last executing test programs: 41.919043469s ago: executing program 2 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07b4581e867431d89300020000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000140)=0x1, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000180)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, 0x0, 0x0, 0x4, 0x0, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000900)={{0xffffffffffffffff, &(0x7f0000000780)='\'\x00', 0x4000, &(0x7f00000007c0)={@align=0xdc49, {0x0, 0x4000, 0x2, 0x7}}, 0x1, &(0x7f0000000800), &(0x7f0000000840)=0x5}, {[0xa2f1, 0x9, 0x1, 0x2]}, 0xd2a, 0x2c, &(0x7f0000000880)=""/44}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000440)="44b6cdde", 0x24, 0x50, &(0x7f0000000280)={0x11, 0x19, r8, 0x1, 0x8, 0x6, @multicast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "8b893b21c1f3344a"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x3c}}, 0x0) write(r0, &(0x7f0000000600)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./pipe\x00', &(0x7f00000008c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl(r0, 0x7, &(0x7f0000000000)="37bcd34470c1392088e327fd35afd61a783cc2bda6e8181e650437c286c28f4d3cba253f09b7a08d1390880ca69a695461188c877c03593d54d6eeb44c3df2456deadea4c0aa4b9faacccb0ec1f295") 41.818915275s ago: executing program 2 (id=69): connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='sessname=s0 device_path=/', 0x19) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000480)={{0x80}, 'port0\x00', 0xbf, 0xc0006, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x6}) (async) sendto$inet(r1, &(0x7f00000001c0)="2a201155b03eca948e047a01403ba1adb77a3a60577124da305d580c5d922f226e23c011a856a0346a5ae59edc6c4ddd557041a6a2d50012a1e00a5bac7c08be1ac0aa124800fbf0d41a5d9eb3ef3f34b3aaa1cb599c0588a852e90b372b132b6aab9cdf2ab6a5cf10735c82a789fffbd98f72636c75a080df7384bfdf64bfdc", 0x80, 0x800, &(0x7f0000000240)={0x2, 0x4e20, @private=0xa010100}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x8, 0xb, 0x8000, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x1, 0x1, 0xef}}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000340)={0xa, 0x4}, 0xc) (async) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000280)={0x900}) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1133) 41.76070833s ago: executing program 2 (id=70): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2={0xfc, 0x2, '\x00', 0x20}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r1}, &(0x7f0000000000)=""/192, 0xc0, &(0x7f00000000c0)={&(0x7f0000000340)={'wp384-generic\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7", 0x1d}) keyctl$unlink(0x9, r0, 0xfffffffffffffffa) 41.760188772s ago: executing program 2 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_selinux(&(0x7f00000002c0)='./file7/file0\x00', &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f00000001c0)='./bus\x00') getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000500)=""/92, &(0x7f0000004840)=0x5c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002680)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004780)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x20, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000004100050101000000000000000301f300000000001c000100060006000800000010000700"], 0x48}, 0x1, 0x0, 0x0, 0x80030}, 0x2000c840) socket$nl_generic(0x10, 0x3, 0x10) (async) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) lsetxattr$security_selinux(&(0x7f00000002c0)='./file7/file0\x00', &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000500)=""/92, &(0x7f0000004840)=0x5c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x1ac) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file7/file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2c41, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r1, &(0x7f0000002680)="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", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r1, &(0x7f0000004780)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x20, 0x100}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x2c41, 0x0) (async) flock(r3, 0x2) (async) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000004100050101000000000000000301f300000000001c000100060006000800000010000700"], 0x48}, 0x1, 0x0, 0x0, 0x80030}, 0x2000c840) (async) 38.59018824s ago: executing program 2 (id=94): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x7, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7888, 0x40, 0x3, 0x9}}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe, 0x8, 0x1, 0x3}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000380), 0x56) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000400)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="27030200dc0f14000e0007000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000010000000", 0x2e}], 0x1}, 0x4005) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000006c0)=0x2) ioctl$TIOCSSOFTCAR(r5, 0x5412, &(0x7f0000000700)=0x13) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x9, &(0x7f00000005c0)=@raw=[@map_val, @cb_func={0x18, 0x2}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, @alu={0x4, 0x0, 0x2, 0x5, 0x3, 0x8, 0x1}, @alu={0x7, 0x0, 0xc, 0x0, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000640)='GPL\x00', 0x5, 0xab, &(0x7f0000000740)=""/171, 0x41100, 0x1, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x9, 0x4, 0x3}, 0x10, 0x29f26, 0xffffffffffffffff, 0x6, &(0x7f0000000880)=[0xffffffffffffffff], &(0x7f00000008c0)=[{0x0, 0x4, 0xf, 0x1}, {0x3, 0x3, 0xc, 0x8}, {0x2, 0x3, 0x1, 0x3}, {0x0, 0x1, 0x6, 0x1}, {0x0, 0x5, 0x3, 0x1}, {0x3, 0x3, 0x5, 0x5}], 0x10, 0x8}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r6, 0x0, 0xfffffee2) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000006a0000002dbd7000fbdbdf25020000000000000008000500", @ANYRES32=r1, @ANYBLOB="5844a8676f6d23498d1ceef8d47a339f23e7c97c7087b7aec2dce7b2589bdc7969db45c02005fb57db5f4b362f5ba7b6b8068d3778d4ddc414f8ef985577e7345529f61e99454c127fd6cec84824d732f106fd7f0c37710596ec464705f6d1fb2933886db03818452e1610dc3e49576b5439f2d54b66ef8000faa0cd06b96f104eb36e664b52c7fc3bdc6c8ed505a254779c5b6726bc4475b9a19ab5c5471067162d7baaa8c034c37b9ba015e79d9f1eb790249fcaa82d5685e8a81184decae7bab16284953b529711f6a06291c27088fea55601f9e1c8e7eab06e5d9e44000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0xd, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000fdffffff0000000000000001180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb7020000080000009f03000000000000850000001900000095"], &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xc}, 0x94) quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000202, 0xee00, &(0x7f0000000040)='./file0\x00') 38.259825779s ago: executing program 2 (id=97): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20c000, 0x0) write(r0, &(0x7f0000000040)="8a32f83608c6efebf0790c5e932ebd1fd6b7a0d13b3cc3eb2d47bb483c46a376acc4d6ced588902f29627fdc10b9673b84a64262d710278bafa663bfe338ade8298320c5e4ec146f4275c406ce50b59497850918ebecc32823e2d2f9edcda321670ed3e0631d7ca048f22bef4cf004e48ce7f9e326631b7740cae844572f94e7530fba8ba8b235614f1d497d9b5e1d0a4810b0954b4cb315cfadfe3708ba", 0x9e) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xfff, 0x1, 0x3, 0xf, 0x4, 0x200}, &(0x7f00000001c0)=0x20) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'syzkaller1\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0x3c, "9f649fb253c405e17253348e5e0bfcc9ef278e7f983279d5ca3a99e220e4cef18f11885f4b3ac1142143cbfff3287d3505d07d96fb423680fd725227"}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$swradio(&(0x7f0000000340), 0x1, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000480)={r2, &(0x7f0000000380)='syzkaller1\x00', 0x200, &(0x7f00000003c0)={@_ha_fsid={[0x1, 0x2]}, {0xff, 0x3, 0x2, 0x5}}, 0x8001, &(0x7f0000000400), &(0x7f0000000440)=0x101}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000004c0)=[r1, r4, r5, r2], 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000540)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r3, 0x0, 0x72, 0x8b, &(0x7f0000000580)="295649f56f1699851293c295b2c9d2a78c87f645c9e0bff7c3e96b42d8018ad2fc29c840ee7a44a3b183d72e18ccbea4cabd4d5e030746417b9fee911e0c7643da849a054e5a2db923273491fc4d78a80087b3a4312886edd1aa15f9db3907f041372e8f553726abdf0f5b39dc09b1280d2a", &(0x7f0000000600)=""/139, 0x36b, 0x0, 0x61, 0x1000, &(0x7f00000006c0)="97122834b1f26cb6726b2288f89f9c1179e8a49a9cb181d20fa11750e75f7be53e320d14ecd240b2882245d602b9039ae3008b5919a49f3c6bf1401f7c0fee454431c9762d8b4e704c94b8be22f162133b51bc89f516423859af37faaf57a5dc33", &(0x7f0000000740)="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", 0x7, 0x0, 0x5}, 0x50) ppoll(&(0x7f00000017c0)=[{r0}], 0x1, &(0x7f0000001800)={0x77359400}, &(0x7f0000001840)={[0xa]}, 0x8) ioctl$BLKGETNRZONES(r3, 0x80041285, &(0x7f0000001880)=0x6) sendto$rxrpc(r3, &(0x7f00000018c0)="73dff8f6b09127a55d2001abbb5cfe0f80c1a0b389ab5a05c2481aa43e8c0d9ca378725b146a26dad37e328bbc0676468dea7fa584577d58f3c04de0950940a2bc26ef8a6f040bf5bad1ad0aedde9c3c60c1b55cdeeaf88f9d41b4a6d59ba7e9c77a52e583fd536be79c2d5a36ebab10bd086ea208856779ec8bfcd0a2464f7231e45f008e703e47e91da324793191da27e017273983f67904ae35605870839aad37c391033f8e576c4063814a4263b13765ba00bf112593e16b197ae87a9ee9b5528eacf1de893246c23c8345", 0xcd, 0x4000850, 0x0, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001a00)={0x4, &(0x7f00000019c0)=[{0x3, 0xd, 0x4, 0x1}, {0x800, 0x3, 0x8, 0x5}, {0x3, 0x3, 0x81}, {0x1, 0x7, 0x8, 0x9}]}, 0x10) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001a40), 0x41, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000001b80)={r3, &(0x7f0000001a80)='&\x00', 0x500, &(0x7f0000001ac0)={@align=0x38000000, {0x9, 0x5, 0x7, 0x404}}, 0xfffffffd, &(0x7f0000001b00), &(0x7f0000001b40)}) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000001bc0)=0x5) ioctl$FIONCLEX(r6, 0x5450) syz_open_dev$sndpcmp(&(0x7f0000001c00), 0x139, 0x10002) unlinkat(r7, &(0x7f0000001c40)='./file0\x00', 0x200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001c80)) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001e00)={0x0, &(0x7f0000001cc0)=[@cpuid={0x64, 0x18, {0xc, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xd4e8, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16=0x2, 0x8, 0x0, 0x8}}, @cpuid={0x64, 0x18, {0x278f, 0x1000}}, @in_dx={0x69, 0x20, {0x76e1, 0x5}}, @cpuid={0x64, 0x18, {0x9, 0x3ff}}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x8b5}}], 0x120}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001e80)=[@text16={0x10, &(0x7f0000001e40)="0f789f754f66b9800000c00f326635004000000f30b8f7008ed8b85c008ec00f01c3aed9f236660fd09e0be166b9a50200000f3266b9090300000f32", 0x3c}], 0x1, 0x20, &(0x7f0000001ec0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001f00)={'wlan1\x00'}) 38.231255445s ago: executing program 32 (id=97): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20c000, 0x0) write(r0, &(0x7f0000000040)="8a32f83608c6efebf0790c5e932ebd1fd6b7a0d13b3cc3eb2d47bb483c46a376acc4d6ced588902f29627fdc10b9673b84a64262d710278bafa663bfe338ade8298320c5e4ec146f4275c406ce50b59497850918ebecc32823e2d2f9edcda321670ed3e0631d7ca048f22bef4cf004e48ce7f9e326631b7740cae844572f94e7530fba8ba8b235614f1d497d9b5e1d0a4810b0954b4cb315cfadfe3708ba", 0x9e) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xfff, 0x1, 0x3, 0xf, 0x4, 0x200}, &(0x7f00000001c0)=0x20) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'syzkaller1\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0x3c, "9f649fb253c405e17253348e5e0bfcc9ef278e7f983279d5ca3a99e220e4cef18f11885f4b3ac1142143cbfff3287d3505d07d96fb423680fd725227"}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$swradio(&(0x7f0000000340), 0x1, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000480)={r2, &(0x7f0000000380)='syzkaller1\x00', 0x200, &(0x7f00000003c0)={@_ha_fsid={[0x1, 0x2]}, {0xff, 0x3, 0x2, 0x5}}, 0x8001, &(0x7f0000000400), &(0x7f0000000440)=0x101}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000004c0)=[r1, r4, r5, r2], 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000540)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r3, 0x0, 0x72, 0x8b, &(0x7f0000000580)="295649f56f1699851293c295b2c9d2a78c87f645c9e0bff7c3e96b42d8018ad2fc29c840ee7a44a3b183d72e18ccbea4cabd4d5e030746417b9fee911e0c7643da849a054e5a2db923273491fc4d78a80087b3a4312886edd1aa15f9db3907f041372e8f553726abdf0f5b39dc09b1280d2a", &(0x7f0000000600)=""/139, 0x36b, 0x0, 0x61, 0x1000, &(0x7f00000006c0)="97122834b1f26cb6726b2288f89f9c1179e8a49a9cb181d20fa11750e75f7be53e320d14ecd240b2882245d602b9039ae3008b5919a49f3c6bf1401f7c0fee454431c9762d8b4e704c94b8be22f162133b51bc89f516423859af37faaf57a5dc33", &(0x7f0000000740)="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", 0x7, 0x0, 0x5}, 0x50) ppoll(&(0x7f00000017c0)=[{r0}], 0x1, &(0x7f0000001800)={0x77359400}, &(0x7f0000001840)={[0xa]}, 0x8) ioctl$BLKGETNRZONES(r3, 0x80041285, &(0x7f0000001880)=0x6) sendto$rxrpc(r3, &(0x7f00000018c0)="73dff8f6b09127a55d2001abbb5cfe0f80c1a0b389ab5a05c2481aa43e8c0d9ca378725b146a26dad37e328bbc0676468dea7fa584577d58f3c04de0950940a2bc26ef8a6f040bf5bad1ad0aedde9c3c60c1b55cdeeaf88f9d41b4a6d59ba7e9c77a52e583fd536be79c2d5a36ebab10bd086ea208856779ec8bfcd0a2464f7231e45f008e703e47e91da324793191da27e017273983f67904ae35605870839aad37c391033f8e576c4063814a4263b13765ba00bf112593e16b197ae87a9ee9b5528eacf1de893246c23c8345", 0xcd, 0x4000850, 0x0, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001a00)={0x4, &(0x7f00000019c0)=[{0x3, 0xd, 0x4, 0x1}, {0x800, 0x3, 0x8, 0x5}, {0x3, 0x3, 0x81}, {0x1, 0x7, 0x8, 0x9}]}, 0x10) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001a40), 0x41, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000001b80)={r3, &(0x7f0000001a80)='&\x00', 0x500, &(0x7f0000001ac0)={@align=0x38000000, {0x9, 0x5, 0x7, 0x404}}, 0xfffffffd, &(0x7f0000001b00), &(0x7f0000001b40)}) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000001bc0)=0x5) ioctl$FIONCLEX(r6, 0x5450) syz_open_dev$sndpcmp(&(0x7f0000001c00), 0x139, 0x10002) unlinkat(r7, &(0x7f0000001c40)='./file0\x00', 0x200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001c80)) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001e00)={0x0, &(0x7f0000001cc0)=[@cpuid={0x64, 0x18, {0xc, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xd4e8, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16=0x2, 0x8, 0x0, 0x8}}, @cpuid={0x64, 0x18, {0x278f, 0x1000}}, @in_dx={0x69, 0x20, {0x76e1, 0x5}}, @cpuid={0x64, 0x18, {0x9, 0x3ff}}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x8b5}}], 0x120}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001e80)=[@text16={0x10, &(0x7f0000001e40)="0f789f754f66b9800000c00f326635004000000f30b8f7008ed8b85c008ec00f01c3aed9f236660fd09e0be166b9a50200000f3266b9090300000f32", 0x3c}], 0x1, 0x20, &(0x7f0000001ec0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001f00)={'wlan1\x00'}) 2.206916143s ago: executing program 4 (id=558): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x3, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000280)={0xc}) r4 = syz_open_dev$vcsn(&(0x7f00000046c0), 0x6, 0x8200) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000004700)={'NETMAP\x00'}, &(0x7f0000004740)=0x1e) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000001c0)={0x30, r3, 0x0, 0x0, 0x0, 0x2080140000, 0x49bd, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) read$FUSE(r5, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002500)={0x50, 0x0, r6, {0x7, 0x2d, 0x90, 0x10000000, 0x8001, 0x68, 0x18, 0x7, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004580)={&(0x7f0000004640)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x5, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r7, 0x0, 0x1, 0x0, 0x4, 0x17c8dc, 0x16cc8a}) 2.074081306s ago: executing program 4 (id=563): unshare(0x6020400) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000002140)='ns/time\x00') unshare(0x0) unshare(0x2000600) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000d100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x6, &(0x7f00000029c0)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000002a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000002180)) unshare(0x2000000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000021c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002200)={0x8, 0x0, &(0x7f0000002240)=[@increfs]}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002280)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x202, 0x20) sendfile(r7, r7, 0x0, 0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000022c0)={0x73622a85, 0x1, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000025c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002600)='./dev\x00', &(0x7f0000002640)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002680)='./mnt\x00', 0x0) mount(&(0x7f00000026c0)=@filename='./dev/sda1\x00', &(0x7f0000002700)='./mnt\x00', &(0x7f0000002740)='ext4\x00', 0x8410, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000002780)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000002a40)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000cd00000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000180000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046a42e92e40f65603858e41e91146902"]) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002300)={0x54, 0x0, &(0x7f0000002340)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000023c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r4}}}, 0x1000}]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002440)={0x4c, 0x0, &(0x7f0000002480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002500)={@fd, @child_ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x18}, @flat=@weak_binder={0x77622a85, 0xa, 0x1, 0x2}}, &(0x7f0000002580)={0x0, 0x18, 0x40}}}]}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) read$FUSE(r8, &(0x7f00000000c0)={0x2020}, 0x2020) 1.970306173s ago: executing program 4 (id=564): r0 = socket(0x23, 0x3, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x8bc) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000005c0)=@assoc_value={0x0, 0x8}, 0x8) recvmmsg(r1, &(0x7f00000046c0)=[{{&(0x7f0000000340)=@nl, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/198, 0xc6}], 0x3, &(0x7f0000001b00)=""/136, 0x88}, 0xb}, {{&(0x7f0000001bc0)=@phonet, 0x80, &(0x7f0000001f40), 0x0, &(0x7f0000001f80)=""/64, 0x40}, 0xb}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001fc0)=""/105, 0x69}, {&(0x7f0000002040)=""/89, 0x59}, {&(0x7f00000020c0)=""/4083, 0xff3}, {&(0x7f0000000780)=""/99, 0x63}], 0x4, &(0x7f0000003100)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000000540)=@ax25={{}, [@remote, @bcast, @null, @remote, @null, @bcast, @netrom, @default]}, 0x80, &(0x7f0000000140)=[{&(0x7f0000004180)=""/11, 0xb}], 0x1, &(0x7f00000006c0)=""/82, 0x52}, 0x2}, {{0x0, 0x0, &(0x7f0000004380)}, 0x7d}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000043c0)=""/67, 0x43}, {&(0x7f0000004440)=""/186, 0xba}, {&(0x7f0000004840)=""/207, 0xcf}], 0x3, &(0x7f0000004640)=""/62, 0x3e}, 0x18ec5aa8}], 0x6, 0x2040, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000200)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x1c0000, 0x80, 0x9}) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0), 0x3000, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0xe3, 0x0, 0xfffffffd}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000880)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='127.0.0.1:6789:/\x00', 