090455b831b57470c1944ae7fd2257933dbc66707623ee53b70713d477b"}, @enc_lim={0x4, 0x1, 0x33}, @pad1, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf4}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}, @fragment={0x73, 0x0, 0x0, 0x1, 0x0, 0x9, 0x64}, @dstopts={0x8}], {{0x4e24, 0x4e21, r4, 0x41424344, 0x1, 0x0, 0x13, 0x80, 0x4, 0x0, 0xf8f, {[@window={0x3, 0x3, 0x38}, @mss={0x2, 0x4, 0xffff}, @md5sig={0x13, 0x12, "7324e97a4f76d3e30f50989405e9265c"}, @md5sig={0x13, 0x12, "ba2733310aa47bbf35279242489fd786"}, @timestamp={0x8, 0xa, 0x6, 0x1}, @nop]}}, {"f5ef768333afe3f8bc42efb9f20f34c065a7dd3ee4f0d03df8512bd6dd9801a42c0dab6cc9c6e2ab946ad9b0a26ea4b70dc139145990013425e7b3f5209004036b4f3c47d8edb1dab44f65bc613a0f5b8b29bf2976a6ce74ef7d9565805687ebad733900a7e83012f654bd2dc847b7a684575c9db275726afd15d8faaa88f9d2f01602980078bd5f3b0073ff07"}}}}}, 0x47d) setreuid(0xee01, 0xee01) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.133632127s ago: executing program 3 (id=1336): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x8, 0xb69, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8, 0x6, 0x2}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000240)=""/169, 0xa9, 0x0, &(0x7f0000000300)=""/83, 0x53}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x0, 0x2, 0x6, 0x0, 0x4, 0x40, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3a, &(0x7f00000000c0)=""/58, 0x41000, 0x16, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xa, 0x1, 0x200}, 0x10, r2, 0xffffffffffffffff, 0xa, &(0x7f0000000540)=[0x1, r3, r4, r7], &(0x7f0000000580)=[{0x2, 0x5, 0x4, 0x7}, {0x2, 0x1, 0x9, 0x9}, {0x3, 0x2, 0x1, 0x7}, {0x4, 0x1, 0xb, 0x5}, {0x2, 0x2, 0x9, 0x5}, {0x1, 0x3, 0x2, 0x1}, {0x3, 0x2, 0x1, 0x7}, {0x2, 0x2, 0xa}, {0x5, 0x5, 0x1, 0x8}, {0x1, 0x3, 0x7, 0xb}], 0x10, 0x2}, 0x94) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000700)={@private2={0xfc, 0x2, '\x00', 0x1}, r1}, 0x14) mount(&(0x7f0000000740)=@sr0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='nfs\x00', 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r8, {r5, r6}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip_vti0\x00', r1, 0x8000, 0x10, 0x1, 0x8, {{0x12, 0x4, 0x1, 0xa, 0x48, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x18, 0x85, 0x0, 0x2, [0xa, 0x58, 0x4, 0x4b, 0x800]}, @rr={0x7, 0x1b, 0xd0, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast]}]}}}}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0xc, 0x5, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ldst={0x2, 0x0, 0x1, 0x2, 0x1, 0x100, 0x4}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x66, &(0x7f0000000bc0)=""/102, 0x40f00, 0x9, '\x00', r1, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r4], &(0x7f0000000c80)=[{0x4, 0x5, 0x7, 0x1}, {0x5, 0x4, 0x5, 0x3}, {0x2, 0x4, 0x3, 0x6}]}, 0x94) r12 = dup3(r7, r7, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%ps \x00'}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x7, 0x1a, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x3, 0x8, 0xa, 0x100, 0xffffffffffffffff}, @generic={0x84, 0x5, 0x4, 0x8001, 0x200}, @generic={0x4, 0x4, 0xd, 0x3, 0x80b88f1c}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0xd, 0x0, 0xb, 0xfffffffffffffff0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x3, 0x31, &(0x7f0000000980)=""/49, 0x100, 0x5, '\x00', r10, @fallback=0xbd1a56ff8a9207a6, r4, 0x8, &(0x7f0000000a80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xb, 0x76b, 0x5}, 0x10, r2, r11, 0x1, &(0x7f0000000ec0)=[r12, r4, r13, r4, r14, r3, r7], &(0x7f0000000f00)=[{0x4, 0x5, 0x10, 0xb}], 0x10, 0xfff}, 0x94) r15 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) getsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000001040)={@loopback, 0x0}, &(0x7f0000001080)=0x14) bind$packet(r15, &(0x7f00000010c0)={0x11, 0x1a, r16, 0x1, 0x9, 0x6, @broadcast}, 0x14) write$P9_RXATTRWALK(r9, &(0x7f0000001100)={0xf, 0x1f, 0x2, 0xfffffffffffff001}, 0xf) sendmsg$can_j1939(r4, &(0x7f0000001280)={&(0x7f0000001140)={0x1d, r16, 0x2, {0x0, 0xf0, 0x2}, 0xfe}, 0x18, &(0x7f0000001240)={&(0x7f0000001180)="372d932087ad834471fe79b250465e036a0f5310565da852b855eeede171e207ee64736a9ee7be7b11b5a7b0c5bda94cb0fb0beeb2a1249f3dc0407cf5aaf6e4f019ffb94652d8e6b797c6351fe91534abc87764c16984de89671fecd35fab30b4974152c0595a7154ba2f7f38eae1117755be33e33a118008a09fb9e1818e0bf084b48759423a142f198be2ad459ea54923e5", 0x93}, 0x1, 0x0, 0x0, 0x48011}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000012c0)={0x200, 0x200, 0x8200, 0x3, 0x9, 0x75b2, 0x1ff, 0xa, 0x0}, &(0x7f0000001300)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000001340)={r17, 0x4, 0x7, 0x5, 0x8, 0x5}, &(0x7f0000001380)=0x14) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), r13) sendmsg$IPVS_CMD_SET_CONFIG(r15, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x64, r18, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcd0}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044000}, 0x840) r19 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x140053, r15, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r19, 0x104, &(0x7f0000001540)=0x101, 0x0, 0x4) sendmsg$nl_xfrm(r12, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)=@newae={0xd0, 0x1e, 0x300, 0x70bd27, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x2, 0xff}, @in=@local, 0x1, 0x34ff}, [@sec_ctx={0x4d, 0x8, {0x49, 0x8, 0x1, 0x68, 0x41, "0b32511c025bcca5f4316224df0c56ed64419028b3db80f0b9424008f981478726dfb766505c64ce7e90d238cef196bb3df0a5f8c0c85b3f847b7a20693a0af4eb"}}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}, @tfcpad={0x8, 0x16, 0x9}, @lastused={0xc, 0xf, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) 1.058969833s ago: executing program 3 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000380)='./file0\x00', 0x200, 0x8) 1.058201112s ago: executing program 3 (id=1338): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f00000001c0)=0x7, 0x4) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES32=r2, @ANYRESHEX=r2]) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) connect$ax25(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 866.210765ms ago: executing program 0 (id=1340): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) mkdir(&(0x7f0000000140)='./file1/file0\x00', 0x8f) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@measure}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) (async) mkdir(&(0x7f0000000140)='./file1/file0\x00', 0x8f) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@measure}]}) (async) 865.574109ms ago: executing program 0 (id=1341): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000001140)=ANY=[@ANYRES8=r0], 0x1010) fcntl$getownex(r0, 0x10, &(0x7f00000010c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001100)=r1) r2 = fspick(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001080)='!\x00', 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f004, 0x4}) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) msgrcv(0x0, 0x0, 0x8, 0x0, 0x4800) 791.639975ms ago: executing program 0 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x6, 0x33424752, 0x3, 0xc, [{0x1, 0x5}, {0x3, 0xfffffffd}, {0x80, 0x5}, {0xa, 0x4}, {0xc2, 0xabc9}, {0x386f4af5, 0x5}, {0xe, 0xfff}, {0x0, 0x3}], 0x1, 0x3, 0x0, 0x37dce441ff8db334, 0x2}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000240)={0x1000, 0x110000}) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 789.171906ms ago: executing program 0 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x2, @msf={0x1, 0x9, 0x4}, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00c8"], 0x24}}, 0x0) 705.163882ms ago: executing program 0 (id=1344): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8202) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000040)) memfd_secret(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) 630.111ms ago: executing program 0 (id=1345): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd012205000905810308000300fd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000240)=[{0x200, 0x8000, 0x0, 0x0}], 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3d, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1f, 0x1, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0xdd, 0xc}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x7, 0x3, 0x3, 0x20, 0x7}, 0xc, &(0x7f0000000300)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0xb, 0x7, 0xff}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1809}}, {0x69, &(0x7f0000000380)=@string={0x69, 0x3, "197ff74bf867b5136e2566e8aec23e4a59f0ddad82d965e69bd00825b401934218586f16eae895a97df829f0dbc6260b3ba93f511dd6a8adecd5501c8ba5ceee748f12838fa2f160213aa729fa5365a4cbd29808e661fcdbbddcdd774247de4fd6bb962d6ecd44"}}, {0x8b, &(0x7f0000000400)=@string={0x8b, 0x3, "345acfc3b37c6a308fd7f6fd0d8b7721e983513e846072b5104c8c01e2af214eb1fc3114fd6819458d60c83f2d436e0678c0a37846c898cd5337c8d526064367c8aeede3e8eb77de9b10228f85a872dc5fbb29f0a63ac828777a0c63a735220e4197d0fe329c6df39a03232ba3bb8850e6e7633d70316563ce50d1ec6e65dc9f2568d5700b7c66937b"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x20, 0x5, 0x7a, {0x7a, 0x24, "80b8484838e8e2daff08c852ec3c5146b8f451a6f5db213823395c84243cd33be5f0f773b8b794577766840253418b89c155cfcc6600cc9aba1f68f32b82908debf08a948e5bba127617f7bef1ce1ed6a3aaea34b0edccb8c5a082da578f341717cb7a3ace4920587be5528b3bb5d121e6e59b314aebfb2c"}}, &(0x7f00000009c0)=ANY=[@ANYBLOB="100304000000040301086eb994cdaff53b0edd118a9bcaa763b791e8510fd330b9477f5cecfbd60ddd10afdaedb396232aa549647d49c38c1774e77d309dc765cd3d94bda017cc7973a7398de56bb204a2102a3f"]}, &(0x7f0000000980)={0x34, &(0x7f0000000680)={0x40, 0x16, 0xa9, "520b163afc26336ed703e47575b0f7b6a0eafb79f6546af7b7f3892c25f59414a52a2da8a43fb3171e8fa385d3b5f25a1ec22f14fdd39b04288260bfd731d8f859f207b48383ec343c3daac9a46ee3c572925c3a1484eb38a2588957af1bee2ce7343a5bf460e3310f3e952172fee9b43f61a793ea4a7837fe14f691664a0a28242ef8684359812828c10162379fab027885e9bb7faaba886218f2e73bb5bb5d6c53679f10fe606bc7"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x49}, &(0x7f00000007c0)={0x20, 0x0, 0xfb, {0xf9, "f5679c9d1eac1188fd09e2825f2bcfae0e52060adecc0b2d1634068566e8358ea1ca7a3a9e066976289859cb185fbc5226b83743637afb0933dec2fcac0ca76cf32b4c4911768e9ab143b40c32e7cc3858c24fa7ee3a807346be63f77a9913a3d57d7e5c11f4925dc6d9f0389b48468daf205a94c2d9260d7ecadcff0f76cb9bfad414ababef67aa3951fd8025d98989f415d024bedadb0913556680b40031a457f057043622f2b60162b2d427647f6af056abe7e4c452ed78a123a24ec719fbb573bd8320793ae7d383f2a67369dd39dc1e09e0576ecf595107a9da2a805ac52ff4fd3bc2d6a6330d39a2670df7f9947e55b58b86a8ccd22f"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0x7}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x3, 0x8}) 374.926577ms ago: executing program 1 (id=1346): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r2, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0xff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setitimer(0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x300, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r5, &(0x7f0000004500)={0x2020}, 0xfffffffffffffed0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r6, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) 373.397233ms ago: executing program 2 (id=1347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_ifreq(r5, 0x8932, &(0x7f0000000280)={'veth1_virt_wifi\x00', @ifru_data=&(0x7f0000000240)="4656a5f53e8f43bbfaaaa6988cd86b8dfc421d751ba7750428b685e576ce14ce"}) open_by_handle_at(r4, &(0x7f0000000000)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x0, 0x9, 0x3ff, 0x5, 0x9}}, 0x642000) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000000c0)={@hyper}) (async, rerun: 32) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@local}, {@hyper}, 0x400, "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"}, 0x418, 0xfffffffe}) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000100)={r5, r5, 0x0, 0x0, 0x0, 0x42, 0xfb, 0x0, 0x5886, 0x7, 0x1, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f00000000c0)={@any, 0x3}) (async) r8 = dup(r5) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000000040)={&(0x7f00000001c0)=""/90, 0x5a}) 246.688871ms ago: executing program 2 (id=1348): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000ffff29bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11000100233a0500200012800b00010065727370616e00001c000280040012000800050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20040050) (async, rerun: 32) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private0, r1}, 0x14) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f00000006c0)="f25718200b9d080830d2a8eaab96", 0xe, 0xc001, &(0x7f00000000c0)={0x11, 0x1b, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xbfffffffffffffff, 0x85, 0x0) (async) mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, 0x0) 245.790569ms ago: executing program 1 (id=1349): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (async) setreuid(0xee01, 0xffffffffffffffff) (async) r0 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) fchmod(r0, 0x184) (async) setreuid(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rt_sigqueueinfo(r1, 0xc, &(0x7f0000000000)={0x2b, 0x8, 0x1}) 245.430687ms ago: executing program 1 (id=1350): r0 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) open_by_handle_at(r0, &(0x7f0000000040)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x3ff, 0x1ff, 0xfffffc00, 0x1}}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='wbt_stat\x00', r3}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) r4 = socket$inet(0x2, 0x6, 0xfffffffe) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000003c0)="e3b897dc43e4c0bf09dc001fb5e067819648af4caa8dba325e3940a0253c871bad407235390727a98bca0a1a7ed4722c1c21508fad9392238907bb0bf40a4034868374585269ec54a2e3f151e42399ca4b1a40040505449a8c182567070795e2d03d56f48a5d217904e1498465146935dfe1accee9191da6b2521ad3ecd69bc1b67991bf8c04483bbc56febfd6fb", 0x8e) io_uring_enter(r0, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 160.798429ms ago: executing program 1 (id=1351): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async, rerun: 32) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3e, 0x10b, 0xfffffffc, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async, rerun: 64) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x10000000) (async, rerun: 64) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80400) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r8, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x8, 0x0, 0x0, 0xfffffffffffffffa, &(0x7f00000000c0)=[0xffffffffffffffff, r0, r6], 0x3, 0x0, 0x0, {0x0, r9}}) (async) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) 160.507472ms ago: executing program 2 (id=1352): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000040), &(0x7f0000000000)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 83.317494ms ago: executing program 3 (id=1353): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0xc94, 0x4) r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000100037040400"/20, @ANYRES32=r3, @ANYBLOB="83040500000000003c0012800b000100697036746e6c00002c000280080008000000000014000300fe8800000000000000000000000001010500090004007800000013003c1585"], 0x5c}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000100037040400"/20, @ANYRES32=r3, @ANYBLOB="83040500000000003c0012800b000100697036746e6c00002c000280080008000000000014000300fe8800000000000000000000000001010500090004007800000013003c1585"], 0x5c}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x9c, r5, 0x1, 0xfffffffc, 0x25dfdbf8, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x9c}}, 0x2000c050) clock_adjtime(0x0, &(0x7f0000000000)={0x66b8, 0x80000001, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xfffdfffffffffffa, 0x0, 0x100008, 0x0, 0x248a, 0x9, 0x3, 0x0, 0x0, 0x3ff, 0xf, 0x0, 0x4, 0x5999, 0xfffffffffffffffc, 0x400, 0x0, 0x2be, 0xffffffffffffffef}) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 82.722276ms ago: executing program 1 (id=1355): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00', r0}, 0x18) fsopen(&(0x7f0000000580)='cgroup2\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) keyctl$negate(0xd, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078150000000000000000004e20009c907801008000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d032824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d264544af6e8dafe090000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r3 = socket(0x2, 0x3, 0xff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x20, 0x8, 0x5, 0x5, {{0x40, 0x4, 0x0, 0x17, 0x100, 0x66, 0x0, 0x3, 0x2, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x7, 0x8a, [@rand_addr=0x64010100]}, @cipso={0x86, 