last executing test programs: 59.222124799s ago: executing program 1 (id=360): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"/12, @ANYRES64, @ANYBLOB="4125c78f5dc0a7cba1d202e7eb86e1177ae5196a34bec64b403bd3e596e58111e6cecc8f3df0bbb31db5489b9a3a1389eab07cf05edc871781b8b4ec5ba455ebeda2e22d2256debbd9217a38db8c3e189d515550e7c749ebc7eeb2989f707c74a61bb8b37243e362e616b1201db626824e7ce6203fd172ad2fa549ad8603f3ea07e46b39a2706e67", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 59.159171706s ago: executing program 1 (id=364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x8, 0x4}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x13, 0x0, &(0x7f0000000000)) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x101, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r4 = signalfd(r1, &(0x7f0000000080)={[0x3]}, 0xfffffffffffffe81) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f00000000c0)={{@any, 0x9f1}, 0x2, 0x2, 0x4, 0x1}) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f00000000c0)={r0}) 58.981221409s ago: executing program 1 (id=371): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000020000005400018050000180090001006761746500000000400002801800020003000000000000000000000000000000000000001800058014000680080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 58.980732444s ago: executing program 1 (id=373): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000300000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a310000000008000300000000063000048008000100"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 58.927438707s ago: executing program 1 (id=376): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x908046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async, rerun: 64) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (rerun: 32) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x112c024, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1ec) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) faccessat2(r2, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x1200) mount$bpf(0x200000000000, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b7f495, 0x0) 57.982158085s ago: executing program 1 (id=393): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"/12, @ANYRES64, @ANYBLOB="4125c78f5dc0a7cba1d202e7eb86e1177ae5196a34bec64b403bd3e596e58111e6cecc8f3df0bbb31db5489b9a3a1389eab07cf05edc871781b8b4ec5ba455ebeda2e22d2256debbd9217a38db8c3e189d515550e7c749ebc7eeb2989f707c74a61bb8b37243e362e616b1201db626824e7ce6203fd172ad2fa549ad8603f3ea07e46b39a2706e67", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 51.102550358s ago: executing program 3 (id=543): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000000)='./file0\x00') 51.102171254s ago: executing program 3 (id=544): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1feff) (fail_nth: 20) 51.042674964s ago: executing program 3 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000200)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x3, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 32) ioctl(r4, 0x4048aec9, &(0x7f0000000200)) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc050000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0a000f00", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="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"], 0x5fc}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) 48.652453526s ago: executing program 3 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) (async) timer_create(0x5, 0x0, 0x0) msgrcv(0x0, &(0x7f0000002fc0)={0x0, ""/108}, 0xffffff4e, 0x1, 0x4800) (async) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x5, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000340)={@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x69b, 0x2, 0x3, {0xa, 0x4e22, 0x1000, @loopback, 0x401}}}, {&(0x7f0000000200)=""/58, 0x3a}, &(0x7f0000000300), 0x1}, 0xa0) (async) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) (async) umount2(&(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x0) (async) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000041) 48.652366238s ago: executing program 3 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 48.312819745s ago: executing program 3 (id=591): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x200, 0xffffffffffffffff, 'id1\x00'}) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000240)={0x200000, 0x5000, 0x9, 0xf5, 0x81}) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x600, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mknod(&(0x7f0000000140)='./file0\x00', 0x800, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 48.231118244s ago: executing program 32 (id=591): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x200, 0xffffffffffffffff, 'id1\x00'}) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000240)={0x200000, 0x5000, 0x9, 0xf5, 0x81}) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x600, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mknod(&(0x7f0000000140)='./file0\x00', 0x800, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 42.941190839s ago: executing program 33 (id=393): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"/12, @ANYRES64, @ANYBLOB="4125c78f5dc0a7cba1d202e7eb86e1177ae5196a34bec64b403bd3e596e58111e6cecc8f3df0bbb31db5489b9a3a1389eab07cf05edc871781b8b4ec5ba455ebeda2e22d2256debbd9217a38db8c3e189d515550e7c749ebc7eeb2989f707c74a61bb8b37243e362e616b1201db626824e7ce6203fd172ad2fa549ad8603f3ea07e46b39a2706e67", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 8.351705698s ago: executing program 2 (id=1410): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000009050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a310000000008000300000000063000048008000100"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 8.272600894s ago: executing program 2 (id=1411): r0 = socket(0x400000000010, 0x800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) flistxattr(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$getflags(r2, 0x401) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf0000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 8.272174126s ago: executing program 2 (id=1412): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x1, 0x1, 0xd, 0x8, 0xfd, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_mcast\x00') write$binfmt_format(r1, &(0x7f0000000180)='0\x00', 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0xc, 0x11, 0xff, @remote, @loopback, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020851000000300000018000000000000000000000000000001950000000000000018010000202078250000000000201c007b1af8ff00000000bfa100000000000017010000f8fffffdb702000008000000b50afdffffffeffe85"], 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, 0x0, &(0x7f0000000240)=""/67}, 0x20) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000200)={'virt_wifi0\x00'}) 8.182376261s ago: executing program 2 (id=1414): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 8.106932994s ago: executing program 2 (id=1415): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x42, &(0x7f00000009c0)=ANY=[@ANYBLOB="fffffffffff5bbbbbbbbbbbb86dd60"], 0x0) 8.052597557s ago: executing program 2 (id=1416): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, 0x0, 0x0, 0x4488, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='udp 2', 0x5) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x6612, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000080)=0x6ad) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2.202277132s ago: executing program 5 (id=1481): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000080)='./debug\x00', 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2.14037026s ago: executing program 5 (id=1485): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffc0, 0x7, 0x1}}}}]}, 0x40}}, 0x0) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x800) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000280)={'rose0\x00', 0x3, 0x7}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@loopback, 0x3a, r2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000380)={0x7, 0x0, &(0x7f0000000200)=[r1, r0, r1]}, 0x3) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @private=0xa010100}}, 0x0, 0x0, 0x42, 0x0, "facfc7965e7f6d228dedf60e9487d74b3a4467e4ebc97fcdc133d2855f2d63b42294ddffe10a002353a52478ed187e1553a2f2edacea4dbfc159b43073f0f022f4f756315a0210c5580d5ddd31b9bd02"}, 0xd8) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000005d00)={0x114, 0x1a, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@nested={0xc, 0x31c8, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x4}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) 2.042608458s ago: executing program 5 (id=1486): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="023bb39aa5915bbd9f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000000c0)=0x1000000, &(0x7f0000000100)='%pK \x00'}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000002100010029bd7000fddbdf2504008a83"], 0x14}], 0x1}, 0x890) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x1, 0x8, 0x8, 0x5, 0x29, 0x9, "0000c000"}, 0x3}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000380)=ANY=[@ANYBLOB="73697a653d782c73697a653d002c0010bf1d2cb7ed31fdf709a0744ba6477f6663fc27639a52dc73d5eb27140b0b7841e6883d0b2c9f383ac0ceeb069d32b1865276514731a3c21ec9a55efed9665b274bd97a492be7b6797b4bade95dee7ea42ab430a846cc62d2bc28c177a8dd090ece711b76063e33fe6fd6ac7e96c9edf6bdfa28552529b38e10767b989d7b4742ea9af249e49352242b5a2857d6c92fcc108ce572361100245d20f68d5820e368555e0e94545daf9ec9d42bc4cc1eed84f36dffd3fcf1d7fdb6f06280d273edf140743fa4b542f5"]) syz_emit_ethernet(0x42, &(0x7f00000009c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60"], 0x0) 1.11264737s ago: executing program 5 (id=1499): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000043f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) 1.111975844s ago: executing program 5 (id=1500): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x7, &(0x7f0000000380)={0x0, 0x32, 0x0, @thr={0x0, &(0x7f0000000040)="c43e03a695219f2ee537be114b83866e7e795e8693aa43577bc8c6bdc67abb36b3451d8b32db771923f5d73c0713040086fdbb273e0e5a5a012c598042"}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r5, 0x1, 0x4b, 0x0, &(0x7f0000000100)) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_getoverrun(r6) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010"], 0x68}}, 0x64000004) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010029bd7000fcdbdf2500000000", @ANYRES32=r11, @ANYBLOB="0e2a01000904000008000a00", @ANYRES32=r11], 0x28}, 0x1, 0x0, 0x0, 0x34004c01}, 0x8804) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, 0x470c0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24060080}, 0x8000) 852.72149ms ago: executing program 5 (id=1501): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000500eeff7ea27388795d3e2fa90000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x400c8a4) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x23f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44041}, 0x400c814) getsockopt$inet6_buf(r4, 0x29, 0x1f, 0x0, &(0x7f0000000980)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x3e, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x1], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x70000, 0x30000, 0x2f31097711f7d873, 0x4, 0x2, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0xe000, 0x10000, 0xc, 0x0, 0x22, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0x3, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0xfd, 0x44, 0x2}, {0x4000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x8, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6, 0x3}, {0xeeee8000, 0x70000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x2, 0x0, 0x0, 0x4}, {0xc002, 0x50000, 0xc, 0x3, 0x9, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0xf}, {0x80a0000, 0x8cc}, {0x60000, 0xfffc}, 0xddf8ffd3, 0x0, 0x2000, 0x110, 0xe, 0x1, 0xb000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 760.630255ms ago: executing program 0 (id=1503): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendto$packet(r1, &(0x7f0000000440)="9a26100f9389c58fa26f054bd1ebb26eadee91c0c0da7f792fd5b641a7161ee51f61904cda27b3d8c7db37cc2efcbfacbbe7f6d76d1f8280610b5947815ff5e4da3451947abe03ebbde384e787069d37f04b1f52ebdf3938b1ee74d0044da02d04298ffec9fd3ad9b8e3919092496e60637371214a27434a778a1ff364130dc87c5f65467f7876cffff1c993a1a100f10e9848364b66946f53f1738e441d90137c9701c2850797addbaea3024faac833ec28925b0c28ccefeac96afea144803ff6026e9aec0f4055896dab", 0xcb, 0x200c8040, &(0x7f0000000540)={0x11, 0x15, r5, 0x1, 0x40, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_PHYS_PORT_ID={0x12, 0x22, "d6d0bd8315ef8d72c45c2910a6e6"}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x1, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 502.604823ms ago: executing program 0 (id=1504): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000001200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x20) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) 401.882284ms ago: executing program 4 (id=1505): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="6800000030000505010000e4ff000000000000005400018050000180090001006761746500000000400002801800020003000000000000000000000000000000000000001800058014000680080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 401.734185ms ago: executing program 4 (id=1506): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010011007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 311.222309ms ago: executing program 4 (id=1507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0xff, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010402000000fddbdf25070000000500120009000000140008"], 0x30}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 311.051226ms ago: executing program 0 (id=1508): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) 251.955593ms ago: executing program 0 (id=1509): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004f000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) 200.938613ms ago: executing program 0 (id=1510): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getcwd(&(0x7f0000000200)=""/197, 0xc5) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r3, @ANYBLOB="a7ba504970e55c9f2a59c33aa5529eaf70957caaa809cdb5d112b4856a27d597ea601210e5d9cd0ca29036ad14"], 0x44}}, 0x804) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[@ANYRESHEX=r8], 0x38) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000600}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="afd40dc293fdea35e63ae300000083fdc3254f62508611d04c3246c9a58180fe5510e2ef825cd6bc203ce093ede98c2fc2eb1f89c5e04e5245a2d923e1aeb10daa12211b7614084a938940a6b7ac39ac050f0cd1c984f9c646bef587f875747fb564f2e744b504543317abb44d342b2649fbfe89191acbb288293124590a173ceeee9a", @ANYRES16=r9, @ANYBLOB="08002bbd7000ffdbdf25250000000a0001007770616e33000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000015}, 0x4000) sendto$packet(r4, 0x0, 0x0, 0x20000085, &(0x7f0000000180)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @local}, 