0x101002, 0x10d) write(r2, &(0x7f0000000400)='= 1 0 3 1', 0x9) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092ad44886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000440)='./proc\x00', 0x15f) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x2, 0x40) 1.839132444s ago: executing program 4 (id=565): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04ef00"], 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x8, r2}, 0x38) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x102030405060708, {0x1, 0x1, 0x4}, 0xff}, 0x18) connect$can_j1939(r3, &(0x7f0000000280)={0x1d, r4, 0x0, {0x0, 0xee}, 0xc7c429631dce6e24}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) sendmsg$inet6(r5, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="13", 0x1}], 0x1}, 0x48043) r6 = dup(r5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x0, 0x8000, 0x9, 0x0, 0x20, 0x1, 0x3ff, '\x00', 0x0, r0, 0x2, 0x5}, 0x50) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000680), 0x10400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xa, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @generic={0x4, 0x4, 0xc, 0x200, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x6, 0x800, 0xb4}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r7, r8], &(0x7f0000000700)=[{0x2, 0x1, 0x8}, {0x2, 0x2, 0xb, 0xa}, {0x0, 0x3, 0x8, 0xb}, {0x3, 0x1, 0x10, 0x5}, {0xe79e, 0x4, 0x2, 0x4}], 0x10, 0xffff}, 0x94) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000001040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1.834739134s ago: executing program 4 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={&(0x7f00000000c0), 0x18, &(0x7f0000000100)={&(0x7f0000000140)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) 848.506308ms ago: executing program 0 (id=574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/devices/system/cpu/vulnerabilities/mds\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='wwnn=', 0x5) read(r2, &(0x7f0000000080)=""/100, 0x100) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000100)={0x2}, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000002c0)=0x0) write$P9_RGETATTR(r3, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x140, {0x10, 0x2, 0x8}, 0x8, r4, 0xffffffffffffffff, 0x5, 0xd, 0x6, 0x87e, 0x3ff, 0x7b7daccc, 0x2, 0x6, 0x10001, 0x9, 0xf, 0x4, 0x5, 0x7, 0xdc9a}}, 0xa0) landlock_restrict_self(r1, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000440)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) mkdirat(r7, &(0x7f0000000480)='./sys\x00', 0x0) 848.292775ms ago: executing program 3 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0xc, 0x8, &(0x7f0000001d00)=ANY=[], &(0x7f0000001d40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r1, 0x0, 0xff53, 0x0, &(0x7f0000001e00)="b88fd8698b791f9cea0efaca8a7ffabf40a1540000c96029998161373610748d37213bed8a8e4f51effc55512a3d645d1d691c04f669e9c78189c8", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x3b, 0x4) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="04000000100000001cf8af8b0400128009000100626f6e64000000000c00028005001d0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x6) 770.22739ms ago: executing program 3 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv4_newroute={0x1c, 0x18, 0xa37f0f0492d077cf, 0x0, 0x0, {0x2, 0x80, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000500}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4014) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x2, 0x0, 0x504, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x11}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x17f) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000400)=0x5e25, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20008001, &(0x7f0000000640)={0xa, 0x4e20, 0xffff, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11, 0x0, 0x0, 0x11000000}, 0xb00}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000380)='./file0\x00') r2 = open(&(0x7f00000003c0)='./file2\x00', 0x109242, 0x9c) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000540)={0x0, {0x0, 0x0, @vsb}}) fallocate(r2, 0x11, 0x100000000, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0xffffffffffffffad, 0x41, 0x4, 0xfffffefe, 0xffffffff, {0x13, 0x7c}}, 0xe12dcc870fdc81e3}, 0x1, 0x0, 0x0, 0x48895}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa84430, &(0x7f0000000200)={[{@stats}]}) 769.409611ms ago: executing program 0 (id=577): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) unshare(0xe060400) unshare(0x2c060000) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) read$FUSE(r1, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000002800)={0x18, 0x0, r2, {0x2}}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002840)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002880), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000028c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) readv(r4, &(0x7f0000002900)=[{&(0x7f0000002940)=""/244, 0xf4}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/254, 0xfe}, {&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/205, 0xcd}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/241, 0xf1}], 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) 609.438865ms ago: executing program 3 (id=578): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f00000000c0)="05000000010000", 0x7) (async) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x5) 608.023118ms ago: executing program 0 (id=579): r0 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x39f1c1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x101041) write$sndseq(r3, &(0x7f00000000c0)=[{0xe, 0x1, 0x0, 0xfd, @tick, {}, {0xe}, @result={0xffffffff, 0x20000}}], 0x1c) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 607.732568ms ago: executing program 3 (id=580): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000040)={0x0, 0x40, 0xffffffff, 0x0, 0x10, 0xfffffed8, 0x10, 0x3e7, 0x20, 0x1, 0x20, 0x1, 0x0, 0xff19, 0x0}) socket(0x10, 0x3, 0x0) 607.014932ms ago: executing program 0 (id=581): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) timerfd_create(0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 606.511692ms ago: executing program 0 (id=582): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4001, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file7\x00', 0x1000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x5033}], 0x1, 0x40000121, 0x0) connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 606.180058ms ago: executing program 3 (id=583): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0) r1 = syz_clone(0x20010000, &(0x7f0000000080)="8892d28d2dea6a1bcef4100042ffd2e233b8dd6694cf5e6aa0794f357750027fbd7bc9c93a1e36aace9ff4ccf2d998d57f2d0958f04893515e9ccd7146b5e20c67e98a73cf5fe516a4d5a8bb37b865dbe6518733118abd5b360f6ebccc5ee21c90aeb388fa6f4638c24f82f69315692b7f93b3e4dd2f90157ee6f03ed1752a7a28f472a1d7e073ac8c166c", 0x8b, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="e3b7c978375dcb651908ea556d05778d0c94a066c5f94686578d6576c4ebf43a479890853edc02706b5f58d78e5fc9fa15aa7d5316a95f20840017fbe4e9256f9a7df7e32d38f23eb26a8b25fe9ca43c868d895bbd0b925e63bd2e98ab772af002e65a617013cbc85edfa72c3fb7df28cd708d8e242414522079a91d7c11ea16c22a478678d5280b9f4c7cf08a038142be8de437ed3a9424541674fbd46b262c8ee6a5cf3cbd44ac52e426d08ed92fdd224268a4232084828df4cca1563b03caf50237a55d215a44282ff2588a5824cde71891771ed11b0ccf1b12b8681cd0288a471ed0ac563dae59d72b3847beefe8ec56ee1cf6fdd8702dfb") syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') 539.568285ms ago: executing program 3 (id=584): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x278, 0x148, 0x1e0, 0x278, 0x1e0, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "226ef64863e00aab75bbf950ecdb313a931e1bcbb53424e1bdbba192ee07"}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@empty, @empty, 0xffffff00, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x4d, 0x0, "cd5aa518f03b16b24cba1876d95729165171a6627f50c7973f185ef01bf9a3b6755fed446ad0b4c44c5c8be2addc57bcbfed56dee65c01e07945781660c97bca0d8fc93d9b089e2105dd2fa43200aa87"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno', 0xa) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 480.241997ms ago: executing program 0 (id=585): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000001600)={0x1, &(0x7f0000001640)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001680)) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x6ab35795ac061dad) socket(0x11, 0x800, 0x9) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000001740), 0x600000000000000, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000001780)) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000001700)={0x6b6, 0x100}) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x3, 0x8) syz_emit_ethernet(0x15b1, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 400.268831ms ago: executing program 1 (id=586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000002f000d0027bd9f00000000000b"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000500)=[@increfs]}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000a40)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000a80)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000b40)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000b80)={r8, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x8000, 0x6}, &(0x7f0000000c40)=0x90) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000580)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f00000006c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000007c0)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}}}]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)}) r9 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150003000100000001000000010000000000000005010902a1010506092015002564750895018102c0444f27a2dc8328374443c6cd1a2256dce42e53bc44ef7bbd4a16524cb80b8debd7afb47fce71eb4a959efce3d6ab401a8c01ca17fbcd976077258696579076c26d5e1efa7d6aff95fbd573443f5b082dcc211d5e1c7062bf869432eaaca3b8aef11a1d73f89e339c8acc6ca4266ccbad388e22104ec6da6f771f2df09aa9ea6a5d9630273f94492b00ea7fbd3b800541bd7b4bc37ebcb72efa90d60ed417201a6f93f79898ec94b50f38733cd1d2823c48e4ae50113d0319f29af6ea9d2fb42c6b93413ad05619e5967b1efd575f943897d4ae20d9eb8b1433c47f1f93773db50eaafd62b468297289f310c096b1e3e5f50a56e92ca1b498f8551b71900e"], 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/power_supply/hid-syz0-battery-0/capacity\x00', 0x0, 0x0) read(r12, &(0x7f0000000400), 0x80) close_range(r10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0xfe280000) 150.405563ms ago: executing program 1 (id=587): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000444b9cef1cfb3153e2f9c8e4825d5a3c960d5720a75030b612c55b17154b9f08d545e6a32be358b51b7c8e82129189c36d089cb012c73521e3fa7204608f93ad2ce8f5d98539df5a6dcc7c2c8de39e745db067ca361dfaedbceb9a87b40d22dd9be446a988694989103c7179fa0c812e5ff67a00181672ea0e78d50970fe12e4e1d4e3914fe2e5cb3c1308e2a0f74f9b62b1829aa99831d292f5db1b76a1b44823f6061987c460415a2fc85b9ff7cb295bca18f1d2efdf0d2049ca", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r6, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 89.741159ms ago: executing program 1 (id=588): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r5, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000ebff27bd7002fedbdf25230000009bddc0dfcdff942b47bc8268b7811320997f57a71b3dcb415bd309492349bc6c788dd44516df32b2358c0d1162351535a5e47e51257612a5f5930d2c76708d2ea8ad2b622d07130bb6f4113073ffc7bfbfea70745c7e4b415cb61a96cbfc4427d00500dc2e4d5031c372257bb515c206f1d4b83db5bab3e86129ea056f5416", @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYRESHEX=r5], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 89.389076ms ago: executing program 1 (id=589): r0 = socket$netlink(0x10, 0x3, 0x0) setns(0xc9, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x52, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r1, 0x100) r3 = socket(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xc00, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3db1b572226135ca864e6626b62dc0905d3735746061a8e92e1e7f3a61f4cc7606f9f9d730cc4b4fe1a71c748ceeabcca94c", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r6], 0x15) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f0000000200)={0x0, 0x7, 0x3f85, '\x00', &(0x7f00000001c0)=0x8}) sendmsg$inet_sctp(r3, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="b2", 0x1a000}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000084000000070000000a00020f000000004ed054cc222d0b2d5086a913c749ebdad00d9ca98046f0"], 0x18}, 0x8050) close(0x3) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000280), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@setneightbl={0x2c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_THRESH2={0x8}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) 516.849µs ago: executing program 1 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd26, 0x25dfd9fe, {0x80, 0x88, 0x80, 0xa4, 0x0, 0x3, 0xfe, 0x4, 0x400}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f000000000000000008"], 0x2c}}, 0x0) 216.536µs ago: executing program 4 (id=591): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x1, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='online', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f0000000280)='./debug\x00', 0x2c01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000840), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000880)={0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f00000008c0)={0x81, 0x0, 0x2}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x0, 0x1, 0x44, 0x7fff, 0x0, [{0x80, 0xff, 0x4, '\x00', 0x7}, {0x2, 0x2, 0xf9, '\x00', 0x6}, {0x7, 0x2, 0x10, '\x00', 0xe6}, {0x1, 0x7, 0x3, '\x00', 0xd}, {0x3, 0x7, 0x88, '\x00', 0x4}, {0x7, 0x0, 0x8, '\x00', 0x22}, {0x12, 0x9, 0x0, '\x00', 0xff}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xdc, 0xfb, 0x0, '\x00', 0xc9}, {0x9, 0x8, 0x9, '\x00', 0x7f}, {0x8, 0x2, 0xdd, '\x00', 0xb}, {0x1e, 0x8, 0x7c, '\x00', 0xb}, {0x3, 0x9, 0x1, '\x00', 0x8}, {0x1, 0xa, 0x6, '\x00', 0x8}, {0xe, 0x0, 0x1, '\x00', 0x81}, {0xb7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x58, '\x00', 0x7e}, {0x2, 0x0, 0xf9, '\x00', 0x23}, {0x0, 0x6, 0x2, '\x00', 0x9}, {0x7, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x1, 0x1}, {0x9, 0x3, 0x6, '\x00', 0xfb}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x2c, 0x36, '\x00', 0x95}]}}) write$cgroup_freezer_state(r2, &(0x7f00000002c0)='THAWED\x00', 0x7) io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x1000000, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000180)='8', 0x1, 0x10000000005971}]) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, 0x0, 0x0, &(0x7f0000000300)) setns(0xc9, 0x0) r8 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x42000004, 0x0, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 0s ago: executing program 1 (id=592): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs\x00', 0x1ff) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs/instances/foo\x00', 0x1ff) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs/instances/foo\x00', 0x200) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8350, 0x2, 0x2, 0x8, 0x4}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x6bb3, 0x4) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, 0x0}}], 0x1, 0x60040800) 0s ago: executing program 4 (id=593): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3b4, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff776b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x59}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1072}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x960}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffac8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x673}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x23}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x692}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890c0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074d0936cd3b78130daa61d8e8048500005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.87'. [ 47.247668][ T6173] SELinux: policydb string length 0 does not match expected length 8 [ 47.247703][ T6173] SELinux: failed to load policy [ 47.551025][ C2] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 47.551043][ T5842] usb 5-1: USB disconnect, device number 2 [ 47.556914][ T5842] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 47.593324][ T6184] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 47.593340][ T6184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.593592][ T6184] vhci_hcd vhci_hcd.0: Device attached [ 47.594782][ T6187] usbip_core: unknown command [ 47.594788][ T6187] vhci_hcd: unknown pdu 67108864 [ 47.594794][ T6187] usbip_core: unknown command [ 47.596364][ T12] vhci_hcd vhci_hcd.0: stop threads [ 47.596586][ T12] vhci_hcd vhci_hcd.0: release socket [ 47.596602][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 47.634596][ T5820] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 47.894001][ T5820] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 48.064250][ T5724] overlayfs: failed lookup in lower (newroot/26, name='bus', err=-40): overlapping layers [ 48.064967][ T5724] overlayfs: failed lookup in lower (newroot/26, name='bus', err=-40): overlapping layers [ 48.126095][ T42] kauditd_printk_skb: 110 callbacks suppressed [ 48.126114][ T42] audit: type=1400 audit(1792555069.328:391): avc: denied { create } for pid=6196 comm="syz.0.95" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.126455][ T42] audit: type=1400 audit(1792555069.328:392): avc: denied { read write } for pid=6196 comm="syz.0.95" name="md0" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.126746][ T42] audit: type=1400 audit(1792555069.328:393): avc: denied { open } for pid=6196 comm="syz.0.95" path="/15/md0" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.143754][ T6197] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.143868][ T6197] block device autoloading is deprecated and will be removed. [ 48.144703][ T42] audit: type=1400 audit(1792555069.348:394): avc: denied { ioctl } for pid=6196 comm="syz.0.95" path="/15/md0" dev="tmpfs" ino=102 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.203276][ T6198] md: md0 stopped. [ 48.287960][ T42] audit: type=1400 audit(1792555069.488:395): avc: denied { unlink } for pid=5723 comm="syz-executor" name="md0" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.385332][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.403783][ T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 48.463250][ T42] audit: type=1400 audit(1792555069.668:396): avc: denied { execute } for pid=6207 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.463819][ T42] audit: type=1400 audit(1792555069.668:397): avc: denied { execute_no_trans } for pid=6207 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.472886][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.542942][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.555581][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.556681][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.557027][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.557375][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.557619][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.607476][ T6190] ceph: No mds server is up or the cluster