0x56, 0x1, [{0x7, 0x8, "eb8c6eff5f82"}, {0x0, 0x10, "a4170857a2ede4aaeb42b859e13b"}, {0x5, 0xe, "55fb602e0d0c1f0d8696e691"}, {0x2, 0x6, "3e8b2d20"}, {0x2, 0x12, "e579deed5dcac4b45d1ace3e0ead6135"}, {0x6, 0x8, "1a3a95a9ef57"}, {0x0, 0xa, "5cc260c7acf3ff9f"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x4, 0x1, 0x1, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xe7}, {@empty, 0xa}, {@private=0xa010101, 0x3}, {@private=0xa010101, 0x10001}, {@broadcast, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffffe}]}, @timestamp={0x44, 0x1c, 0x66, 0x0, 0x4, [0xfffffff7, 0xffff, 0x1, 0xe, 0x5, 0xfffffffe]}, @cipso={0x86, 0xb, 0x0, [{0x5, 0x5, "f5960b"}]}, @timestamp_prespec={0x44, 0xc, 0x1f, 0x3, 0xa, [{@empty, 0x1}]}, @ssrr={0x89, 0x1f, 0x43, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, @remote, @multicast2, @local, @local, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8045}, 0xa4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 556.346µs ago: executing program 3 (id=1356): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180000007a000106000000000000000007e3"], 0x18}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000000c0)={'bridge_slave_0\x00', {0x2, 0x4e20, @broadcast}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02546732b2f53221316a37f88ab915d40100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) setsockopt$inet_int(r4, 0x0, 0xcc3b71282ee8332a, &(0x7f0000000100)=0x4, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 0s ago: executing program 2 (id=1357): r0 = socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb45", 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x2, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x202200, 0x0) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x2) 0s ago: executing program 2 (id=1358): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r2, r2], 0x0, 0x40000279}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003920000009203"], 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r2], &(0x7f0000000080), 0x1}) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000880)) kernel console output (not intermixed with test programs): 5] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 395.451509][ T7185] should_failslab+0xc2/0x120 [ 395.451523][ T7185] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 395.451534][ T7185] ? find_held_lock+0x2b/0x80 [ 395.451549][ T7185] ? skb_clone+0x190/0x3f0 [ 395.451563][ T7185] skb_clone+0x190/0x3f0 [ 395.451576][ T7185] netlink_broadcast_filtered+0xb76/0xf90 [ 395.451595][ T7185] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 395.451606][ T7185] ? sprintf+0xcc/0x100 [ 395.451622][ T7185] ? netlink_has_listeners+0x20f/0x430 [ 395.451636][ T7185] netlink_broadcast+0x39/0x50 [ 395.451649][ T7185] kobject_uevent_env+0xc6a/0x1870 [ 395.451666][ T7185] ? cdev_add+0x13f/0x1a0 [ 395.451679][ T7185] ? tty_cdev_add+0x191/0x290 [ 395.451698][ T7185] tty_register_device_attr+0x4ba/0x7c0 [ 395.451710][ T7185] ? __pfx_tty_register_device_attr+0x10/0x10 [ 395.451729][ T7185] rfcomm_dev_ioctl+0x16a0/0x1c90 [ 395.451746][ T7185] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 395.451763][ T7185] ? tomoyo_path_number_perm+0x18d/0x580 [ 395.451780][ T7185] rfcomm_sock_ioctl+0xaa/0xd0 [ 395.451798][ T7185] sock_do_ioctl+0x115/0x280 [ 395.451814][ T7185] ? __pfx_sock_do_ioctl+0x10/0x10 [ 395.451832][ T7185] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 395.451850][ T7185] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 395.451870][ T7185] sock_ioctl+0x227/0x6b0 [ 395.451886][ T7185] ? __pfx_sock_ioctl+0x10/0x10 [ 395.451901][ T7185] ? hook_file_ioctl_common+0x145/0x410 [ 395.451916][ T7185] ? selinux_file_ioctl+0x180/0x270 [ 395.451931][ T7185] ? selinux_file_ioctl+0xb4/0x270 [ 395.451948][ T7185] ? __pfx_sock_ioctl+0x10/0x10 [ 395.451964][ T7185] __x64_sys_ioctl+0x18b/0x210 [ 395.451982][ T7185] do_syscall_64+0xcd/0x4c0 [ 395.451995][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.452007][ T7185] RIP: 0033:0x7f84e5f8ebe9 [ 395.452016][ T7185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.452027][ T7185] RSP: 002b:00007f84e6d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.452038][ T7185] RAX: ffffffffffffffda RBX: 00007f84e61b5fa0 RCX: 00007f84e5f8ebe9 [ 395.452047][ T7185] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 395.452054][ T7185] RBP: 00007f84e6d17090 R08: 0000000000000000 R09: 0000000000000000 [ 395.452060][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.452067][ T7185] R13: 00007f84e61b6038 R14: 00007f84e61b5fa0 R15: 00007ffe341adc98 [ 395.452081][ T7185] [ 395.582354][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 395.582368][ T40] audit: type=1400 audit(1756152159.593:31458): avc: denied { ioctl } for pid=7180 comm="syz.2.331" path="socket:[15659]" dev="sockfs" ino=15659 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 395.641854][ T40] audit: type=1400 audit(1756152159.653:31459): avc: denied { add_name } for pid=7180 comm="syz.2.331" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.653513][ T40] audit: type=1400 audit(1756152159.653:31460): avc: denied { create } for pid=7180 comm="syz.2.331" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 395.667553][ T40] audit: type=1400 audit(1756152159.663:31461): avc: denied { associate } for pid=7180 comm="syz.2.331" name="blkio.bfq.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 395.679321][ T40] audit: type=1400 audit(1756152159.683:31462): avc: denied { ioctl } for pid=7189 comm="syz.0.335" path="socket:[13176]" dev="sockfs" ino=13176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.814975][ T7157] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 395.819805][ T6098] usb 6-1: USB disconnect, device number 7 [ 395.900194][ T7201] capability: warning: `syz.2.337' uses 32-bit capabilities (legacy support in use) [ 396.027472][ T7213] syz_tun: left allmulticast mode [ 396.029760][ T7213] syz_tun: left promiscuous mode [ 396.033121][ T7213] bridge0: port 3(syz_tun) entered disabled state [ 396.069680][ T7213] __nla_validate_parse: 7 callbacks suppressed [ 396.069696][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 396.077124][ T7213] bridge_slave_1: left allmulticast mode [ 396.079448][ T7213] bridge_slave_1: left promiscuous mode [ 396.081876][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.087275][ T7213] bridge_slave_0: left allmulticast mode [ 396.089448][ T7213] bridge_slave_0: left promiscuous mode [ 396.091995][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.193230][ T7220] net_ratelimit: 23 callbacks suppressed [ 396.193248][ T7220] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 396.247099][ T7223] openvswitch: netlink: Key type 30 is not supported [ 396.354041][ T40] audit: type=1400 audit(1756152160.363:31463): avc: denied { write } for pid=7228 comm="syz.2.346" path="socket:[16604]" dev="sockfs" ino=16604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 396.452818][ T40] audit: type=1400 audit(1756152160.463:31464): avc: denied { unmount } for pid=6039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 396.558189][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 396.590977][ T7253] geneve1: entered allmulticast mode [ 396.963115][ T40] audit: type=1400 audit(1756152160.973:31465): avc: denied { create } for pid=7261 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 396.974172][ T40] audit: type=1400 audit(1756152160.983:31466): avc: denied { connect } for pid=7261 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.037108][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'. [ 397.043639][ T40] audit: type=1400 audit(1756152161.053:31467): avc: denied { load_policy } for pid=7261 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 397.044581][ T7263] SELinux: policydb version 267617011 does not match my version range 15-35 [ 397.058363][ T7263] SELinux: failed to load policy [ 397.060942][ T7262] SELinux: policydb version 267617011 does not match my version range 15-35 [ 397.065043][ T7262] SELinux: failed to load policy [ 397.079770][ T7157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.253324][ T7282] FAULT_INJECTION: forcing a failure. [ 397.253324][ T7282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.255695][ T7280] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 397.260977][ T7282] CPU: 1 UID: 0 PID: 7282 Comm: syz.1.361 Not tainted syzkaller #0 PREEMPT(full) [ 397.261001][ T7282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 397.261011][ T7282] Call Trace: [ 397.261017][ T7282] [ 397.261024][ T7282] dump_stack_lvl+0x16c/0x1f0 [ 397.261048][ T7282] should_fail_ex+0x512/0x640 [ 397.261071][ T7282] _copy_to_user+0x32/0xd0 [ 397.261096][ T7282] simple_read_from_buffer+0xcb/0x170 [ 397.261118][ T7282] proc_fail_nth_read+0x197/0x240 [ 397.261138][ T7282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.261161][ T7282] ? rw_verify_area+0xcf/0x6c0 [ 397.261187][ T7282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.261207][ T7282] vfs_read+0x1e4/0xcf0 [ 397.261228][ T7282] ? __pfx___mutex_lock+0x10/0x10 [ 397.261261][ T7282] ? __pfx_vfs_read+0x10/0x10 [ 397.261285][ T7282] ? __fget_files+0x20e/0x3c0 [ 397.261316][ T7282] ksys_read+0x12a/0x250 [ 397.261333][ T7282] ? __pfx_ksys_read+0x10/0x10 [ 397.261350][ T7282] ? fput+0x9b/0xd0 [ 397.261377][ T7282] do_syscall_64+0xcd/0x4c0 [ 397.261399][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.261417][ T7282] RIP: 0033:0x7f06cbd8d5fc [ 397.261432][ T7282] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 397.261448][ T7282] RSP: 002b:00007f06ccb38030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 397.261465][ T7282] RAX: ffffffffffffffda RBX: 00007f06cbfb5fa0 RCX: 00007f06cbd8d5fc [ 397.261477][ T7282] RDX: 000000000000000f RSI: 00007f06ccb380a0 RDI: 0000000000000003 [ 397.261487][ T7282] RBP: 00007f06ccb38090 R08: 0000000000000000 R09: 0000000000000000 [ 397.261498][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.261508][ T7282] R13: 00007f06cbfb6038 R14: 00007f06cbfb5fa0 R15: 00007ffc90a6e4e8 [ 397.261533][ T7282] [ 397.323934][ T7280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 397.327868][ T7280] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 397.521157][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 397.616479][ T7314] trusted_key: encrypted_key: insufficient parameters specified [ 397.654807][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.660005][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.667962][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.673436][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.679061][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.684393][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.692207][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.711867][ T7314] kvm: emulating exchange as write [ 397.715033][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.720151][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.727972][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7317 comm=syz.1.372 [ 397.780949][ T7326] fuse: Unknown parameter 'f¾xd' [ 397.792685][ T7326] program syz.0.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.970258][ T7338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.139639][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 398.143665][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 398.195329][ T63] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 398.309212][ T7355] netlink: 'syz.1.386': attribute type 21 has an invalid length. [ 398.314100][ T7355] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.641383][ T7361] rtc_cmos 00:05: Alarms can be up to one day in the future [ 398.966616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 399.036890][ T7374] erspan0: entered promiscuous mode [ 399.066534][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 399.071495][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 399.154048][ T7381] dlm: no locking on control device [ 399.156709][ T7381] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 399.166153][ T7371] netlink: 'syz.0.390': attribute type 23 has an invalid length. [ 399.451420][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 399.455485][ T840] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 399.497129][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 399.608394][ T840] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 399.613383][ T840] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 399.616697][ T840] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 399.619696][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.625936][ T7386] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 399.631584][ T840] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.898619][ T1026] usb 6-1: USB disconnect, device number 8 [ 400.764810][ T1026] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 400.788391][ T7447] dvmrp1: entered allmulticast mode [ 400.919517][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 400.919535][ T40] audit: type=1400 audit(1756152164.933:31486): avc: denied { accept } for pid=7452 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 400.935160][ T1026] usb 6-1: Using ep0 maxpacket: 16 [ 400.939578][ T1026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.944485][ T1026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.948669][ T1026] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.953274][ T1026] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.956487][ T1026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.961134][ T1026] usb 6-1: config 0 descriptor?? [ 401.169328][ T40] audit: type=1400 audit(1756152165.183:31487): avc: denied { setopt } for pid=7458 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 401.170050][ T7459] __nla_validate_parse: 4 callbacks suppressed [ 401.170069][ T7459] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.419'. [ 401.370121][ T1026] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 401.372510][ T1026] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 401.376049][ T1026] HID 045e:07da: Invalid code 65791 type 1 [ 401.380514][ T1026] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input10 [ 401.393796][ T1026] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 401.411215][ T40] audit: type=1400 audit(1756152165.423:31488): avc: denied { append } for pid=7467 comm="syz.2.421" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 401.450465][ T7481] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 401.454916][ T7481] SELinux: failed to load policy [ 401.460898][ T40] audit: type=1400 audit(1756152165.473:31489): avc: denied { write } for pid=7483 comm="syz.2.424" path="socket:[15343]" dev="sockfs" ino=15343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 401.572078][ T24] usb 6-1: USB disconnect, device number 9 [ 401.641602][ T7498] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 401.645691][ T7498] netlink: 224 bytes leftover after parsing attributes in process `syz.3.427'. [ 401.743922][ T40] audit: type=1400 audit(1756152165.753:31490): avc: denied { map } for pid=7514 comm="syz.3.429" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 401.753961][ T40] audit: type=1400 audit(1756152165.753:31491): avc: denied { execute } for pid=7514 comm="syz.3.429" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 401.841351][ T40] audit: type=1800 audit(1756152165.853:31492): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.430" name="bus" dev="tmpfs" ino=442 res=0 errno=0 [ 402.185671][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 402.416431][ T40] audit: type=1400 audit(1756152166.433:31493): avc: denied { getopt } for pid=7549 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 402.745047][ T6118] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 402.878763][ T40] audit: type=1326 audit(1756152166.893:31494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5f8ebe9 code=0x50000 [ 402.886166][ T40] audit: type=1326 audit(1756152166.893:31495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5f8ebe9 code=0x50000 [ 402.904776][ T6118] usb 7-1: Using ep0 maxpacket: 16 [ 402.915057][ T6118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.918853][ T6118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.922775][ T6118] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.933391][ T6118] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 402.938139][ T6118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.945623][ T6118] usb 7-1: config 0 descriptor?? [ 403.003665][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 