0x14) 71.804639ms ago: executing program 0 (id=1511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181800, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) listen(r1, 0x800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd70000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xa) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9410101c0b800800000ba000000000f3067f0428170c939000000c744240059000000c7442402ac030231ff1c240f20d835080000000f22d80fc76f06400f239cc01643c744240000000000c744240206000000c7442406000000000f01142466460f2f8c6902000000b9da0b00000f32", 0x71}], 0x1, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='/proc/self/cwd/test_file,0x0,0x1', 0x20) r7 = eventfd2(0x101, 0x1) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000000)=r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x7}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0x6}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) 71.619044ms ago: executing program 4 (id=1512): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a000000140001801000040000000000000000000000f0000c000280080001"], 0x38}}, 0x0) 71.452401ms ago: executing program 4 (id=1513): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 4 (id=1514): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='zstd', 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) writev(r0, &(0x7f00000017c0)=[{&(0x7f0000000180)="00b8b6d7cbac5a46592d5c5198f1f9ada0da299c0d840a0c85bff777180095b2eabca5384a63371f08ecca2063e6dd4b1d04dc91c0f2b6d70000010069", 0x34}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000001400)="9c14568a1f59121721fd32de09f5b2d3cd0f079d4c82386051c6b2a23f5aa28d962d44bd531814dd2bc90f23302a10da52768ff1d38bff43cc1790ff13b3df1e96c4f2e01ef16d7b72dcb1d2829509583c1c8ad90333a6c36efff475d059755cf2afc0c55a19a0f5c818d69621b4726865103dda9ee6f1b4dad7e05d4710c4ba4bf103b6cb563096650382bef65e69eeac103f364a16", 0x96}, {&(0x7f00000014c0)="564620b94ccbce80c89dc003f97ef9103b47e62657f2ab955a33fd809150f61d65ebb7c3102ee905df3e3dbcc1032b627f64316a0997e2ebf1bc583dac05e47769a459266f9f55234dd1956659bad08733a0255f0e8af5b573dd5a8c046ce5ba8df13b2c985dba465b1b4413fd61139d16984645417929accc09eba350402b8bb74320056abf143b6eecdc43a21de26474cb781ae286161c79a1f70bce1287a79d3db808e00e7a2e2edf403e91df3b4336f9764e0e91eabf0fda86dfa33436b2f92b5c4fdd895c464b2c36607d6f7d864e37dc31813826e63b9a64a4dcca9c26526b5d887342c42feefeb6fe2e2685", 0x150}, {&(0x7f00000015c0)="10ac031baf0a9b9ca861468c4c47c6c54b06000000e7d543f86a492a5bab6d54517d78beccb41e6984300564cdfc98e024c55a31e5b8f1d750376104283311c2dab8909abf75d581874a21af82ea84d7ab4c1850", 0x54}, {&(0x7f0000001640)="28a3ac2df36c78bb10089800612d63832175f50f1835d0b90cecddbe9322b0fb1107f2a690c91ab410d88d41eb37365c3fd5cc368419fe0a1a80aa571e8ae428526eea95c5f95ccf930515ad64a80453e26343b7bacf38a50b9f6c7ed799969b92e2780900b80f00633b40cb5bc238cb006a5b9c4910984c416ff4b4c1ae53efaad28234318bad158f2c9ba1edb9cc8ec12dd09f631507fb915b56114b74b71a6bbc6fb251ae2aa00341d8e2ce1c4cc22106a353abd48289b4ee319fa4f5e57dd1664f9fbcfa8f47bb3b1c91f39dad", 0xcf}, {&(0x7f0000001740)="5283e92024c343ea73", 0x9}, {&(0x7f0000001780)="32c55c432316f619a7d4783e6bd61eeb31aaf48e1b8e919b8e369480d016f9896c8514b7d261", 0x26}], 0x8) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf256800000008000300", @ANYRES32=r5, @ANYBLOB="1600c700d4271b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000040)={0x1, 0x1, @raw_data=[0xd6, 0xfffffff3, 0x2, 0x8, 0x1e8, 0xffffffcf, 0x8, 0x2, 0x6, 0x81, 0x2, 0x9fd2, 0x4, 0x9, 0x6, 0x8]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000019, 0x8010, r0, 0x12a62000) 0s ago: executing program 4 (id=1516): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) faccessat(r0, &(0x7f0000000080)='./gadget\x00', 0x100) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): tes in process `syz.0.433'. [ 67.611310][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 67.671178][ T7128] SELinux: unable to allocate memory for policydb string of length 8 [ 67.671249][ T7128] SELinux: failed to load policy [ 67.773122][ T7100] ceph: No mds server is up or the cluster is laggy [ 67.799732][ T30] libceph: mon0 (1)[c::]:6789 socket error on write [ 67.823269][ T7136] netlink: 'syz.0.439': attribute type 4 has an invalid length. [ 67.823348][ T7136] netlink: 152 bytes leftover after parsing attributes in process `syz.0.439'. [ 67.828083][ T7136] .`: renamed from bond0 (while UP) [ 67.956236][ T7136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.014641][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 68.064483][ T7136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.072424][ T7144] netlink: 'syz.2.442': attribute type 2 has an invalid length. [ 68.073294][ T7144] syz_tun: entered allmulticast mode [ 68.074892][ T7144] netlink: 14 bytes leftover after parsing attributes in process `syz.2.442'. [ 68.103846][ T7136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.118120][ T7143] syz_tun: left allmulticast mode [ 68.187337][ T7136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.231507][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 68.332211][ T7152] FAULT_INJECTION: forcing a failure. [ 68.332211][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 68.332266][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(full) [ 68.332295][ T7152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.332304][ T7152] Call Trace: [ 68.332310][ T7152] [ 68.332315][ T7152] dump_stack_lvl+0x100/0x190 [ 68.332338][ T7152] should_fail_ex.cold+0x5/0xa [ 68.332356][ T7152] should_failslab+0xc2/0x120 [ 68.332372][ T7152] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.332386][ T7152] ? ebitmap_read+0x64e/0x8e0 [ 68.332408][ T7152] ebitmap_read+0x64e/0x8e0 [ 68.332430][ T7152] ? __pfx_ebitmap_read+0x10/0x10 [ 68.332449][ T7152] ? kasan_quarantine_put+0x104/0x240 [ 68.332463][ T7152] ? policydb_read+0x270/0x3ed0 [ 68.332482][ T7152] ? kfree+0x22b/0x6d0 [ 68.332501][ T7152] policydb_read+0x19bf/0x3ed0 [ 68.332529][ T7152] ? __pfx_policydb_read+0x10/0x10 [ 68.332546][ T7152] ? kasan_save_track+0x14/0x30 [ 68.332560][ T7152] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 68.332576][ T7152] ? security_load_policy+0x113/0x1080 [ 68.332591][ T7152] security_load_policy+0x15c/0x1080 [ 68.332603][ T7152] ? irqentry_exit+0x24d/0xa10 [ 68.332616][ T7152] ? __pfx___mutex_lock+0x10/0x10 [ 68.332630][ T7152] ? __pfx_security_load_policy+0x10/0x10 [ 68.332650][ T7152] sel_write_load+0x28f/0x560 [ 68.332665][ T7152] ? __pfx_sel_write_load+0x10/0x10 [ 68.332684][ T7152] vfs_write+0x2aa/0x1050 [ 68.332701][ T7152] ? __pfx_sel_write_load+0x10/0x10 [ 68.332716][ T7152] ? lock_acquire+0x1d1/0x380 [ 68.332727][ T7152] ? __fget_files+0x34/0x3d0 [ 68.332739][ T7152] ? __pfx_vfs_write+0x10/0x10 [ 68.332754][ T7152] ? find_held_lock+0x2b/0x80 [ 68.332769][ T7152] ? __fget_files+0x215/0x3d0 [ 68.332784][ T7152] ? __fget_files+0x21f/0x3d0 [ 68.332799][ T7152] ksys_write+0x12a/0x250 [ 68.332809][ T7152] ? __pfx_ksys_write+0x10/0x10 [ 68.332823][ T7152] do_syscall_64+0x123/0x790 [ 68.332836][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.332847][ T7152] RIP: 0033:0x7fec4779e159 [ 68.332857][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.332867][ T7152] RSP: 002b:00007fec48706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.332878][ T7152] RAX: ffffffffffffffda RBX: 00007fec47a25fa0 RCX: 00007fec4779e159 [ 68.332898][ T7152] RDX: 000000000001feff RSI: 0000200000000000 RDI: 0000000000000003 [ 68.332904][ T7152] RBP: 00007fec48706090 R08: 0000000000000000 R09: 0000000000000000 [ 68.332910][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.332916][ T7152] R13: 00007fec47a26038 R14: 00007fec47a25fa0 R15: 00007fffc0410e38 [ 68.332942][ T7152] [ 68.334707][ T7152] SELinux: ebitmap: out of memory [ 68.334742][ T7152] SELinux: failed to load policy [ 68.571784][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.625860][ T7173] fuse: Bad value for 'fd' [ 68.648384][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 68.648449][ T43] audit: type=1400 audit(1788439041.753:567): avc: denied { write } for pid=7171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.677236][ T43] audit: type=1400 audit(1788439041.783:568): avc: denied { setopt } for pid=7175 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.693820][ T7177] vlan0: entered promiscuous mode [ 68.693905][ T7177] bridge0: entered promiscuous mode [ 68.719300][ T43] audit: type=1400 audit(1788439041.833:569): avc: denied { write } for pid=7178 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.738782][ T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 68.787557][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 68.857363][ T43] audit: type=1400 audit(1788439041.963:570): avc: denied { create } for pid=7186 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 68.878867][ T35] usb 7-1: device descriptor read/64, error -71 [ 68.885461][ T43] audit: type=1400 audit(1788439041.993:571): avc: denied { write } for pid=7185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.891748][ T7187] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 68.891774][ T7187] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 68.891946][ T7187] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 68.891965][ T7187] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 68.908831][ T7187] cramfs: Unknown parameter '/dev/nullb0' [ 68.933956][ T43] audit: type=1400 audit(1788439042.043:572): avc: denied { write } for pid=7191 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.979894][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 69.048260][ T43] audit: type=1400 audit(1788439042.153:573): avc: denied { write } for pid=7198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.125750][ T43] audit: type=1400 audit(1788439042.233:574): avc: denied { write } for pid=7201 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.132809][ T35] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 69.173522][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 69.204866][ T7197] SELinux: failed to load policy [ 69.258320][ T35] usb 7-1: device descriptor read/64, error -71 [ 69.297851][ T43] audit: type=1400 audit(1788439042.403:575): avc: denied { ioctl } for pid=7206 comm="syz.0.459" path="net:[4026532883]" dev="nsfs" ino=4026532883 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.378479][ T35] usb usb7-port1: attempt power cycle [ 69.590844][ T7216] fuse: Bad value for 'fd' [ 69.627762][ T7218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38504 sclass=netlink_route_socket pid=7218 comm=syz.0.464 [ 69.689233][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 69.690142][ T7223] openvswitch: ovs-system: Dropping previously announced user features [ 69.703445][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 69.733689][ T43] audit: type=1400 audit(1788439042.843:576): avc: denied { mounton } for pid=7226 comm="syz.3.467" path="/121/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 69.743550][ T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 69.757429][ T7231] SELinux: unable to allocate memory for policydb string of length 8 [ 69.759077][ T7231] SELinux: failed to load policy [ 69.765872][ T35] usb 7-1: device descriptor read/8, error -71 [ 69.988371][ T850] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.018382][ T35] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 70.031774][ T7247] fuse: Invalid rootmode [ 70.040038][ T35] usb 7-1: device descriptor read/8, error -71 [ 70.148554][ T35] usb usb7-port1: unable to enumerate USB device [ 70.149534][ T850] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 70.153961][ T850] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.153980][ T850] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 70.153998][ T850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.164698][ T850] opticon 8-1:1.0: opticon converter detected [ 70.176809][ T850] usb 8-1: opticon converter now attached to ttyUSB0 [ 70.258985][ T7259] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 70.259063][ T7259] SELinux: failed to load policy [ 70.289530][ T7261] tipc: Started in network mode [ 70.289592][ T7261] tipc: Node identity 4, cluster identity 4711 [ 70.289624][ T7261] tipc: Node number set to 4 [ 70.363291][ T7265] fuse: Invalid rootmode [ 70.370017][ T35] usb 8-1: USB disconnect, device number 3 [ 70.384664][ T35] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 70.385211][ T35] opticon 8-1:1.0: device disconnected [ 70.483257][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 70.484188][ T7278] openvswitch: ovs-system: Dropping previously announced user features [ 70.584861][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 70.638141][ T7284] FAULT_INJECTION: forcing a failure. [ 70.638141][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 70.638820][ T7284] CPU: 2 UID: 0 PID: 7284 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 70.638856][ T7284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.638869][ T7284] Call Trace: [ 70.638876][ T7284] [ 70.638885][ T7284] dump_stack_lvl+0x100/0x190 [ 70.638917][ T7284] should_fail_ex.cold+0x5/0xa [ 70.638944][ T7284] should_failslab+0xc2/0x120 [ 70.638968][ T7284] __kmalloc_cache_noprof+0x91/0x6d0 [ 70.639012][ T7284] ? common_read+0xd5/0x570 [ 70.639042][ T7284] ? __pfx_common_read+0x10/0x10 [ 70.639068][ T7284] common_read+0xd5/0x570 [ 70.639093][ T7284] ? rcu_is_watching+0x13/0xc0 [ 70.639118][ T7284] ? trace_kmalloc+0xeb/0x110 [ 70.639141][ T7284] ? __pfx_common_read+0x10/0x10 [ 70.639170][ T7284] ? hashtab_init+0x10a/0x280 [ 70.639204][ T7284] ? __pfx_common_read+0x10/0x10 [ 70.639230][ T7284] policydb_read+0x7f7/0x3ed0 [ 70.639272][ T7284] ? __pfx_policydb_read+0x10/0x10 [ 70.639298][ T7284] ? kasan_save_track+0x14/0x30 [ 70.639322][ T7284] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 70.639349][ T7284] ? security_load_policy+0x113/0x1080 [ 70.639376][ T7284] security_load_policy+0x15c/0x1080 [ 70.639397][ T7284] ? irqentry_exit+0x24d/0xa10 [ 70.639421][ T7284] ? __pfx___mutex_lock+0x10/0x10 [ 70.639445][ T7284] ? __pfx_security_load_policy+0x10/0x10 [ 70.639482][ T7284] sel_write_load+0x28f/0x560 [ 70.639508][ T7284] ? __pfx_sel_write_load+0x10/0x10 [ 70.639546][ T7284] vfs_write+0x2aa/0x1050 [ 70.639577][ T7284] ? __pfx_sel_write_load+0x10/0x10 [ 70.639602][ T7284] ? lock_acquire+0x1d1/0x380 [ 70.639621][ T7284] ? __fget_files+0x34/0x3d0 [ 70.639643][ T7284] ? __pfx_vfs_write+0x10/0x10 [ 70.639668][ T7284] ? find_held_lock+0x2b/0x80 [ 70.639694][ T7284] ? __fget_files+0x215/0x3d0 [ 70.639721][ T7284] ? __fget_files+0x21f/0x3d0 [ 70.639749][ T7284] ksys_write+0x12a/0x250 [ 70.639768][ T7284] ? __pfx_ksys_write+0x10/0x10 [ 70.639794][ T7284] do_syscall_64+0x123/0x790 [ 70.639818][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.639839][ T7284] RIP: 0033:0x7fae9879e159 [ 70.639856][ T7284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.639874][ T7284] RSP: 002b:00007fae99739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.639894][ T7284] RAX: ffffffffffffffda RBX: 00007fae98a25fa0 RCX: 00007fae9879e159 [ 70.639907][ T7284] RDX: 000000000001feff RSI: 0000200000000000 RDI: 0000000000000003 [ 70.639918][ T7284] RBP: 00007fae99739090 R08: 0000000000000000 R09: 0000000000000000 [ 70.639930][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.639941][ T7284] R13: 00007fae98a26038 R14: 00007fae98a25fa0 R15: 00007ffc2b962e18 [ 70.639967][ T7284] [ 70.640462][ T7284] SELinux: failed to load policy [ 70.772998][ T7286] comedi comedi4: bad chanlist[0]=0x00000010 chan=16 range length=2 [ 70.899403][ T7296] fuse: Invalid rootmode [ 71.348122][ T7323] fuse: Bad value for 'rootmode' [ 71.417001][ T7326] SELinux: failed to load policy [ 71.596423][ T7343] openvswitch: ovs-system: Dropping previously announced user features [ 71.598673][ T7344] fuse: Bad value for 'rootmode' [ 71.649891][ T7349] FAULT_INJECTION: forcing a failure. [ 71.649891][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 71.649997][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.3.