is laggy [ 48.619439][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.646972][ T42] audit: type=1400 audit(1792555069.848:398): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.719512][ T42] audit: type=1400 audit(1792555069.918:399): avc: denied { read } for pid=6224 comm="syz.3.101" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.720030][ T42] audit: type=1400 audit(1792555069.918:400): avc: denied { open } for pid=6224 comm="syz.3.101" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.738841][ T6222] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 48.845415][ T6209] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.860336][ T12] bridge_slave_1: left allmulticast mode [ 48.860358][ T12] bridge_slave_1: left promiscuous mode [ 48.861218][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.867684][ T12] bridge_slave_0: left allmulticast mode [ 48.867699][ T12] bridge_slave_0: left promiscuous mode [ 48.867824][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.978153][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.979834][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.980753][ T12] bond0 (unregistering): Released all slaves [ 48.991087][ T6229] geneve3: entered promiscuous mode [ 49.247859][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.251417][ T50] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 49.301551][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.301687][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.301782][ T6209] bridge_slave_0: entered allmulticast mode [ 49.312267][ T6209] bridge_slave_0: entered promiscuous mode [ 49.314580][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.314657][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.314759][ T6209] bridge_slave_1: entered allmulticast mode [ 49.316581][ T6209] bridge_slave_1: entered promiscuous mode [ 49.370002][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.375029][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.412008][ T12] hsr_slave_0: left promiscuous mode [ 49.413815][ T12] hsr_slave_1: left promiscuous mode [ 49.414235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.414251][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.416073][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.416083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.423713][ T12] veth1_macvtap: left promiscuous mode [ 49.423793][ T12] veth0_macvtap: left promiscuous mode [ 49.423891][ T12] veth1_vlan: left promiscuous mode [ 49.423961][ T12] veth0_vlan: left promiscuous mode [ 49.512726][ T50] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 49.571618][ T12] team0 (unregistering): Port device team_slave_1 removed [ 49.591422][ T12] team0 (unregistering): Port device team_slave_0 removed [ 49.647271][ T6209] team0: Port device team_slave_0 added [ 49.648289][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.649374][ T6209] team0: Port device team_slave_1 added [ 49.660962][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.660973][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.660985][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.662925][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.662934][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.662947][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.682427][ T6209] hsr_slave_0: entered promiscuous mode [ 49.683003][ T6209] hsr_slave_1: entered promiscuous mode [ 49.683301][ T6209] debugfs: 'hsr0' already exists in 'hsr' [ 49.683313][ T6209] Cannot create hsr debugfs directory [ 49.788620][ T6209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.793137][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.793773][ T6209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.800909][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.801432][ T6209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.808690][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.809243][ T6209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.822560][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.854956][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.855002][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.855103][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.855152][ T6209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.884053][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 49.917931][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.926580][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.927025][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.931150][ T6209] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.936459][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.936536][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.941489][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.941566][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.025972][ T5828] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 50.064580][ T6252] ceph: No mds server is up or the cluster is laggy [ 50.097056][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 50.115904][ T6287] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 50.137619][ T6308] binder: BINDER_SET_CONTEXT_MGR already set [ 50.137628][ T6308] binder: 6306:6308 ioctl 4018620d 200000000140 returned -16 [ 50.215932][ T6322] overlayfs: failed to resolve './file1/file0': -2 [ 50.247145][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.251771][ T6331] binder: BINDER_SET_CONTEXT_MGR already set [ 50.251780][ T6331] binder: 6329:6331 ioctl 4018620d 200000000140 returned -16 [ 50.254780][ T6332] binder: 6329:6332 ioctl c018620c 2000000001c0 returned -1 [ 50.255207][ T6334] binder: 6329:6334 ioctl c018620c 2000000001c0 returned -1 [ 50.393100][ T6209] veth0_vlan: entered promiscuous mode [ 50.396268][ T6209] veth1_vlan: entered promiscuous mode [ 50.410159][ T6209] veth0_macvtap: entered promiscuous mode [ 50.412339][ T6209] veth1_macvtap: entered promiscuous mode [ 50.418765][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.427623][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.456317][ T5828] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.478560][ T6362] xt_NFQUEUE: number of queues (32769) out of range (got 98303) [ 50.480093][ T6362] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 50.496989][ T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.497008][ T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.532399][ T5776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.532663][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.532674][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.536419][ T6366] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 50.553616][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.553641][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.553659][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.562651][ T5732] Bluetooth: hci1: command tx timeout [ 50.639418][ T6375] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 50.711854][ T29] input: syz0 as /devices/virtual/misc/uhid/0003:056B:003F.0003/input/input6 [ 50.721141][ T29] hid-generic 0003:056B:003F.0003: input,hidraw1: USB HID v0.00 Gamepad [syz0] on syz1 [ 50.824592][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 50.895960][ T6396] binfmt_misc: register: failed to install interpreter ./file0 [ 51.082102][ T6408] FAULT_INJECTION: forcing a failure. [ 51.082102][ T6408] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.082134][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.4.133 Not tainted syzkaller #0 PREEMPT(full) [ 51.082156][ T6408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.082166][ T6408] Call Trace: [ 51.082175][ T6408] [ 51.082183][ T6408] dump_stack_lvl+0x100/0x190 [ 51.082231][ T6408] should_fail_ex.cold+0x5/0xa [ 51.082261][ T6408] get_futex_key+0x1c9/0x13e0 [ 51.082294][ T6408] ? __pfx_get_futex_key+0x10/0x10 [ 51.082329][ T6408] futex_wait_setup+0x91/0x540 [ 51.082360][ T6408] __futex_wait+0x19f/0x360 [ 51.082387][ T6408] ? __pfx___futex_wait+0x10/0x10 [ 51.082409][ T6408] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.082435][ T6408] ? futex_hash+0x311/0x400 [ 51.082464][ T6408] ? __pfx_futex_wake_mark+0x10/0x10 [ 51.082491][ T6408] ? find_held_lock+0x2b/0x80 [ 51.082509][ T6408] ? futex_wake+0x4ea/0x5e0 [ 51.082537][ T6408] futex_wait+0xe6/0x370 [ 51.082560][ T6408] ? __pfx_futex_wait+0x10/0x10 [ 51.082587][ T6408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.082615][ T6408] ? do_vfs_ioctl+0x226/0x13e0 [ 51.082643][ T6408] do_futex+0x265/0x440 [ 51.082663][ T6408] ? __pfx_do_futex+0x10/0x10 [ 51.082692][ T6408] ? __fget_files+0x34/0x3d0 [ 51.082715][ T6408] __x64_sys_futex+0x34f/0x4d0 [ 51.082735][ T6408] ? __pfx___x64_sys_futex+0x10/0x10 [ 51.082753][ T6408] ? selinux_file_ioctl+0xb6/0x290 [ 51.082781][ T6408] do_syscall_64+0x123/0x790 [ 51.082805][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.082828][ T6408] RIP: 0033:0x7f61d099f559 [ 51.082845][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.082862][ T6408] RSP: 002b:00007f61cebf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.082884][ T6408] RAX: ffffffffffffffda RBX: 00007f61d0c25fa8 RCX: 00007f61d099f559 [ 51.082896][ T6408] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f61d0c25fa8 [ 51.082907][ T6408] RBP: 00007f61d0c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 51.082920][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.082932][ T6408] R13: 00007f61d0c26038 R14: 00007ffe71028d40 R15: 00007ffe71028e28 [ 51.082959][ T6408] [ 51.087975][ T6408] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“�ë) failed with errno=-22 [ 51.266747][ T6414] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.937049][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 51.939949][ T6442] autofs: Bad value for 'fd' [ 52.015882][ T6445] FAULT_INJECTION: forcing a failure. [ 52.015882][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 52.015913][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(full) [ 52.015935][ T6445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.015946][ T6445] Call Trace: [ 52.015953][ T6445] [ 52.015960][ T6445] dump_stack_lvl+0x100/0x190 [ 52.015993][ T6445] should_fail_ex.cold+0x5/0xa [ 52.016021][ T6445] should_failslab+0xc2/0x120 [ 52.016052][ T6445] __kmalloc_cache_noprof+0x91/0x6d0 [ 52.016071][ T6445] ? cap_capable+0x107/0x430 [ 52.016103][ T6445] ? __x64_sys_futex+0x358/0x4d0 [ 52.016122][ T6445] ? fsnotify_alloc_group+0x8d/0x320 [ 52.016152][ T6445] fsnotify_alloc_group+0x8d/0x320 [ 52.016179][ T6445] __do_sys_fanotify_init+0x271/0xe20 [ 52.016204][ T6445] do_syscall_64+0x123/0x790 [ 52.016227][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.016249][ T6445] RIP: 0033:0x7f8702d9f559 [ 52.016265][ T6445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.016282][ T6445] RSP: 002b:00007f8703d36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 52.016302][ T6445] RAX: ffffffffffffffda RBX: 00007f8703025fa0 RCX: 00007f8702d9f559 [ 52.016316][ T6445] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004c [ 52.016330][ T6445] RBP: 00007f8702e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 52.016342][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.016352][ T6445] R13: 00007f8703026038 R14: 00007f8703025fa0 R15: 00007ffd3e381db8 [ 52.016380][ T6445] [ 52.075536][ T6448] program syz.0.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.122611][ T1129] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 52.122628][ T1129] ata1.00: irq_stat 0x40000000 [ 52.122648][ T1129] ata1.00: failed command: ZAC MANAGEMENT OUT [ 52.122654][ T1129] ata1.00: cmd 9f/04:00:00:00:00/00:00:00:00:00/40 tag 13 nodata 0 in [ 52.122654][ T1129] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 52.122683][ T1129] ata1.00: status: { DRDY ERR } [ 52.122690][ T1129] ata1.00: error: { ABRT } [ 52.122712][ T1129] ata1.00: device reported invalid CHS sector 0 [ 52.247660][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.249873][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.250097][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.250287][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.250473][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.251863][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.253862][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.254076][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.254266][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.254744][ T6455] netlink: 'syz.4.142': attribute type 8 has an invalid length. [ 52.390994][ T6466] Bluetooth: hci4: Frame reassembly failed (-84) [ 52.642340][ T5088] Bluetooth: hci1: command tx timeout [ 52.819093][ T6482] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 53.045634][ C2] ata1: illegal qc_active transition (00000000->00000800) [ 53.161827][ T6501] netlink: 260 bytes leftover after parsing attributes in process `syz.3.156'. [ 53.182373][ T1355] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.239374][ T6506] CIFS: bad ip= option (ÛÚyñU£~+1) [ 53.342933][ T1355] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 53.345794][ T1355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 53.345811][ T1355] usb 5-1: Product: syz [ 53.345819][ T1355] usb 5-1: Manufacturer: syz [ 53.375954][ T1129] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 53.376912][ T1129] ata1.00: configured for UDMA/100 [ 53.551002][ T6511] bond1: (slave veth0_to_bond): making interface the new active one [ 53.552348][ T6511] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 53.756263][ T6492] netlink: 136 bytes leftover after parsing attributes in process `syz.0.153'. [ 53.756282][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 53.757914][ T6492] xt_hashlimit: size too large, truncated to 1048576 [ 53.816947][ T1355] scsi host6: uas [ 54.015095][ C2] usb 5-1: stat urb: status -71 [ 54.015281][ C2] usb 5-1: cmd cmplt err -71 [ 54.022671][ T63] usb 5-1: USB disconnect, device number 3 [ 54.024788][ T63] scsi 6:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 54.024824][ T63] scsi 6:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 54.098652][ T6434] IPVS: starting estimator thread 0... [ 54.130501][ T6534] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 54.164566][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 54.176764][ T6541] xt_hashlimit: size too large, truncated to 1048576 [ 54.182112][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 54.182124][ T42] audit: type=1400 audit(1792555075.378:453): avc: denied { write } for pid=6540 comm="syz.1.161" path="socket:[13847]" dev="sockfs" ino=13847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.196242][ T42] audit: type=1400 audit(1792555075.398:454): avc: denied { setopt } for pid=6540 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.201214][ T6535] IPVS: using max 43 ests per chain, 103200 per kthread [ 54.308412][ T42] audit: type=1400 audit(1792555075.508:455): avc: denied { create } for pid=6551 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.310842][ T42] audit: type=1400 audit(1792555075.508:456): avc: denied { write } for pid=6551 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.316265][ T42] audit: type=1400 audit(1792555075.518:457): avc: denied { setopt } for pid=6551 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.370686][ T6555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6555 comm=syz.3.168 [ 54.400917][ T42] audit: type=1400 audit(1792555075.598:458): avc: denied { write } for pid=6556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.413872][ T5732] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.457723][ T42] audit: type=1400 audit(1792555075.658:459): avc: denied { write } for pid=6561 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.504912][ T6563] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.564591][ T42] audit: type=1400 audit(1792555075.768:460): avc: denied { write } for pid=6566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.611251][ T42] audit: type=1400 audit(1792555075.808:461): avc: denied { write } for pid=6582 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.614798][ T42] audit: type=1400 audit(1792555075.818:462): avc: denied { name_connect } for pid=6562 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 54.624190][ T6569] nvme_fabrics: unknown parameter or missing value 'system_u:object_r:chfn_exec_t:s0 /usr/sbin/ntpd 00000000000000000006' in ctrl creation request [ 54.723851][ T6595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6595 comm=syz.1.176 [ 54.733576][ T5732] Bluetooth: hci1: command tx timeout [ 54.775769][ T6599] devpts: Unknown parameter 'max' [ 54.920685][ T6616] devpts: Unknown parameter 'NLBL_CALIPSO' [ 55.062186][ T6632] ip6t_rt: unknown flags D [ 55.074038][ T6632] Dead loop on virtual device ip6_vti0 (net 34), fix it urgently! [ 55.120592][ T6637] clocksource: Switched to clocksource acpi_pm [ 55.129800][ T6637] clocksource: Switched to clocksource tsc [ 55.249277][ T6644] sctp: [Deprecated]: syz.3.191 (pid 6644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.249277][ T6644] Use struct sctp_sack_info instead [ 55.251202][ T6644] sctp: [Deprecated]: syz.3.191 (pid 6644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.251202][ T6644] Use struct sctp_sack_info instead [ 55.358750][ T6650] ucma_write: process 41 (syz.4.193) changed security contexts after opening file descriptor, this is not allowed. [ 55.366977][ T6650] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 55.380083][ T6650] ip_tables: iptables: counters copy to user failed while replacing table [ 55.633030][ T6667] bridge_slave_0: left allmulticast mode [ 55.633056][ T6667] bridge_slave_0: left promiscuous mode [ 55.634213][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.636935][ T6667] bridge_slave_1: left allmulticast mode [ 55.636951][ T6667] bridge_slave_1: left promiscuous mode [ 55.637039][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.654502][ T6667] bond0: (slave bond_slave_0): Releasing backup interface [ 55.656927][ T6667] bond0: (slave bond_slave_1): Releasing backup interface [ 55.661047][ T6667] team0: Port device team_slave_0 removed [ 55.664230][ T6667] team0: Port device team_slave_1 removed [ 55.664659][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.664670][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.665900][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.665913][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.669998][ T6667] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.822923][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.199'. [ 55.822948][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.199'. [ 55.941451][ T6692] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 55.984014][ T6692] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 56.089140][ T6701] netlink: 156 bytes leftover after parsing attributes in process `syz.3.208'. [ 56.089430][ T6702] netlink: 156 bytes leftover after parsing attributes in process `syz.3.208'. [ 56.142707][ T6701] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.144125][ T6704] libceph: resolve '.