403.356351][ T6118] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 403.359107][ T6118] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 403.363607][ T6118] HID 045e:07da: Invalid code 65791 type 1 [ 403.379078][ T6118] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0004/input/input11 [ 403.387358][ T6118] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 403.556394][ T1026] usb 7-1: USB disconnect, device number 8 [ 403.588683][ T7597] netlink: 'syz.1.454': attribute type 10 has an invalid length. [ 403.591931][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.594907][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.604105][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.606429][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.608848][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.611205][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.617866][ T7597] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 403.647120][ T7599] netlink: 272 bytes leftover after parsing attributes in process `syz.1.455'. [ 403.994547][ T7616] sp0: Synchronizing with TNC [ 403.999985][ T7616] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 404.216482][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 404.219398][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.464'. [ 404.305575][ T7628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7628 comm=syz.2.465 [ 404.636907][ T7638] netlink: ct family unspecified [ 404.639187][ T7638] openvswitch: netlink: Actions may not be safe on all matching packets [ 405.156150][ T7657] zonefs (nbd2) ERROR: Not a zoned block device [ 405.251345][ T7659] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 405.434808][ T1026] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 405.544508][ T7665] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 405.585774][ T1026] usb 6-1: Using ep0 maxpacket: 8 [ 405.591460][ T1026] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.594502][ T1026] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.598644][ T1026] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.601820][ T1026] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.609518][ T7665] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 405.612741][ T1026] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.622817][ T1026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.630525][ T7665] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 405.665134][ T7667] gretap1: entered promiscuous mode [ 405.669004][ T7667] bond3: (slave gretap1): making interface the new active one [ 405.675360][ T7667] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 405.699514][ T7667] macvlan2: entered promiscuous mode [ 405.701287][ T7667] macvlan2: entered allmulticast mode [ 405.713695][ T7667] bond3: entered promiscuous mode [ 405.716336][ T7667] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 405.725320][ T7667] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 405.736758][ T7667] bond3: left promiscuous mode [ 405.830556][ T1026] usb 6-1: GET_CAPABILITIES returned 0 [ 405.832558][ T1026] usbtmc 6-1:16.0: can't read capabilities [ 405.836489][ T7669] /dev/nullb0: Can't open blockdev [ 406.167664][ T7669] fuse: Unknown parameter 'group_ d' [ 406.366014][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 406.368935][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 406.371811][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 406.374641][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 406.379622][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 406.383118][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 406.386919][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 406.542576][ T7697] netlink: 48 bytes leftover after parsing attributes in process `syz.0.489'. [ 406.547626][ T7697] netlink: 48 bytes leftover after parsing attributes in process `syz.0.489'. [ 406.617001][ T40] kauditd_printk_skb: 24244 callbacks suppressed [ 406.617013][ T40] audit: type=1400 audit(406.535:55740): avc: denied { map } for pid=7707 comm="syz.3.495" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.908268][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.912417][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.297409][ T7722] FAULT_INJECTION: forcing a failure. [ 407.297409][ T7722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.301563][ T7722] CPU: 2 UID: 0 PID: 7722 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(full) [ 407.301578][ T7722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 407.301585][ T7722] Call Trace: [ 407.301589][ T7722] [ 407.301594][ T7722] dump_stack_lvl+0x16c/0x1f0 [ 407.301633][ T7722] should_fail_ex+0x512/0x640 [ 407.301654][ T7722] _copy_to_user+0x32/0xd0 [ 407.301670][ T7722] simple_read_from_buffer+0xcb/0x170 [ 407.301683][ T7722] proc_fail_nth_read+0x197/0x240 [ 407.301697][ T7722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 407.301711][ T7722] ? rw_verify_area+0xcf/0x6c0 [ 407.301728][ T7722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 407.301741][ T7722] vfs_read+0x1e4/0xcf0 [ 407.301754][ T7722] ? __pfx___mutex_lock+0x10/0x10 [ 407.301772][ T7722] ? __pfx_vfs_read+0x10/0x10 [ 407.301787][ T7722] ? __fget_files+0x20e/0x3c0 [ 407.301804][ T7722] ksys_read+0x12a/0x250 [ 407.301814][ T7722] ? __pfx_ksys_read+0x10/0x10 [ 407.301830][ T7722] do_syscall_64+0xcd/0x4c0 [ 407.301844][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.301856][ T7722] RIP: 0033:0x7f84e5f8d5fc [ 407.301865][ T7722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 407.301876][ T7722] RSP: 002b:00007f84e6d17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 407.301887][ T7722] RAX: ffffffffffffffda RBX: 00007f84e61b5fa0 RCX: 00007f84e5f8d5fc [ 407.301894][ T7722] RDX: 000000000000000f RSI: 00007f84e6d170a0 RDI: 0000000000000003 [ 407.301901][ T7722] RBP: 00007f84e6d17090 R08: 0000000000000000 R09: 0000000000000000 [ 407.301907][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.301914][ T7722] R13: 00007f84e61b6038 R14: 00007f84e61b5fa0 R15: 00007ffe341adc98 [ 407.301928][ T7722] [ 407.431748][ T840] usb 6-1: USB disconnect, device number 10 [ 407.654828][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 407.784882][ T24] usb 5-1: device descriptor read/64, error -71 [ 407.972931][ T40] audit: type=1400 audit(407.885:55741): avc: denied { mount } for pid=7731 comm="syz.1.503" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 407.981723][ T40] audit: type=1400 audit(407.885:55742): avc: denied { mounton } for pid=7731 comm="syz.1.503" path="/142/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 407.995925][ T40] audit: type=1400 audit(407.915:55743): avc: denied { unmount } for pid=6041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 408.021280][ T40] audit: type=1400 audit(407.935:55744): avc: denied { create } for pid=7735 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.027252][ T40] audit: type=1400 audit(407.935:55745): avc: denied { ioctl } for pid=7735 comm="syz.1.504" path="socket:[19720]" dev="sockfs" ino=19720 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.054889][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 408.062955][ T40] audit: type=1400 audit(407.975:55746): avc: denied { name_bind } for pid=7740 comm="syz.1.505" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 408.072105][ T40] audit: type=1400 audit(407.975:55747): avc: denied { mount } for pid=7740 comm="syz.1.505" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 408.082423][ T40] audit: type=1400 audit(407.995:55748): avc: denied { unmount } for pid=6041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 408.130994][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'. [ 408.194823][ T24] usb 5-1: device descriptor read/64, error -71 [ 408.305219][ T24] usb usb5-port1: attempt power cycle [ 408.310346][ T7756] PM: Enabling pm_trace changes system date and time during resume. [ 408.310346][ T7756] PM: Correct system time has to be restored manually after resume. [ 408.342478][ T40] audit: type=1400 audit(408.255:55749): avc: denied { module_request } for pid=7758 comm="syz.1.512" kmod=6E65746465762D431FD96CFAC8C09E484216B66CDA5D scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 408.503393][ T7763] could not allocate digest TFM handle hmac(nhpoly1305) [ 408.517035][ T7768] could not allocate digest TFM handle sha224-neon [ 408.664812][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 408.695542][ T24] usb 5-1: device descriptor read/8, error -71 [ 408.944823][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 408.966131][ T24] usb 5-1: device descriptor read/8, error -71 [ 409.076019][ T24] usb usb5-port1: unable to enumerate USB device [ 409.134824][ T6035] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 409.284927][ T6035] usb 6-1: Using ep0 maxpacket: 32 [ 409.290795][ T6035] usb 6-1: config 1 interface 0 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.296422][ T6035] usb 6-1: config 1 interface 0 has no altsetting 0 [ 409.303519][ T6035] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.40 [ 409.308524][ T6035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.311971][ T6035] usb 6-1: Product: syz [ 409.313730][ T6035] usb 6-1: Manufacturer: ä‘” [ 409.316226][ T6035] usb 6-1: SerialNumber: syz [ 409.529847][ T6035] usbhid 6-1:1.0: can't add hid device: -71 [ 409.531930][ T6035] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 409.537028][ T6035] usb 6-1: USB disconnect, device number 11 [ 409.745172][ T5332] Bluetooth: hci3: command 0x0406 tx timeout [ 410.128411][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.135533][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.139720][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.453135][ T7897] pimreg3: entered allmulticast mode [ 411.400091][ T7934] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 411.409931][ T7934] CIFS mount error: No usable UNC path provided in device string! [ 411.409931][ T7934] [ 411.413771][ T7934] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 411.657194][ T7960] capability: warning: `syz.2.555' uses deprecated v2 capabilities in a way that may be insecure [ 411.661741][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 411.661751][ T40] audit: type=1400 audit(411.575:55761): avc: denied { read } for pid=7959 comm="syz.2.555" path="socket:[19959]" dev="sockfs" ino=19959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.709726][ T40] audit: type=1400 audit(411.625:55762): avc: denied { remount } for pid=7954 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 411.709988][ T7966] __nla_validate_parse: 4 callbacks suppressed [ 411.709999][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 411.732239][ T40] audit: type=1400 audit(411.645:55763): avc: denied { unmount } for pid=6030 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 411.768535][ T7969] geneve3: entered allmulticast mode [ 411.787559][ T7919] syz.1.541 (7919): drop_caches: 1 [ 411.792713][ T40] audit: type=1400 audit(411.705:55764): avc: denied { getopt } for pid=7962 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 411.910220][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.567'. [ 411.964480][ T7994] bridge3: entered promiscuous mode [ 411.975678][ T7998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7998 comm=syz.3.567 [ 411.986871][ T7990] I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 411.990282][ T7990] gfs2: error -5 reading superblock [ 411.996776][ T40] audit: type=1400 audit(411.900:55765): avc: denied { read } for pid=7989 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 412.013767][ T8000] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 412.137718][ T8011] can0: slcan on ptm0. [ 412.143158][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 412.148455][ T40] audit: type=1400 audit(412.031:55766): avc: denied { getopt } for pid=8010 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 412.155687][ T8017] vxcan1: tx address claim with different name [ 412.158358][ T8017] vxcan1: tx address claim with different name [ 412.168548][ T8017] vxcan1: tx address claim with different name [ 412.170842][ T8016] dlm: non-version read from control device 0 [ 412.227283][ T40] audit: type=1400 audit(412.124:55767): avc: denied { setopt } for pid=8023 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 412.242735][ T8010] can0 (unregistered): slcan off ptm0. [ 412.261160][ T8028] No control pipe specified [ 412.301079][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.585'. [ 412.327169][ T63] Bluetooth: hci3: unexpected event for opcode 0x7075 [ 412.361395][ T8039] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 412.394729][ T8051] fuse: Bad value for 'user_id' [ 412.396437][ T8051] fuse: Bad value for 'user_id' [ 412.452419][ T63] Bluetooth: hci3: unexpected event for opcode 0x7075 [ 412.530079][ T40] audit: type=1400 audit(412.405:55768): avc: denied { read } for pid=8066 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 412.550225][ T40] audit: type=1400 audit(412.423:55769): avc: denied { read } for pid=8076 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 412.697759][ T8087] input: syz0 as /devices/virtual/input/input12 [ 412.793593][ T8093] binder: BINDER_SET_CONTEXT_MGR already set [ 412.796401][ T8093] binder: 8091:8093 ioctl 4018620d 200000000480 returned -16 [ 412.799697][ T8092] binder: 8091:8092 ioctl c0306201 200000000640 returned -22 [ 412.804314][ T8092] binder: 8091:8092 ioctl 4038ae7a 200000000100 returned -22 [ 412.807838][ T8092] cgroup: Name too long [ 412.867078][ T8097] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 412.870627][ T8097] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 412.879896][ T8098] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 412.942315][ T40] audit: type=1400 audit(412.788:55770): avc: denied { read } for pid=5367 comm="acpid" name="mouse8" dev="devtmpfs" ino=3009 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 413.384712][ T8070] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.388611][ T8070] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 413.401131][ T8070] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.403900][ T8070] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 413.412483][ T8070] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.414706][ T8070] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 413.581671][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 413.586146][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 413.688402][ T8134] syzkaller0: entered promiscuous mode [ 413.691064][ T8134] syzkaller0: entered allmulticast mode [ 413.697124][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 413.700019][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 415.173188][ T8191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4 sclass=netlink_tcpdiag_socket pid=8191 comm=syz.2.638 [ 415.205913][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 415.216370][ T8197] Bluetooth: MGMT ver 1.23 [ 415.300401][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.645'. [ 415.351501][ T8209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8209 comm=syz.2.645 [ 415.361298][ T8209] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 415.362995][ T8215] binder: 8214:8215 unknown command 0 [ 415.365360][ T8209] gfs2: error -5 reading superblock [ 415.367045][ T8215] binder: 8214:8215 ioctl c0306201 2000000001c0 returned -22 [ 415.798042][ T6070] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 415.918243][ T8241] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 415.928994][ T8241] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 415.979213][ T6070] usb 7-1: Using ep0 maxpacket: 8 [ 415.982203][ T6070] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 415.984766][ T6070] usb 7-1: config 0 has no interface number 0 [ 415.986685][ T6070] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 415.990752][ T6070] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 415.994721][ T6070] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 415.998038][ T6070] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 416.001468][ T6070] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 416.006675][ T6070] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 416.010585][ T6070] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.014588][ T6070] usb 7-1: config 0 descriptor?? [ 416.022676][ T6070] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 416.253514][ T840] usb 7-1: USB disconnect, device number 9 [ 