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.650040][ T7349] Tainted: [L]=SOFTLOCKUP [ 71.650063][ T7349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.650074][ T7349] Call Trace: [ 71.650082][ T7349] [ 71.650090][ T7349] dump_stack_lvl+0x100/0x190 [ 71.650125][ T7349] should_fail_ex.cold+0x5/0xa [ 71.650155][ T7349] should_failslab+0xc2/0x120 [ 71.650179][ T7349] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.650208][ T7349] ? common_read+0xd5/0x570 [ 71.650239][ T7349] ? __pfx_common_read+0x10/0x10 [ 71.650265][ T7349] common_read+0xd5/0x570 [ 71.650291][ T7349] ? rcu_is_watching+0x13/0xc0 [ 71.650316][ T7349] ? trace_kmalloc+0xeb/0x110 [ 71.650338][ T7349] ? __pfx_common_read+0x10/0x10 [ 71.650389][ T7349] ? hashtab_init+0x10a/0x280 [ 71.650420][ T7349] ? __pfx_common_read+0x10/0x10 [ 71.650448][ T7349] policydb_read+0x7f7/0x3ed0 [ 71.650515][ T7349] ? __pfx_policydb_read+0x10/0x10 [ 71.650541][ T7349] ? kasan_save_track+0x14/0x30 [ 71.650564][ T7349] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 71.650591][ T7349] ? security_load_policy+0x113/0x1080 [ 71.650618][ T7349] security_load_policy+0x15c/0x1080 [ 71.650640][ T7349] ? irqentry_exit+0x24d/0xa10 [ 71.650665][ T7349] ? __pfx___mutex_lock+0x10/0x10 [ 71.650689][ T7349] ? __pfx_security_load_policy+0x10/0x10 [ 71.650724][ T7349] sel_write_load+0x28f/0x560 [ 71.650751][ T7349] ? __pfx_sel_write_load+0x10/0x10 [ 71.650783][ T7349] vfs_write+0x2aa/0x1050 [ 71.650815][ T7349] ? __pfx_sel_write_load+0x10/0x10 [ 71.650841][ T7349] ? lock_acquire+0x1d1/0x380 [ 71.650873][ T7349] ? __fget_files+0x34/0x3d0 [ 71.650897][ T7349] ? __pfx_vfs_write+0x10/0x10 [ 71.650923][ T7349] ? find_held_lock+0x2b/0x80 [ 71.650950][ T7349] ? __fget_files+0x215/0x3d0 [ 71.650976][ T7349] ? __fget_files+0x21f/0x3d0 [ 71.651005][ T7349] ksys_write+0x12a/0x250 [ 71.651024][ T7349] ? __pfx_ksys_write+0x10/0x10 [ 71.651050][ T7349] do_syscall_64+0x123/0x790 [ 71.651075][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.651096][ T7349] RIP: 0033:0x7f84b359e159 [ 71.651115][ T7349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.651133][ T7349] RSP: 002b:00007f84b4460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.651154][ T7349] RAX: ffffffffffffffda RBX: 00007f84b3825fa0 RCX: 00007f84b359e159 [ 71.651167][ T7349] RDX: 000000000001feff RSI: 0000200000000000 RDI: 0000000000000003 [ 71.651179][ T7349] RBP: 00007f84b4460090 R08: 0000000000000000 R09: 0000000000000000 [ 71.651192][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.651204][ T7349] R13: 00007f84b3826038 R14: 00007f84b3825fa0 R15: 00007ffd395105c8 [ 71.651230][ T7349] [ 71.655161][ T7349] SELinux: failed to load policy [ 71.731732][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.731964][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.038836][ T5102] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.122525][ T7373] fuse: Bad value for 'rootmode' [ 72.179700][ T5102] usb 5-1: device descriptor read/64, error -71 [ 72.428395][ T5102] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.495207][ T7397] fuse: Unknown parameter 'use00000000000000000000' [ 72.568283][ T5102] usb 5-1: device descriptor read/64, error -71 [ 72.625058][ T7413] __nla_validate_parse: 4 callbacks suppressed [ 72.625164][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 72.625731][ T7413] openvswitch: ovs-system: Dropping previously announced user features [ 72.654407][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 72.678541][ T5102] usb usb5-port1: attempt power cycle [ 72.887332][ T7422] fuse: Unknown parameter 'use00000000000000000000' [ 72.931248][ T7424] SELinux: failed to load policy [ 72.961590][ T7426] bond4: entered promiscuous mode [ 72.961925][ T7426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 73.040848][ T5102] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.058737][ T5102] usb 5-1: device descriptor read/8, error -71 [ 73.310223][ T5102] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.328942][ T5102] usb 5-1: device descriptor read/8, error -71 [ 73.333591][ T7455] bridge_slave_0: left allmulticast mode [ 73.333649][ T7455] bridge_slave_0: left promiscuous mode [ 73.336237][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.344535][ T7455] bridge_slave_1: left allmulticast mode [ 73.344606][ T7455] bridge_slave_1: left promiscuous mode [ 73.344828][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.362492][ T7455] bond0: (slave bond_slave_0): Releasing backup interface [ 73.372406][ T7455] bond0: (slave bond_slave_1): Releasing backup interface [ 73.382368][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.382435][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.411105][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.411177][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.421474][ T7455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.439913][ T5102] usb usb5-port1: unable to enumerate USB device [ 73.641379][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'. [ 73.774142][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 73.774222][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 73.775135][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 73.775149][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 73.777308][ T7472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.856940][ T7476] FAULT_INJECTION: forcing a failure. [ 73.856940][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 73.857020][ T7476] CPU: 3 UID: 0 PID: 7476 Comm: syz.2.563 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.857049][ T7476] Tainted: [L]=SOFTLOCKUP [ 73.857055][ T7476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.857062][ T7476] Call Trace: [ 73.857067][ T7476] [ 73.857072][ T7476] dump_stack_lvl+0x100/0x190 [ 73.857095][ T7476] should_fail_ex.cold+0x5/0xa [ 73.857112][ T7476] should_failslab+0xc2/0x120 [ 73.857126][ T7476] __kmalloc_noprof+0xfc/0x840 [ 73.857137][ T7476] ? rcu_is_watching+0x13/0xc0 [ 73.857152][ T7476] ? tomoyo_realpath_from_path+0xb6/0x690 [ 73.857172][ T7476] tomoyo_realpath_from_path+0xb6/0x690 [ 73.857187][ T7476] tomoyo_path_number_perm+0x23c/0x580 [ 73.857203][ T7476] ? tomoyo_path_number_perm+0x22e/0x580 [ 73.857219][ T7476] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 73.857241][ T7476] ? __lock_acquire+0x4c5/0x1ec0 [ 73.857259][ T7476] ? __fget_files+0x34/0x3d0 [ 73.857272][ T7476] ? find_held_lock+0x2b/0x80 [ 73.857287][ T7476] ? hook_file_ioctl_common+0x140/0x440 [ 73.857303][ T7476] ? __fget_files+0x21f/0x3d0 [ 73.857318][ T7476] security_file_ioctl+0xd3/0x230 [ 73.857347][ T7476] __x64_sys_ioctl+0xb7/0x210 [ 73.857365][ T7476] do_syscall_64+0x123/0x790 [ 73.857381][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.857393][ T7476] RIP: 0033:0x7fec4779e159 [ 73.857403][ T7476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.857414][ T7476] RSP: 002b:00007fec48706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.857425][ T7476] RAX: ffffffffffffffda RBX: 00007fec47a25fa0 RCX: 00007fec4779e159 [ 73.857432][ T7476] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 73.857439][ T7476] RBP: 00007fec48706090 R08: 0000000000000000 R09: 0000000000000000 [ 73.857445][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.857452][ T7476] R13: 00007fec47a26038 R14: 00007fec47a25fa0 R15: 00007fffc0410e38 [ 73.857466][ T7476] [ 73.858331][ T7476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.091481][ T7485] jffs2: notice: (7485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.099830][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 74.099848][ T43] audit: type=1400 audit(1788439047.213:588): avc: denied { write } for pid=7484 comm="syz.2.567" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.100146][ T43] audit: type=1400 audit(1788439047.213:589): avc: denied { add_name } for pid=7484 comm="syz.2.567" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.100574][ T43] audit: type=1400 audit(1788439047.213:590): avc: denied { create } for pid=7484 comm="syz.2.567" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.117053][ T43] audit: type=1400 audit(1788439047.223:591): avc: denied { read append open } for pid=7484 comm="syz.2.567" path="/159/file0/blkio.bfq.io_merged_recursive" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.117119][ T43] audit: type=1400 audit(1788439047.223:592): avc: denied { write } for pid=7484 comm="syz.2.567" name="blkio.bfq.io_merged_recursive" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.193932][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 74.194577][ T7490] openvswitch: ovs-system: Dropping previously announced user features [ 74.274331][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 74.319112][ T7498] FAULT_INJECTION: forcing a failure. [ 74.319112][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 74.319199][ T7498] CPU: 3 UID: 0 PID: 7498 Comm: syz.2.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.319231][ T7498] Tainted: [L]=SOFTLOCKUP [ 74.319239][ T7498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.319252][ T7498] Call Trace: [ 74.319260][ T7498] [ 74.319268][ T7498] dump_stack_lvl+0x100/0x190 [ 74.319302][ T7498] should_fail_ex.cold+0x5/0xa [ 74.319329][ T7498] should_failslab+0xc2/0x120 [ 74.319354][ T7498] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.319385][ T7498] ? perm_read.isra.0+0xb7/0x3c0 [ 74.319420][ T7498] perm_read.isra.0+0xb7/0x3c0 [ 74.319449][ T7498] ? __kmalloc_noprof+0x350/0x840 [ 74.319470][ T7498] ? __pfx_perm_read.isra.0+0x10/0x10 [ 74.319497][ T7498] ? str_read+0x95/0x250 [ 74.319527][ T7498] ? __asan_memcpy+0x3c/0x60 [ 74.319558][ T7498] ? str_read+0x1b6/0x250 [ 74.319589][ T7498] common_read+0x39f/0x570 [ 74.319621][ T7498] ? __pfx_common_read+0x10/0x10 [ 74.319654][ T7498] ? hashtab_init+0x10a/0x280 [ 74.319700][ T7498] ? __pfx_common_read+0x10/0x10 [ 74.319729][ T7498] policydb_read+0x7f7/0x3ed0 [ 74.319777][ T7498] ? __pfx_policydb_read+0x10/0x10 [ 74.319806][ T7498] ? kasan_save_track+0x14/0x30 [ 74.319831][ T7498] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 74.319861][ T7498] ? security_load_policy+0x113/0x1080 [ 74.319892][ T7498] security_load_policy+0x15c/0x1080 [ 74.319915][ T7498] ? irqentry_exit+0x24d/0xa10 [ 74.319942][ T7498] ? __pfx___mutex_lock+0x10/0x10 [ 74.319969][ T7498] ? __pfx_security_load_policy+0x10/0x10 [ 74.320009][ T7498] sel_write_load+0x28f/0x560 [ 74.320038][ T7498] ? __pfx_sel_write_load+0x10/0x10 [ 74.320090][ T7498] vfs_write+0x2aa/0x1050 [ 74.320126][ T7498] ? __pfx_sel_write_load+0x10/0x10 [ 74.320153][ T7498] ? lock_acquire+0x1d1/0x380 [ 74.320172][ T7498] ? __fget_files+0x34/0x3d0 [ 74.320195][ T7498] ? __pfx_vfs_write+0x10/0x10 [ 74.320223][ T7498] ? find_held_lock+0x2b/0x80 [ 74.320251][ T7498] ? __fget_files+0x215/0x3d0 [ 74.320280][ T7498] ? __fget_files+0x21f/0x3d0 [ 74.320312][ T7498] ksys_write+0x12a/0x250 [ 74.320331][ T7498] ? __pfx_ksys_write+0x10/0x10 [ 74.320359][ T7498] do_syscall_64+0x123/0x790 [ 74.320386][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.320408][ T7498] RIP: 0033:0x7fec4779e159 [ 74.320425][ T7498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.320445][ T7498] RSP: 002b:00007fec48706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.320465][ T7498] RAX: ffffffffffffffda RBX: 00007fec47a25fa0 RCX: 00007fec4779e159 [ 74.320478][ T7498] RDX: 000000000001feff RSI: 0000200000000000 RDI: 0000000000000003 [ 74.320490][ T7498] RBP: 00007fec48706090 R08: 0000000000000000 R09: 0000000000000000 [ 74.320503][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.320514][ T7498] R13: 00007fec47a26038 R14: 00007fec47a25fa0 R15: 00007fffc0410e38 [ 74.320544][ T7498] [ 74.320685][ T7498] SELinux: failed to load policy [ 74.583228][ T7503] bond5: entered promiscuous mode [ 74.583644][ T7503] 8021q: adding VLAN 0 to HW filter on device bond5 [ 75.055068][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 75.067564][ T43] audit: type=1400 audit(1788439048.173:593): avc: denied { bind } for pid=7523 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.125906][ T7524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7524 comm=syz.0.582 [ 75.334899][ T43] audit: type=1400 audit(1788439048.443:594): avc: denied { read } for pid=7543 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.335103][ T43] audit: type=1400 audit(1788439048.443:595): avc: denied { mounton } for pid=7543 comm="syz.3.588" path="/153/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 75.781356][ T43] audit: type=1400 audit(1788439048.893:596): avc: denied { execute } for pid=7552 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.788442][ T43] audit: type=1400 audit(1788439048.893:597): avc: denied { execute_no_trans } for pid=7552 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.807009][ T7554] FAULT_INJECTION: forcing a failure. [ 75.807009][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 75.807096][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.2.