‹R¯HÖe'ì»ˠ/Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 56.185569][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.199'. [ 56.186159][ T6667] tipc: Started in network mode [ 56.186173][ T6667] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 56.186375][ T6667] tipc: Enabled bearer , priority 0 [ 56.640062][ T6765] openvswitch: netlink: Unknown key attributes 2 [ 56.641380][ T6765] syz.4.218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 56.802596][ T5732] Bluetooth: hci1: command tx timeout [ 57.206208][ T5828] tipc: Node number set to 11578026 [ 57.364115][ T6797] binder: 6796:6797 unknown command 0 [ 57.364129][ T6797] binder: 6796:6797 ioctl c0306201 200000000dc0 returned -22 [ 57.372216][ T6797] __nla_validate_parse: 1 callbacks suppressed [ 57.372229][ T6797] netlink: 132 bytes leftover after parsing attributes in process `syz.3.225'. [ 57.860124][ T6820] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.231'. [ 57.861020][ T6823] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.231'. [ 57.880637][ T6831] sctp: [Deprecated]: syz.3.233 (pid 6831) Use of int in maxseg socket option. [ 57.880637][ T6831] Use struct sctp_assoc_value instead [ 57.952530][ T6140] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 58.110571][ T6140] usb 6-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 58.111755][ T6140] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 58.111777][ T6140] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1640, setting to 1023 [ 58.113611][ T6140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.113624][ T6140] usb 6-1: Product: 潞 [ 58.113631][ T6140] usb 6-1: Manufacturer: င [ 58.113638][ T6140] usb 6-1: SerialNumber: 豓퍝瑞㮵疱妬๗ڽࡂ怚ࡃ刏ꀂ畹ᴚ೗짃㦜ꛛഭ푺깵兝꾸瘑闝ꈊ⢗읦俦켃᷶ᩙ了䰽浏냰눤巹憐傊晎縷ກ淂髹훺焣嵚⡂◖頄㿇த䈎̈漺ᘧ朤鿄跍橵圯鍾嫕꘦퀎鞪ꓓ竩⊪䊁n趔ₕ浬㙲㟥גּ偏ל⏽Ð樋 [ 58.143431][ T6850] capability: warning: `syz.3.236' uses deprecated v2 capabilities in a way that may be insecure [ 58.186376][ T6860] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 58.186387][ T6859] validate_nla: 58 callbacks suppressed [ 58.186402][ T6859] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 58.230475][ T6860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.247037][ T6859] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.328654][ T6140] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 58.341159][ T6869] netlink: 48 bytes leftover after parsing attributes in process `syz.3.240'. [ 58.345048][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 58.377009][ T6140] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.385510][ T6140] usb 6-1: USB disconnect, device number 2 [ 58.406762][ T5728] udevd[5728]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 58.586206][ T6880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.830536][ T6908] overlayfs: failed to resolve './file2': -2 [ 58.833967][ T6907] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.877383][ T6916] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.960166][ T6920] FAULT_INJECTION: forcing a failure. [ 58.960166][ T6920] name failslab, interval 1, probability 0, space 0, times 0 [ 58.960202][ T6920] CPU: 1 UID: 0 PID: 6920 Comm: syz.1.257 Not tainted syzkaller #0 PREEMPT(full) [ 58.960227][ T6920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.960240][ T6920] Call Trace: [ 58.960248][ T6920] [ 58.960256][ T6920] dump_stack_lvl+0x100/0x190 [ 58.960305][ T6920] should_fail_ex.cold+0x5/0xa [ 58.960334][ T6920] should_failslab+0xc2/0x120 [ 58.960371][ T6920] kmem_cache_alloc_noprof+0x92/0x6a0 [ 58.960398][ T6920] ? lock_acquire+0x1d1/0x380 [ 58.960422][ T6920] ? __kernfs_new_node+0xd2/0xa10 [ 58.960454][ T6920] __kernfs_new_node+0xd2/0xa10 [ 58.960482][ T6920] ? __pfx___kernfs_new_node+0x10/0x10 [ 58.960508][ T6920] ? lock_acquire+0x1d1/0x380 [ 58.960529][ T6920] ? kernfs_root+0x23/0x2a0 [ 58.960550][ T6920] ? find_held_lock+0x2b/0x80 [ 58.960567][ T6920] ? kernfs_root+0xee/0x2a0 [ 58.960587][ T6920] ? kernfs_root+0xee/0x2a0 [ 58.960615][ T6920] kernfs_new_node+0x194/0x200 [ 58.960642][ T6920] ? __pfx_kernfs_new_node+0x10/0x10 [ 58.960669][ T6920] ? lock_acquire+0x1d1/0x380 [ 58.960689][ T6920] ? kernfs_root+0x23/0x2a0 [ 58.960711][ T6920] __kernfs_create_file+0x53/0x350 [ 58.960743][ T6920] sysfs_add_file_mode_ns+0x207/0x3c0 [ 58.960770][ T6920] internal_create_group+0x593/0xfb0 [ 58.960795][ T6920] ? kernfs_create_dir_ns+0x16d/0x2b0 [ 58.960821][ T6920] ? __pfx_internal_create_group+0x10/0x10 [ 58.960843][ T6920] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 58.960863][ T6920] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 58.960882][ T6920] ? find_held_lock+0x2b/0x80 [ 58.960898][ T6920] ? kobject_add_internal+0x25f/0x930 [ 58.960934][ T6920] internal_create_groups+0x9d/0x150 [ 58.960961][ T6920] kobject_add_internal+0x317/0x930 [ 58.960991][ T6920] kobject_init_and_add+0x121/0x180 [ 58.961019][ T6920] ? __pfx_kobject_init_and_add+0x10/0x10 [ 58.961054][ T6920] ? __kasan_kmalloc+0xaa/0xb0 [ 58.961084][ T6920] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 58.961107][ T6920] ? rpc_sysfs_client_setup+0x112/0x310 [ 58.961151][ T6920] rpc_sysfs_client_setup+0x190/0x310 [ 58.961176][ T6920] ? __pfx_rpc_sysfs_client_setup+0x10/0x10 [ 58.961199][ T6920] ? rpc_net_ns+0xe8/0x2a0 [ 58.961243][ T6920] rpc_new_client+0x924/0x1300 [ 58.961276][ T6920] rpc_create_xprt+0xd9/0x440 [ 58.961307][ T6920] rpc_create+0x46e/0x7f0 [ 58.961338][ T6920] ? __pfx_rpc_create+0x10/0x10 [ 58.961422][ T6920] ? rcu_is_watching+0x13/0xc0 [ 58.961455][ T6920] ? trace_contention_end+0x126/0x160 [ 58.961483][ T6920] ? __mutex_lock+0x267/0x1c10 [ 58.961508][ T6920] gssp_rpc_create+0xe1/0x180 [ 58.961528][ T6920] ? __pfx_gssp_rpc_create+0x10/0x10 [ 58.961561][ T6920] ? net_generic+0xea/0x2a0 [ 58.961588][ T6920] set_gssp_clnt+0xc3/0x1b0 [ 58.961609][ T6920] ? __pfx_set_gssp_clnt+0x10/0x10 [ 58.961638][ T6920] write_gssp+0x1f7/0x380 [ 58.961668][ T6920] ? __pfx_write_gssp+0x10/0x10 [ 58.961703][ T6920] ? lock_acquire+0x1d1/0x380 [ 58.961726][ T6920] ? ksys_write+0x12a/0x250 [ 58.961754][ T6920] ? __pfx_write_gssp+0x10/0x10 [ 58.961784][ T6920] proc_reg_write+0x240/0x330 [ 58.961812][ T6920] vfs_write+0x2aa/0x1050 [ 58.961839][ T6920] ? __pfx_proc_reg_write+0x10/0x10 [ 58.961863][ T6920] ? lock_acquire+0x1d1/0x380 [ 58.961885][ T6920] ? __fget_files+0x34/0x3d0 [ 58.961904][ T6920] ? __pfx_vfs_write+0x10/0x10 [ 58.961927][ T6920] ? find_held_lock+0x2b/0x80 [ 58.961947][ T6920] ? __fget_files+0x215/0x3d0 [ 58.961970][ T6920] ? __fget_files+0x21f/0x3d0 [ 58.961996][ T6920] ksys_write+0x12a/0x250 [ 58.962021][ T6920] ? __pfx_ksys_write+0x10/0x10 [ 58.962061][ T6920] do_syscall_64+0x123/0x790 [ 58.962083][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.962104][ T6920] RIP: 0033:0x7f3b4879f559 [ 58.962123][ T6920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.962142][ T6920] RSP: 002b:00007f3b49726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.962175][ T6920] RAX: ffffffffffffffda RBX: 00007f3b48a25fa0 RCX: 00007f3b4879f559 [ 58.962189][ T6920] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 58.962201][ T6920] RBP: 00007f3b48836b20 R08: 0000000000000000 R09: 0000000000000000 [ 58.962214][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.962226][ T6920] R13: 00007f3b48a26038 R14: 00007f3b48a25fa0 R15: 00007ffe55a3c828 [ 58.962254][ T6920] [ 58.966406][ T6920] kobject: kobject_add_internal failed for clnt-0 (error: -12 parent: rpc-clients) [ 58.984495][ T6920] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 59.171381][ T6931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'. [ 59.182138][ T6931] FAULT_INJECTION: forcing a failure. [ 59.182138][ T6931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.182158][ T6931] CPU: 3 UID: 0 PID: 6931 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(full) [ 59.182171][ T6931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.182177][ T6931] Call Trace: [ 59.182182][ T6931] [ 59.182187][ T6931] dump_stack_lvl+0x100/0x190 [ 59.182208][ T6931] should_fail_ex.cold+0x5/0xa [ 59.182222][ T6931] ? prepare_alloc_pages+0x16d/0x5b0 [ 59.182241][ T6931] should_fail_alloc_page+0xeb/0x140 [ 59.182273][ T6931] prepare_alloc_pages+0x1f0/0x5b0 [ 59.182295][ T6931] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 59.182311][ T6931] ? __lock_acquire+0x5c0/0x1f40 [ 59.182331][ T6931] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 59.182348][ T6931] ? update_load_avg+0x1fd/0x1500 [ 59.182359][ T6931] ? update_curr+0x6d/0x4b0 [ 59.182375][ T6931] ? __dequeue_task+0x1c62/0x2e50 [ 59.182397][ T6931] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.182413][ T6931] ? policy_nodemask+0xed/0x4f0 [ 59.182425][ T6931] alloc_pages_mpol+0x201/0x550 [ 59.182437][ T6931] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 59.182452][ T6931] folio_alloc_mpol_noprof+0x36/0x260 [ 59.182466][ T6931] shmem_alloc_folio+0x135/0x160 [ 59.182485][ T6931] shmem_alloc_and_add_folio+0x371/0xd40 [ 59.182500][ T6931] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 59.182514][ T6931] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 59.182525][ T6931] ? jhash+0x4f0/0x610 [ 59.182539][ T6932] ip_tables: iptables: counters copy to user failed while replacing table [ 59.182545][ T6931] shmem_get_folio_gfp+0x756/0x1980 [ 59.182589][ T6931] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 59.182607][ T6931] shmem_write_begin+0x1a4/0x420 [ 59.182621][ T6931] ? __pfx_shmem_write_begin+0x10/0x10 [ 59.182635][ T6931] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 59.182652][ T6931] generic_perform_write+0x292/0xa40 [ 59.182673][ T6931] ? __pfx_generic_perform_write+0x10/0x10 [ 59.182691][ T6931] ? file_update_time_flags+0x38c/0x520 [ 59.182707][ T6931] shmem_file_write_iter+0x10e/0x140 [ 59.182722][ T6931] vfs_write+0x6af/0x1050 [ 59.182737][ T6931] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.182753][ T6931] ? __pfx_vfs_write+0x10/0x10 [ 59.182766][ T6931] ? find_held_lock+0x2b/0x80 [ 59.182786][ T6931] ksys_write+0x12a/0x250 [ 59.182800][ T6931] ? __pfx_ksys_write+0x10/0x10 [ 59.182819][ T6931] do_syscall_64+0x123/0x790 [ 59.182832][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.182843][ T6931] RIP: 0033:0x7f8702d9f559 [ 59.182854][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.182864][ T6931] RSP: 002b:00007f8703d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.182876][ T6931] RAX: ffffffffffffffda RBX: 00007f8703025fa0 RCX: 00007f8702d9f559 [ 59.182883][ T6931] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000006 [ 59.182890][ T6931] RBP: 00007f8702e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 59.182896][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.182902][ T6931] R13: 00007f8703026038 R14: 00007f8703025fa0 R15: 00007ffd3e381db8 [ 59.182918][ T6931] [ 59.292794][ T5820] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.337726][ T6961] trusted_key: encrypted_key: insufficient parameters specified [ 59.341155][ T6958] netlink: 'syz.0.264': attribute type 29 has an invalid length. [ 59.388561][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 59.388575][ T42] audit: type=1326 audit(1792555080.582:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.0.266" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8702d9f559 code=0x0 [ 59.452921][ T5820] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 59.453815][ T5820] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 59.453828][ T5820] usb 6-1: config 1 has no interface number 0 [ 59.453846][ T5820] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 59.453857][ T5820] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 59.453869][ T5820] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.455593][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.455604][ T5820] usb 6-1: Product: syz [ 59.455611][ T5820] usb 6-1: Manufacturer: syz [ 59.455618][ T5820] usb 6-1: SerialNumber: syz [ 59.457616][ T6929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 59.457708][ T6929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 59.461274][ T5820] usb 6-1: Expected 3 endpoints, found: 2 [ 59.507889][ T6977] NILFS (sr0): couldn't find nilfs on the device [ 59.548779][ T42] audit: type=1400 audit(1792555080.742:535): avc: denied { mount } for pid=6978 comm="syz.4.269" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.853563][ C0] bridge0: port 3(syz_tun) entered learning state [ 59.893262][ T6982] random: crng reseeded on system resumption [ 59.901262][ T42] audit: type=1400 audit(1792555081.092:536): avc: denied { read append } for pid=6980 comm="syz.3.270" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 59.901653][ T42] audit: type=1400 audit(1792555081.092:537): avc: denied { open } for pid=6980 comm="syz.3.270" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 59.902126][ T42] audit: type=1400 audit(1792555081.092:538): avc: denied { map } for pid=6980 comm="syz.3.270" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 59.902851][ T42] audit: type=1400 audit(1792555081.092:539): avc: denied { write execute } for pid=6980 comm="syz.3.270" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.013881][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.014087][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.048337][ T42] audit: type=1400 audit(1792555081.242:540): avc: denied { create } for pid=6980 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.048609][ T42] audit: type=1400 audit(1792555081.242:541): avc: denied { setopt } for pid=6980 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.048816][ T42] audit: type=1400 audit(1792555081.242:542): avc: denied { accept } for pid=6980 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.050471][ T42] audit: type=1400 audit(1792555081.242:543): avc: denied { bind } for pid=6980 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.217218][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.217444][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.910547][ T7003] FAULT_INJECTION: forcing a failure. [ 60.910547][ T7003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.910569][ T7003] CPU: 3 UID: 0 PID: 7003 Comm: syz.0.276 Not tainted syzkaller #0 PREEMPT(full) [ 60.910583][ T7003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.910591][ T7003] Call Trace: [ 60.910595][ T7003] [ 60.910600][ T7003] dump_stack_lvl+0x100/0x190 [ 60.910623][ T7003] should_fail_ex.cold+0x5/0xa [ 60.910638][ T7003] ? prepare_alloc_pages+0x16d/0x5b0 [ 60.910658][ T7003] should_fail_alloc_page+0xeb/0x140 [ 60.910678][ T7003] prepare_alloc_pages+0x1f0/0x5b0 [ 60.910695][ T7003] ? rcu_read_unlock+0x17/0x60 [ 60.910710][ T7003] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 60.910725][ T7003] ? lru_gen_add_folio+0x201/0x1490 [ 60.910739][ T7003] ? __asan_memset+0x23/0x50 [ 60.910755][ T7003] ? __lock_acquire+0x5c0/0x1f40 [ 60.910770][ T7003] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 60.910787][ T7003] ? __css_rstat_updated+0x1ce/0x590 [ 60.910805][ T7003] ? lock_acquire+0x1d1/0x380 [ 60.910818][ T7003] ? do_raw_spin_lock+0x128/0x260 [ 60.910848][ T7003] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 60.910866][ T7003] ? find_held_lock+0x2b/0x80 [ 60.910885][ T7003] ? __lock_acquire+0x5c0/0x1f40 [ 60.910899][ T7003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.910916][ T7003] ? policy_nodemask+0xed/0x4f0 [ 60.910930][ T7003] alloc_pages_mpol+0x201/0x550 [ 60.910942][ T7003] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 60.910959][ T7003] folio_alloc_mpol_noprof+0x36/0x260 [ 60.910974][ T7003] shmem_alloc_folio+0x135/0x160 [ 60.910993][ T7003] shmem_alloc_and_add_folio+0x371/0xd40 [ 60.911011][ T7003] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 60.911025][ T7003] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 60.911041][ T7003] shmem_get_folio_gfp+0x756/0x1980 [ 60.911057][ T7003] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 60.911071][ T7003] ? filemap_map_pages+0x114a/0x2100 [ 60.911085][ T7003] shmem_fault+0x1fb/0xa30 [ 60.911098][ T7003] ? __pfx_shmem_fault+0x10/0x10 [ 60.911112][ T7003] ? __pfx_filemap_map_pages+0x10/0x10 [ 60.911132][ T7003] ? find_held_lock+0x2b/0x80 [ 60.911143][ T7003] ? __pfx_filemap_map_pages+0x10/0x10 [ 60.911160][ T7003] __do_fault+0x10b/0x440 [ 60.911176][ T7003] do_fault+0xb3f/0x1830 [ 60.911192][ T7003] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 60.911206][ T7003] ? __pfx_do_fault+0x10/0x10 [ 60.911222][ T7003] ? rcu_read_unlock+0x2d/0xb0 [ 60.911233][ T7003] ? rcu_read_unlock+0x2d/0xb0 [ 60.911245][ T7003] ? __pte_offset_map+0x179/0x310 [ 60.911263][ T7003] __handle_mm_fault+0x150b/0x2f60 [ 60.911278][ T7003] ? __pfx___handle_mm_fault+0x10/0x10 [ 60.911290][ T7003] ? pte_offset_map_lock+0x174/0x320 [ 60.911306][ T7003] ? find_held_lock+0x2b/0x80 [ 60.911353][ T7003] ? find_held_lock+0x2b/0x80 [ 60.911369][ T7003] ? follow_page_pte+0x536/0x1050 [ 60.911402][ T7003] handle_mm_fault+0x363/0xa20 [ 60.911417][ T7003] __get_user_pages+0x8a9/0x2c20 [ 60.911437][ T7003] ? __pfx_mt_find+0x10/0x10 [ 60.911451][ T7003] ? __pfx___get_user_pages+0x10/0x10 [ 60.911472][ T7003] populate_vma_page_range+0x267/0x3f0 [ 60.911490][ T7003] ? __pfx_populate_vma_page_range+0x10/0x10 [ 60.911507][ T7003] ? __pfx_find_vma_intersection+0x10/0x10 [ 60.911527][ T7003] __mm_populate+0x107/0x3a0 [ 60.911545][ T7003] ? __pfx___mm_populate+0x10/0x10 [ 60.911563][ T7003] ? up_write+0x2dc/0x5b0 [ 60.911581][ T7003] vm_mmap_pgoff+0x441/0x470 [ 60.911598][ T7003] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 60.911616][ T7003] ? __pfx_do_futex+0x10/0x10 [ 60.911636][ T7003] ksys_mmap_pgoff+0xe4/0x610 [ 60.911653][ T7003] ? __x64_sys_futex+0x358/0x4d0 [ 60.911663][ T7003] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 60.911680][ T7003] ? __pfx___x64_sys_futex+0x10/0x10 [ 60.911693][ T7003] __x64_sys_mmap+0x125/0x190 [ 60.911709][ T7003] do_syscall_64+0x123/0x790 [ 60.911722][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.911733][ T7003] RIP: 0033:0x7f8702d9f559 [ 60.911743][ T7003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.911756][ T7003] RSP: 002b:00007f8703d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 60.911768][ T7003] RAX: ffffffffffffffda RBX: 00007f8703025fa0 RCX: 00007f8702d9f559 [ 60.911775][ T7003] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 60.911782][ T7003] RBP: 00007f8702e36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 60.911789][ T7003] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 60.911796][ T7003] R13: 00007f8703026038 R14: 00007f8703025fa0 R15: 00007ffd3e381db8 [ 60.911811][ T7003] [ 60.999776][ T7003] ip_tables: iptables: counters copy to user failed while replacing table [ 61.186537][ T1129] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 61.188005][ T1129] ata1.00: configured for UDMA/100 [ 61.596009][ T7062] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 61.596066][ T7062] bond2: entered allmulticast mode [ 61.836632][ T7056] cgroup: fork rejected by pids controller in /syz0 [ 62.026121][ T63] usb 6-1: USB disconnect, device number 3 [ 62.372517][ T5819] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 62.406752][ T7164] xt_CONNSECMARK: invalid mode: 0 [ 62.523041][ T5819] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.524039][ T5819] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.524066][ T5819] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.524095][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.531416][ T7129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.541639][ T5819] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.558749][ T7176] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 62.745023][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.746468][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.828714][ T5820] usb 8-1: USB disconnect, device number 4 [ 63.263826][ T7189] openvswitch: netlink: Flow actions attr not present in new flow. [ 63.280903][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.283760][ T7190] bond2 (unregistering): Released all slaves [ 63.317972][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 63.317992][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'. [ 63.345454][ T7197] /dev/sr0: Can't open blockdev [ 63.366220][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.368867][ T7190] bond2 (unregistering): Released all slaves [ 63.376908][ T7201] evm: overlay not supported [ 63.412450][ T7203] bridge_slave_0: invalid flags given to default FDB implementation [ 63.467170][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.468526][ T7190] bond2 (unregistering): Released all slaves [ 63.569271][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.570199][ T7190] bond2 (unregistering): Released all slaves [ 63.636401][ T7225] loop5: detected capacity change from 0 to 4095 [ 63.639987][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.640157][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 63.641675][ T7190] bond2 (unregistering): Released all slaves [ 63.651948][ T7223] 9p: Bad value for 'rfdno' [ 63.665959][ T7225] overlayfs: failed to resolve './file0': -2 [ 63.701236][ T7225] Buffer I/O error on dev loop5, logical block 511, async page read [ 63.701547][ T5728] Buffer I/O error on dev loop5, logical block 511, async page read [ 63.782689][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.783996][ T7190] bond2 (unregistering): Released all slaves [ 63.868573][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.881800][ T7190] bond2 (unregistering): Released all slaves [ 63.948232][ T7243] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 63.953053][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.955082][ T7190] bond2 (unregistering): Released all slaves [ 64.041104][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 64.042686][ T7190] bond2 (unregistering): Released all slaves [ 64.060244][ T7245] FAULT_INJECTION: forcing a failure. [ 64.060244][ T7245] name failslab, interval 1, probability 0, space 0, times 0 [ 64.060291][ T7245] CPU: 0 UID: 0 PID: 7245 Comm: syz.3.323 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.060318][ T7245] Tainted: [L]=SOFTLOCKUP [ 64.060325][ T7245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.060336][ T7245] Call Trace: [ 64.060355][ T7245] [ 64.060364][ T7245] dump_stack_lvl+0x100/0x190 [ 64.060447][ T7245] should_fail_ex.cold+0x5/0xa [ 64.060473][ T7245] should_failslab+0xc2/0x120 [ 64.060504][ T7245] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 64.060521][ T7245] ? find_held_lock+0x2b/0x80 [ 64.060539][ T7245] ? alloc_inode+0x183/0x250 [ 64.060556][ T7245] alloc_inode+0x183/0x250 [ 64.060570][ T7245] path_from_stashed+0x25b/0x760 [ 64.060589][ T7245] ? __pfx_create_new_namespace+0x10/0x10 [ 64.060605][ T7245] open_namespace_file+0x8f/0x130 [ 64.060618][ T7245] ? __pfx_open_namespace_file+0x10/0x10 [ 64.060634][ T7245] vfs_open_tree+0x959/0xb60 [ 64.060647][ T7245] ? _raw_spin_unlock+0x28/0x50 [ 64.060694][ T7245] ? __pfx_vfs_open_tree+0x10/0x10 [ 64.060711][ T7245] __x64_sys_open_tree+0xbe/0x150 [ 64.060726][ T7245] do_syscall_64+0x123/0x790 [ 64.060739][ T7245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.060751][ T7245] RIP: 0033:0x7f8eb859f559 [ 64.060763][ T7245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.060774][ T7245] RSP: 002b:00007f8eb94ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 64.060800][ T7245] RAX: ffffffffffffffda RBX: 00007f8eb8825fa0 RCX: 00007f8eb859f559 [ 64.060808][ T7245] RDX: 0000000000009902 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 64.060816][ T7245] RBP: 00007f8eb8636b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.060823][ T7245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.060830][ T7245] R13: 00007f8eb8826038 R14: 00007f8eb8825fa0 R15: 00007ffeade00c28 [ 64.060845][ T7245] [ 64.098425][ T7190] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 64.099551][ T7190] bond2 (unregistering): Released all slaves [ 64.180714][ T7252] FAULT_INJECTION: forcing a failure. [ 64.180714][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 64.180747][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz.3.324 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.180773][ T7252] Tainted: [L]=SOFTLOCKUP [ 64.180780][ T7252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.180792][ T7252] Call Trace: [ 64.180799][ T7252] [ 64.180808][ T7252] dump_stack_lvl+0x100/0x190 [ 64.180852][ T7252] should_fail_ex.cold+0x5/0xa [ 64.180882][ T7252] should_failslab+0xc2/0x120 [ 64.180912][ T7252] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.180935][ T7252] ? __pfx_map_id_range_down+0x10/0x10 [ 64.180960][ T7252] ? security_inode_alloc+0x3b/0x2c0 [ 64.180998][ T7252] security_inode_alloc+0x3b/0x2c0 [ 64.181016][ T7252] inode_init_always_gfp+0xc6f/0xfb0 [ 64.181031][ T7252] alloc_inode+0x8e/0x250 [ 64.181047][ T7252] new_inode+0x22/0x1c0 [ 64.181063][ T7252] shmem_get_inode+0x1e3/0xf70 [ 64.181082][ T7252] ? __pfx_shmem_get_inode+0x10/0x10 [ 64.181102][ T7252] shmem_mknod+0x217/0x480 [ 64.181117][ T7252] ? __pfx_may_create+0x10/0x10 [ 64.181130][ T7252] ? __pfx_shmem_mknod+0x10/0x10 [ 64.181146][ T7252] ? inode_permission+0x374/0x620 [ 64.181163][ T7252] shmem_mkdir+0x31/0x80 [ 64.181179][ T7252] vfs_mkdir+0x364/0x850 [ 64.181194][ T7252] filename_mkdirat+0x48b/0x5e0 [ 64.181208][ T7252] ? __pfx_filename_mkdirat+0x10/0x10 [ 64.181219][ T7252] ? strncpy_from_user+0x19d/0x2d0 [ 64.181242][ T7252] ? do_getname+0x191/0x390 [ 64.181257][ T7252] __x64_sys_mkdirat+0x89/0xc0 [ 64.181269][ T7252] do_syscall_64+0x123/0x790 [ 64.181283][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.181295][ T7252] RIP: 0033:0x7f8eb859f559 [ 64.181305][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.181318][ T7252] RSP: 002b:00007f8eb94ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 64.181331][ T7252] RAX: ffffffffffffffda RBX: 00007f8eb8825fa0 RCX: 00007f8eb859f559 [ 64.181339][ T7252] RDX: 00000000000001ff RSI: 0000200000000640 RDI: ffffffffffffff9c [ 64.181349][ T7252] RBP: 00007f8eb8636b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.181357][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.181363][ T7252] R13: 00007f8eb8826038 R14: 00007f8eb8825fa0 R15: 00007ffeade00c28 [ 64.181378][ T7252] [ 64.227900][ T7256] XFS (nbd3): SB validate failed with error -5. [ 64.311430][ T7267] gfs2: error -5 reading superblock [ 64.405838][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 64.405857][ T42] audit: type=1400 audit(1792555085.602:588): avc: denied { ioctl } for pid=7272 comm="syz.3.327" path="socket:[16804]" dev="sockfs" ino=16804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.407768][ T7273] devpts: Unknown parameter 'vcan0' [ 64.410026][ T7273] netlink: 100 bytes leftover after parsing attributes in process `syz.3.327'. [ 64.450915][ T42] audit: type=1400 audit(1792555085.642:589): avc: denied { connect } for pid=7274 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.477227][ T42] audit: type=1400 audit(1792555085.672:590): avc: denied { mounton } for pid=7274 comm="syz.3.328" path="/" dev="proc" ino=19858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 64.507054][ T42] audit: type=1400 audit(1792555085.702:591): avc: denied { write } for pid=7278 comm="syz.4.329" name="mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.551613][ T42] audit: type=1400 audit(1792555085.742:592): avc: denied { write } for pid=7280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.600916][ T42] audit: type=1400 audit(1792555085.792:593): avc: denied { write } for pid=7283 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.601383][ T42] audit: type=1400 audit(1792555085.792:594): avc: granted { setsecparam } for pid=7284 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 64.603650][ T42] audit: type=1400 audit(1792555085.802:595): avc: denied { getopt } for pid=7284 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.636598][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 64.788256][ T42] audit: type=1400 audit(1792555085.982:596): avc: denied { write } for pid=7294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.842651][ T7301] FAULT_INJECTION: forcing a failure. [ 64.842651][ T7301] name failslab, interval 1, probability 0, space 0, times 0 [ 64.842695][ T7301] CPU: 3 UID: 0 PID: 7301 Comm: syz.4.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.842723][ T7301] Tainted: [L]=SOFTLOCKUP [ 64.842730][ T7301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.842742][ T7301] Call Trace: [ 64.842757][ T7301] [ 64.842766][ T7301] dump_stack_lvl+0x100/0x190 [ 64.842846][ T7301] should_fail_ex.cold+0x5/0xa [ 64.842889][ T7301] should_failslab+0xc2/0x120 [ 64.842934][ T7301] __kmalloc_noprof+0xfc/0x840 [ 64.842960][ T7301] ? security_inode_init_security+0x113/0x370 [ 64.843000][ T7301] security_inode_init_security+0x113/0x370 [ 64.843028][ T7301] ? __pfx_shmem_initxattrs+0x10/0x10 [ 64.843057][ T7301] ? __pfx_security_inode_init_security+0x10/0x10 [ 64.843092][ T7301] shmem_mknod+0x2ce/0x480 [ 64.843118][ T7301] ? __pfx_may_create+0x10/0x10 [ 64.843141][ T7301] ? __pfx_shmem_mknod+0x10/0x10 [ 64.843169][ T7301] ? inode_permission+0x374/0x620 [ 64.843198][ T7301] shmem_mkdir+0x31/0x80 [ 64.843226][ T7301] vfs_mkdir+0x364/0x850 [ 64.843254][ T7301] filename_mkdirat+0x48b/0x5e0 [ 64.843277][ T7301] ? __pfx_filename_mkdirat+0x10/0x10 [ 64.843326][ T7301] ? strncpy_from_user+0x19d/0x2d0 [ 64.843360][ T7301] ? do_getname+0x191/0x390 [ 64.843385][ T7301] __x64_sys_mkdirat+0x89/0xc0 [ 64.843406][ T7301] do_syscall_64+0x123/0x790 [ 64.843466][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.843488][ T7301] RIP: 0033:0x7f61d099f559 [ 64.843515][ T7301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.843535][ T7301] RSP: 002b:00007f61cebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 64.843571][ T7301] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099f559 [ 64.843585][ T7301] RDX: 00000000000001ff RSI: 0000200000000640 RDI: ffffffffffffff9c [ 64.843599][ T7301] RBP: 00007f61d0a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.843611][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.843625][ T7301] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffe71028e28 [ 64.843654][ T7301] [ 64.859002][ T42] audit: type=1400 audit(1792555086.052:597): avc: denied { write } for pid=7299 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.893104][ T1355] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 64.965355][ T7315] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 64.965381][ T7315] overlayfs: missing 'lowerdir' [ 65.033134][ T7326] IPv6: Can't replace route, no match found [ 65.066698][ T5732] Bluetooth: Unknown LE signaling command 0x61 [ 65.066718][ T5732] Bluetooth: Wrong link type (-22) [ 65.069688][ T7325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.340'. [ 65.069954][ T7325] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 65.069976][ T7325] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 65.075184][ T1355] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 65.076261][ T1355] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.076287][ T1355] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 65.076309][ T1355] usb 6-1: config 0 interface 0 has no altsetting 0 [ 65.079187][ T1355] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 65.079208][ T1355] usb 6-1: Product: syz [ 65.079219][ T1355] usb 6-1: Manufacturer: syz [ 65.079232][ T1355] usb 6-1: SerialNumber: syz [ 65.086977][ T1355] usb 6-1: config 0 descriptor?? [ 65.095003][ T1355] usb 6-1: selecting invalid altsetting 0 [ 65.109680][ T7333] FAULT_INJECTION: forcing a failure. [ 65.109680][ T7333] name failslab, interval 1, probability 0, space 0, times 0 [ 65.109708][ T7333] CPU: 0 UID: 0 PID: 7333 Comm: syz.3.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.109731][ T7333] Tainted: [L]=SOFTLOCKUP [ 65.109736][ T7333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.109743][ T7333] Call Trace: [ 65.109748][ T7333] [ 65.109753][ T7333] dump_stack_lvl+0x100/0x190 [ 65.109773][ T7333] should_fail_ex.cold+0x5/0xa [ 65.109790][ T7333] should_failslab+0xc2/0x120 [ 65.109809][ T7333] __kmalloc_noprof+0xfc/0x840 [ 65.109826][ T7333] ? security_inode_init_security+0x113/0x370 [ 65.109844][ T7333] security_inode_init_security+0x113/0x370 [ 65.109865][ T7333] ? __pfx_shmem_initxattrs+0x10/0x10 [ 65.109882][ T7333] ? __pfx_security_inode_init_security+0x10/0x10 [ 65.109902][ T7333] shmem_mknod+0x2ce/0x480 [ 65.109917][ T7333] ? __pfx_may_create+0x10/0x10 [ 65.109931][ T7333] ? __pfx_shmem_mknod+0x10/0x10 [ 65.109949][ T7333] ? inode_permission+0x374/0x620 [ 65.109967][ T7333] shmem_mkdir+0x31/0x80 [ 65.109984][ T7333] vfs_mkdir+0x364/0x850 [ 65.110000][ T7333] filename_mkdirat+0x48b/0x5e0 [ 65.110013][ T7333] ? __pfx_filename_mkdirat+0x10/0x10 [ 65.110024][ T7333] ? strncpy_from_user+0x19d/0x2d0 [ 65.110037][ T7333] ? do_getname+0x191/0x390 [ 65.110051][ T7333] __x64_sys_mkdirat+0x89/0xc0 [ 65.110062][ T7333] do_syscall_64+0x123/0x790 [ 65.110076][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.110087][ T7333] RIP: 0033:0x7f8eb859f559 [ 65.110097][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.110108][ T7333] RSP: 002b:00007f8eb94ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 65.110120][ T7333] RAX: ffffffffffffffda RBX: 00007f8eb8825fa0 RCX: 00007f8eb859f559 [ 65.110127][ T7333] RDX: 00000000000001ff RSI: 0000200000000640 RDI: ffffffffffffff9c [ 65.110134][ T7333] RBP: 00007f8eb8636b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.110141][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.110148][ T7333] R13: 00007f8eb8826038 R14: 00007f8eb8825fa0 R15: 00007ffeade00c28 [ 65.110163][ T7333] [ 65.169474][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.346'. [ 65.170724][ T7340] openvswitch: netlink: Unknown nsh attribute 0 [ 65.256453][ T7349] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.259989][ T7350] tmpfs: Unknown parameter 'usrquoùa_block_hardlimit' [ 65.298002][ T50] usb 6-1: USB disconnect, device number 4 [ 65.303194][ T7288] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.354715][ T9] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 65.639984][ T7359] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 65.640000][ T7359] CIFS mount error: No usable UNC path provided in device string! [ 65.640000][ T7359] [ 65.640144][ T7359] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 65.747640][ T7366] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.832980][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.838847][ T7371] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 65.967995][ T7382] macvlan3: entered promiscuous mode [ 65.968019][ T7382] bridge0: entered promiscuous mode [ 65.976631][ T7383] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 66.017144][ T7385] gfs2: error -5 reading superblock [ 66.074295][ T7398] gfs2: error -5 reading superblock [ 66.222140][ T7409] aoe: error packet from 0.0@syzkaller1; ecode=0 'no such error' [ 66.233719][ T7409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.388346][ T7418] FAULT_INJECTION: forcing a failure. [ 66.388346][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 66.388370][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.4.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.388386][ T7418] Tainted: [L]=SOFTLOCKUP [ 66.388390][ T7418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.388397][ T7418] Call Trace: [ 66.388401][ T7418] [ 66.388406][ T7418] dump_stack_lvl+0x100/0x190 [ 66.388428][ T7418] should_fail_ex.cold+0x5/0xa [ 66.388449][ T7418] should_failslab+0xc2/0x120 [ 66.388469][ T7418] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.388483][ T7418] ? __pfx_sprintf+0x10/0x10 [ 66.388494][ T7418] ? call_usermodehelper_setup+0xaf/0x360 [ 66.388508][ T7418] ? __pfx_umh_keys_cleanup+0x10/0x10 [ 66.388528][ T7418] call_usermodehelper_setup+0xaf/0x360 [ 66.388541][ T7418] ? __pfx_umh_keys_init+0x10/0x10 [ 66.388560][ T7418] call_sbin_request_key+0x6ff/0xd90 [ 66.388581][ T7418] ? __pfx_call_sbin_request_key+0x10/0x10 [ 66.388600][ T7418] ? key_instantiate_and_link+0x39d/0x4b0 [ 66.388612][ T7418] ? key_alloc+0xbb4/0x1310 [ 66.388623][ T7418] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 66.388644][ T7418] ? request_key_auth_new+0x732/0xb50 [ 66.388657][ T7418] ? __pfx_request_key_auth_new+0x10/0x10 [ 66.388672][ T7418] ? __pfx_call_sbin_request_key+0x10/0x10 [ 66.388691][ T7418] request_key_and_link+0x1115/0x1330 [ 66.388710][ T7418] ? __pfx_request_key_and_link+0x10/0x10 [ 66.388727][ T7418] ? __pfx___might_resched+0x10/0x10 [ 66.388740][ T7418] ? find_held_lock+0x2b/0x80 [ 66.388753][ T7418] ? __pfx_key_default_cmp+0x10/0x10 [ 66.388766][ T7418] ? __pfx_keyring_search_iterator+0x10/0x10 [ 66.388781][ T7418] ? _copy_from_user+0x59/0xd0 [ 66.388801][ T7418] __do_sys_request_key+0x2a2/0x3c0 [ 66.388817][ T7418] ? __pfx___do_sys_request_key+0x10/0x10 [ 66.388837][ T7418] do_syscall_64+0x123/0x790 [ 66.388850][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.388862][ T7418] RIP: 0033:0x7f61d099f559 [ 66.388872][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.388883][ T7418] RSP: 002b:00007f61cebf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 66.388895][ T7418] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099f559 [ 66.388903][ T7418] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000280 [ 66.388910][ T7418] RBP: 00007f61d0a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.388916][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.388923][ T7418] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffe71028e28 [ 66.388938][ T7418] [ 66.602486][ T5772] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.754399][ T5772] usb 8-1: Using ep0 maxpacket: 8 [ 66.754950][ T5772] usb 8-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 66.758252][ T5772] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.758273][ T5772] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.760235][ T5772] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.760254][ T5772] usb 8-1: Product: syz [ 66.760266][ T5772] usb 8-1: Manufacturer: syz [ 66.760280][ T5772] usb 8-1: SerialNumber: syz [ 66.763186][ T5772] usb 8-1: config 0 descriptor?? [ 66.829200][ T7435] FAULT_INJECTION: forcing a failure. [ 66.829200][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 66.829236][ T7435] CPU: 3 UID: 0 PID: 7435 Comm: syz.1.367 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.829264][ T7435] Tainted: [L]=SOFTLOCKUP [ 66.829271][ T7435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.829284][ T7435] Call Trace: [ 66.829291][ T7435] [ 66.829298][ T7435] dump_stack_lvl+0x100/0x190 [ 66.829330][ T7435] should_fail_ex.cold+0x5/0xa [ 66.829356][ T7435] ? stack_depot_save_flags+0x27/0x9f0 [ 66.829382][ T7435] should_failslab+0xc2/0x120 [ 66.829413][ T7435] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.829440][ T7435] ? kasan_save_stack+0x3f/0x50 [ 66.829466][ T7435] ? kasan_save_stack+0x30/0x50 [ 66.829500][ T7435] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 66.829537][ T7435] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 66.829573][ T7435] idr_get_free+0x52e/0xa00 [ 66.829614][ T7435] idr_alloc_u32+0x1ac/0x320 [ 66.829638][ T7435] ? __pfx_idr_alloc_u32+0x10/0x10 [ 66.829676][ T7435] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.829717][ T7435] idr_alloc+0xc0/0x130 [ 66.829736][ T7435] ? __pfx_idr_alloc+0x10/0x10 [ 66.829755][ T7435] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.829792][ T7435] tipc_conn_alloc+0x337/0x590 [ 66.829824][ T7435] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 66.829845][ T7435] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 66.829867][ T7435] ? net_generic+0xea/0x2a0 [ 66.829894][ T7435] tipc_group_create+0x4ab/0x660 [ 66.829917][ T7435] tipc_setsockopt+0x611/0xe30 [ 66.829944][ T7435] ? __pfx_tipc_setsockopt+0x10/0x10 [ 66.829972][ T7435] ? __fget_files+0x215/0x3d0 [ 66.829995][ T7435] ? selinux_socket_setsockopt+0x6a/0x80 [ 66.830026][ T7435] ? __pfx_tipc_setsockopt+0x10/0x10 [ 66.830052][ T7435] do_sock_setsockopt+0xf3/0x1d0 [ 66.830121][ T7435] __sys_setsockopt+0x195/0x220 [ 66.830151][ T7435] __x64_sys_setsockopt+0xbd/0x160 [ 66.830174][ T7435] ? do_syscall_64+0xae/0x790 [ 66.830194][ T7435] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.830215][ T7435] do_syscall_64+0x123/0x790 [ 66.830237][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.830259][ T7435] RIP: 0033:0x7f3b4879f559 [ 66.830276][ T7435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.830296][ T7435] RSP: 002b:00007f3b49726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.830315][ T7435] RAX: ffffffffffffffda RBX: 00007f3b48a25fa0 RCX: 00007f3b4879f559 [ 66.830329][ T7435] RDX: 0000000000000087 RSI: 000000000000010f RDI: 000000000000000a [ 66.830340][ T7435] RBP: 00007f3b48836b20 R08: 000000000000002e R09: 0000000000000000 [ 66.830353][ T7435] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 66.830365][ T7435] R13: 00007f3b48a26038 R14: 00007f3b48a25fa0 R15: 00007ffe55a3c828 [ 66.830392][ T7435] [ 66.967418][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 66.968742][ T5772] usb 8-1: USB disconnect, device number 5 [ 67.250262][ T7480] Cannot find set identified by id 0 to match [ 67.448209][ T7495] syzkaller0: entered promiscuous mode [ 67.448230][ T7495] syzkaller0: entered allmulticast mode [ 68.212467][ T1355] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 68.385271][ T1355] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 68.386187][ T1355] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.386204][ T1355] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.386221][ T1355] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.388006][ T1355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 68.388026][ T1355] usb 9-1: Product: syz [ 68.388040][ T1355] usb 9-1: Manufacturer: syz [ 68.388051][ T1355] usb 9-1: SerialNumber: syz [ 68.601369][ T1355] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 68.853712][ T7543] ip_tables: iptables: counters copy to user failed while replacing table [ 68.853797][ T1355] usb 9-1: USB disconnect, device number 2 [ 68.855167][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 68.855210][ T7543] netlink: 'syz.4.390': attribute type 5 has an invalid length. [ 68.855221][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 68.879640][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 68.879670][ T7543] netlink: 'syz.4.390': attribute type 5 has an invalid length. [ 68.879681][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 68.896520][ T5843] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.896560][ T5843] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.896590][ T5843] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.896619][ T5843] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.941348][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 69.021426][ T6954] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.607379][ T7612] FAULT_INJECTION: forcing a failure. [ 69.607379][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 69.607417][ T7612] CPU: 2 UID: 0 PID: 7612 Comm: syz.0.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.607447][ T7612] Tainted: [L]=SOFTLOCKUP [ 69.607455][ T7612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.607465][ T7612] Call Trace: [ 69.607481][ T7612] [ 69.607489][ T7612] dump_stack_lvl+0x100/0x190 [ 69.607536][ T7612] should_fail_ex.cold+0x5/0xa [ 69.607556][ T7612] should_failslab+0xc2/0x120 [ 69.607579][ T7612] __kmalloc_noprof+0xfc/0x840 [ 69.607594][ T7612] ? rcu_is_watching+0x13/0xc0 [ 69.607612][ T7612] ? tomoyo_realpath_from_path+0xb6/0x690 [ 69.607630][ T7612] tomoyo_realpath_from_path+0xb6/0x690 [ 69.607646][ T7612] tomoyo_path_number_perm+0x23c/0x580 [ 69.607663][ T7612] ? tomoyo_path_number_perm+0x22e/0x580 [ 69.607680][ T7612] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.607698][ T7612] ? __pfx_futex_wait+0x10/0x10 [ 69.607715][ T7612] ? __lock_acquire+0x5c0/0x1f40 [ 69.607736][ T7612] ? __fget_files+0x34/0x3d0 [ 69.607747][ T7612] ? find_held_lock+0x2b/0x80 [ 69.607757][ T7612] ? hook_file_ioctl_common+0x140/0x440 [ 69.607774][ T7612] ? __fget_files+0x21f/0x3d0 [ 69.607786][ T7612] security_file_ioctl+0xd3/0x230 [ 69.607805][ T7612] __x64_sys_ioctl+0xb7/0x210 [ 69.607821][ T7612] do_syscall_64+0x123/0x790 [ 69.607839][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.607851][ T7612] RIP: 0033:0x7f8702d9f559 [ 69.607863][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.607875][ T7612] RSP: 002b:00007f8703d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.607896][ T7612] RAX: ffffffffffffffda RBX: 00007f8703025fa0 RCX: 00007f8702d9f559 [ 69.607904][ T7612] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000005 [ 69.607911][ T7612] RBP: 00007f8702e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 69.607918][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.607928][ T7612] R13: 00007f8703026038 R14: 00007f8703025fa0 R15: 00007ffd3e381db8 [ 69.607945][ T7612] [ 69.607950][ T7612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.640925][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 69.667059][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 69.667074][ T42] audit: type=1400 audit(1792555090.872:650): avc: denied { create } for pid=7615 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.670374][ T42] audit: type=1400 audit(1792555090.872:651): avc: denied { ioctl } for pid=7615 comm="syz.0.404" path="socket:[22050]" dev="sockfs" ino=22050 ioctlcmd=0x5866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.675885][ T42] audit: type=1400 audit(1792555090.882:652): avc: denied { write } for pid=7615 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.972385][ T1355] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 70.102396][ T1355] usb 5-1: device descriptor read/64, error -71 [ 70.116733][ T42] audit: type=1400 audit(1792555091.312:653): avc: denied { read } for pid=7620 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.342418][ T1355] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 70.419127][ T42] audit: type=1400 audit(1792555091.612:654): avc: denied { bind } for pid=7620 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.472398][ T1355] usb 5-1: device descriptor read/64, error -71 [ 70.584880][ T1355] usb usb5-port1: attempt power cycle [ 70.909509][ T7541] usblp0: removed [ 70.922623][ T1355] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 70.954174][ T1355] usb 5-1: device descriptor read/8, error -71 [ 70.970995][ T42] audit: type=1400 audit(1792555092.162:655): avc: denied { setopt } for pid=7626 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.971497][ T7627] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 70.988069][ T7627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.991763][ T7627] netlink: 48 bytes leftover after parsing attributes in process `syz.4.406'. [ 71.047179][ T5732] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.128518][ T7636] netlink: 68 bytes leftover after parsing attributes in process `syz.1.410'. [ 71.194696][ T1355] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 71.201652][ T7641] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 71.213112][ T1355] usb 5-1: device descriptor read/8, error -71 [ 71.213497][ T42] audit: type=1400 audit(1792555092.412:656): avc: denied { mounton } for pid=7642 comm="syz.1.413" path="/95/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 71.217377][ T42] audit: type=1400 audit(1792555092.412:657): avc: denied { mount } for pid=7642 comm="syz.1.413" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.220652][ T7643] xt_REDIRECT: bad rangesize 26624. [ 71.222535][ T42] audit: type=1400 audit(1792555092.422:658): avc: denied { write } for pid=7642 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.223050][ T7643] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ð䅯»—yshare [ 71.227544][ T7643] CIFS: VFS: Error connecting to socket. Aborting operation. [ 71.227640][ T7643] CIFS: VFS: cifs_mount failed w/return code = -111 [ 71.235180][ T7641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.254464][ T42] audit: type=1400 audit(1792555092.452:659): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.267160][ T7641] bond3: (slave geneve2): making interface the new active one [ 71.275338][ T7641] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 71.293098][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.293297][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.293332][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.293361][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.332765][ T1355] usb usb5-port1: unable to enumerate USB device [ 71.368171][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.368249][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.371059][ T1851] cfg80211: failed to load regulatory.db [ 71.493855][ T7662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.550311][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.557457][ T7675] tipc: Resetting bearer [ 71.620192][ T7677] FAULT_INJECTION: forcing a failure. [ 71.620192][ T7677] name fail_futex, interval 1, probability 0, space 0, times 0 [ 71.620225][ T7677] CPU: 0 UID: 0 PID: 7677 Comm: syz.3.425 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.620253][ T7677] Tainted: [L]=SOFTLOCKUP [ 71.620261][ T7677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.620273][ T7677] Call Trace: [ 71.620281][ T7677] [ 71.620289][ T7677] dump_stack_lvl+0x100/0x190 [ 71.620375][ T7677] should_fail_ex.cold+0x5/0xa [ 71.620415][ T7677] get_futex_key+0x1c9/0x13e0 [ 71.620463][ T7677] ? __pfx_get_futex_key+0x10/0x10 [ 71.620500][ T7677] futex_wait_setup+0x91/0x540 [ 71.620529][ T7677] __futex_wait+0x19f/0x360 [ 71.620553][ T7677] ? __pfx___futex_wait+0x10/0x10 [ 71.620575][ T7677] ? __pfx_try_to_wake_up+0x10/0x10 [ 71.620599][ T7677] ? futex_hash+0x311/0x400 [ 71.620629][ T7677] ? __pfx_futex_wake_mark+0x10/0x10 [ 71.620656][ T7677] ? find_held_lock+0x2b/0x80 [ 71.620673][ T7677] ? futex_wake+0x4ea/0x5e0 [ 71.620700][ T7677] futex_wait+0xe6/0x370 [ 71.620724][ T7677] ? __pfx_futex_wait+0x10/0x10 [ 71.620752][ T7677] ? putname+0xb1/0x110 [ 71.620783][ T7677] ? kmem_cache_free+0x127/0x6c0 [ 71.620814][ T7677] do_futex+0x265/0x440 [ 71.620834][ T7677] ? __pfx_do_futex+0x10/0x10 [ 71.620865][ T7677] ? __pfx_do_sys_openat2+0x10/0x10 [ 71.620894][ T7677] __x64_sys_futex+0x34f/0x4d0 [ 71.620915][ T7677] ? __x64_sys_openat+0x12d/0x210 [ 71.620937][ T7677] ? __pfx___x64_sys_futex+0x10/0x10 [ 71.620965][ T7677] do_syscall_64+0x123/0x790 [ 71.621025][ T7677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.621046][ T7677] RIP: 0033:0x7f8eb859f559 [ 71.621064][ T7677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.621082][ T7677] RSP: 002b:00007f8eb94ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.621121][ T7677] RAX: ffffffffffffffda RBX: 00007f8eb8825fa8 RCX: 00007f8eb859f559 [ 71.621135][ T7677] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8eb8825fa8 [ 71.621147][ T7677] RBP: 00007f8eb8825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 71.621159][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.621170][ T7677] R13: 00007f8eb8826038 R14: 00007ffeade00b40 R15: 00007ffeade00c28 [ 71.621197][ T7677] [ 71.677869][ T7684] gadgetfs: bound to dummy_udc driver [ 71.754524][ T7686] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 72.201450][ T7694] CacheFiles: Failed to register: -95 [ 72.602471][ T1851] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.655631][ T7705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4202 sclass=netlink_route_socket pid=7705 comm=syz.4.432 [ 72.766795][ T1851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 72.766859][ T1851] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 72.771936][ T1851] usb 6-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 72.771964][ T1851] usb 6-1: config 189 has 0 interfaces, different from the descriptor's value: 1 [ 72.788163][ T7726] ip_tables: iptables: counters copy to user failed while replacing table [ 72.792732][ T1851] usb 6-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 72.792754][ T1851] usb 6-1: Product: syz [ 72.792767][ T1851] usb 6-1: Manufacturer: syz [ 72.792778][ T1851] usb 6-1: SerialNumber: syz [ 72.919117][ T7748] befs: (nullb0): No write support. Marking filesystem read-only [ 72.920188][ T7748] befs: (nullb0): invalid magic header [ 72.940118][ T7702] cgroup: fork rejected by pids controller in /syz4 [ 73.008165][ T5820] usb 6-1: USB disconnect, device number 5 [ 73.009961][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.442'. [ 73.202999][ T7791] netlink: 'syz.3.446': attribute type 4 has an invalid length. [ 73.203014][ T7791] netlink: 17 bytes leftover after parsing attributes in process `syz.3.446'. [ 73.451799][ T7809] misc userio: No port type given on /dev/userio [ 73.455352][ T7808] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.518028][ T7816] nvme_fabrics: unknown parameter or missing value 'transxorg=¢�ì•]Ž' in ctrl creation request [ 73.549712][ T7816] netlink: Failed to add helper -22 [ 73.549757][ T7816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.868327][ T7841] syzkaller1: entered promiscuous mode [ 73.868347][ T7841] syzkaller1: entered allmulticast mode [ 74.089249][ T7859] syzkaller1: entered promiscuous mode [ 74.089276][ T7859] syzkaller1: entered allmulticast mode [ 74.422377][ T1851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 74.506942][ T7874] ip6t_srh: unknown srh invflags 51E8 [ 74.573118][ T1851] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 74.577750][ T1851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.577774][ T1851] usb 5-1: Product: syz [ 74.577786][ T1851] usb 5-1: Manufacturer: syz [ 74.577804][ T1851] usb 5-1: SerialNumber: syz [ 74.645013][ T7883] __nla_validate_parse: 3 callbacks suppressed [ 74.645027][ T7883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.470'. [ 74.645043][ T7883] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 74.685183][ T42] kauditd_printk_skb: 172 callbacks suppressed [ 74.685202][ T42] audit: type=1400 audit(1792555095.882:832): avc: denied { create } for pid=7884 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.704738][ T42] audit: type=1400 audit(1792555095.902:833): avc: denied { ioctl } for pid=7884 comm="syz.4.471" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.724281][ T42] audit: type=1400 audit(1792555095.922:834): avc: denied { write } for pid=7884 comm="syz.4.471" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.730711][ T42] audit: type=1400 audit(1792555095.922:835): avc: denied { map } for pid=7884 comm="syz.4.471" path="socket:[22298]" dev="sockfs" ino=22298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 74.731951][ T42] audit: type=1400 audit(1792555095.922:836): avc: denied { cmd } for pid=7884 comm="iou-wrk-7885" path="socket:[22298]" dev="sockfs" ino=22298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.791679][ T42] audit: type=1400 audit(1792555095.982:837): avc: denied { accept } for pid=7884 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.791997][ T42] audit: type=1400 audit(1792555095.982:838): avc: denied { write } for pid=7884 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.807966][ T1851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 74.807995][ T1851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 74.808008][ T1851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 74.827387][ T1851] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 74.848815][ T1851] usb 5-1: USB disconnect, device number 8 [ 75.214042][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 75.214080][ C0] bridge0: topology change detected, propagating [ 75.269967][ T42] audit: type=1400 audit(1792555096.462:839): avc: denied { search } for pid=7893 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.271173][ T42] audit: type=1400 audit(1792555096.462:840): avc: denied { search } for pid=7893 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.271298][ T42] audit: type=1400 audit(1792555096.462:841): avc: denied { search } for pid=7893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.398335][ T7901] netlink: 'syz.0.472': attribute type 12 has an invalid length. [ 75.422493][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.422537][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.422568][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.422598][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.662573][ T5732] Bluetooth: hci1: ACL packet for unknown connection handle 2249 [ 76.367688][ T7911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.370942][ T7913] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.375102][ T7911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.658998][ T7827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.714527][ T7925] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.719312][ T7925] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 76.719335][ T7925] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 76.719376][ T7925] UDF-fs: Scanning with blocksize 512 failed [ 76.727916][ T7925] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.731527][ T7925] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 76.731549][ T7925] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 76.731561][ T7925] UDF-fs: Scanning with blocksize 1024 failed [ 76.735389][ T7925] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.735503][ T7925] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 76.735520][ T7925] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 76.735531][ T7925] UDF-fs: Scanning with blocksize 2048 failed [ 76.735921][ T7925] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.735990][ T7925] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 76.736006][ T7925] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 76.736017][ T7925] UDF-fs: Scanning with blocksize 4096 failed [ 76.736024][ T7925] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 77.035188][ T7950] Cannot find map_set index 135 