416.270418][ T840] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 416.371000][ T8277] tmpfs: User quota block hardlimit too large. [ 416.499438][ T8286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.705285][ T6098] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 416.710045][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 416.793190][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.796228][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.798642][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.801053][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.804149][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.806623][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.809050][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.811478][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.814212][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.816639][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.819080][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.821507][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.824452][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.828476][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.830356][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.832254][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.834769][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.837268][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.839497][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.842040][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.845948][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.847738][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.849499][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.851263][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.853004][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.854929][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.856744][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.858493][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.860225][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.861981][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.863701][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.865601][ T6098] usb 7-1: Using ep0 maxpacket: 8 [ 416.867370][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.869169][ T8305] kAFS: unable to lookup cell '/,c¾ûL' [ 416.871821][ T6098] usb 7-1: config 2 interface 0 has no altsetting 0 [ 416.875580][ T6098] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 416.878571][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 416.880348][ T6098] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.884135][ T6098] usb 7-1: Product: syz [ 416.886776][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.890194][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.893190][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.897311][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.900291][ T6098] usb 7-1: Manufacturer: syz [ 416.901774][ T6098] usb 7-1: SerialNumber: syz [ 416.903923][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.914999][ T29] usb 6-1: config 0 descriptor?? [ 417.126203][ T6098] usb 7-1: USB disconnect, device number 10 [ 417.335594][ T8324] overlayfs: conflicting lowerdir path [ 417.344556][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 417.344572][ T40] audit: type=1400 audit(416.904:55792): avc: denied { append } for pid=8323 comm="syz.0.681" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 417.353218][ T29] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 417.363484][ T29] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 417.367398][ T29] HID 045e:07da: Invalid code 65791 type 1 [ 417.374474][ T29] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input13 [ 417.382170][ T29] microsoft 0003:045E:07DA.0005: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 417.407584][ T8326] __nla_validate_parse: 2 callbacks suppressed [ 417.407602][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'. [ 417.414499][ T8326] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 417.550668][ T40] audit: type=1400 audit(417.100:55793): avc: denied { create } for pid=8328 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.553711][ T8329] fuse: Bad value for 'group_id' [ 417.561299][ T8329] fuse: Bad value for 'group_id' [ 417.566468][ T40] audit: type=1400 audit(417.110:55794): avc: denied { write } for pid=8328 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.575718][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 417.576964][ T40] audit: type=1400 audit(417.110:55795): avc: denied { nlmsg_write } for pid=8328 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.579537][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 417.596401][ T6035] usb 6-1: USB disconnect, device number 12 [ 417.690924][ T40] audit: type=1400 audit(417.231:55796): avc: denied { mount } for pid=8338 comm="syz.2.685" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 417.773422][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 417.783957][ T40] audit: type=1400 audit(417.306:55797): avc: denied { unmount } for pid=6034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 417.809935][ T8348] block nbd0: Attempted send on invalid socket [ 417.812394][ T8348] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.815589][ T8348] (syz.0.688,8348,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 417.820412][ T8348] (syz.0.688,8348,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 417.822777][ T8348] (syz.0.688,8348,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 417.825536][ T8348] (syz.0.688,8348,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 417.839174][ T40] audit: type=1400 audit(417.372:55798): avc: denied { open } for pid=8345 comm="syz.0.688" path="/dev/ttyq5" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 417.905988][ T40] audit: type=1400 audit(417.428:55799): avc: denied { write } for pid=8358 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 418.049544][ T8377] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 418.057025][ T8377] netlink: 228 bytes leftover after parsing attributes in process `syz.0.696'. [ 418.060911][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'. [ 418.186701][ T40] audit: type=1400 audit(417.690:55800): avc: denied { connect } for pid=8380 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.194307][ T40] audit: type=1400 audit(417.690:55801): avc: denied { shutdown } for pid=8380 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.253489][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.257280][ T8387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.699'. [ 418.280020][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.284349][ T8387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.699'. [ 418.290076][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.292937][ T8387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.699'. [ 418.296305][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.299534][ T8387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.699'. [ 418.303283][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.306514][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.310389][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.314022][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.317511][ T8387] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 418.430726][ T8411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 418.538527][ T8421] input: syz1 as /devices/virtual/input/input14 [ 418.630918][ T8442] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 418.747317][ T8463] sp0: Synchronizing with TNC [ 418.759336][ T8462] [U] è` [ 418.867665][ T8473] cgroup: Unknown subsys name 'cpuset' [ 419.054505][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.167040][ T8495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.181882][ T8495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.328531][ T7903] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.331461][ T7903] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.335758][ T7903] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.338871][ T7903] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.460413][ T8513] mkiss: ax0: crc mode is auto. [ 419.565822][ T8522] IPv6: NLM_F_REPLACE set, but no existing node found! [ 419.955709][ T8534] tipc: Started in network mode [ 419.957700][ T8534] tipc: Node identity , cluster identity 4711 [ 419.959741][ T8534] tipc: Failed to set node id, please configure manually [ 419.962506][ T8534] tipc: Enabling of bearer rejected, failed to enable media [ 420.110567][ T8546] IPv6: sit1: Disabled Multicast RS [ 420.113217][ T8546] sit1: entered allmulticast mode [ 420.399549][ T8560] IPv6: sit1: Disabled Multicast RS [ 420.402918][ T8560] sit1: entered allmulticast mode [ 420.810007][ T8584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39238 sclass=netlink_route_socket pid=8584 comm=syz.3.760 [ 420.810384][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 420.898821][ T7857] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.902531][ T7857] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.905428][ T7857] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.908717][ T7857] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.972748][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 420.977218][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.981947][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.986135][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 420.991626][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 420.996585][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.006081][ T10] usb 7-1: config 0 descriptor?? [ 421.091315][ T8603] netdevsim netdevsim3: Direct firmware load for úÿÿû failed with error -2 [ 421.099475][ T8603] netdevsim netdevsim3: Falling back to sysfs fallback for: úÿÿû [ 421.449856][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 421.455656][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 421.458480][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 421.463533][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input15 [ 421.475873][ T10] microsoft 0003:045E:07DA.0006: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 421.646890][ T8621] validate_nla: 58 callbacks suppressed [ 421.646909][ T8621] netlink: 'syz.0.772': attribute type 30 has an invalid length. [ 421.670161][ T840] usb 7-1: USB disconnect, device number 11 [ 422.065027][ T8599] syz.3.766: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 422.074420][ T8599] CPU: 3 UID: 0 PID: 8599 Comm: syz.3.766 Not tainted syzkaller #0 PREEMPT(full) [ 422.074448][ T8599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 422.074460][ T8599] Call Trace: [ 422.074467][ T8599] [ 422.074475][ T8599] dump_stack_lvl+0x16c/0x1f0 [ 422.074530][ T8599] warn_alloc+0x248/0x3a0 [ 422.074590][ T8599] ? __pfx_warn_alloc+0x10/0x10 [ 422.074624][ T8599] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 422.074652][ T8599] ? __vmalloc_node_noprof+0xad/0xf0 [ 422.074686][ T8599] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 422.074725][ T8599] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 422.074767][ T8599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.074806][ T8599] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 422.074834][ T8599] vmalloc_user_noprof+0x9e/0xe0 [ 422.074862][ T8599] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 422.074890][ T8599] vb2_vmalloc_alloc+0x135/0x3f0 [ 422.074919][ T8599] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 422.074947][ T8599] __vb2_queue_alloc+0x8c9/0x1280 [ 422.074988][ T8599] vb2_core_reqbufs+0xa90/0xfe0 [ 422.075021][ T8599] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 422.075060][ T8599] __vb2_init_fileio+0x3f1/0x1100 [ 422.075081][ T8599] ? lockdep_hardirqs_on+0x7c/0x110 [ 422.075107][ T8599] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.075125][ T8599] ? __pollwait+0x271/0x490 [ 422.075147][ T8599] vb2_core_poll+0x486/0x700 [ 422.075172][ T8599] vb2_poll+0x33/0x150 [ 422.075194][ T8599] vb2_fop_poll+0x10f/0x2c0 [ 422.075216][ T8599] ? __pfx_vb2_fop_poll+0x10/0x10 [ 422.075234][ T8599] v4l2_poll+0x163/0x320 [ 422.075253][ T8599] ? __pfx_v4l2_poll+0x10/0x10 [ 422.075266][ T8599] do_sys_poll+0x559/0xdf0 [ 422.075291][ T8599] ? __pfx_do_sys_poll+0x10/0x10 [ 422.075335][ T8599] ? __lock_acquire+0x62e/0x1ce0 [ 422.075360][ T8599] ? __pfx___pollwait+0x10/0x10 [ 422.075381][ T8599] ? __pfx_pollwake+0x10/0x10 [ 422.075434][ T8599] ? do_futex+0x122/0x350 [ 422.075459][ T8599] ? __pfx_do_futex+0x10/0x10 [ 422.075483][ T8599] ? set_user_sigmask+0x21b/0x2b0 [ 422.075505][ T8599] ? __pfx_set_user_sigmask+0x10/0x10 [ 422.075532][ T8599] __x64_sys_ppoll+0x254/0x2d0 [ 422.075553][ T8599] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 422.075582][ T8599] do_syscall_64+0xcd/0x4c0 [ 422.075601][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.075633][ T8599] RIP: 0033:0x7f072478ebe9 [ 422.075647][ T8599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.075664][ T8599] RSP: 002b:00007f07256ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 422.075682][ T8599] RAX: ffffffffffffffda RBX: 00007f07249b5fa0 RCX: 00007f072478ebe9 [ 422.075692][ T8599] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 422.075702][ T8599] RBP: 00007f0724811e19 R08: 0000000000000000 R09: 0000000000000000 [ 422.075711][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.075720][ T8599] R13: 00007f07249b6038 R14: 00007f07249b5fa0 R15: 00007ffe15c11298 [ 422.075744][ T8599] [ 422.075751][ T8599] Mem-Info: [ 422.201525][ T8599] active_anon:25886 inactive_anon:0 isolated_anon:93 [ 422.201525][ T8599] active_file:1143 inactive_file:3382 isolated_file:31 [ 422.201525][ T8599] unevictable:1768 dirty:268 writeback:0 [ 422.201525][ T8599] slab_reclaimable:13907 slab_unreclaimable:74436 [ 422.201525][ T8599] mapped:24738 shmem:18739 pagetables:1441 [ 422.201525][ T8599] sec_pagetables:310 bounce:0 [ 422.201525][ T8599] kernel_misc_reclaimable:0 [ 422.201525][ T8599] free:400681 free_pcp:15675 free_cma:0 [ 422.217417][ T8599] Node 0 active_anon:103048kB inactive_anon:0kB active_file:4572kB inactive_file:13396kB unevictable:3536kB isolated(anon):744kB isolated(file):124kB mapped:98952kB dirty:1072kB writeback:0kB shmem:71420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14736kB pagetables:5300kB sec_pagetables:1240kB all_unreclaimable? yes Balloon:0kB [ 422.227797][ T8599] Node 1 active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.238087][ T8599] Node 0 DMA free:5228kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:124kB free_cma:0kB [ 422.247646][ T8599] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 422.250187][ T8599] Node 0 DMA32 free:95596kB boost:61900kB min:89416kB low:96292kB high:103168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102304kB inactive_anon:0kB active_file:4572kB inactive_file:13396kB unevictable:3536kB writepending:1072kB present:2080628kB managed:1263488kB mlocked:0kB bounce:0kB free_pcp:35076kB local_pcp:13036kB free_cma:0kB [ 422.262272][ T8599] lowmem_reserve[]: 0 0 0 0 0 [ 422.263862][ T8599] Node 1 Normal free:1497224kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:33068kB local_pcp:16128kB free_cma:0kB [ 422.273819][ T8599] lowmem_reserve[]: 0 0 0 0 0 [ 422.275512][ T8599] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UM) 3*32kB (UM) 1*64kB (E) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 0*2048kB 0*4096kB = 5204kB [ 422.280335][ T8599] Node 0 DMA32: 358*4kB (UME) 689*8kB (UME) 588*16kB (UME) 514*32kB (UME) 210*64kB (UME) 136*128kB (UME) 71*256kB (UM) 14*512kB (M) 6*1024kB (UM) 3*2048kB (M) 0*4096kB = 101280kB [ 422.296327][ T8599] Node 1 Normal: 6*4kB (UE) 0*8kB 1*16kB (M) 2*32kB (UE) 3*64kB (UME) 3*128kB (UE) 1*256kB (U) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UME) 363*4096kB (UM) = 1497000kB [ 422.301940][ T8599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.305109][ T8599] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 422.308315][ T8599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.311310][ T8599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.314274][ T8599] 23330 total pagecache pages [ 422.315859][ T8599] 0 pages in swap cache [ 422.317237][ T8599] Free swap = 124996kB [ 422.319225][ T8599] Total swap = 124996kB [ 422.320513][ T8599] 1048443 pages RAM [ 422.321811][ T8599] 0 pages HighMem/MovableOnly [ 422.323306][ T8599] 283258 