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.807140][ T7554] Tainted: [L]=SOFTLOCKUP [ 75.807149][ T7554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.807162][ T7554] Call Trace: [ 75.807170][ T7554] [ 75.807178][ T7554] dump_stack_lvl+0x100/0x190 [ 75.807237][ T7554] should_fail_ex.cold+0x5/0xa [ 75.807267][ T7554] should_failslab+0xc2/0x120 [ 75.807299][ T7554] __kmalloc_noprof+0xfc/0x840 [ 75.807319][ T7554] ? __pfx_dynamic_dname+0x10/0x10 [ 75.807339][ T7554] ? tomoyo_encode2+0xfb/0x3c0 [ 75.807366][ T7554] tomoyo_encode2+0xfb/0x3c0 [ 75.807390][ T7554] tomoyo_encode+0x29/0x50 [ 75.807409][ T7554] tomoyo_realpath_from_path+0x18c/0x690 [ 75.807436][ T7554] tomoyo_path_number_perm+0x23c/0x580 [ 75.807465][ T7554] ? tomoyo_path_number_perm+0x22e/0x580 [ 75.807497][ T7554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.807538][ T7554] ? __lock_acquire+0x4c5/0x1ec0 [ 75.807573][ T7554] ? __fget_files+0x34/0x3d0 [ 75.807595][ T7554] ? find_held_lock+0x2b/0x80 [ 75.807621][ T7554] ? hook_file_ioctl_common+0x140/0x440 [ 75.807650][ T7554] ? __fget_files+0x21f/0x3d0 [ 75.807677][ T7554] security_file_ioctl+0xd3/0x230 [ 75.807709][ T7554] __x64_sys_ioctl+0xb7/0x210 [ 75.807743][ T7554] do_syscall_64+0x123/0x790 [ 75.807776][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.807796][ T7554] RIP: 0033:0x7fec4779e159 [ 75.807814][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.807835][ T7554] RSP: 002b:00007fec48706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.807856][ T7554] RAX: ffffffffffffffda RBX: 00007fec47a25fa0 RCX: 00007fec4779e159 [ 75.807870][ T7554] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 75.807883][ T7554] RBP: 00007fec48706090 R08: 0000000000000000 R09: 0000000000000000 [ 75.807895][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.807908][ T7554] R13: 00007fec47a26038 R14: 00007fec47a25fa0 R15: 00007fffc0410e38 [ 75.807936][ T7554] [ 75.808023][ T7554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.907804][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.909211][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.909584][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.910005][ T5738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.910227][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.925765][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.926914][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.927087][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.931565][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.931845][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.170883][ T7581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7581 comm=syz.0.600 [ 76.435956][ T7558] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.438507][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.438628][ T7558] bridge_slave_0: entered allmulticast mode [ 76.439867][ T7558] bridge_slave_0: entered promiscuous mode [ 76.443168][ T7558] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.443279][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.443558][ T7558] bridge_slave_1: entered allmulticast mode [ 76.445018][ T7558] bridge_slave_1: entered promiscuous mode [ 76.465539][ T7558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.467805][ T7558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.497033][ T7558] team0: Port device team_slave_0 added [ 76.502671][ T7558] team0: Port device team_slave_1 added [ 76.539359][ T7598] bond6: entered promiscuous mode [ 76.541305][ T7598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 76.542383][ T7558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.542396][ T7558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.542418][ T7558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.543993][ T7558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.544005][ T7558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.544027][ T7558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.603420][ T7601] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 76.605131][ T7558] hsr_slave_0: entered promiscuous mode [ 76.611305][ T7558] hsr_slave_1: entered promiscuous mode [ 76.613096][ T7558] debugfs: 'hsr0' already exists in 'hsr' [ 76.613119][ T7558] Cannot create hsr debugfs directory [ 76.783613][ T7558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.794569][ T7558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.795128][ T7558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.815771][ T7558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.816974][ T7558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.824229][ T7558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.825122][ T7558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.832159][ T7558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.857023][ T9] cfg80211: failed to load regulatory.db [ 76.924697][ T7558] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.924852][ T7558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.925074][ T7558] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.925139][ T7558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.979617][ T7558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.994690][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.997897][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.013919][ T7558] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.034278][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.034426][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.035500][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.035583][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.387162][ T7558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.596049][ T7671] FAULT_INJECTION: forcing a failure. [ 77.596049][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 77.596139][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.2.621 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.596176][ T7671] Tainted: [L]=SOFTLOCKUP [ 77.596184][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.596194][ T7671] Call Trace: [ 77.596205][ T7671] [ 77.596213][ T7671] dump_stack_lvl+0x100/0x190 [ 77.596248][ T7671] should_fail_ex.cold+0x5/0xa [ 77.596272][ T7671] should_failslab+0xc2/0x120 [ 77.596297][ T7671] __kmalloc_noprof+0xfc/0x840 [ 77.596314][ T7671] ? rfcomm_dev_ioctl+0x562/0x1db0 [ 77.596346][ T7671] rfcomm_dev_ioctl+0x562/0x1db0 [ 77.596370][ T7671] ? bt_sock_ioctl+0x1df/0x580 [ 77.596394][ T7671] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 77.596418][ T7671] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 77.596440][ T7671] ? tomoyo_path_number_perm+0x28f/0x580 [ 77.596470][ T7671] ? tomoyo_path_number_perm+0x188/0x580 [ 77.596497][ T7671] rfcomm_sock_ioctl+0xcc/0xf0 [ 77.596519][ T7671] sock_do_ioctl+0x118/0x280 [ 77.596540][ T7671] ? __pfx_sock_do_ioctl+0x10/0x10 [ 77.596559][ T7671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.596582][ T7671] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.596605][ T7671] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 77.596638][ T7671] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.596668][ T7671] sock_ioctl+0x599/0x6b0 [ 77.596691][ T7671] ? __pfx_sock_ioctl+0x10/0x10 [ 77.596718][ T7671] ? selinux_file_ioctl+0x13b/0x290 [ 77.596741][ T7671] ? selinux_file_ioctl+0xb6/0x290 [ 77.596767][ T7671] ? __pfx_sock_ioctl+0x10/0x10 [ 77.596788][ T7671] __x64_sys_ioctl+0x18e/0x210 [ 77.596815][ T7671] do_syscall_64+0x123/0x790 [ 77.596841][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.596858][ T7671] RIP: 0033:0x7fec4779e159 [ 77.596872][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.596887][ T7671] RSP: 002b:00007fec48706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.596908][ T7671] RAX: ffffffffffffffda RBX: 00007fec47a25fa0 RCX: 00007fec4779e159 [ 77.596919][ T7671] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 77.596929][ T7671] RBP: 00007fec48706090 R08: 0000000000000000 R09: 0000000000000000 [ 77.596939][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.596948][ T7671] R13: 00007fec47a26038 R14: 00007fec47a25fa0 R15: 00007fffc0410e38 [ 77.596971][ T7671] [ 77.628884][ T7558] veth0_vlan: entered promiscuous mode [ 77.634762][ T7558] veth1_vlan: entered promiscuous mode [ 77.649704][ T7673] netlink: 'syz.2.622': attribute type 11 has an invalid length. [ 77.689685][ T7558] veth0_macvtap: entered promiscuous mode [ 77.696273][ T7558] veth1_macvtap: entered promiscuous mode [ 77.753311][ T7558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.764013][ T7558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.797503][ T7679] __nla_validate_parse: 4 callbacks suppressed [ 77.797678][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 77.847728][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.847826][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.849019][ T6413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.849098][ T6413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.849136][ T6413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.849167][ T6413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.880327][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.880382][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.957787][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 77.959309][ T7690] openvswitch: ovs-system: Dropping previously announced user features [ 77.968862][ T5088] Bluetooth: hci3: command tx timeout [ 78.057537][ T7697] bond7: entered promiscuous mode [ 78.057811][ T7697] 8021q: adding VLAN 0 to HW filter on device bond7 [ 78.228553][ T7706] syz.0.632 (7706) used greatest stack depth: 19384 bytes left [ 78.348470][ T35] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 78.433683][ T7725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.639'. [ 78.519074][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 78.521918][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.525868][ T35] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 78.525908][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.525961][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.557743][ T35] usbtmc 7-1:16.0: bulk endpoints not found [ 78.627042][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 78.634293][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 78.642170][ T7748] openvswitch: ovs-system: Dropping previously announced user features [ 78.730308][ T7755] mmap: syz.4.651 (7755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.750069][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 78.752009][ T7758] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 78.883605][ T7765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.002120][ T7766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.588111][ T7779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.660'. [ 79.634516][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 79.634676][ T43] audit: type=1400 audit(1788439052.743:599): avc: denied { ioctl } for pid=7780 comm="syz.0.661" path="socket:[20270]" dev="sockfs" ino=20270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.884236][ T7795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.666'. [ 79.931721][ T7797] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 79.932387][ T7797] bridge0: port 3(syz_tun) entered disabled state [ 79.932695][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.933960][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.935628][ T7797] bridge0: entered allmulticast mode [ 79.990927][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 79.991967][ T7799] openvswitch: ovs-system: Dropping previously announced user features [ 80.051004][ T5088] Bluetooth: hci3: command tx timeout [ 80.092224][ T43] audit: type=1400 audit(1788439053.203:600): avc: denied { write } for pid=7802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.112578][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 80.155962][ T43] audit: type=1400 audit(1788439053.263:601): avc: denied { write } for pid=7807 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.364351][ T7822] comedi comedi2: No hardware detected at I/O base 0x340 [ 80.376246][ T7824] comedi comedi2: No hardware detected at I/O base 0x340 [ 80.422243][ T7829] fuse: fd is not a fuse device [ 80.484581][ T7833] lo speed is unknown, defaulting to 1000 [ 80.484711][ T7833] lo speed is unknown, defaulting to 1000 [ 80.486573][ T7833] lo speed is unknown, defaulting to 1000 [ 80.488657][ T7833] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 80.488699][ T7833] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 80.488738][ T7833] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 80.491377][ T7833] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.497933][ T7833] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 80.531288][ T7833] lo speed is unknown, defaulting to 1000 [ 80.544702][ T7833] lo speed is unknown, defaulting to 1000 [ 80.546151][ T7833] lo speed is unknown, defaulting to 1000 [ 80.559725][ T7833] lo speed is unknown, defaulting to 1000 [ 80.561549][ T7833] lo speed is unknown, defaulting to 1000 [ 80.578738][ T7841] block2mtd: parameter too long [ 80.589576][ T43] audit: type=1400 audit(1788439053.703:602): avc: denied { write } for pid=7839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.670225][ T43] audit: type=1400 audit(1788439053.783:603): avc: denied { write } for pid=7847 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.794489][ T7858] fuse: Unknown parameter 'user_i00000000000000000000' [ 80.830827][ T7860] openvswitch: ovs-system: Dropping previously announced user features [ 80.974013][ T7868] xfrm1: entered allmulticast mode [ 81.036870][ T7869] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20003 [ 81.088988][ T7879] fuse: fd is not a fuse device [ 81.117008][ T5881] usb 7-1: USB disconnect, device number 11 [ 81.181719][ T5738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.183996][ T5738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.185389][ T5738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.192607][ T5738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.193170][ T5738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.256348][ T43] audit: type=1400 audit(1788439054.363:604): avc: denied { ioctl } for pid=7890 comm="syz.2.700" path="socket:[18245]" dev="sockfs" ino=18245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.303873][ T7891] nvme_rdma: malformed src address passed: 1270.0.1 [ 81.314069][ T7891] use of bytesused == 0 is deprecated and will be removed in the future, [ 81.315680][ T7891] use the actual size instead. [ 81.392308][ T7891] nvme_fabrics: missing parameter 'transport=%s' [ 81.392372][ T7891] nvme_fabrics: missing parameter 'nqn=%s' [ 81.412554][ T43] audit: type=1400 audit(1788439054.513:605): avc: denied { write } for pid=7895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.420400][ T43] audit: type=1400 audit(1788439054.533:606): avc: denied { bind } for pid=7903 comm="syz.0.