as target [ 77.270489][ T7962] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 77.331000][ T7965] tipc: Enabled bearer , priority 0 [ 77.350122][ T7965] can0: slcan on pts0. [ 77.385038][ T7967] tmpfs: Bad value for 'mpol' [ 77.421041][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 77.439175][ T7964] can0 (unregistered): slcan off pts0. [ 77.508263][ T7984] fuse: Bad value for 'fd' [ 78.128277][ T5776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.128324][ T5776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.230788][ T5776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.230811][ T5776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.235592][ T8041] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.258678][ T8044] netlink: 536 bytes leftover after parsing attributes in process `syz.4.508'. [ 78.258708][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.508'. [ 78.275076][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.275966][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.276454][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.277052][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.277509][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.323747][ T5776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.323770][ T5776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.396302][ T8054] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.396405][ T8054] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.398168][ T5776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.398188][ T5776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.422686][ T8054] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.430411][ T8054] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.430607][ T8054] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.436142][ T8054] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.448633][ T8054] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.448697][ T8054] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.477898][ T8054] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.488924][ T8054] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.488958][ T8054] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.508059][ T8054] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.602069][ T5776] bridge_slave_1: left allmulticast mode [ 78.602087][ T5776] bridge_slave_1: left promiscuous mode [ 78.603537][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.609221][ T5776] bridge_slave_0: left allmulticast mode [ 78.609236][ T5776] bridge_slave_0: left promiscuous mode [ 78.609738][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.780292][ T8086] FAT-fs (nullb0): bogus number of reserved sectors [ 78.780304][ T8086] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 78.798767][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 78.829702][ T8090] rdma_op ffff8880281f6238 conn xmit_rdma 0000000000000000 [ 78.837595][ T8093] rdma_op ffff888035f34a38 conn xmit_rdma 0000000000000000 [ 78.841110][ T5776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.846104][ T5776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.852429][ T5776] bond0 (unregistering): Released all slaves [ 78.869487][ T8046] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.915711][ T8105] netlink: 'syz.3.519': attribute type 1 has an invalid length. [ 78.927424][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.519'. [ 78.927658][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.519'. [ 78.929168][ T8105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 79.237819][ T8126] FAULT_INJECTION: forcing a failure. [ 79.237819][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 79.237870][ T8126] CPU: 1 UID: 0 PID: 8126 Comm: syz.1.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.237894][ T8126] Tainted: [L]=SOFTLOCKUP [ 79.237903][ T8126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.237913][ T8126] Call Trace: [ 79.237931][ T8126] [ 79.237940][ T8126] dump_stack_lvl+0x100/0x190 [ 79.238040][ T8126] should_fail_ex.cold+0x5/0xa [ 79.238078][ T8126] should_failslab+0xc2/0x120 [ 79.238125][ T8126] __kmalloc_cache_noprof+0x91/0x6d0 [ 79.238167][ T8126] ? bpf_int_jit_compile+0x12ff/0x1820 [ 79.238212][ T8126] bpf_int_jit_compile+0x12ff/0x1820 [ 79.238249][ T8126] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 79.238291][ T8126] __bpf_prog_select_runtime+0x8c3/0xc60 [ 79.238317][ T8126] ? __asan_memcpy+0x3c/0x60 [ 79.238344][ T8126] bpf_prepare_filter+0xd32/0x11e0 [ 79.238404][ T8126] ? __pfx_seccomp_check_filter+0x10/0x10 [ 79.238438][ T8126] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 79.238466][ T8126] ? __asan_memcpy+0x3c/0x60 [ 79.238488][ T8126] ? kmemdup_noprof+0x49/0x60 [ 79.238515][ T8126] bpf_prog_create_from_user+0x1df/0x2e0 [ 79.238543][ T8126] ? __pfx_seccomp_check_filter+0x10/0x10 [ 79.238573][ T8126] do_seccomp+0x870/0x27c0 [ 79.238611][ T8126] ? __pfx_do_seccomp+0x10/0x10 [ 79.238632][ T8126] ? __sys_socket+0xac/0x260 [ 79.238674][ T8126] ? xfd_validate_state+0x129/0x190 [ 79.238708][ T8126] do_syscall_64+0x123/0x790 [ 79.238769][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.238791][ T8126] RIP: 0033:0x7f3b4879f559 [ 79.238808][ T8126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.238827][ T8126] RSP: 002b:00007f3b49726028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 79.238867][ T8126] RAX: ffffffffffffffda RBX: 00007f3b48a25fa0 RCX: 00007f3b4879f559 [ 79.238882][ T8126] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000000000000001 [ 79.238894][ T8126] RBP: 00007f3b48836b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.238906][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.238919][ T8126] R13: 00007f3b48a26038 R14: 00007f3b48a25fa0 R15: 00007ffe55a3c828 [ 79.238946][ T8126] [ 79.372498][ T5776] hsr_slave_0: left promiscuous mode [ 79.383168][ T5776] hsr_slave_1: left promiscuous mode [ 79.388558][ T5776] veth1_macvtap: left promiscuous mode [ 79.388580][ T5776] veth0_macvtap: left promiscuous mode [ 79.388623][ T5776] veth1_vlan: left promiscuous mode [ 79.388685][ T5776] veth0_vlan: left promiscuous mode [ 79.402843][ T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 79.571088][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 79.571456][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 79.582192][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.589524][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 79.589573][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 79.589629][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.701077][ T9] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 79.724370][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 79.739317][ T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 79.762871][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 79.763361][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 79.778658][ T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 79.816911][ T5776] team0 (unregistering): Port device team_slave_1 removed [ 79.830995][ T5776] team0 (unregistering): Port device team_slave_0 removed [ 79.839793][ T42] kauditd_printk_skb: 355 callbacks suppressed [ 79.839836][ T42] audit: type=1400 audit(1792555101.032:1197): avc: denied { ioctl } for pid=8144 comm="syz.1.524" path="socket:[25886]" dev="sockfs" ino=25886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.891981][ T42] audit: type=1400 audit(1792555101.082:1198): avc: denied { read } for pid=8144 comm="syz.1.524" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.892772][ T42] audit: type=1400 audit(1792555101.082:1199): avc: denied { open } for pid=8144 comm="syz.1.524" path="net:[4026532884]" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.894176][ T42] audit: type=1400 audit(1792555101.092:1200): avc: denied { getopt } for pid=8144 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.942154][ T9] usb 8-1: USB disconnect, device number 6 [ 80.086155][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 80.109359][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 80.109752][ T9] keyspan 8-1:1.0: device disconnected [ 80.138455][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 80.138579][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 80.202368][ T8145] veth0_to_team: entered promiscuous mode [ 80.202384][ T8145] veth0_to_team: entered allmulticast mode [ 80.208391][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.208468][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.208524][ T8046] bridge_slave_0: entered allmulticast mode [ 80.209255][ T8046] bridge_slave_0: entered promiscuous mode [ 80.222764][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.222850][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.222927][ T8046] bridge_slave_1: entered allmulticast mode [ 80.223612][ T8046] bridge_slave_1: entered promiscuous mode [ 80.224163][ T42] audit: type=1400 audit(1792555101.422:1201): avc: denied { write } for pid=8147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.253205][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.254552][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.271328][ T8046] team0: Port device team_slave_0 added [ 80.274410][ T8046] team0: Port device team_slave_1 added [ 80.290826][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.290850][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.290864][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.291794][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.291803][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.291816][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.320734][ T42] audit: type=1400 audit(1792555101.512:1202): avc: denied { allowed } for pid=8150 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.346262][ T8046] hsr_slave_0: entered promiscuous mode [ 80.346681][ T8046] hsr_slave_1: entered promiscuous mode [ 80.346978][ T8046] debugfs: 'hsr0' already exists in 'hsr' [ 80.346990][ T8046] Cannot create hsr debugfs directory [ 80.383508][ T42] audit: type=1400 audit(1792555101.572:1203): avc: denied { write } for pid=8151 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.399875][ T42] audit: type=1400 audit(1792555101.592:1204): avc: denied { bpf } for pid=8154 comm="syz.1.526" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.400119][ T42] audit: type=1400 audit(1792555101.592:1205): avc: denied { perfmon } for pid=8154 comm="syz.1.526" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.402373][ T5732] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.439789][ T42] audit: type=1400 audit(1792555101.632:1206): avc: denied { create } for pid=8154 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.482671][ T5732] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.482702][ T5732] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.506401][ T5776] IPVS: stop unused estimator thread 0... [ 80.554567][ T8166] program syz.1.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.562523][ T5088] Bluetooth: hci0: command 0x041b tx timeout [ 80.614120][ T106] IPVS: starting estimator thread 0... [ 80.715165][ T8179] IPVS: using max 25 ests per chain, 60000 per kthread [ 80.719314][ T8188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=8188 comm=syz.3.531 [ 80.726609][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 80.766784][ T8194] FAULT_INJECTION: forcing a failure. [ 80.766784][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 80.766814][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.1.534 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.766829][ T8194] Tainted: [L]=SOFTLOCKUP [ 80.766833][ T8194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.766840][ T8194] Call Trace: [ 80.766851][ T8194] [ 80.766856][ T8194] dump_stack_lvl+0x100/0x190 [ 80.766882][ T8194] should_fail_ex.cold+0x5/0xa [ 80.766899][ T8194] should_failslab+0xc2/0x120 [ 80.766920][ T8194] __kmalloc_cache_noprof+0x91/0x6d0 [ 80.766934][ T8194] ? snd_seq_port_use_ptr+0x3c/0x300 [ 80.766956][ T8194] ? snd_seq_port_connect+0x61/0x540 [ 80.766972][ T8194] snd_seq_port_connect+0x61/0x540 [ 80.766986][ T8194] ? check_subscription_permission.isra.0+0x146/0x240 [ 80.767002][ T8194] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 80.767018][ T8194] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 80.767033][ T8194] ? lock_acquire+0x1d1/0x380 [ 80.767047][ T8194] ? clientptr+0x20/0x190 [ 80.767059][ T8194] ? find_held_lock+0x2b/0x80 [ 80.767068][ T8194] ? clientptr+0x80/0x190 [ 80.767082][ T8194] call_seq_client_ctl+0xa3/0x130 [ 80.767095][ T8194] snd_seq_kernel_client_ctl+0x35/0x50 [ 80.767109][ T8194] snd_seq_oss_midi_open+0x465/0x680 [ 80.767127][ T8194] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 80.767149][ T8194] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 80.767164][ T8194] snd_seq_oss_midi_open_all+0x95/0xf0 [ 80.767183][ T8194] snd_seq_oss_open+0x81c/0xa10 [ 80.767200][ T8194] odev_open+0x6f/0x90 [ 80.767211][ T8194] ? __pfx_odev_open+0x10/0x10 [ 80.767249][ T8194] soundcore_open+0x2e3/0x5a0 [ 80.767277][ T8194] ? __pfx_soundcore_open+0x10/0x10 [ 80.767290][ T8194] chrdev_open+0x234/0x6a0 [ 80.767321][ T8194] ? __pfx_chrdev_open+0x10/0x10 [ 80.767339][ T8194] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 80.767364][ T8194] do_dentry_open+0x674/0x1470 [ 80.767379][ T8194] ? __pfx_chrdev_open+0x10/0x10 [ 80.767398][ T8194] vfs_open_consume+0xcc/0x460 [ 80.767411][ T8194] path_openat+0x1551/0x2430 [ 80.767424][ T8194] ? __pfx_path_openat+0x10/0x10 [ 80.767438][ T8194] do_file_open+0x20e/0x430 [ 80.767449][ T8194] ? __pfx_do_file_open+0x10/0x10 [ 80.767470][ T8194] ? _raw_spin_unlock+0x28/0x50 [ 80.767489][ T8194] ? alloc_fd+0x471/0x7a0 [ 80.767504][ T8194] do_sys_openat2+0x163/0x1d0 [ 80.767515][ T8194] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.767532][ T8194] __x64_sys_openat+0x12d/0x210 [ 80.767544][ T8194] ? __pfx___x64_sys_openat+0x10/0x10 [ 80.767561][ T8194] do_syscall_64+0x123/0x790 [ 80.767574][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.767585][ T8194] RIP: 0033:0x7f3b4879f559 [ 80.767603][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.767614][ T8194] RSP: 002b:00007f3b49726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.767633][ T8194] RAX: ffffffffffffffda RBX: 00007f3b48a25fa0 RCX: 00007f3b4879f559 [ 80.767640][ T8194] RDX: 0000000000080200 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 80.767647][ T8194] RBP: 00007f3b48836b20 R08: 0000000000000000 R09: 0000000000000000 [ 80.767654][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.767660][ T8194] R13: 00007f3b48a26038 R14: 00007f3b48a25fa0 R15: 00007ffe55a3c828 [ 80.767675][ T8194] [ 80.841201][ T8046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.844546][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.844967][ T8046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.847665][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.848466][ T8046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.854336][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.857571][ T8046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.861195][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.891064][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.891144][ T8046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.928715][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.939797][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.955044][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.962073][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.962160][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.965835][ T8213] tipc: Started in network mode [ 80.965868][ T8213] tipc: Node identity ac14140f, cluster identity 4711 [ 80.965911][ T8213] tipc: Enabling of bearer rejected, failed to enable media [ 80.967581][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.967654][ T6954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.210827][ T8228] FAULT_INJECTION: forcing a failure. [ 81.210827][ T8228] name failslab, interval 1, probability 0, space 0, times 0 [ 81.210849][ T8228] CPU: 3 UID: 0 PID: 8228 Comm: syz.1.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.210865][ T8228] Tainted: [L]=SOFTLOCKUP [ 81.210869][ T8228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.210876][ T8228] Call Trace: [ 81.210880][ T8228] [ 81.210885][ T8228] dump_stack_lvl+0x100/0x190 [ 81.210908][ T8228] should_fail_ex.cold+0x5/0xa [ 81.210926][ T8228] should_failslab+0xc2/0x120 [ 81.210944][ T8228] kmem_cache_alloc_noprof+0x92/0x6a0 [ 81.210960][ T8228] ? __fget_files+0x215/0x3d0 [ 81.210970][ T8228] ? create_new_namespaces+0x30/0xac0 [ 81.210987][ T8228] create_new_namespaces+0x30/0xac0 [ 81.211005][ T8228] __do_sys_setns+0x213/0x1d90 [ 81.211021][ T8228] ? __pfx___do_sys_setns+0x10/0x10 [ 81.211040][ T8228] do_syscall_64+0x123/0x790 [ 81.211054][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.211066][ T8228] RIP: 0033:0x7f3b4879f559 [ 81.211076][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.211087][ T8228] RSP: 002b:00007f3b49726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 81.211098][ T8228] RAX: ffffffffffffffda RBX: 00007f3b48a25fa0 RCX: 00007f3b4879f559 [ 81.211106][ T8228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 81.211112][ T8228] RBP: 00007f3b48836b20 R08: 0000000000000000 R09: 0000000000000000 [ 81.211119][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.211125][ T8228] R13: 00007f3b48a26038 R14: 00007f3b48a25fa0 R15: 00007ffe55a3c828 [ 81.211140][ T8228] [ 81.224283][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.245989][ T8046] veth0_vlan: entered promiscuous mode [ 81.250488][ T8046] veth1_vlan: entered promiscuous mode [ 81.264348][ T8046] veth0_macvtap: entered promiscuous mode [ 81.266460][ T8046] veth1_macvtap: entered promiscuous mode [ 81.273868][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.277497][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.304777][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.322917][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.322942][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.322960][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.346121][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.346140][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.367510][ T6430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.367524][ T6430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.416145][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 81.444992][ T8237] cdrom: dropping to single frame dma [ 82.482477][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.562634][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.562671][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.653557][ T5732] Bluetooth: hci0: command 0x041b tx timeout [ 84.269091][ T8259] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.294780][ T8266] SELinux: failed to load policy [ 84.310444][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 84.422212][ T8282] Bluetooth: MGMT ver 1.23 [ 84.426397][ T8282] jffs2: notice: (8282) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.446489][ T8282] netlink: 'syz.4.553': attribute type 2 has an invalid length. [ 84.446509][ T8282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.553'. [ 