pages reserved [ 422.324686][ T8599] 0 pages cma reserved [ 422.402283][ T8639] tipc: Started in network mode [ 422.404335][ T8639] tipc: Node identity ce0ca295a377, cluster identity 4711 [ 422.406990][ T8639] tipc: Enabled bearer , priority 0 [ 422.439471][ T8639] syzkaller0: entered promiscuous mode [ 422.441566][ T8639] syzkaller0: entered allmulticast mode [ 422.444110][ T8639] tipc: Resetting bearer [ 422.452351][ T8639] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 422.489910][ T8638] tipc: Resetting bearer [ 422.626391][ T8650] netlink: 'syz.1.782': attribute type 1 has an invalid length. [ 422.629744][ T8650] netlink: 'syz.1.782': attribute type 2 has an invalid length. [ 422.873845][ T6035] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 423.036126][ T6035] usb 7-1: not running at top speed; connect to a high speed hub [ 423.040684][ T6035] usb 7-1: config 129 has an invalid interface number: 183 but max is 1 [ 423.044196][ T6035] usb 7-1: config 129 has an invalid interface number: 104 but max is 1 [ 423.049073][ T6035] usb 7-1: config 129 has an invalid interface number: 22 but max is 1 [ 423.053538][ T6035] usb 7-1: config 129 has 3 interfaces, different from the descriptor's value: 2 [ 423.056626][ T6035] usb 7-1: config 129 has no interface number 0 [ 423.058783][ T6035] usb 7-1: config 129 has no interface number 1 [ 423.060868][ T6035] usb 7-1: config 129 has no interface number 2 [ 423.062847][ T6035] usb 7-1: config 129 interface 104 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 423.068038][ T6035] usb 7-1: config 129 interface 104 altsetting 69 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 423.071528][ T6035] usb 7-1: config 129 interface 104 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 423.075019][ T6035] usb 7-1: config 129 interface 104 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 423.078542][ T6035] usb 7-1: config 129 interface 104 altsetting 69 endpoint 0x8C has invalid maxpacket 512, setting to 64 [ 423.082749][ T6035] usb 7-1: config 129 interface 104 altsetting 69 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 423.086368][ T6035] usb 7-1: config 129 interface 104 altsetting 69 has a duplicate endpoint with address 0xC, skipping [ 423.094456][ T6035] usb 7-1: config 129 interface 104 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 423.101344][ T6035] usb 7-1: config 129 interface 104 altsetting 69 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 423.106854][ T6035] usb 7-1: too many endpoints for config 129 interface 22 altsetting 196: 194, using maximum allowed: 30 [ 423.113137][ T6035] usb 7-1: config 129 interface 22 altsetting 196 has an invalid descriptor for endpoint zero, skipping [ 423.117692][ T6035] usb 7-1: config 129 interface 22 altsetting 196 has 1 endpoint descriptor, different from the interface descriptor's value: 194 [ 423.125096][ T6035] usb 7-1: config 129 interface 183 has no altsetting 0 [ 423.127908][ T6035] usb 7-1: config 129 interface 104 has no altsetting 0 [ 423.130771][ T6035] usb 7-1: config 129 interface 22 has no altsetting 0 [ 423.135631][ T6035] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0314, bcdDevice=80.53 [ 423.139138][ T6035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.143904][ T6035] usb 7-1: Product: 术ෑ퀸᠞೧︯뺋é¡ä¯§ç¦›ãŸœê¤æ¡±íŒŠï‡Ÿæ”©ë£•æ•äº¯à¬“í¸ë–‘婸á¬äŒ³íœ”æ˜ê›§çµ¸è·¥ê›¶ë›¶ë¬¡ëˆ½ [ 423.148649][ T6035] usb 7-1: Manufacturer: â° [ 423.150502][ T6035] usb 7-1: SerialNumber: щ [ 423.548570][ T840] tipc: Node number set to 1836819093 [ 423.648988][ T8638] tipc: Disabling bearer [ 423.681918][ T6035] option 7-1:129.183: GSM modem (1-port) converter detected [ 423.693551][ T6035] usb 7-1: USB disconnect, device number 12 [ 423.699115][ T6035] option 7-1:129.183: device disconnected [ 423.725124][ T8656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8656 comm=syz.2.784 [ 423.827045][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 423.827069][ T40] audit: type=1400 audit(422.975:55898): avc: denied { setopt } for pid=8669 comm="syz.1.789" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 423.840236][ T8670] __nla_validate_parse: 72 callbacks suppressed [ 423.840248][ T8670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 423.845534][ T8670] netlink: 'syz.1.789': attribute type 7 has an invalid length. [ 423.849970][ T8670] netlink: 'syz.1.789': attribute type 8 has an invalid length. [ 423.852601][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 423.859118][ T40] audit: type=1400 audit(423.003:55899): avc: denied { recv } for pid=7842 comm="kworker/u32:13" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=58438 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 423.868222][ T40] audit: type=1400 audit(423.003:55900): avc: denied { recv } for pid=7842 comm="kworker/u32:13" saddr=127.0.0.1 src=58438 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 423.903880][ T8676] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 423.927821][ T8677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.931631][ T8677] bond4: (slave bond5): making interface the new active one [ 423.935390][ T8677] bond4: (slave bond5): Enslaving as an active interface with an up link [ 424.049921][ T8685] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 424.053990][ T8685] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 424.057646][ T8685] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 424.061296][ T8685] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 424.064243][ T8685] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 424.100538][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 424.197978][ T40] audit: type=1400 audit(423.311:55901): avc: denied { append } for pid=8701 comm="syz.2.798" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 424.261525][ T8715] nfs4: Unknown parameter '' [ 424.280962][ T40] audit: type=1400 audit(423.386:55902): avc: denied { ioctl } for pid=8716 comm="syz.2.803" path="socket:[24722]" dev="sockfs" ino=24722 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 424.296346][ T40] audit: type=1400 audit(423.405:55903): avc: denied { write } for pid=8716 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 424.303515][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 424.537457][ T8735] bond3: entered promiscuous mode [ 424.539478][ T8735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.555472][ T8735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.557702][ T8740] nfs4: Unknown parameter 'Ð5O#[”ÿ4cð;ÿþ„ø’|Öµþ"pÑFðÎ:‰–\ [ 424.557702][ T8740] ”Zú?‰èº‘4¥f”Ï' [ 424.557825][ T8735] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 424.565925][ T8735] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 424.571658][ T8735] bond3: (slave ip6gre1): making interface the new active one [ 424.574579][ T8735] ip6gre1: entered promiscuous mode [ 424.577763][ T8735] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 424.610299][ T8746] netlink: 324 bytes leftover after parsing attributes in process `syz.2.810'. [ 424.640416][ T8747] batman_adv: batadv0: Adding interface: gretap1 [ 424.642895][ T8747] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.652909][ T8747] batman_adv: batadv0: Interface activated: gretap1 [ 424.658697][ T8756] tmpfs: Bad value for 'mpol' [ 424.703980][ T40] audit: type=1400 audit(423.789:55904): avc: denied { read } for pid=8757 comm="syz.2.814" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 424.714961][ T40] audit: type=1400 audit(423.789:55905): avc: denied { open } for pid=8757 comm="syz.2.814" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 424.725705][ T40] audit: type=1400 audit(423.789:55906): avc: denied { ioctl } for pid=8757 comm="syz.2.814" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 424.750309][ T40] audit: type=1400 audit(423.826:55907): avc: denied { map } for pid=8759 comm="syz.1.815" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.003143][ T8775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.169926][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 425.304664][ T8789] netlink: 10 bytes leftover after parsing attributes in process `syz.2.823'. [ 425.310024][ T8788] 9pnet_virtio: no channels available for device syz [ 425.310081][ T8789] 9pnet_virtio: no channels available for device syz [ 425.500527][ T8805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.829'. [ 425.660490][ T8811] ./bus: Can't lookup blockdev [ 426.188309][ T8843] tmpfs: Bad value for 'mpol' [ 426.308178][ T8845] netlink: 48 bytes leftover after parsing attributes in process `syz.0.843'. [ 426.468245][ T8862] Bluetooth: MGMT ver 1.23 [ 426.477547][ T8862] evm: overlay not supported [ 426.570147][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 426.688477][ T8876] tmpfs: Unknown parameter 'm1û6 ÿÑ¡¡Ъpo' [ 426.700483][ T8877] program syz.0.852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.742487][ T8879] syzkaller1: entered promiscuous mode [ 426.752146][ T8879] syzkaller1: entered allmulticast mode [ 427.259388][ T8922] Driver unsupported XDP return value 0 on prog (id 92) dev N/A, expect packet loss! [ 427.358263][ T8935] validate_nla: 64 callbacks suppressed [ 427.358281][ T8935] netlink: 'syz.2.873': attribute type 27 has an invalid length. [ 427.384044][ T8935] gretap1: left promiscuous mode [ 427.389775][ T8935] sit1: left allmulticast mode [ 427.411919][ T8934] erspan0: left promiscuous mode [ 427.427609][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.431188][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.436067][ T8934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.444151][ T8935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.805310][ T8974] netlink: 'syz.0.885': attribute type 64 has an invalid length. [ 427.811510][ T8974] netlink: 'syz.0.885': attribute type 4 has an invalid length. [ 427.855802][ T8978] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 427.873496][ T8981] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 427.880517][ T8981] syz_tun: entered promiscuous mode [ 427.914728][ T8983] program syz.2.889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.919817][ T8983] ata1.00: non-matching transfer count (0/2304) [ 428.022592][ T9005] mmap: syz.1.895 (9005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 428.091236][ T9011] netlink: 'syz.2.898': attribute type 39 has an invalid length. [ 428.695398][ T9061] loop7: detected capacity change from 0 to 7 [ 428.698618][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.702007][ C0] buffer_io_error: 25 callbacks suppressed [ 428.702020][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.706969][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.710233][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.713314][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.716330][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.719948][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.722961][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.727914][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.730671][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.733455][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.736196][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.737756][ T9065] netlink: 'syz.1.915': attribute type 16 has an invalid length. [ 428.739652][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.741170][ T9065] netlink: 'syz.1.915': attribute type 17 has an invalid length. [ 428.743995][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.744046][ T9061] ldm_validate_partition_table(): Disk read failed. [ 428.751008][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.753824][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.757625][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.760365][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.762871][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.765575][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.770001][ T9061] Dev loop7: unable to read RDB block 0 [ 428.772964][ T9061] loop7: unable to read partition table [ 428.777216][ T9061] loop7: partition table beyond EOD, truncated [ 428.779709][ T9061] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 428.795152][ T9066] ldm_validate_partition_table(): Disk read failed. [ 428.798949][ T9066] Dev loop7: unable to read RDB block 0 [ 428.800987][ T9066] loop7: unable to read partition table [ 428.802814][ T9066] loop7: partition table beyond EOD, truncated [ 428.814885][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.817085][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.931413][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.942649][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.012070][ T9065] veth1_macvtap: left allmulticast mode [ 429.014082][ T9065] macsec0: left promiscuous mode [ 429.017722][ T9065] macsec0: left allmulticast mode [ 429.046226][ T9065] veth3: left promiscuous mode [ 429.058805][ T9065] bridge3: left promiscuous mode [ 429.060994][ T9065] bond3: left promiscuous mode [ 429.062638][ T9065] ip6gre1: left promiscuous mode [ 429.074002][ T7880] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.077299][ T7880] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.085329][ T7880] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.089156][ T7880] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.093098][ T7880] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.097793][ T7880] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.100695][ T7880] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.103532][ T7880] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.268785][ T9093] __nla_validate_parse: 8 callbacks suppressed [ 429.268797][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 429.277139][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 429.282702][ T9094] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.923'. [ 429.283752][ T9093] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.923'. [ 429.421356][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 429.425888][ T9103] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 429.606186][ T9096] netlink: 5 bytes leftover after parsing attributes in process `syz.1.924'. [ 429.659242][ T9132] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 429.765367][ T9147] all: renamed from lo [ 429.871910][ T9164] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 429.910245][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.945'. [ 429.912944][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.945'. [ 429.923825][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 429.923839][ T40] audit: type=1400 audit(428.671:55928): avc: denied { name_bind } for pid=9168 comm="syz.3.943" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 429.977290][ T9180] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.945'. [ 429.980449][ T40] audit: type=1400 audit(428.718:55929): avc: denied { mount } for pid=9176 comm="syz.1.946" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 429.988554][ T40] audit: type=1400 audit(428.727:55930): avc: denied { connect } for pid=9176 comm="syz.1.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.992524][ T9177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9177 comm=syz.1.946 [ 430.009584][ T40] audit: type=1400 audit(428.746:55931): avc: denied { bind } for pid=9176 comm="syz.1.