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.424837][ T43] audit: type=1400 audit(1788439054.533:607): avc: denied { mount } for pid=7903 comm="syz.0.702" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.545075][ T43] audit: type=1400 audit(1788439054.653:608): avc: denied { write } for pid=7909 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.643251][ T7885] lo speed is unknown, defaulting to 1000 [ 81.667396][ T7926] fuse: fd is not a fuse device [ 81.869017][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 82.052148][ T5881] usb 7-1: Using ep0 maxpacket: 8 [ 82.054351][ T5881] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.055582][ T5881] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 82.055610][ T5881] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.055635][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.061844][ T5881] usbtmc 7-1:16.0: bulk endpoints not found [ 82.139741][ T5738] Bluetooth: hci3: command tx timeout [ 82.149920][ T7952] openvswitch: ovs-system: Dropping previously announced user features [ 82.152827][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.154166][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.154290][ T7885] bridge_slave_0: entered allmulticast mode [ 82.157212][ T7885] bridge_slave_0: entered promiscuous mode [ 82.159880][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.159955][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.160048][ T7885] bridge_slave_1: entered allmulticast mode [ 82.161474][ T7885] bridge_slave_1: entered promiscuous mode [ 82.191818][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.194274][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.250973][ T7885] team0: Port device team_slave_0 added [ 82.264349][ T7885] team0: Port device team_slave_1 added [ 82.292852][ T7959] fuse: Unknown parameter 'user_id00000000000000000000' [ 82.319418][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.319505][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.319573][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.324989][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.325004][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.325027][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.412284][ T7885] hsr_slave_0: entered promiscuous mode [ 82.412923][ T7885] hsr_slave_1: entered promiscuous mode [ 82.413246][ T7885] debugfs: 'hsr0' already exists in 'hsr' [ 82.413259][ T7885] Cannot create hsr debugfs directory [ 82.606826][ T7885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.615066][ T7885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.626261][ T7885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.640623][ T7885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.641346][ T7885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.645980][ T7885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.651560][ T7885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.660649][ T7885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.758866][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.779991][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.787000][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.787916][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.799882][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.799992][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.840555][ T8000] fuse: fd is not a fuse device [ 83.187886][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.258885][ T5738] Bluetooth: hci4: command tx timeout [ 83.414419][ T8033] __nla_validate_parse: 6 callbacks suppressed [ 83.414535][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 83.425883][ T7885] veth0_vlan: entered promiscuous mode [ 83.433416][ T7885] veth1_vlan: entered promiscuous mode [ 83.463650][ T7885] veth0_macvtap: entered promiscuous mode [ 83.476884][ T7885] veth1_macvtap: entered promiscuous mode [ 83.481483][ T8035] fuse: Bad value for 'fd' [ 83.494064][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.505710][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.512087][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 83.512836][ T8037] openvswitch: ovs-system: Dropping previously announced user features [ 83.579406][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.579625][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.579820][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624516][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.625297][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.657043][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.657107][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.670683][ T6413] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.834397][ T8056] fuse: Bad value for 'fd' [ 83.961741][ T8066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.747'. [ 84.076710][ T8078] fuse: Bad value for 'fd' [ 84.136283][ T8082] binder: Unknown parameter 'smackfsdef' [ 84.208966][ T5738] Bluetooth: hci3: command tx timeout [ 84.359364][ T8101] fuse: Unknown parameter '0x0000000000000003' [ 84.465845][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.767'. [ 84.636152][ T8129] fuse: Unknown parameter '0x0000000000000003' [ 84.641805][ T25] usb 7-1: USB disconnect, device number 12 [ 84.717546][ T8139] fuse: fd is not a fuse device [ 84.720498][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 84.742638][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 84.742890][ T43] audit: type=1400 audit(1788439057.853:619): avc: denied { setopt } for pid=8143 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.962944][ T8162] fuse: Unknown parameter '0x0000000000000003' [ 85.090117][ T57] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.114603][ T8172] netlink: 36 bytes leftover after parsing attributes in process `syz.5.789'. [ 85.183202][ T8176] capability: warning: `syz.5.791' uses deprecated v2 capabilities in a way that may be insecure [ 85.260959][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 85.264362][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.265698][ T57] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 85.265736][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.265770][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.272189][ T57] usbtmc 9-1:16.0: bulk endpoints not found [ 85.330717][ T5738] Bluetooth: hci4: command tx timeout [ 85.347485][ T8189] fuse: Unknown parameter '0x0000000000000003' [ 85.377224][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 85.430788][ T8197] bond5: entered promiscuous mode [ 85.431111][ T8197] 8021q: adding VLAN 0 to HW filter on device bond5 [ 85.457571][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.458109][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.569257][ T25] lo speed is unknown, defaulting to 1000 [ 85.570332][ T57] lo speed is unknown, defaulting to 1000 [ 85.605821][ T8208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.804'. [ 85.658259][ T8214] fuse: Unknown parameter '0x0000000000000003' [ 85.801009][ T8226] netlink: 'syz.2.811': attribute type 2 has an invalid length. [ 85.805031][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 85.806556][ T43] audit: type=1400 audit(1788439058.913:620): avc: denied { accept } for pid=8225 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.834122][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 85.869236][ T8234] fuse: Unknown parameter '0x0000000000000003' [ 85.871193][ T8231] bond8: entered promiscuous mode [ 85.871610][ T8231] 8021q: adding VLAN 0 to HW filter on device bond8 [ 86.030108][ T43] audit: type=1400 audit(1788439059.143:621): avc: denied { mount } for pid=8244 comm="syz.0.819" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.102815][ T8251] xt_MASQUERADE: bad rangesize 2147483646 [ 86.171503][ T8256] fuse: Unknown parameter 'fd0x0000000000000003' [ 86.433744][ T8282] fuse: Unknown parameter 'fd0x0000000000000003' [ 86.452368][ T8281] bond6: entered promiscuous mode [ 86.452786][ T8281] 8021q: adding VLAN 0 to HW filter on device bond6 [ 86.522269][ T43] audit: type=1400 audit(1788439059.633:622): avc: denied { ioctl } for pid=8288 comm="syz.5.837" path="socket:[23190]" dev="sockfs" ino=23190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.523294][ T8289] tmpfs: Bad value for 'mpol' [ 86.700083][ T8303] fuse: Unknown parameter 'fd0x0000000000000003' [ 87.075722][ T8341] befs: (nullb0): No write support. Marking filesystem read-only [ 87.079292][ T8341] befs: (nullb0): invalid magic header [ 87.092956][ T8336] bond9: entered promiscuous mode [ 87.095476][ T8336] 8021q: adding VLAN 0 to HW filter on device bond9 [ 87.149456][ T43] audit: type=1400 audit(1788439060.263:623): avc: denied { bind } for pid=8345 comm="syz.5.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.262681][ T8355] ocfs2_dlmfs: Unknown parameter '/dev/net/tun' [ 87.275802][ T8356] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 87.312241][ T43] audit: type=1400 audit(1788439060.423:624): avc: denied { setopt } for pid=8354 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.408318][ T5738] Bluetooth: hci4: command tx timeout [ 87.572603][ T43] audit: type=1400 audit(1788439060.683:625): avc: denied { create } for pid=8371 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.633108][ T8376] fuse: fd is not a fuse device [ 87.734271][ T8387] netlink: 'syz.0.875': attribute type 21 has an invalid length. [ 87.772539][ T8391] bond10: entered promiscuous mode [ 87.773857][ T8391] 8021q: adding VLAN 0 to HW filter on device bond10 [ 87.854365][ T5817] usb 9-1: USB disconnect, device number 2 [ 87.906631][ T43] audit: type=1400 audit(1788439061.013:626): avc: denied { read } for pid=8396 comm="syz.5.879" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.906743][ T43] audit: type=1400 audit(1788439061.013:627): avc: denied { open } for pid=8396 comm="syz.5.879" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.906789][ T43] audit: type=1400 audit(1788439061.013:628): avc: denied { ioctl } for pid=8396 comm="syz.5.879" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 88.326506][ T8441] FAULT_INJECTION: forcing a failure. [ 88.326506][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 88.326583][ T8441] CPU: 2 UID: 0 PID: 8441 Comm: syz.2.894 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.326622][ T8441] Tainted: [L]=SOFTLOCKUP [ 88.326631][ T8441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.326642][ T8441] Call Trace: [ 88.326659][ T8441] [ 88.326667][ T8441] dump_stack_lvl+0x100/0x190 [ 88.326710][ T8441] should_fail_ex.cold+0x5/0xa [ 88.326752][ T8441] should_failslab+0xc2/0x120 [ 88.326782][ T8441] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.326804][ T8441] ? do_getname+0x35/0x390 [ 88.326835][ T8441] do_getname+0x35/0x390 [ 88.326863][ T8441] __x64_sys_rmdir+0x36/0x70 [ 88.326888][ T8441] do_syscall_64+0x123/0x790 [ 88.326918][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.326939][ T8441] RIP: 0033:0x7fec4779e159 [ 88.326956][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.326974][ T8441] RSP: 002b:00007fec48706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 88.327000][ T8441] RAX: ffffffffffffffda RBX: 00007fec47a25fa0 RCX: 00007fec4779e159 [ 88.327014][ T8441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 88.327026][ T8441] RBP: 00007fec48706090 R08: 0000000000000000 R09: 0000000000000000 [ 88.327039][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.327050][ T8441] R13: 00007fec47a26038 R14: 00007fec47a25fa0 R15: 00007fffc0410e38 [ 88.327075][ T8441] [ 88.420506][ T8447] libceph: secret too big 258 [ 88.529180][ T5807] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.613956][ T8451] __nla_validate_parse: 7 callbacks suppressed [ 88.614072][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 88.698306][ T5807] usb 9-1: Using ep0 maxpacket: 8 [ 88.704203][ T5807] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.709286][ T5807] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.709350][ T5807] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.709408][ T5807] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.709446][ T5807] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.709495][ T5807] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.749507][ T5807] usbtmc 9-1:16.0: bulk endpoints not found [ 88.772373][ T8455] bond1: entered promiscuous mode [ 88.772793][ T8455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.833301][ T8458] tmpfs: Unknown parameter 'grpquota_inoda_hardlimit' [ 88.836285][ T8459] tmpfs: Unknown parameter 'grpquota_inoda_hardlimit' [ 89.488709][ T5738] Bluetooth: hci4: command tx timeout [ 91.285570][ T5817] usb 9-1: USB disconnect, device number 3 [ 91.317357][ T8466] fuse: fd is not a fuse device [ 91.431102][ T8478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.907'. [ 91.496772][ T8488] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 91.533457][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 91.533699][ T43] audit: type=1400 audit(1788439064.643:649): avc: denied { kexec_image_load } for pid=8489 comm="syz.2.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 91.548070][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 91.622294][ T8500] bond2: entered promiscuous mode [ 91.625595][ T8500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.748389][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 91.918369][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 91.919295][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.920673][ T9] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 91.920714][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.920737][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.920756][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.920791][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.928963][ T9] usbtmc 9-1:16.0: bulk endpoints not found [ 92.051889][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.924'. [ 92.052642][ T8515] openvswitch: ovs-system: Dropping previously announced user features [ 92.133247][ T8527] fuse: fd is not a fuse device [ 92.140079][ T43] audit: type=1400 audit(1788439065.253:650): avc: denied { mounton } for pid=8528 comm="syz.5.926" path="/70/security" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 92.146103][ T43] audit: type=1807 audit(1788439065.253:651): action=measure func=FÉLE_CHECK res=0 [ 92.146144][ T43] audit: type=1400 audit(1788439065.253:652): avc: denied { append } for pid=8528 comm="syz.5.926" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.146181][ T43] audit: type=1802 audit(1788439065.253:653): pid=8531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.926" res=0 errno=0 [ 92.146215][ T43] audit: type=1400 audit(1788439065.253:654): avc: denied { write execute } for pid=8528 comm="syz.5.926" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.154204][ T8528] ima: policy update failed [ 92.154446][ T43] audit: type=1802 audit(1788439065.263:655): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.926" res=0 errno=0 [ 92.216666][ T8539] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 92.216770][ T8539] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 92.216835][ T8539] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 92.225693][ T8539] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.234559][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.931'. [ 92.264186][ T43] audit: type=1400 audit(1788439065.373:656): avc: denied { ioctl } for pid=8538 comm="syz.2.930" path="socket:[26280]" dev="sockfs" ino=26280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.269692][ T43] audit: type=1400 audit(1788439065.373:657): avc: denied { bind } for pid=8538 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.302896][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 92.357890][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 92.466217][ T8560] bond11: entered promiscuous mode [ 92.467632][ T8560] 8021q: adding VLAN 0 to HW filter on device bond11 [ 92.609968][ T43] audit: type=1400 audit(1788439065.723:658): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 92.841139][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'. [ 92.841854][ T8593] openvswitch: ovs-system: Dropping previously announced user features [ 92.905945][ T8590] syzkaller0: entered promiscuous mode [ 92.906039][ T8590] syzkaller0: entered allmulticast mode [ 93.396520][ T8612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.952'. [ 93.593735][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 93.727374][ T8627] netlink: 'syz.0.959': attribute type 3 has an invalid length. [ 94.367984][ T37] IPVS: starting estimator thread 0... [ 94.369698][ T8637] bond3: entered promiscuous mode [ 94.369963][ T8637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.465965][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'. [ 94.466296][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'. [ 94.468753][ T8641] IPVS: using max 44 ests per chain, 105600 per kthread [ 94.527092][ T5807] usb 9-1: USB disconnect, device number 4 [ 94.608253][ T8645] SELinux: failed to load policy [ 94.671919][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 94.672519][ T8671] openvswitch: ovs-system: Dropping previously announced user features [ 94.788646][ T8675] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 94.795163][ T8675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.975'. [ 94.806437][ T8675] fuse: Bad value for 'user_id' [ 94.806503][ T8675] fuse: Bad value for 'user_id' [ 94.828048][ T8667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8667 comm=syz.2.971 [ 94.900424][ T8681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 95.005264][ T8693] netlink: 'syz.0.982': attribute type 3 has an invalid length. [ 95.063505][ T8695] bond7: entered promiscuous mode [ 95.063779][ T8695] 8021q: adding VLAN 0 to HW filter on device bond7 [ 95.174002][ T35] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 95.328468][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 95.329432][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.330780][ T35] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 95.330819][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.330838][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.330857][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 95.330891][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.345930][ T35] usbtmc 7-1:16.0: bulk endpoints not found [ 95.383342][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 95.384210][ T8728] openvswitch: ovs-system: Dropping previously announced user features [ 95.479973][ T8734] fuse: fd is not a fuse device [ 95.571444][ T8743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.999'. [ 95.681014][ T8758] netlink: 'syz.4.1005': attribute type 3 has an invalid length. [ 95.722187][ T8763] trusted_key: encrypted_key: keylen parameter is missing [ 95.723212][ T8760] bond8: entered promiscuous mode [ 95.723453][ T8760] 8021q: adding VLAN 0 to HW filter on device bond8 [ 95.731447][ T5738] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 95.731511][ T5738] CPU: 3 UID: 0 PID: 5738 Comm: kworker/u34:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.731540][ T5738] Tainted: [L]=SOFTLOCKUP [ 95.731547][ T5738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.731555][ T5738] Workqueue: hci3 hci_rx_work [ 95.731594][ T5738] Call Trace: [ 95.731598][ T5738] [ 95.731603][ T5738] dump_stack_lvl+0x100/0x190 [ 95.731622][ T5738] sysfs_warn_dup.cold+0x1c/0x28 [ 95.731639][ T5738] sysfs_create_dir_ns+0x24b/0x2b0 [ 95.731658][ T5738] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 95.731672][ T5738] ? find_held_lock+0x2b/0x80 [ 95.731686][ T5738] ? kobject_add_internal+0x25f/0x930 [ 95.731706][ T5738] ? kobject_add_internal+0x25f/0x930 [ 95.731722][ T5738] ? do_raw_spin_unlock+0x145/0x1e0 [ 95.731736][ T5738] kobject_add_internal+0x2c8/0x930 [ 95.731753][ T5738] kobject_add+0x16a/0x1e0 [ 95.731768][ T5738] ? __pfx_kobject_add+0x10/0x10 [ 95.731781][ T5738] ? class_to_subsys+0x10f/0x150 [ 95.731798][ T5738] ? kobject_put+0xb9/0x640 [ 95.731812][ T5738] ? _raw_spin_unlock+0x28/0x50 [ 95.731832][ T5738] device_add+0x294/0x1970 [ 95.731844][ T5738] ? __pfx_dev_set_name+0x10/0x10 [ 95.731858][ T5738] ? __pfx_device_add+0x10/0x10 [ 95.731871][ T5738] ? mgmt_send_event_skb+0x2fb/0x460 [ 95.731886][ T5738] hci_conn_add_sysfs+0x1a3/0x260 [ 95.731899][ T5738] le_conn_complete_evt+0x122f/0x2130 [ 95.731921][ T5738] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 95.731939][ T5738] ? hci_event_packet+0x186/0xcd0 [ 95.731959][ T5738] hci_le_conn_complete_evt+0x23c/0x3a0 [ 95.731977][ T5738] ? skb_pull_data+0x15f/0x1e0 [ 95.731992][ T5738] hci_le_meta_evt+0x34a/0x5f0 [ 95.732003][ T5738] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 95.732022][ T5738] hci_event_packet+0x51c/0xcd0 [ 95.732039][ T5738] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 95.732057][ T5738] ? __pfx_hci_event_packet+0x10/0x10 [ 95.732077][ T5738] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.732094][ T5738] hci_rx_work+0x451/0xfc0 [ 95.732114][ T5738] process_one_work+0xac7/0x1b10 [ 95.732139][ T5738] ? __pfx_process_one_work+0x10/0x10 [ 95.732157][ T5738] ? lock_acquire+0x1d1/0x380 [ 95.732173][ T5738] ? __pfx_hci_rx_work+0x10/0x10 [ 95.732191][ T5738] worker_thread+0x5ef/0xe50 [ 95.732212][ T5738] ? kthread+0x13a/0x450 [ 95.732226][ T5738] ? __pfx_worker_thread+0x10/0x10 [ 95.732240][ T5738] kthread+0x373/0x450 [ 95.732254][ T5738] ? __pfx_kthread+0x10/0x10 [ 95.732269][ T5738] ret_from_fork+0x730/0xd60 [ 95.732282][ T5738] ? __pfx_ret_from_fork+0x10/0x10 [ 95.732293][ T5738] ? rcu_is_watching+0x13/0xc0 [ 95.732307][ T5738] ? __switch_to+0x800/0x10f0 [ 95.732322][ T5738] ? __pfx_kthread+0x10/0x10 [ 95.732337][ T5738] ret_from_fork_asm+0x1a/0x30 [ 95.732355][ T5738] [ 95.732398][ T5738] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.732418][ T5738] Bluetooth: hci3: failed to register connection device [ 95.964079][ T8789] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1015'. [ 95.964260][ T8789] unsupported nlmsg_type 40 [ 95.967911][ T8790] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1015'. [ 96.015397][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 96.016315][ T8795] openvswitch: ovs-system: Dropping previously announced user features [ 96.119028][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.122002][ T8799] batadv_slave_0: entered promiscuous mode [ 96.122061][ T8799] batadv_slave_0: entered allmulticast mode [ 96.173551][ T8802] fuse: Unknown parameter ']ŒŠ©łfdR0x0000000000000005' [ 96.400908][ T8819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.444513][ T8821] bond9: entered promiscuous mode [ 96.444733][ T8821] 8021q: adding VLAN 0 to HW filter on device bond9 [ 96.557417][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 96.557517][ T43] audit: type=1400 audit(1788439069.663:673): avc: denied { ioctl } for pid=8833 comm="syz.4.1033" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.619215][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 96.619281][ T1131] ata1: failed to read log page 10h (errno=-5) [ 96.622023][ T1131] ata1.00: exception Emask 0x1 SAct 0x40000 SErr 0x0 action 0x0 [ 96.622044][ T1131] ata1.00: irq_stat 0x40000000 [ 96.622059][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 96.622069][ T1131] ata1.00: cmd 60/01:90:00:00:00/00:00:fd:00:00/c0 tag 18 ncq dma 512 in [ 96.622069][ T1131] res 41/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 96.622115][ T1131] ata1.00: status: { DRDY ERR } [ 96.622127][ T1131] ata1.00: error: { ABRT } [ 96.629713][ T1131] ata1.00: configured for UDMA/100 [ 96.631024][ T1131] ata1: EH complete [ 96.654621][ T8840] openvswitch: ovs-system: Dropping previously announced user features [ 96.725031][ T8832] SELinux: failed to load policy [ 96.760412][ T43] audit: type=1400 audit(1788439069.873:674): avc: denied { bind } for pid=8848 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.882993][ T8859] IPv6: sit1: Disabled Multicast RS [ 96.892884][ T43] audit: type=1400 audit(1788439070.003:675): avc: denied { bind } for pid=8858 comm="syz.5.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.893273][ T43] audit: type=1400 audit(1788439070.003:676): avc: denied { listen } for pid=8858 comm="syz.5.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.908407][ T43] audit: type=1400 audit(1788439070.013:677): avc: denied { write } for pid=8858 comm="syz.5.1042" path="socket:[27930]" dev="sockfs" ino=27930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.951946][ T8855] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 97.113955][ T8877] bond10: entered promiscuous mode [ 97.114260][ T8877] 8021q: adding VLAN 0 to HW filter on device bond10 [ 97.336396][ T8895] openvswitch: ovs-system: Dropping previously announced user features [ 97.449491][ T43] audit: type=1400 audit(1788439070.563:678): avc: denied { mounton } for pid=8902 comm="syz.4.1060" path="/74/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.453786][ T8903] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 97.453786][ T8903] [ 97.479204][ T8903] overlay: Unknown parameter 'subj_role' [ 97.508646][ T8908] fuse: Unknown parameter 'fdVŅ' [ 97.696179][ T43] audit: type=1400 audit(1788439070.803:679): avc: denied { write } for pid=8917 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.867043][ T8930] bond4: entered promiscuous mode [ 97.867578][ T8930] 8021q: adding VLAN 0 to HW filter on device bond4 [ 97.934334][ T2323] usb 7-1: USB disconnect, device number 13 [ 97.942604][ T30] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 98.002646][ T8945] openvswitch: ovs-system: Dropping previously announced user features [ 98.088340][ T30] usb 9-1: Invalid ep0 maxpacket: 32 [ 98.097835][ T8958] netlink: 'syz.0.1080': attribute type 12 has an invalid length. [ 98.102087][ T8958] --map-set only usable from mangle table [ 98.218387][ T30] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 98.305203][ T43] audit: type=1400 audit(1788439071.413:680): avc: denied { getopt } for pid=8957 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.368298][ T30] usb 9-1: Invalid ep0 maxpacket: 32 [ 98.368625][ T30] usb usb9-port1: attempt power cycle [ 98.728486][ T30] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 98.748905][ T30] usb 9-1: Invalid ep0 maxpacket: 32 [ 98.898421][ T30] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 98.915388][ T8972] trusted_key: encrypted_key: master key parameter is missing [ 98.921580][ T30] usb 9-1: Invalid ep0 maxpacket: 32 [ 98.922083][ T30] usb usb9-port1: unable to enumerate USB device [ 98.925088][ T8972] trusted_key: encrypted_key: master key parameter is missing [ 99.258334][ T2323] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 99.268508][ T9005] openvswitch: ovs-system: Dropping previously announced user features [ 99.336492][ T43] audit: type=1400 audit(1788439072.443:681): avc: denied { create } for pid=9008 comm="syz.2.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.408348][ T2323] usb 10-1: Using ep0 maxpacket: 16 [ 99.411664][ T2323] usb 10-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.40 [ 99.412637][ T2323] usb 10-1: config 1 interface 0 has no altsetting 0 [ 99.415606][ T2323] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.415628][ T2323] usb 10-1: Product: syz [ 99.415640][ T2323] usb 10-1: Manufacturer: syz [ 99.415652][ T2323] usb 10-1: SerialNumber: syz [ 99.555143][ T43] audit: type=1400 audit(1788439072.663:682): avc: denied { read } for pid=9022 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.598039][ T9025] fuse: fd is not a fuse device [ 99.622968][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.623890][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.624586][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.624805][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.625980][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.626270][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.626794][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.627050][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.627546][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.627788][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.648698][ T2323] usbhid 10-1:1.0: can't add hid device: -71 [ 99.648753][ T2323] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 99.655587][ T2323] usb 10-1: USB disconnect, device number 2 [ 99.721050][ T9029] __nla_validate_parse: 19 callbacks suppressed [ 99.721136][ T9029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1106'. [ 100.193611][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1109'. [ 100.240880][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1111'. [ 100.394435][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 100.395367][ T9053] openvswitch: ovs-system: Dropping previously announced user features [ 100.444188][ T9061] FAULT_INJECTION: forcing a failure. [ 100.444188][ T9061] name failslab, interval 1, probability 0, space 0, times 0 [ 100.447740][ T9061] CPU: 3 UID: 0 PID: 9061 Comm: syz.5.1121 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.447774][ T9061] Tainted: [L]=SOFTLOCKUP [ 100.447782][ T9061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.447795][ T9061] Call Trace: [ 100.447803][ T9061] [ 100.447811][ T9061] dump_stack_lvl+0x100/0x190 [ 100.447849][ T9061] should_fail_ex.cold+0x5/0xa [ 100.447878][ T9061] should_failslab+0xc2/0x120 [ 100.447898][ T9061] __kmalloc_noprof+0xfc/0x840 [ 100.447917][ T9061] ? rcu_is_watching+0x13/0xc0 [ 100.447944][ T9061] ? tomoyo_realpath_from_path+0xb6/0x690 [ 100.447972][ T9061] tomoyo_realpath_from_path+0xb6/0x690 [ 100.447997][ T9061] tomoyo_path_perm+0x276/0x460 [ 100.448025][ T9061] ? tomoyo_path_perm+0x262/0x460 [ 100.448057][ T9061] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 100.448089][ T9061] ? mntput+0x70/0xa0 [ 100.448138][ T9061] ? __d_lookup+0x25c/0x4a0 [ 100.448184][ T9061] tomoyo_path_rmdir+0x91/0xe0 [ 100.448211][ T9061] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 100.448237][ T9061] ? lookup_dcache+0x66/0x170 [ 100.448270][ T9061] security_path_rmdir+0x145/0x2b0 [ 100.448303][ T9061] filename_rmdir+0x29d/0x5c0 [ 100.448331][ T9061] ? __pfx_filename_rmdir+0x10/0x10 [ 100.448364][ T9061] ? do_getname+0x191/0x390 [ 100.448401][ T9061] __x64_sys_rmdir+0x46/0x70 [ 100.448427][ T9061] do_syscall_64+0x123/0x790 [ 100.448452][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.448473][ T9061] RIP: 0033:0x7fde40f9e159 [ 100.448489][ T9061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.448506][ T9061] RSP: 002b:00007fde3f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 100.448528][ T9061] RAX: ffffffffffffffda RBX: 00007fde41225fa0 RCX: 00007fde40f9e159 [ 100.448542][ T9061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 100.448554][ T9061] RBP: 