84.505362][ T8294] netlink: 'syz.1.559': attribute type 64 has an invalid length. [ 84.526799][ T8293] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.532847][ T8296] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.536471][ T8293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.557'. [ 84.563422][ T5732] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.652423][ T5732] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.652447][ T5732] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.722361][ T5088] Bluetooth: hci0: command 0x041b tx timeout [ 84.744662][ T8311] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 84.744674][ T8311] Unsupported pkey algo: 106 [ 84.852438][ T5819] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 84.853442][ T42] kauditd_printk_skb: 251 callbacks suppressed [ 84.853457][ T42] audit: type=1400 audit(1792555106.052:1458): avc: denied { ioctl } for pid=8303 comm="syz.1.562" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.996602][ T42] audit: type=1400 audit(1792555106.192:1459): avc: denied { create } for pid=8318 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.999328][ T42] audit: type=1400 audit(1792555106.192:1460): avc: denied { name_bind } for pid=8318 comm="syz.3.567" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.999754][ T42] audit: type=1400 audit(1792555106.192:1461): avc: denied { name_connect } for pid=8318 comm="syz.3.567" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.004378][ T5819] usb 6-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.40 [ 85.005170][ T5819] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.006690][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.006703][ T5819] usb 6-1: Product: syz [ 85.006710][ T5819] usb 6-1: Manufacturer: syz [ 85.006717][ T5819] usb 6-1: SerialNumber: syz [ 85.053381][ T42] audit: type=1400 audit(1792555106.252:1462): avc: denied { write } for pid=8318 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.053410][ T42] audit: type=1400 audit(1792555106.252:1463): avc: denied { read } for pid=8318 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.053747][ T42] audit: type=1400 audit(1792555106.252:1464): avc: denied { ioctl } for pid=8318 comm="syz.3.567" path="socket:[26181]" dev="sockfs" ino=26181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.212622][ T8304] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 85.221019][ T5819] usbhid 6-1:1.0: can't add hid device: -71 [ 85.221098][ T5819] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 85.228454][ T5819] usb 6-1: USB disconnect, device number 6 [ 85.430665][ T42] audit: type=1400 audit(1792555106.622:1465): avc: denied { set_context_mgr } for pid=8321 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.434030][ T42] audit: type=1400 audit(1792555106.642:1466): avc: denied { map } for pid=8321 comm="syz.0.568" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.440013][ T8322] syzkaller0: entered promiscuous mode [ 85.440025][ T8322] syzkaller0: entered allmulticast mode [ 85.443076][ T42] audit: type=1400 audit(1792555106.642:1467): avc: denied { read write } for pid=8321 comm="syz.0.568" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 85.581751][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 85.826536][ T8338] netlink: 'syz.1.571': attribute type 2 has an invalid length. [ 85.857161][ T8357] nvme_fcloop: unknown parameter or missing value 'wwnn=' [ 85.857474][ T8357] nvme_fcloop: unknown parameter or missing value ' ' [ 85.859074][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.859188][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.859306][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.859431][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.859513][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.859568][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.859659][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.859758][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.859861][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 85.965660][ T8383] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 86.007515][ T8339] cgroup: fork rejected by pids controller in /syz1 [ 86.028806][ T8392] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 86.133809][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803f2c4800: rx timeout, send abort [ 86.264139][ T10] hid-generic 0000:0100:0100.0005: unknown main item tag 0x0 [ 86.264194][ T10] hid-generic 0000:0100:0100.0005: collection stack underflow [ 86.264206][ T10] hid-generic 0000:0100:0100.0005: item 0 0 0 12 parsing failed [ 86.264475][ T10] hid-generic 0000:0100:0100.0005: probe with driver hid-generic failed with error -22 [ 86.610784][ T8426] 9p: Bad value for 'rfdno' [ 86.635126][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803f2c4800: abort rx timeout. Force session deactivation [ 86.812995][ T5088] Bluetooth: hci0: command 0x041b tx timeout [ 86.945725][ T8437] ================================================================== [ 86.945736][ T8437] BUG: KASAN: stack-out-of-bounds in sys_fillrect+0x173d/0x1910 [ 86.945764][ T8437] Write of size 8 at addr ffffc90004d1fcf8 by task syz.4.593/8437 [ 86.945775][ T8437] [ 86.945783][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.4.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.945800][ T8437] Tainted: [L]=SOFTLOCKUP [ 86.945804][ T8437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.945811][ T8437] Call Trace: [ 86.945816][ T8437] [ 86.945821][ T8437] dump_stack_lvl+0x100/0x190 [ 86.945839][ T8437] print_report+0x13d/0x4b0 [ 86.945856][ T8437] ? _raw_spin_lock_irqsave+0x52/0x60 [ 86.945876][ T8437] ? sys_fillrect+0x173d/0x1910 [ 86.945886][ T8437] kasan_report+0xdf/0x1c0 [ 86.945897][ T8437] ? sys_fillrect+0x173d/0x1910 [ 86.945909][ T8437] sys_fillrect+0x173d/0x1910 [ 86.945922][ T8437] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 86.945949][ T8437] bit_clear+0x17d/0x220 [ 86.945965][ T8437] ? __pfx_bit_clear+0x10/0x10 [ 86.945980][ T8437] ? fb_get_color_depth+0x120/0x250 [ 86.945996][ T8437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.946012][ T8437] __fbcon_clear+0x633/0x760 [ 86.946026][ T8437] ? __pfx_bit_clear+0x10/0x10 [ 86.946041][ T8437] fbcon_scroll+0x48b/0x650 [ 86.946055][ T8437] con_scroll+0x464/0x690 [ 86.946068][ T8437] csi_ECMA.constprop.0+0x1238/0x3b60 [ 86.946080][ T8437] ? find_held_lock+0x2b/0x80 [ 86.946090][ T8437] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 86.946104][ T8437] do_con_write+0x3663/0x4ae0 [ 86.946120][ T8437] ? __pfx_do_con_write+0x10/0x10 [ 86.946133][ T8437] ? add_softcursor+0x230/0x290 [ 86.946151][ T8437] ? con_write+0x96/0xb0 [ 86.946162][ T8437] con_write+0x23/0xb0 [ 86.946174][ T8437] n_tty_write+0x440/0x1200 [ 86.946190][ T8437] ? __pfx_n_tty_write+0x10/0x10 [ 86.946221][ T8437] ? __kasan_kmalloc+0xaa/0xb0 [ 86.946240][ T8437] ? __pfx_woken_wake_function+0x10/0x10 [ 86.946258][ T8437] ? rcu_is_watching+0x13/0xc0 [ 86.946276][ T8437] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 86.946288][ T8437] ? kfree+0x1e5/0x6d0 [ 86.946301][ T8437] ? __pfx_n_tty_write+0x10/0x10 [ 86.946315][ T8437] file_tty_write.isra.0+0x4ca/0x8f0 [ 86.946329][ T8437] vfs_write+0x6af/0x1050 [ 86.946343][ T8437] ? __pfx_tty_write+0x10/0x10 [ 86.946355][ T8437] ? __pfx_vfs_write+0x10/0x10 [ 86.946368][ T8437] ? find_held_lock+0x2b/0x80 [ 86.946381][ T8437] ksys_write+0x12a/0x250 [ 86.946400][ T8437] ? __pfx_ksys_write+0x10/0x10 [ 86.946416][ T8437] do_syscall_64+0x123/0x790 [ 86.946428][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.946441][ T8437] RIP: 0033:0x7f61d099f559 [ 86.946451][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.946463][ T8437] RSP: 002b:00007f61cebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.946475][ T8437] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099f559 [ 86.946482][ T8437] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 86.946489][ T8437] RBP: 00007f61d0a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.946496][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.946502][ T8437] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffe71028e28 [ 86.946514][ T8437] [ 86.946518][ T8437] [ 86.946521][ T8437] The buggy address belongs to a vmalloc virtual mapping [ 86.946529][ T8437] The buggy address belongs to the physical page: [ 86.946534][ T8437] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b37 [ 86.946544][ T8437] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.946559][ T8437] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 86.946569][ T8437] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 86.946576][ T8437] page dumped because: kasan: bad access detected [ 86.946581][ T8437] page_owner tracks the page as allocated [ 86.946585][ T8437] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5723, tgid 5723 (syz-executor), ts 58924934247 [ 86.946604][ T8437] post_alloc_hook+0xfd/0x120 [ 86.946616][ T8437] get_page_from_freelist+0x110d/0x35d0 [ 86.946629][ T8437] __alloc_frozen_pages_noprof+0x2e9/0x32e0 [ 86.946643][ T8437] alloc_pages_mpol+0x201/0x550 [ 86.946652][ T8437] alloc_pages_noprof+0x1a/0x160 [ 86.946664][ T8437] __vmalloc_node_range_noprof+0x833/0x1420 [ 86.946674][ T8437] __vmalloc_node_noprof+0xad/0xf0 [ 86.946683][ T8437] copy_process+0x80b/0x84c0 [ 86.946695][ T8437] kernel_clone+0x176/0x9d0 [ 86.946707][ T8437] __do_sys_clone+0xd9/0x120 [ 86.946718][ T8437] do_syscall_64+0x123/0x790 [ 86.946727][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.946737][ T8437] page last free pid 5723 tgid 5723 ts 58884760542 stack trace: [ 86.946744][ T8437] __free_frozen_pages+0x79f/0x10f0 [ 86.946754][ T8437] qlist_free_all+0x47/0xf0 [ 86.946767][ T8437] kasan_quarantine_reduce+0x1a0/0x1f0 [ 86.946781][ T8437] __kasan_slab_alloc+0x69/0x90 [ 86.946796][ T8437] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 86.946810][ T8437] copy_process+0x6aa/0x84c0 [ 86.946822][ T8437] kernel_clone+0x176/0x9d0 [ 86.946834][ T8437] __do_sys_clone+0xd9/0x120 [ 86.946846][ T8437] do_syscall_64+0x123/0x790 [ 86.946855][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.946865][ T8437] [ 86.946868][ T8437] Memory state around the buggy address: [ 86.946873][ T8437] ffffc90004d1fb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.946880][ T8437] ffffc90004d1fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.946887][ T8437] >ffffc90004d1fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 86.946893][ T8437] ^ [ 86.946899][ T8437] ffffc90004d1fd00: f1 f1 f1 00 00 f3 f3 00 00 00 00 00 00 00 00 00 [ 86.946906][ T8437] ffffc90004d1fd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.946912][ T8437] ================================================================== [ 86.947223][ T8437] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.138243][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.4.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.141523][ T8437] Tainted: [L]=SOFTLOCKUP [ 87.142884][ T8437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.145997][ T8437] Call Trace: [ 87.147051][ T8437] [ 87.148011][ T8437] dump_stack_lvl+0x100/0x190 [ 87.149507][ T8437] vpanic+0x553/0x970 [ 87.150853][ T8437] ? __pfx_vpanic+0x10/0x10 [ 87.152328][ T8437] ? mark_held_locks+0x40/0x70 [ 87.153887][ T8437] ? sys_fillrect+0x173d/0x1910 [ 87.155500][ T8437] panic+0xd1/0xe0 [ 87.156642][ T8437] ? __pfx_panic+0x10/0x10 [ 87.158128][ T8437] ? sys_fillrect+0x173d/0x1910 [ 87.159599][ T8437] ? preempt_schedule+0x57/0xd0 [ 87.161106][ T8437] check_panic_on_warn.cold+0x19/0x34 [ 87.162780][ T8437] end_report.part.0+0x3a/0x90 [ 87.164381][ T8437] kasan_report.cold+0xe/0x18 [ 87.165869][ T8437] ? sys_fillrect+0x173d/0x1910 [ 87.167447][ T8437] sys_fillrect+0x173d/0x1910 [ 87.169009][ T8437] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 87.170951][ T8437] bit_clear+0x17d/0x220 [ 87.172307][ T8437] ? __pfx_bit_clear+0x10/0x10 [ 87.173842][ T8437] ? fb_get_color_depth+0x120/0x250 [ 87.175433][ T8437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.177289][ T8437] __fbcon_clear+0x633/0x760 [ 87.179210][ T8437] ? __pfx_bit_clear+0x10/0x10 [ 87.180914][ T8437] fbcon_scroll+0x48b/0x650 [ 87.182353][ T8437] con_scroll+0x464/0x690 [ 87.183780][ T8437] csi_ECMA.constprop.0+0x1238/0x3b60 [ 87.185469][ T8437] ? find_held_lock+0x2b/0x80 [ 87.186974][ T8437] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 87.188818][ T8437] do_con_write+0x3663/0x4ae0 [ 87.190300][ T8437] ? __pfx_do_con_write+0x10/0x10 [ 87.191933][ T8437] ? add_softcursor+0x230/0x290 [ 87.193747][ T8437] ? con_write+0x96/0xb0 [ 87.195573][ T8437] con_write+0x23/0xb0 [ 87.197204][ T8437] n_tty_write+0x440/0x1200 [ 87.198960][ T8437] ? __pfx_n_tty_write+0x10/0x10 [ 87.200853][ T8437] ? __kasan_kmalloc+0xaa/0xb0 [ 87.202679][ T8437] ? __pfx_woken_wake_function+0x10/0x10 [ 87.205020][ T8437] ? rcu_is_watching+0x13/0xc0 [ 87.206617][ T8437] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 87.208326][ T8437] ? kfree+0x1e5/0x6d0 [ 87.209645][ T8437] ? __pfx_n_tty_write+0x10/0x10 [ 87.211260][ T8437] file_tty_write.isra.0+0x4ca/0x8f0 [ 87.213080][ T8437] vfs_write+0x6af/0x1050 [ 87.214942][ T8437] ? __pfx_tty_write+0x10/0x10 [ 87.217004][ T8437] ? __pfx_vfs_write+0x10/0x10 [ 87.218970][ T8437] ? find_held_lock+0x2b/0x80 [ 87.220913][ T8437] ksys_write+0x12a/0x250 [ 87.222748][ T8437] ? __pfx_ksys_write+0x10/0x10 [ 87.224840][ T8437] do_syscall_64+0x123/0x790 [ 87.226737][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.228698][ T8437] RIP: 0033:0x7f61d099f559 [ 87.230200][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.236685][ T8437] RSP: 002b:00007f61cebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.239293][ T8437] RAX: ffffffffffffffda RBX: 00007f61d0c25fa0 RCX: 00007f61d099f559 [ 87.241764][ T8437] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 87.245156][ T8437] RBP: 00007f61d0a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 87.248532][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.251870][ T8437] R13: 00007f61d0c26038 R14: 00007f61d0c25fa0 R15: 00007ffe71028e28 [ 87.255177][ T8437] [ 87.257250][ T8437] Kernel Offset: disabled [ 87.259098][ T8437] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:58:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000108827 RBX=ffffffff8fa91580 RCX=ffffffff8bd5d315 RDX=0000000000000001 RSI=ffffffff8e3e5c32 RDI=ffffffff8c625e80 RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cc8 R8 =0000000000000001 R9 =ffffed100d406815 R10=ffff88806a0340ab R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000 RIP=ffffffff810014b0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4734000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=000000003e04d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b4955d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe55a3cd16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe55a3cd16 00007ffe55a3cd1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b4883714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b48837184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b488372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b48837176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b489f9600 00007f3b489f95e0 00007f3b489f95e8 00007f3b489f9618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b489f95f8 00007f3b489f95c8 00007f3b489f9600 00007f3b489f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b3bb75 RDI=ffffffff9cc905a0 RBP=ffffffff9cc90560 RSP=ffffc90004d2ed88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000033343854 R12=0000000000000000 R13=0000000000000037 R14=000000000000000a R15=ffffc90004d2f0a0 RIP=ffffffff85b3bb9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f61cebf66c0 ffffffff 00c00000 GS =0000 ffff8880d4834000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61c8000020 CR3=000000003f3ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeade01116 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeade01116 00007ffeade0111c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8eb863714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8eb8637184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8eb86372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8eb8637176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca7bc96016784579 e0015ce6de56edbf bc57dcade28b5c4c c4b4d06a44ed5f75 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc57dcade28b5c4c c4b4d06a44ed5f75 b6a3f91bf05e183f 97c7507f62a67151 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c9ba5 RBX=ffff88802069cb00 RCX=ffffffff8bd5d315 RDX=0000000000000001 RSI=ffffffff8e3e5c32 RDI=ffffffff8c625e80 RBP=ffffed10040d3960 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d446815 R10=ffff88806a2340ab R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bd5b7af RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4934000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61d175da08 CR3=000000002c8b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe71029316 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe71029316 00007ffe7102931c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61d0a3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61d0a37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61d0a372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61d0a37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000ffffffff RBX=ffff88805680b1d0 RCX=0000000000000000 RDX=ffff88805680b108 RSI=ffff88805680b1a8 RDI=0000000000000000 RBP=0000000000000007 RSP=ffffc9000350f558 R8 =0000000000000000 R9 =0000000000000004 R10=0000000000000004 R11=0000000000000001 R12=ffff88805680a580 R13=0000000000020000 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81e7ff47 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3b496e46c0 ffffffff 00c00000 GS =0000 ffff8880d4a34000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3b496e3ff8 CR3=000000003e04d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 001c000e00000000 0000000000000000 024f000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0070000000001017 df80000000140000 001c0000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000008ffff fe7a000003e60000 0008000400000008 0008000000140000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00280000003c0000 0050000000640000 00780000008c0000 00a0000000b40000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00cc000000e00000 00f4000001080000 011c000001300000 0144000001640000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 017c000001900000 01a4000001b80000 01cc000001e00000 0200000000180000 ZMM24=ddd8bb8eddd8bb8e ddd8bb8eddd8bb8e ddd8bb8eddd8bb8e ddd8bb8eddd8bb8e ddd8bb8eddd8bb8e ddd8bb8eddd8bb8e ddd8bb8eddd8bb8e ddd8bb8eddd8bb8e ZMM25=9849921b9849921b 9849921b9849921b 9849921b9849921b 9849921b9849921b 9849921b9849921b 9849921b9849921b 9849921b9849921b 9849921b9849921b ZMM26=a9478269a9478269 a9478269a9478269 a9478269a9478269 a9478269a9478269 a9478269a9478269 a9478269a9478269 a9478269a9478269 a9478269a9478269 ZMM27=444764f3444764f3 444764f3444764f3 444764f3444764f3 444764f3444764f3 444764f3444764f3 444764f3444764f3 444764f3444764f3 444764f3444764f3 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7e0600007e060000 7e0600007e060000 7e0600007e060000 7e0600007e060000 7e0600007e060000 7e0600007e060000 7e0600007e060000 7e0600007e060000