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 430.038798][ T40] audit: type=1400 audit(428.784:55932): avc: denied { mounton } for pid=9188 comm="syz.2.950" path="/258/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 430.038831][ T9189] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 430.130685][ T9199] sctp: [Deprecated]: syz.1.953 (pid 9199) Use of int in max_burst socket option. [ 430.130685][ T9199] Use struct sctp_assoc_value instead [ 430.187460][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.955'. [ 430.191766][ T9204] autofs4:pid:9204:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 430.199551][ T40] audit: type=1400 audit(428.933:55933): avc: denied { listen } for pid=9205 comm="syz.1.956" path=2F3235382FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 430.211546][ T9206] bridge5: entered promiscuous mode [ 430.241733][ T9211] ALSA: mixer_oss: invalid index 100000 [ 430.245618][ T40] audit: type=1400 audit(428.971:55934): avc: denied { nlmsg_write } for pid=9210 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 430.247394][ T9208] bond1: entered promiscuous mode [ 430.314438][ T6035] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 430.453438][ T6035] usb 7-1: device descriptor read/64, error -71 [ 430.709984][ T6035] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 430.859631][ T6035] usb 7-1: device descriptor read/64, error -71 [ 430.905740][ T40] audit: type=1400 audit(429.588:55935): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 430.914258][ T40] audit: type=1400 audit(429.588:55936): avc: denied { sendto } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 430.979541][ T6035] usb usb7-port1: attempt power cycle [ 431.276504][ T7730] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 431.340781][ T6035] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 431.362679][ T6035] usb 7-1: device descriptor read/8, error -71 [ 431.447574][ T7730] usb 6-1: Using ep0 maxpacket: 8 [ 431.451189][ T7730] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 431.454727][ T7730] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.459030][ T7730] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.463082][ T7730] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.467037][ T7730] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.472292][ T7730] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 431.476166][ T7730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.639940][ T6035] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 431.672698][ T6035] usb 7-1: device descriptor read/8, error -71 [ 431.702799][ T7730] usb 6-1: usb_control_msg returned -32 [ 431.704857][ T7730] usbtmc 6-1:16.0: can't read capabilities [ 431.802040][ T6035] usb usb7-port1: unable to enumerate USB device [ 431.854325][ T839] e1000 0000:00:06.0 eth0: Reset adapter [ 431.960952][ T839] e1000 0000:00:06.0 eth0: Reset adapter [ 431.962901][ T9265] bridge0: port 1(veth0_to_bridge) entered blocking state [ 431.966018][ T9265] bridge0: port 1(veth0_to_bridge) entered disabled state [ 431.969099][ T9265] veth0_to_bridge: entered allmulticast mode [ 431.972506][ T9265] veth0_to_bridge: entered promiscuous mode [ 431.975571][ T9265] bridge0: port 1(veth0_to_bridge) entered blocking state [ 431.977876][ T9265] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 432.080276][ T9266] random: crng reseeded on system resumption [ 432.100043][ T839] e1000 0000:00:06.0 eth0: Reset adapter [ 433.035823][ T40] audit: type=1400 audit(431.580:55937): avc: denied { setopt } for pid=9285 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.236271][ T7730] usb 6-1: USB disconnect, device number 13 [ 434.399464][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 435.431529][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 435.431545][ T40] audit: type=1400 audit(433.816:55940): avc: denied { recv } for pid=5382 comm="udevd" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 444.832638][ T9314] syzkaller1: entered promiscuous mode [ 444.834528][ T9314] syzkaller1: entered allmulticast mode [ 445.168129][ T9350] could not allocate digest TFM handle crct10dif-pclmul [ 445.188343][ T9356] __nla_validate_parse: 6 callbacks suppressed [ 445.188355][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 445.226821][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'. [ 445.329849][ T40] audit: type=1400 audit(443.076:55941): avc: denied { read } for pid=9366 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.428840][ T9376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1002'. [ 445.508156][ T40] audit: type=1400 audit(443.254:55942): avc: denied { setattr } for pid=9381 comm="syz.2.1004" name="nbd2" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.664266][ T9398] program syz.2.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.694029][ T40] audit: type=1400 audit(443.423:55943): avc: denied { mounton } for pid=9397 comm="syz.2.1008" path="/269/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 445.694161][ T9398] 9pnet_fd: p9_fd_create_unix (9398): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 445.806740][ T40] audit: type=1400 audit(443.535:55944): avc: denied { unmount } for pid=6034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 445.855096][ T40] audit: type=1400 audit(443.535:55945): avc: denied { write } for pid=9399 comm="syz.3.1009" name="file0" dev="tmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 445.866410][ T40] audit: type=1400 audit(443.535:55946): avc: denied { open } for pid=9399 comm="syz.3.1009" path="/173/file0" dev="tmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 445.901259][ T40] audit: type=1400 audit(443.535:55947): avc: denied { ioctl } for pid=9399 comm="syz.3.1009" path="/173/file0" dev="tmpfs" ino=939 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 445.949862][ T40] audit: type=1400 audit(443.656:55948): avc: denied { setopt } for pid=9416 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 446.059440][ T9425] macvlan0: entered promiscuous mode [ 446.124058][ T9436] netlink: 'syz.0.1020': attribute type 5 has an invalid length. [ 446.133109][ T9436] ip6erspan0: entered promiscuous mode [ 446.150714][ T9436] kAFS: unparsable volume name [ 446.337643][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 446.415972][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 446.434276][ T9462] fuse: Bad value for 'group_id' [ 446.436602][ T9462] fuse: Bad value for 'group_id' [ 446.444228][ T9463] netlink: 'syz.3.1028': attribute type 11 has an invalid length. [ 446.814380][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'. [ 446.913635][ T40] audit: type=1400 audit(444.564:55949): avc: denied { create } for pid=9489 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 446.948317][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 447.007408][ T40] audit: type=1400 audit(444.648:55950): avc: denied { write } for pid=9489 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 447.315649][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.458587][ T9509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1041'. [ 447.799149][ T9517] tmpfs: Unknown parameter 'quota, priority 0 [ 450.295381][ T9643] syzkaller0: entered promiscuous mode [ 450.297690][ T9643] syzkaller0: entered allmulticast mode [ 450.304970][ T9642] tipc: Resetting bearer [ 450.317495][ T9642] tipc: Disabling bearer [ 451.440407][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.444213][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.447637][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.452493][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.457162][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.457194][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 451.461707][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.469089][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.473600][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.477954][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.482659][ T9647] overlayfs: failed lookup in lower (newroot/291, name='bus', err=-40): overlapping layers [ 451.792712][ T9659] sp0: Synchronizing with TNC [ 451.795989][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 451.795999][ T40] audit: type=1400 audit(449.129:55958): avc: denied { map } for pid=9658 comm="syz.2.1086" path="socket:[30967]" dev="sockfs" ino=30967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 451.809924][ T40] audit: type=1400 audit(449.129:55959): avc: denied { read } for pid=9658 comm="syz.2.1086" path="socket:[30967]" dev="sockfs" ino=30967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 451.811875][ T9658] [U] è [ 452.000615][ T9663] tipc: Cannot configure node identity twice [ 452.161176][ T9672] input: syz1 as /devices/virtual/input/input17 [ 452.386836][ T9684] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1094'. [ 452.390969][ T40] audit: type=1400 audit(449.680:55960): avc: denied { write } for pid=9683 comm="syz.2.1095" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 452.422756][ T9688] nbd: must specify at least one socket [ 452.427250][ T9690] Failed to get privilege flags for destination (handle=0x2:0x8) [ 452.493017][ T9697] netlink: 'syz.2.1100': attribute type 4 has an invalid length. [ 452.496402][ T9697] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1100'. [ 452.723879][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 452.780180][ T9707] macvlan2: entered promiscuous mode [ 452.783112][ T9707] macvlan2: entered allmulticast mode [ 452.787349][ T9707] bond7: entered promiscuous mode [ 452.790369][ T9707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 452.798960][ T9730] binder: 9729:9730 ioctl c0306201 200000000640 returned -22 [ 452.802699][ T9707] bond7: left promiscuous mode [ 452.857087][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 453.062204][ T40] audit: type=1400 audit(450.307:55961): avc: denied { ioctl } for pid=9739 comm="syz.0.1112" path="socket:[31057]" dev="sockfs" ino=31057 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 453.081368][ T9742] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1113'. [ 453.399084][ T40] audit: type=1400 audit(450.634:55962): avc: denied { mount } for pid=9763 comm="syz.1.1120" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 453.422810][ T40] audit: type=1400 audit(450.653:55963): avc: denied { mounton } for pid=9763 comm="syz.1.1120" path="/287/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 453.439852][ T9767] loop6: detected capacity change from 0 to 7 [ 453.460769][ T9767] Dev loop6: unable to read RDB block 7 [ 453.462989][ T9767] loop6: unable to read partition table [ 453.462996][ T40] audit: type=1400 audit(450.691:55964): avc: denied { unmount } for pid=6041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 453.465325][ T9767] loop6: partition table beyond EOD, truncated [ 453.477286][ T9767] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.490477][ T9769] macvtap0: entered promiscuous mode [ 453.559217][ T40] audit: type=1400 audit(450.784:55965): avc: denied { write } for pid=9772 comm="syz.2.1125" path="socket:[31068]" dev="sockfs" ino=31068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 453.616959][ T9779] netlink: 'syz.2.1126': attribute type 10 has an invalid length. [ 453.622007][ T9779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.624870][ T9779] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 453.630857][ T9780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.646662][ T9780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.657490][ T6070] SELinux: failure in sel_netif_sid_slow(), invalid network interface (20) [ 453.664580][ T9780] bond0: (slave batadv0): Releasing backup interface [ 453.669680][ T9775] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 453.708316][ T9786] binder: 9784:9786 ioctl 400c620e 2000000000c0 returned -22 [ 453.713841][ T9786] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 453.775778][ T40] audit: type=1400 audit(450.981:55966): avc: denied { ioctl } for pid=9784 comm="syz.0.1127" path="socket:[31775]" dev="sockfs" ino=31775 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 453.816888][ T9789] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 453.819347][ T9789] netlink: 600 bytes leftover after parsing attributes in process `syz.1.1129'. [ 453.853404][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 453.857785][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1131'. [ 453.865138][ T9793] geneve2: entered promiscuous mode [ 453.867435][ T9793] geneve2: entered allmulticast mode [ 453.873284][ T7858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.878782][ T7858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.881430][ T7858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.884339][ T7858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.901640][ T40] audit: type=1400 audit(451.102:55967): avc: denied { name_bind 0x1000000 } for pid=9794 comm="syz.2.1132" path="socket:[31074]" dev="sockfs" ino=31074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 453.903395][ T9794] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 454.067499][ T9817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=9817 comm=syz.0.1139 [ 454.095600][ T9824] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 454.098064][ T9824] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1141'. [ 454.102965][ T9825] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 454.129060][ T9827] fuse: Unknown parameter '' [ 454.129995][ T9828] fuse: Unknown parameter '' [ 454.492247][ T9849] vivid-003: disconnect [ 454.496906][ T6035] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 454.498605][ T9848] vivid-003: reconnect [ 454.556726][ T9853] netlink: 'syz.1.1150': attribute type 4 has an invalid length. [ 454.658951][ T9817] syz.0.1139 (9817): drop_caches: 2 [ 454.669347][ T6035] usb 7-1: Using ep0 maxpacket: 8 [ 454.672804][ T6035] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.676413][ T6035] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.680248][ T6035] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.683860][ T6035] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.688287][ T6035] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.693948][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.801858][ T9862] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 454.804389][ T9862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.917757][ T6035] usb 7-1: GET_CAPABILITIES returned 0 [ 454.920302][ T6035] usbtmc 7-1:16.0: can't read capabilities [ 455.107840][ T9866] tipc: Can't bind to reserved service type 0 [ 455.143828][ T6035] usb 7-1: USB disconnect, device number 17 [ 455.935043][ T9891] input: syz1 as /devices/virtual/input/input19 [ 456.059436][ T9898] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 456.062190][ T9898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.321477][ T9910] openvswitch: netlink: Message has 8 unknown bytes. [ 456.345439][ T9911] netlink: 'syz.3.1166': attribute type 1 has an invalid length. [ 456.366209][ T9911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.373514][ T9911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9911 comm=syz.3.1166 [ 456.582548][ T9919] program syz.1.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.145483][ T9928] __nla_validate_parse: 7 callbacks suppressed [ 457.145497][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 457.241862][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 457.241879][ T40] audit: type=1400 audit(454.217:55973): avc: denied { map } for pid=9931 comm="syz.3.1173" path="socket:[31863]" dev="sockfs" ino=31863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 457.288725][ T9935] cgroup: fork rejected by pids controller in /syz3 [ 457.560409][ T40] audit: type=1400 audit(454.516:55974): avc: denied { mounton } for pid=9985 comm="syz.0.1179" path="/348/file0" dev="autofs" ino=31883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 457.665645][ T9925] syz.1.1171: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 457.671291][ T9925] CPU: 2 UID: 0 PID: 9925 Comm: syz.1.1171 Not tainted syzkaller #0 PREEMPT(full) [ 457.671307][ T9925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 457.671314][ T9925] Call Trace: [ 457.671320][ T9925] [ 457.671324][ T9925] dump_stack_lvl+0x16c/0x1f0 [ 457.671357][ T9925] warn_alloc+0x248/0x3a0 [ 457.671374][ T9925] ? __pfx_warn_alloc+0x10/0x10 [ 457.671391][ T9925] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 457.671407][ T9925] ? __vmalloc_node_noprof+0xad/0xf0 [ 457.671425][ T9925] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 457.671446][ T9925] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 457.671465][ T9925] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.671497][ T9925] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 457.671515][ T9925] vmalloc_user_noprof+0x9e/0xe0 [ 457.671532][ T9925] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 457.671548][ T9925] vb2_vmalloc_alloc+0x135/0x3f0 [ 457.671564][ T9925] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 457.671579][ T9925] __vb2_queue_alloc+0x8c9/0x1280 [ 457.671601][ T9925] vb2_core_reqbufs+0xa90/0xfe0 [ 457.671620][ T9925] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 457.671643][ T9925] __vb2_init_fileio+0x3f1/0x1100 [ 457.671658][ T9925] ? __futex_wait+0x24c/0x2f0 [ 457.671671][ T9925] ? __pfx___futex_wait+0x10/0x10 [ 457.671686][ T9925] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.671704][ T9925] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.671717][ T9925] __vb2_perform_fileio+0x9c2/0x1660 [ 457.671736][ T9925] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 457.671757][ T9925] vb2_fop_write+0x207/0x3f0 [ 457.671773][ T9925] v4l2_write+0x229/0x360 [ 457.671784][ T9925] ? __pfx_v4l2_write+0x10/0x10 [ 457.671794][ T9925] vfs_write+0x29d/0x11d0 [ 457.671809][ T9925] ? __pfx_vfs_write+0x10/0x10 [ 457.671819][ T9925] ? find_held_lock+0x2b/0x80 [ 457.671834][ T9925] ? __fget_files+0x204/0x3c0 [ 457.671848][ T9925] ? __fget_files+0x20e/0x3c0 [ 457.671864][ T9925] ksys_write+0x12a/0x250 [ 457.671875][ T9925] ? __pfx_ksys_write+0x10/0x10 [ 457.671887][ T9925] ? fd_install+0x244/0x750 [ 457.671901][ T9925] do_syscall_64+0xcd/0x4c0 [ 457.671915][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.671927][ T9925] RIP: 0033:0x7f06cbd8ebe9 [ 457.671938][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.671949][ T9925] RSP: 002b:00007f06ccb38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.671960][ T9925] RAX: ffffffffffffffda RBX: 00007f06cbfb5fa0 RCX: 00007f06cbd8ebe9 [ 457.671967][ T9925] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000008 [ 457.671973][ T9925] RBP: 00007f06cbe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.671980][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.671986][ T9925] R13: 00007f06cbfb6038 R14: 00007f06cbfb5fa0 R15: 00007ffc90a6e4e8 [ 457.672000][ T9925] [ 457.764283][ T9925] Mem-Info: [ 457.765315][ T9925] active_anon:21834 inactive_anon:0 isolated_anon:0 [ 457.765315][ T9925] active_file:17367 inactive_file:3538 isolated_file:0 [ 457.765315][ T9925] unevictable:1768 dirty:227 writeback:0 [ 457.765315][ T9925] slab_reclaimable:13235 slab_unreclaimable:67310 [ 457.765315][ T9925] mapped:24192 shmem:18730 pagetables:1326 [ 457.765315][ T9925] sec_pagetables:309 bounce:0 [ 457.765315][ T9925] kernel_misc_reclaimable:0 [ 457.765315][ T9925] free:393959 free_pcp:15496 free_cma:0 [ 457.779230][ T9925] Node 0 active_anon:87296kB inactive_anon:0kB active_file:69468kB inactive_file:14012kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96768kB dirty:908kB writeback:0kB shmem:71384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14800kB pagetables:4384kB sec_pagetables:1236kB all_unreclaimable? yes Balloon:0kB [ 457.789699][ T9925] Node 1 active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:176kB pagetables:812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 457.798936][ T9925] Node 0 DMA free:5236kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:124kB free_cma:0kB [ 457.807925][ T9925] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 457.809815][ T9925] Node 0 DMA32 free:92816kB boost:61900kB min:89416kB low:96292kB high:103168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87240kB inactive_anon:0kB active_file:69468kB inactive_file:14012kB unevictable:3536kB writepending:908kB present:2080628kB managed:1263488kB mlocked:0kB bounce:0kB free_pcp:32060kB local_pcp:9660kB free_cma:0kB [ 457.820237][ T9925] lowmem_reserve[]: 0 0 0 0 0 [ 457.822180][ T9925] Node 1 Normal free:1479616kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:27724kB local_pcp:1820kB free_cma:0kB [ 457.832100][ T9925] lowmem_reserve[]: 0 0 0 0 0 [ 457.833906][ T9925] Node 0 DMA: 3*4kB (UM) 5*8kB (UM) 4*16kB (UME) 4*32kB (UME) 4*64kB (ME) 5*128kB (UME) 4*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 0*4096kB = 5236kB [ 457.839377][ T9925] Node 0 DMA32: 1658*4kB (UME) 1073*8kB (UME) 532*16kB (UME) 389*32kB (UME) 170*64kB (UME) 118*128kB (UME) 72*256kB (UME) 24*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 92880kB [ 457.845203][ T9925] Node 1 Normal: 6*4kB (UE) 13*8kB (UE) 2*16kB (U) 2*32kB (UE) 0*64kB 3*128kB (UME) 3*256kB (UME) 3*512kB (UM) 2*1024kB (UE) 8*2048kB (UME) 356*4096kB (UM) = 1479520kB [ 457.850594][ T9925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.853923][ T9925] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 457.856877][ T9925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.859643][ T9925] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.862412][ T9925] 39640 total pagecache pages [ 457.864159][ T9925] 0 pages in swap cache [ 457.865848][ T9925] Free swap = 124996kB [ 457.867605][ T9925] Total swap = 124996kB [ 457.869394][ T9925] 1048443 pages RAM [ 457.871083][ T9925] 0 pages HighMem/MovableOnly [ 457.873109][ T9925] 283258 pages reserved [ 457.874991][ T9925] 0 pages cma reserved [ 458.081633][ T9999] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1184'. [ 458.085705][ T9999] netlink: zone id is out of range [ 458.088005][ T9999] netlink: get zone limit has 8 unknown bytes [ 458.219028][ T40] audit: type=1400 audit(455.143:55975): avc: denied { create } for pid=10009 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 458.231499][ T40] audit: type=1400 audit(455.152:55976): avc: denied { ioctl } for pid=10009 comm="syz.0.1187" path="socket:[31930]" dev="sockfs" ino=31930 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 458.407123][ T40] audit: type=1400 audit(455.311:55977): avc: denied { watch_mount } for pid=10017 comm="syz.3.1190" path="/197" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 458.546328][ T40] audit: type=1400 audit(455.442:55978): avc: denied { unmount } for pid=6030 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 458.577562][T10032] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1194'. [ 458.678360][ T40] audit: type=1400 audit(455.573:55979): avc: denied { read } for pid=10041 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 458.678500][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 458.699080][ T40] audit: type=1400 audit(455.592:55980): avc: denied { ioctl } for pid=10038 comm="syz.0.1198" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 458.740256][T10050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1202'. [ 458.819968][T10054] new mount options do not match the existing superblock, will be ignored [ 458.826850][T10054] new mount options do not match the existing superblock, will be ignored [ 458.866678][T10058] dummy0: entered promiscuous mode [ 459.548770][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 460.279422][T10087] syz.0.1215 (10087): drop_caches: 1 [ 460.281346][T10088] syz.0.1215 (10088): drop_caches: 1 [ 460.379708][T10087] syz.0.1215 (10087): drop_caches: 1 [ 461.252282][T10119] cgroup: Unknown subsys name 'cpuset' [ 461.286654][T10121] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 462.620081][ T40] audit: type=1400 audit(459.250:55981): avc: denied { setattr } for pid=10142 comm="syz.1.1234" name="" dev="pipefs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 462.663662][ T40] audit: type=1400 audit(459.287:55982): avc: denied { getopt } for pid=10144 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 462.673415][ T40] audit: type=1400 audit(459.296:55983): avc: denied { map } for pid=10144 comm="syz.1.1235" path="socket:[31288]" dev="sockfs" ino=31288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 462.685023][ T40] audit: type=1400 audit(459.296:55984): avc: denied { read accept } for pid=10144 comm="syz.1.1235" path="socket:[31288]" dev="sockfs" ino=31288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 462.694800][ T40] audit: type=1400 audit(459.296:55985): avc: denied { setopt } for pid=10144 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 462.703305][ T40] audit: type=1400 audit(459.296:55986): avc: denied { ioctl } for pid=10144 comm="syz.1.1235" path="socket:[34084]" dev="sockfs" ino=34084 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 462.720244][T10147] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 462.766349][T10148] binder: 10146:10148 ioctl c0306201 0 returned -14 [ 462.769876][T10148] binder: 10146:10148 ioctl 4018620d 0 returned -22 [ 463.211853][ T40] audit: type=1400 audit(459.811:55987): avc: denied { lock } for pid=10160 comm="syz.3.1242" path="/208/file0/cgroup.kill" dev="9p" ino=35913928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 463.664283][T10167] kvm: kvm [10166]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 463.667455][T10167] kvm: kvm [10166]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 463.980318][T10180] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 463.984913][T10180] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 464.057525][T10186] netlink: 'syz.1.1251': attribute type 4 has an invalid length. [ 465.007321][T10195] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 465.011461][T10195] SELinux: failed to load policy [ 465.014842][ T40] audit: type=1400 audit(461.494:55988): avc: denied { name_bind } for pid=10194 comm="syz.0.1254" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 465.098992][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 465.103379][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 465.120316][T10203] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1258'. [ 465.340134][T10211] netlink: 'syz.3.1261': attribute type 39 has an invalid length. [ 465.398665][ T40] audit: type=1400 audit(461.850:55989): avc: denied { lock } for pid=10209 comm="syz.3.1261" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.698225][T10227] nfs: Unknown parameter '~ X®µ?[½z´8¶ku•÷Š\·ûØ(#CR¨¿EZ”dh‡%ä Qºí»/wl0v9' [ 465.705682][T10227] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 465.709266][T10227] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 465.714647][T10227] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 465.718828][T10227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 465.757894][T10229] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 465.763028][T10229] block device autoloading is deprecated and will be removed. [ 465.818871][ T40] audit: type=1400 audit(462.243:55990): avc: denied { write } for pid=10233 comm="syz.2.1271" name="cpuacct.usage_sys" dev="9p" ino=35913913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 465.882723][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 465.960707][T10237] netlink: 'syz.3.1272': attribute type 22 has an invalid length. [ 465.964241][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 465.976777][T10237] netlink: 'syz.3.1272': attribute type 22 has an invalid length. [ 465.980127][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 466.213145][T10248] netlink: 'syz.0.1276': attribute type 64 has an invalid length. [ 466.219430][T10248] netlink: 'syz.0.1276': attribute type 4 has an invalid length. [ 466.222689][T10248] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1276'. [ 466.905134][T10254] netlink: 'syz.3.1280': attribute type 21 has an invalid length. [ 466.907597][T10254] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1280'. [ 467.036761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 467.196331][T10252] syz.0.1278 (10252): drop_caches: 1 [ 467.207245][T10267] syz.0.1278 (10267): drop_caches: 1 [ 467.242240][T10275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1284'. [ 467.245528][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 467.280714][T10252] syz.0.1278 (10252): drop_caches: 1 [ 467.307815][T10281] tipc: Started in network mode [ 467.309364][T10281] tipc: Node identity , cluster identity 4711 [ 467.311256][T10281] tipc: Failed to obtain node identity [ 467.312936][T10281] tipc: Enabling of bearer rejected, failed to enable media [ 467.316996][T10281] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 467.351533][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 467.398333][T10287] usb usb8: usbfs: process 10287 (syz.1.1290) did not claim interface 0 before use [ 467.462718][T10283] team0: Port device team_slave_0 removed [ 467.470283][T10299] bond0: Error: Cannot enslave bond to itself. [ 467.638297][T10318] use of bytesused == 0 is deprecated and will be removed in the future, [ 467.641199][T10318] use the actual size instead. [ 467.670826][T10308] syz.1.1294 (10308): drop_caches: 2 [ 467.799864][T10328] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 467.902903][T10340] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 467.909466][T10340] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 467.990542][T10353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6936 sclass=netlink_route_socket pid=10353 comm=syz.1.1305 [ 468.030538][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 468.030554][ T40] audit: type=1400 audit(464.310:55993): avc: denied { setattr } for pid=10354 comm="syz.2.1307" path="socket:[32429]" dev="sockfs" ino=32429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 468.098055][ T40] audit: type=1400 audit(464.385:55994): avc: denied { read } for pid=10356 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 468.187875][T10365] cgroup: Invalid name [ 468.622865][T10387] erofs (device nbd0): cannot find valid erofs superblock [ 468.651129][ T9070] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 468.821924][ T9070] usb 7-1: Invalid ep0 maxpacket: 64 [ 468.859357][T10395] tap0: tun_chr_ioctl cmd 1074025672 [ 468.861805][T10395] tap0: ignored: set checksum enabled [ 468.899017][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.909286][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.922845][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.932342][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.940295][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.949425][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.958766][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.961010][ T9070] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 468.968964][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.970980][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.976942][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.988420][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 468.991238][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.001623][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.015035][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.017668][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.028086][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.030751][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.041707][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.054547][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.055318][T10401] openvswitch: netlink: Duplicate or invalid key (type 0). [ 469.059573][T10401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.063925][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.066090][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.068274][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.073732][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.084544][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.086513][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.088375][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.090523][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.092465][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.101631][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.109464][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.111596][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.117542][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.123142][ T9070] usb 7-1: Invalid ep0 maxpacket: 64 [ 469.127013][ T9070] usb usb7-port1: attempt power cycle [ 469.141937][T10399] nfs: Unknown parameter '3‘¥ýŸ:ï^‚7lock' [ 469.179170][T10406] xfrm0 speed is unknown, defaulting to 1000 [ 469.181860][T10406] xfrm0 speed is unknown, defaulting to 1000 [ 469.189038][T10406] xfrm0 speed is unknown, defaulting to 1000 [ 469.194116][T10406] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 469.201748][T10406] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 469.224592][T10406] xfrm0 speed is unknown, defaulting to 1000 [ 469.227691][T10406] xfrm0 speed is unknown, defaulting to 1000 [ 469.232055][T10406] xfrm0 speed is unknown, defaulting to 1000 [ 469.236888][T10406] xfrm0 speed is unknown, defaulting to 1000 [ 469.277359][ T40] audit: type=1400 audit(465.479:55995): avc: denied { create } for pid=10411 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 469.285172][ T40] audit: type=1400 audit(465.479:55996): avc: denied { bind } for pid=10411 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 469.286519][T10412] block nbd3: Attempted send on invalid socket [ 469.295444][T10412] blk_print_req_error: 6 callbacks suppressed [ 469.295456][T10412] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.300248][T10412] block nbd3: Attempted send on invalid socket [ 469.302225][T10412] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.307772][T10412] Mount JFS Failure: -5 [ 469.309723][T10412] jfs_mount failed w/return code = -5 [ 469.319675][ T40] audit: type=1400 audit(465.517:55997): avc: denied { ioctl } for pid=10411 