00007fde3f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.448566][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.448578][ T9061] R13: 00007fde41226038 R14: 00007fde41225fa0 R15: 00007ffc341f5898 [ 100.448608][ T9061] [ 100.459910][ T9061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.555090][ T9076] fuse: fd is not a fuse device [ 100.593416][ T9080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1127'. [ 100.660010][ T9084] lo speed is unknown, defaulting to 1000 [ 100.717730][ T9072] SELinux: failed to load policy [ 100.790320][ T5877] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 100.938385][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 100.948311][ T5877] usb 10-1: Using ep0 maxpacket: 8 [ 100.950990][ T5877] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.956368][ T5877] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.959959][ T5877] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.963650][ T5877] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.967273][ T5877] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.971700][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.977983][ T5877] usbtmc 10-1:16.0: bulk endpoints not found [ 101.089292][ T30] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 101.093749][ T30] usb 7-1: config 0 has no interfaces? [ 101.101883][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.105207][ T30] usb 7-1: Product: syz [ 101.106817][ T30] usb 7-1: Manufacturer: syz [ 101.108877][ T30] usb 7-1: SerialNumber: syz [ 101.112856][ T30] usb 7-1: config 0 descriptor?? [ 101.135481][ T9100] cgroup: fork rejected by pids controller in /syz0 [ 101.317850][ T9084] netlink: 'syz.2.1129': attribute type 13 has an invalid length. [ 101.317919][ T9084] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1129'. [ 101.320181][ T57] usb 7-1: USB disconnect, device number 14 [ 101.381614][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 101.627625][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 101.627719][ T43] audit: type=1400 audit(1788439074.733:690): avc: denied { map } for pid=9170 comm="syz.4.1142" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.644075][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 101.659343][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 101.747372][ T9179] FAULT_INJECTION: forcing a failure. [ 101.747372][ T9179] name failslab, interval 1, probability 0, space 0, times 0 [ 101.747615][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.4.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.747657][ T9179] Tainted: [L]=SOFTLOCKUP [ 101.747664][ T9179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.747675][ T9179] Call Trace: [ 101.747683][ T9179] [ 101.747690][ T9179] dump_stack_lvl+0x100/0x190 [ 101.747720][ T9179] should_fail_ex.cold+0x5/0xa [ 101.747746][ T9179] should_failslab+0xc2/0x120 [ 101.747767][ T9179] __kmalloc_noprof+0xfc/0x840 [ 101.747787][ T9179] ? tomoyo_encode2+0xfb/0x3c0 [ 101.747810][ T9179] tomoyo_encode2+0xfb/0x3c0 [ 101.747832][ T9179] tomoyo_encode+0x29/0x50 [ 101.747849][ T9179] tomoyo_realpath_from_path+0x18c/0x690 [ 101.747873][ T9179] tomoyo_path_perm+0x276/0x460 [ 101.747897][ T9179] ? tomoyo_path_perm+0x262/0x460 [ 101.747921][ T9179] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 101.747944][ T9179] ? mntput+0x70/0xa0 [ 101.747982][ T9179] ? __d_lookup+0x25c/0x4a0 [ 101.748007][ T9179] tomoyo_path_rmdir+0x91/0xe0 [ 101.748025][ T9179] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 101.748045][ T9179] ? lookup_dcache+0x66/0x170 [ 101.748090][ T9179] security_path_rmdir+0x145/0x2b0 [ 101.748116][ T9179] filename_rmdir+0x29d/0x5c0 [ 101.748138][ T9179] ? __pfx_filename_rmdir+0x10/0x10 [ 101.748167][ T9179] ? do_getname+0x191/0x390 [ 101.748191][ T9179] __x64_sys_rmdir+0x46/0x70 [ 101.748210][ T9179] do_syscall_64+0x123/0x790 [ 101.748232][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.748249][ T9179] RIP: 0033:0x7f44fe79e159 [ 101.748263][ T9179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.748278][ T9179] RSP: 002b:00007f44ff652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 101.748296][ T9179] RAX: ffffffffffffffda RBX: 00007f44fea25fa0 RCX: 00007f44fe79e159 [ 101.748307][ T9179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 101.748316][ T9179] RBP: 00007f44ff652090 R08: 0000000000000000 R09: 0000000000000000 [ 101.748326][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.748335][ T9179] R13: 00007f44fea26038 R14: 00007f44fea25fa0 R15: 00007ffd80aa4298 [ 101.748358][ T9179] [ 101.751552][ T9179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.860596][ T43] audit: type=1400 audit(1788439074.973:691): avc: denied { execute } for pid=9183 comm="syz.4.1147" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.885097][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1148'. [ 102.056191][ T43] audit: type=1400 audit(1788439075.163:692): avc: denied { write } for pid=9199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.159864][ T43] audit: type=1400 audit(1788439075.273:693): avc: denied { write } for pid=9207 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.305819][ T43] audit: type=1400 audit(1788439075.413:694): avc: denied { create } for pid=9216 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 102.306554][ T43] audit: type=1400 audit(1788439075.413:695): avc: denied { bind } for pid=9216 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 102.321367][ T43] audit: type=1400 audit(1788439075.433:696): avc: denied { write } for pid=9215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.416150][ T43] audit: type=1400 audit(1788439075.523:697): avc: denied { write } for pid=9222 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.455843][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 102.520667][ T43] audit: type=1400 audit(1788439075.633:698): avc: denied { write } for pid=9228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.595967][ T43] audit: type=1400 audit(1788439075.703:699): avc: denied { write } for pid=9233 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.041874][ T9266] FAULT_INJECTION: forcing a failure. [ 103.041874][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.041978][ T9266] CPU: 2 UID: 0 PID: 9266 Comm: syz.2.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.042023][ T9266] Tainted: [L]=SOFTLOCKUP [ 103.042032][ T9266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.042047][ T9266] Call Trace: [ 103.042055][ T9266] [ 103.042064][ T9266] dump_stack_lvl+0x100/0x190 [ 103.042111][ T9266] should_fail_ex.cold+0x5/0xa [ 103.042142][ T9266] _copy_to_user+0x32/0xd0 [ 103.042182][ T9266] simple_read_from_buffer+0xcb/0x170 [ 103.042211][ T9266] proc_fail_nth_read+0x1af/0x230 [ 103.042238][ T9266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.042264][ T9266] ? rw_verify_area+0xce/0x6d0 [ 103.042294][ T9266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.042320][ T9266] vfs_read+0x1e4/0xb40 [ 103.042378][ T9266] ? lock_acquire+0x1d1/0x380 [ 103.042400][ T9266] ? __fget_files+0x34/0x3d0 [ 103.042424][ T9266] ? __pfx_vfs_read+0x10/0x10 [ 103.042454][ T9266] ? find_held_lock+0x2b/0x80 [ 103.042483][ T9266] ? __fget_files+0x215/0x3d0 [ 103.042511][ T9266] ? __fget_files+0x21f/0x3d0 [ 103.042543][ T9266] ksys_read+0x12a/0x250 [ 103.042564][ T9266] ? __pfx_ksys_read+0x10/0x10 [ 103.042598][ T9266] do_syscall_64+0x123/0x790 [ 103.042634][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.042657][ T9266] RIP: 0033:0x7fec4775e98e [ 103.042676][ T9266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.042697][ T9266] RSP: 002b:00007fec48705fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.042718][ T9266] RAX: ffffffffffffffda RBX: 00007fec487066c0 RCX: 00007fec4775e98e [ 103.042733][ T9266] RDX: 000000000000000f RSI: 00007fec487060a0 RDI: 0000000000000004 [ 103.042747][ T9266] RBP: 00007fec48706090 R08: 0000000000000000 R09: 0000000000000000 [ 103.042759][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.042773][ T9266] R13: 00007fec47a26038 R14: 00007fec47a25fa0 R15: 00007fffc0410e38 [ 103.042803][ T9266] [ 103.157287][ T9273] fuse: fd is not a fuse device [ 103.220428][ T9282] netlink: 'syz.2.1176': attribute type 9 has an invalid length. [ 103.553151][ T57] usb 10-1: USB disconnect, device number 3 [ 103.654971][ T9314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9314 comm=syz.5.1187 [ 103.658451][ T9313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9313 comm=syz.5.1187 [ 103.783920][ T9323] fuse: Unknown parameter ']ŒŠ©łfdR0x0000000000000005' [ 103.932812][ T9330] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 104.190128][ T9342] xt_hashlimit: size too large, truncated to 1048576 [ 104.263269][ T5088] Bluetooth: hci3: unexpected event for opcode 0x080d [ 104.570803][ T9375] xt_cgroup: invalid path, errno=-2 [ 104.634812][ T9382] affs: No valid root block on device nullb0 [ 104.819422][ T9401] __nla_validate_parse: 5 callbacks suppressed [ 104.819492][ T9401] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1221'. [ 105.033459][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 105.954962][ T9462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1245'. [ 105.995075][ T9466] fuse: Bad value for 'fd' [ 106.099845][ T9472] netlink: Only one type of NAT may be specified [ 106.099910][ T9472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.208081][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'. [ 106.349202][ T9483] hsr_slave_0: left promiscuous mode [ 106.351421][ T9483] hsr_slave_1: left promiscuous mode [ 106.351621][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 106.848676][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 106.848689][ T9397] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 107.581394][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 107.581471][ T9510] netlink: 'syz.0.1265': attribute type 5 has an invalid length. [ 107.581516][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 107.583725][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 107.583753][ T9510] netlink: 'syz.0.1265': attribute type 5 has an invalid length. [ 107.583765][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 107.626997][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 107.685428][ T9514] bond11: entered promiscuous mode [ 107.686890][ T9514] 8021q: adding VLAN 0 to HW filter on device bond11 [ 107.762946][ T9397] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.775783][ T9397] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.781713][ T9397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.781836][ T9397] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 107.791233][ T9397] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 107.848211][ T9525] gadgetfs: bound to dummy_udc driver [ 107.848451][ T9526] openvswitch: ovs-system: Dropping previously announced user features [ 107.908810][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 107.908915][ T43] audit: type=1400 audit(1788439081.023:708): avc: denied { append } for pid=9532 comm="syz.4.1276" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 108.102658][ T43] audit: type=1400 audit(1788439081.213:709): avc: denied { write } for pid=9549 comm="syz.5.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.148304][ T1352] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 108.220765][ T9561] netlink: 'syz.5.1288': attribute type 3 has an invalid length. [ 108.288755][ T9565] bond5: entered promiscuous mode [ 108.289092][ T9565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 108.309284][ T1352] usb 9-1: Using ep0 maxpacket: 16 [ 108.310067][ T1352] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.312673][ T1352] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.315399][ T1352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.315420][ T1352] usb 9-1: Product: syz [ 108.315434][ T1352] usb 9-1: Manufacturer: syz [ 108.315447][ T1352] usb 9-1: SerialNumber: syz [ 108.321052][ T1352] usb 9-1: config 0 descriptor?? [ 108.325775][ T1352] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.325794][ T1352] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 108.327809][ T9570] fuse: fd is not a fuse device [ 108.363251][ T43] audit: type=1400 audit(1788439081.473:710): avc: denied { write } for pid=9571 comm="syz.5.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.387186][ T9572] syz_tun: entered allmulticast mode [ 108.468507][ T9580] tipc: Enabling of bearer rejected, failed to enable media [ 108.655250][ T9590] openvswitch: ovs-system: Dropping previously announced user features [ 108.716061][ T9594] netlink: 'syz.0.1301': attribute type 11 has an invalid length. [ 108.803381][ T43] audit: type=1400 audit(1788439081.913:711): avc: denied { read } for pid=9593 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.803709][ T43] audit: type=1400 audit(1788439081.913:712): avc: denied { getopt } for pid=9593 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.902011][ T9601] overlayfs: failed to clone upperpath [ 108.927589][ T1352] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 108.928255][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 109.004556][ T9617] netlink: 'syz.0.1311': attribute type 3 has an invalid length. [ 109.005129][ T9616] netlink: 'syz.2.1307': attribute type 3 has an invalid length. [ 109.087606][ T9622] bond12: entered promiscuous mode [ 109.089383][ T9622] 8021q: adding VLAN 0 to HW filter on device bond12 [ 109.117895][ T9625] fuse: fd is not a fuse device [ 109.354226][ T1352] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 109.360432][ T1352] em28xx 9-1:0.0: board has no eeprom [ 109.364272][ T9641] openvswitch: ovs-system: Dropping previously announced user features [ 109.401623][ T9644] gadgetfs: bound to dummy_udc driver [ 109.651901][ T5088] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 109.947304][ T9670] gadgetfs: bound to dummy_udc driver [ 110.240647][ T43] audit: type=1400 audit(1788439083.353:713): avc: denied { setopt } for pid=9676 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.242686][ T9683] __nla_validate_parse: 5 callbacks suppressed [ 110.242707][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 110.275966][ T43] audit: type=1400 audit(1788439083.383:714): avc: denied { mounton } for pid=9676 comm="syz.2.1332" path="/305/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 110.325461][ T9689] bond13: entered promiscuous mode [ 110.329250][ T9689] 8021q: adding VLAN 0 to HW filter on device bond13 [ 110.374726][ T9534] em28xx 9-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 110.428792][ T1352] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 110.428852][ T1352] em28xx 9-1:0.0: dvb set to bulk mode. [ 110.431003][ T57] em28xx 9-1:0.0: Binding DVB extension [ 110.453295][ T9694] pim6reg: entered allmulticast mode [ 110.468622][ T43] audit: type=1400 audit(1788439083.583:715): avc: denied { bind } for pid=9693 comm="syz.0.