comm="syz.3.1326" path="socket:[31527]" dev="sockfs" ino=31527 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 469.330388][ T40] audit: type=1400 audit(465.517:55998): avc: denied { connect } for pid=10411 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 469.506219][ T9070] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 469.528258][ T9070] usb 7-1: Invalid ep0 maxpacket: 64 [ 469.569552][ T40] audit: type=1400 audit(465.751:55999): avc: denied { lock } for pid=10416 comm="syz.0.1328" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=34420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 469.677195][ T9070] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 469.698988][ T9070] usb 7-1: Invalid ep0 maxpacket: 64 [ 469.701282][ T9070] usb usb7-port1: unable to enumerate USB device [ 470.301692][ T40] audit: type=1400 audit(466.443:56000): avc: denied { append } for pid=10419 comm="syz.3.1329" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 470.439427][T10429] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 470.938364][T10446] 9pnet_fd: Insufficient options for proto=fd [ 471.118108][ T40] audit: type=1400 audit(467.200:56001): avc: denied { remount } for pid=10455 comm="syz.0.1341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 471.161677][T10458] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 471.207400][T10461] __nla_validate_parse: 7 callbacks suppressed [ 471.207417][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 471.258037][T10463] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 471.261606][T10463] overlayfs: failed to set xattr on upper [ 471.264365][T10463] overlayfs: ...falling back to redirect_dir=nofollow. [ 471.267819][T10463] overlayfs: ...falling back to index=off. [ 471.270766][T10463] overlayfs: ...falling back to uuid=null. [ 471.279323][T10463] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 471.558723][ T6070] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 471.597890][T10467] syz.1.1346 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 471.751294][ T6070] usb 5-1: Using ep0 maxpacket: 8 [ 471.755796][T10480] kAFS: Can only specify source 'none' with -o dyn [ 471.756093][ T6070] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.760802][ T6070] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 471.766534][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.772259][ T6070] usb 5-1: config 0 descriptor?? [ 471.847448][T10491] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 471.893186][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 471.897577][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 471.949422][ T40] audit: type=1400 audit(467.977:56002): avc: denied { ioctl } for pid=10508 comm="syz.3.1356" path="socket:[34510]" dev="sockfs" ino=34510 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 471.967760][T10511] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1357'. [ 471.970993][T10511] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 471.972534][T10509] can0: slcan on ptm0. [ 472.028749][T10514] ------------[ cut here ]------------ [ 472.031444][T10514] WARNING: CPU: 2 PID: 10514 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 472.035950][T10514] Modules linked in: [ 472.037809][T10514] CPU: 2 UID: 0 PID: 10514 Comm: syz.2.1358 Not tainted syzkaller #0 PREEMPT(full) [ 472.044045][T10514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.048893][T10514] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 472.052587][T10514] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f bd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 2d aa 7e 0e 00 75 0b c6 05 24 aa 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 472.061910][T10514] RSP: 0018:ffffc9000317f7d0 EFLAGS: 00010246 [ 472.064506][T10514] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 472.067815][T10514] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 472.070504][T10514] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 472.074333][T10514] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 472.077318][T10514] R13: 1ffff9200062ff0f R14: ffffffff9ae7ba24 R15: 0000000000000015 [ 472.080545][T10514] FS: 00007fda900186c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 472.084680][T10514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.087430][T10514] CR2: 000000110c34a0a2 CR3: 0000000028b80000 CR4: 0000000000352ef0 [ 472.090710][T10514] Call Trace: [ 472.092070][T10514] [ 472.093608][T10514] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.095919][T10514] ? is_bpf_text_address+0x94/0x1a0 [ 472.097942][T10514] ? kernel_text_address+0x8d/0x100 [ 472.100036][T10514] ? __kernel_text_address+0xd/0x40 [ 472.102277][T10514] ? unwind_get_return_address+0x59/0xa0 [ 472.104744][T10514] ? arch_stack_walk+0xa6/0x100 [ 472.106631][T10514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 472.108947][T10514] ? stack_depot_save_flags+0x29/0x9c0 [ 472.111034][T10514] ? __lock_acquire+0xb97/0x1ce0 [ 472.112959][T10514] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.115342][T10514] ? policy_nodemask+0xea/0x4e0 [ 472.117264][T10514] alloc_pages_mpol+0x1fb/0x550 [ 472.119187][T10514] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 472.121303][T10514] ? drm_syncobj_array_find+0x35/0x3c0 [ 472.123440][T10514] ___kmalloc_large_node+0xed/0x160 [ 472.125544][T10514] ? drm_syncobj_array_find+0x35/0x3c0 [ 472.127602][T10514] __kmalloc_large_node_noprof+0x1c/0x70 [ 472.129792][T10514] ? avc_has_extended_perms+0x47c/0x1090 [ 472.132054][T10514] __kmalloc_noprof.cold+0xc/0x61 [ 472.134221][T10514] drm_syncobj_array_find+0x35/0x3c0 [ 472.136658][T10514] ? kasan_quarantine_put+0x10a/0x240 [ 472.139224][T10514] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 472.142261][T10514] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 472.144992][T10514] ? drm_dev_exit+0x41/0x60 [ 472.146876][T10514] drm_ioctl_kernel+0x1f4/0x3e0 [ 472.148808][T10514] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 472.151536][T10514] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 472.153768][T10514] drm_ioctl+0x5c9/0xc30 [ 472.155491][T10514] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 472.158305][T10514] ? __pfx_drm_ioctl+0x10/0x10 [ 472.160445][T10514] ? selinux_file_ioctl+0x180/0x270 [ 472.162709][T10514] ? selinux_file_ioctl+0xb4/0x270 [ 472.164795][T10514] ? __pfx_drm_ioctl+0x10/0x10 [ 472.166716][T10514] __x64_sys_ioctl+0x18b/0x210 [ 472.168711][T10514] do_syscall_64+0xcd/0x4c0 [ 472.170537][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.172891][T10514] RIP: 0033:0x7fda8f18ebe9 [ 472.174692][T10514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.183228][T10514] RSP: 002b:00007fda90018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.186485][T10514] RAX: ffffffffffffffda RBX: 00007fda8f3b5fa0 RCX: 00007fda8f18ebe9 [ 472.189614][T10514] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 472.192615][T10514] RBP: 00007fda8f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.195489][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.198550][T10514] R13: 00007fda8f3b6038 R14: 00007fda8f3b5fa0 R15: 00007ffe4ddc3e88 [ 472.201759][T10514] [ 472.203060][T10514] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 472.206534][T10514] CPU: 2 UID: 0 PID: 10514 Comm: syz.2.1358 Not tainted syzkaller #0 PREEMPT(full) [ 472.211444][T10514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.216679][T10514] Call Trace: [ 472.218126][T10514] [ 472.219400][T10514] dump_stack_lvl+0x3d/0x1f0 [ 472.221258][T10514] vpanic+0x6e8/0x7a0 [ 472.222869][T10514] ? __pfx_vpanic+0x10/0x10 [ 472.224658][T10514] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 472.227024][T10514] panic+0xca/0xd0 [ 472.228516][T10514] ? __pfx_panic+0x10/0x10 [ 472.230305][T10514] check_panic_on_warn+0xab/0xb0 [ 472.232275][T10514] __warn+0xf6/0x3c0 [ 472.233834][T10514] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 472.236225][T10514] report_bug+0x3c3/0x580 [ 472.237931][T10514] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 472.240345][T10514] handle_bug+0x184/0x210 [ 472.242119][T10514] exc_invalid_op+0x17/0x50 [ 472.243923][T10514] asm_exc_invalid_op+0x1a/0x20 [ 472.245866][T10514] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 472.248633][T10514] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f bd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 2d aa 7e 0e 00 75 0b c6 05 24 aa 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 472.256342][T10514] RSP: 0018:ffffc9000317f7d0 EFLAGS: 00010246 [ 472.258803][T10514] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 472.261926][T10514] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 472.265101][T10514] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 472.268311][T10514] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 472.271714][T10514] R13: 1ffff9200062ff0f R14: ffffffff9ae7ba24 R15: 0000000000000015 [ 472.275293][T10514] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.278154][T10514] ? is_bpf_text_address+0x94/0x1a0 [ 472.280307][T10514] ? kernel_text_address+0x8d/0x100 [ 472.282549][T10514] ? __kernel_text_address+0xd/0x40 [ 472.284662][T10514] ? unwind_get_return_address+0x59/0xa0 [ 472.286965][T10514] ? arch_stack_walk+0xa6/0x100 [ 472.288953][T10514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 472.291570][T10514] ? stack_depot_save_flags+0x29/0x9c0 [ 472.293777][T10514] ? __lock_acquire+0xb97/0x1ce0 [ 472.295878][T10514] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.298313][T10514] ? policy_nodemask+0xea/0x4e0 [ 472.300227][T10514] alloc_pages_mpol+0x1fb/0x550 [ 472.302228][T10514] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 472.304476][T10514] ? drm_syncobj_array_find+0x35/0x3c0 [ 472.306780][T10514] ___kmalloc_large_node+0xed/0x160 [ 472.308896][T10514] ? drm_syncobj_array_find+0x35/0x3c0 [ 472.311132][T10514] __kmalloc_large_node_noprof+0x1c/0x70 [ 472.313421][T10514] ? avc_has_extended_perms+0x47c/0x1090 [ 472.315783][T10514] __kmalloc_noprof.cold+0xc/0x61 [ 472.317939][T10514] drm_syncobj_array_find+0x35/0x3c0 [ 472.320140][T10514] ? kasan_quarantine_put+0x10a/0x240 [ 472.322334][T10514] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 472.324828][T10514] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 472.327563][T10514] ? drm_dev_exit+0x41/0x60 [ 472.329518][T10514] drm_ioctl_kernel+0x1f4/0x3e0 [ 472.331774][T10514] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 472.335241][T10514] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 472.337627][T10514] drm_ioctl+0x5c9/0xc30 [ 472.339446][T10514] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 472.342312][T10514] ? __pfx_drm_ioctl+0x10/0x10 [ 472.344342][T10514] ? selinux_file_ioctl+0x180/0x270 [ 472.346550][T10514] ? selinux_file_ioctl+0xb4/0x270 [ 472.348712][T10514] ? __pfx_drm_ioctl+0x10/0x10 [ 472.350752][T10514] __x64_sys_ioctl+0x18b/0x210 [ 472.352767][T10514] do_syscall_64+0xcd/0x4c0 [ 472.354650][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.357094][T10514] RIP: 0033:0x7fda8f18ebe9 [ 472.358979][T10514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.367030][T10514] RSP: 002b:00007fda90018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.370803][T10514] RAX: ffffffffffffffda RBX: 00007fda8f3b5fa0 RCX: 00007fda8f18ebe9 [ 472.374145][T10514] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 472.377478][T10514] RBP: 00007fda8f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.380813][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.384110][T10514] R13: 00007fda8f3b6038 R14: 00007fda8f3b5fa0 R15: 00007ffe4ddc3e88 [ 472.387447][T10514] [ 472.389589][T10514] Kernel Offset: disabled [ 472.391408][T10514] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:03:56 Registers: info registers vcpu 0 CPU#0 RAX=00000008000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000008 RSI=00000000000000fb RDI=0000000000000008 RBP=0000000000000004 RSP=ffffc90003f0f7e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff88806a43b5c0 R15=0000000000000002 RIP=ffffffff81698748 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558c5fe500 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f06cbfb6080 CR3=000000003276d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000fefce002 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc90a6e9f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc90a6e9f6 00007ffc90a6e9fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06cbe12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06cbe12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06cbe12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06cbe12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06cbe12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06cbe12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06cbf874a8 00007f06cbf874a0 00007f06cbf87498 00007f06cbf87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06ccaed100 00007f06cbf87460 00007f06cbf87478 00007f06cbf874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06cbf874b8 00007f06cbf874b0 00007f06cbf874a8 00007f06cbf874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffff1100aab8a5c RBX=ffff888055141050 RCX=dffffc0000000000 RDX=0000000000000000 RSI=dffffc0000000000 RDI=0000000000000000 RBP=ffff8880555c52ce RSP=ffffc90005cd7bd8 R8 =0000000000000005 R9 =0000000000000017 R10=0000000000000018 R11=0000000000000000 R12=0000000000000018 R13=0000000000000000 R14=ffff8880555c52e4 R15=0000000000000018 RIP=ffffffff8b5b969e RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f06ccb16f98 CR3=000000003228b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 054e000000020000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 022c000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 054b000000200000 0001000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003c0000001c0000 00540000006c0000 00840000009c0000 00b0000000c40000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00dc000000f40000 01080000011c0000 01340000014c0000 0164000001840000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01a8000000120000 0000000000000000 0165000000000773 5940000000140000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001c0000000e0014 000c000000080004 001c000e00000000 0000000000000000 ZMM24=dc7f0a3bdc7f0a3b dc7f0a3bdc7f0a3b dc7f0a3bdc7f0a3b dc7f0a3bdc7f0a3b dc7f0a3bdc7f0a3b dc7f0a3bdc7f0a3b dc7f0a3bdc7f0a3b dc7f0a3bdc7f0a3b ZMM25=1b4628f31b4628f3 1b4628f31b4628f3 1b4628f31b4628f3 1b4628f31b4628f3 1b4628f31b4628f3 1b4628f31b4628f3 1b4628f31b4628f3 1b4628f31b4628f3 ZMM26=aae0d79baae0d79b aae0d79baae0d79b aae0d79baae0d79b aae0d79baae0d79b aae0d79baae0d79b aae0d79baae0d79b aae0d79baae0d79b aae0d79baae0d79b ZMM27=6cf0aec16cf0aec1 6cf0aec16cf0aec1 6cf0aec16cf0aec1 6cf0aec16cf0aec1 6cf0aec16cf0aec1 6cf0aec16cf0aec1 6cf0aec16cf0aec1 6cf0aec16cf0aec1 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ab090000ab090000 ab090000ab090000 ab090000ab090000 ab090000ab090000 ab090000ab090000 ab090000ab090000 ab090000ab090000 ab090000ab090000 info registers vcpu 2 CPU#2 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc9000317f140 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fda900186c0 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c34a0a2 CR3=0000000028b80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4ddc4396 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4ddc4396 00007ffe4ddc439c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda8f212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda8f212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda8f212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda8f212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda8f212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda8f212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000fb5c7 RBX=0000000000000003 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50218 RDI=ffffffff8c162900 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f06ccb37f98 CR3=0000000053b9d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15c11620 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15c117a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15c117a6 00007ffe15c117ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0724812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0724812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0724812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0724812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0724812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0724812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000