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.471631][ T9694] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1336'. [ 110.525221][ T57] em28xx 9-1:0.0: Registering input extension [ 110.635187][ T9702] binder: 9701:9702 ioctl c0306201 0 returned -14 [ 110.786150][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1343'. [ 110.795128][ T9719] openvswitch: ovs-system: Dropping previously announced user features [ 110.895764][ T9723] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1345'. [ 111.018346][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 111.403630][ T2323] usb 9-1: USB disconnect, device number 9 [ 111.411412][ T2323] em28xx 9-1:0.0: Disconnecting em28xx [ 111.411586][ T2323] em28xx 9-1:0.0: Closing input extension [ 111.421826][ T9733] gadgetfs: bound to dummy_udc driver [ 111.481730][ T2323] em28xx: Freeing device [ 111.500616][ T9738] CIFS: VFS: bad security option: krb5iż [ 111.500749][ T9738] CIFS: VFS: bad security option: krb5iż [ 111.500806][ T9738] CIFS: VFS: bad security option: krb5iż [ 111.500859][ T9738] CIFS: VFS: bad security option: krb5iż [ 111.500914][ T9738] CIFS: VFS: bad security option: krb5iż [ 111.501743][ T9738] CIFS: VFS: bad security option: ` [ 111.501808][ T9738] CIFS: VFS: bad security option: ` [ 111.501867][ T9738] CIFS: VFS: bad security option: ` [ 111.510680][ T9738] CIFS: VFS: bad security option: ` [ 111.677804][ T9762] fuse: Bad value for 'fd' [ 111.813148][ T9760] lo speed is unknown, defaulting to 1000 [ 112.017803][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1364'. [ 112.018632][ T9774] openvswitch: ovs-system: Dropping previously announced user features [ 112.267964][ T9782] netlink: 'syz.0.1367': attribute type 1 has an invalid length. [ 112.277811][ T9782] 8021q: adding VLAN 0 to HW filter on device bond14 [ 112.284807][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1367'. [ 112.399814][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1371'. [ 112.512879][ T62] Bluetooth: Error in BCSP hdr checksum [ 112.760588][ T1166] Bluetooth: Error in BCSP hdr checksum [ 113.021688][ T62] Bluetooth: Error in BCSP hdr checksum [ 113.238469][ T9819] fuse: Unknown parameter '0x000000000000000300000000000000000003' [ 113.302112][ T43] audit: type=1400 audit(1788439086.413:716): avc: denied { connect } for pid=9822 comm="syz.0.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.381771][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 113.382777][ T9827] openvswitch: ovs-system: Dropping previously announced user features [ 113.427445][ T9829] netlink: 'syz.0.1386': attribute type 11 has an invalid length. [ 113.707995][ T9844] fuse: fd is not a fuse device [ 113.875669][ T9848] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1393'. [ 114.331260][ T9862] fuse: fd is not a fuse device [ 114.331923][ T9862] udf: Unknown parameter '/dev/ocfs2_control' [ 114.529117][ T5738] Bluetooth: hci1: command 0x1003 tx timeout [ 114.530589][ T5088] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 114.560696][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 114.561323][ T9874] openvswitch: ovs-system: Dropping previously announced user features [ 114.610608][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 114.611161][ T9794] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 115.396280][ T9794] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.429338][ T5088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.432558][ T5088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.440363][ T5088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.447182][ T5088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.447772][ T5088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.491843][ T9110] syz_tun (unregistering): left allmulticast mode [ 115.491917][ T9110] syz_tun (unregistering): left promiscuous mode [ 115.492001][ T9110] bridge0: port 3(syz_tun) entered disabled state [ 115.664332][ T9900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1410'. [ 115.726533][ T9887] lo speed is unknown, defaulting to 1000 [ 115.763960][ T43] audit: type=1400 audit(1788439088.873:717): avc: denied { ioctl } for pid=9910 comm="syz.2.1412" path="socket:[30643]" dev="sockfs" ino=30643 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.912973][ T43] audit: type=1400 audit(1788439089.023:718): avc: denied { checkpoint_restore } for pid=9885 comm="syz.5.1408" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.972411][ T9876] lo speed is unknown, defaulting to 1000 [ 115.978826][ T43] audit: type=1400 audit(1788439089.083:719): avc: denied { mount } for pid=9923 comm="syz.2.1416" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 115.981532][ T43] audit: type=1400 audit(1788439089.093:720): avc: denied { search } for pid=9923 comm="syz.2.1416" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 115.981784][ T43] audit: type=1400 audit(1788439089.093:721): avc: denied { write } for pid=9923 comm="syz.2.1416" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 115.982091][ T43] audit: type=1400 audit(1788439089.093:722): avc: denied { open } for pid=9923 comm="syz.2.1416" path="/317/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 116.275731][ T9876] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.275886][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.276195][ T9876] bridge_slave_0: entered allmulticast mode [ 116.277603][ T9876] bridge_slave_0: entered promiscuous mode [ 116.280125][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.280355][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.280474][ T9876] bridge_slave_1: entered allmulticast mode [ 116.281805][ T9876] bridge_slave_1: entered promiscuous mode [ 116.298337][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 116.307770][ T9876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.310459][ T9876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.334348][ T9876] team0: Port device team_slave_0 added [ 116.336815][ T9876] team0: Port device team_slave_1 added [ 116.354230][ T9876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.354289][ T9876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.354333][ T9876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.355221][ T9876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.355229][ T9876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.355242][ T9876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.378866][ T9876] hsr_slave_0: entered promiscuous mode [ 116.379347][ T9876] hsr_slave_1: entered promiscuous mode [ 116.448474][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 116.449093][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.450233][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.450253][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.450265][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.450301][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.450323][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.504450][ T43] audit: type=1400 audit(1788439089.613:723): avc: denied { write } for pid=9937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.571565][ T43] audit: type=1400 audit(1788439089.683:724): avc: denied { write } for pid=9940 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.589630][ T5840] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 116.656942][ T9] usb 10-1: usb_control_msg returned -32 [ 116.659546][ T9] usbtmc 10-1:16.0: can't read capabilities [ 116.677887][ T9] usb 10-1: USB disconnect, device number 4 [ 116.699347][ T5088] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.705456][ T43] audit: type=1400 audit(1788439089.813:725): avc: denied { write } for pid=9942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.742357][ T5840] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.746539][ T5840] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 116.750822][ T5840] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 116.756767][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.760283][ T5840] usb 9-1: Product: syz [ 116.762182][ T5840] usb 9-1: Manufacturer: syz [ 116.762196][ T5840] usb 9-1: SerialNumber: syz [ 116.768669][ T5840] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 116.773349][ T5840] usb 9-1: no configuration chosen from 1 choice [ 116.973093][ T9876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.981038][ T9876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.981740][ T9876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.989038][ T9876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.990205][ T9876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.996125][ T9876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.997011][ T9876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.001903][ T9876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.067956][ T9876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.085227][ T9876] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.088723][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.088810][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.097155][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.097282][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.213276][ T9971] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 117.270109][ T9975] netlink: 'syz.5.1420': attribute type 21 has an invalid length. [ 117.270184][ T9975] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.270470][ T9975] netlink: 'syz.5.1420': attribute type 1 has an invalid length. [ 117.366979][ T9988] 8021q: VLANs not supported on tunl0 [ 117.404651][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1424'. [ 117.405358][ T9993] openvswitch: ovs-system: Dropping previously announced user features [ 117.434311][ T9876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.480342][ T9876] veth0_vlan: entered promiscuous mode [ 117.492873][ T9876] veth1_vlan: entered promiscuous mode [ 117.511962][ T9876] veth0_macvtap: entered promiscuous mode [ 117.514342][ T9876] veth1_macvtap: entered promiscuous mode [ 117.522213][ T9876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.533173][ T9876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.568879][ T5088] Bluetooth: hci5: command tx timeout [ 117.589883][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.590386][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.590423][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.590454][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.645203][ T6779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.645292][ T6779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.675582][ T9891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.675658][ T9891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.895993][T10026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1427'. [ 117.896703][T10025] SELinux: policydb magic number 0x38 does not match expected magic number 0xf97cff8c [ 117.896733][T10025] SELinux: failed to load policy [ 118.147471][T10040] /dev/sg0: Can't lookup blockdev [ 118.267435][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 118.366066][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 118.366168][ T43] audit: type=1400 audit(1788439091.473:747): avc: denied { write } for pid=10054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.374659][ T43] audit: type=1400 audit(1788439091.483:748): avc: denied { audit_write } for pid=10056 comm="syz.0.1436" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.376732][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1436'. [ 118.376765][T10057] netlink: 'syz.0.1436': attribute type 7 has an invalid length. [ 118.376778][T10057] netlink: 'syz.0.1436': attribute type 8 has an invalid length. [ 118.376789][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 118.426311][ T43] audit: type=1400 audit(1788439091.533:749): avc: denied { write } for pid=10059 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.455634][ T43] audit: type=1400 audit(1788439091.563:750): avc: denied { append } for pid=10056 comm="syz.0.1436" name="uprobe_events" dev="tracefs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 118.509555][ T43] audit: type=1400 audit(1788439091.623:751): avc: denied { write } for pid=10062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.572735][ T43] audit: type=1400 audit(1788439091.683:752): avc: denied { write } for pid=10065 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.768388][ T5088] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.124391][ T35] usb 9-1: USB disconnect, device number 10 [ 119.157515][T10071] overlayfs: failed to resolve './bus': -2 [ 119.165145][ T43] audit: type=1400 audit(1788439092.273:753): avc: denied { read } for pid=10068 comm="syz.0.1445" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.165661][ T43] audit: type=1400 audit(1788439092.273:754): avc: denied { open } for pid=10068 comm="syz.0.1445" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.168728][ T5088] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 119.196634][ T43] audit: type=1400 audit(1788439092.303:755): avc: denied { ioctl } for pid=10068 comm="syz.0.1445" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.274068][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 119.275386][T10079] openvswitch: ovs-system: Dropping previously announced user features [ 119.298047][T10077] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1440'. [ 119.653444][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 119.808634][ T5088] Bluetooth: hci5: command tx timeout [ 120.031564][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1458'. [ 120.219525][T10133] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 120.227050][T10130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.244352][T10130] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 120.245048][T10131] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 120.301238][T10138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.304393][T10138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.306807][T10139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.375178][T10142] futex_wake_op: syz.4.1465 tries to shift op by -1; fix this program [ 120.414603][ T43] audit: type=1400 audit(1788439093.523:756): avc: denied { lock } for pid=10141 comm="syz.4.1465" path="socket:[31663]" dev="sockfs" ino=31663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 120.415234][T10142] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 120.435037][T10142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 120.435083][T10142] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.443705][T10142] vhci_hcd vhci_hcd.0: Device attached [ 120.446909][T10147] vhci_hcd: connection closed [ 120.453219][ T12] vhci_hcd vhci_hcd.4: stop threads [ 120.457919][ T12] vhci_hcd vhci_hcd.4: release socket [ 120.457965][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 120.466372][T10150] hugetlbfs: Bad value 'x' for mount option 'size' [ 120.466372][T10150] [ 120.705907][T10156] f2fs: Unknown parameter 'barrierer0' [ 120.763665][T10157] syzkaller0: entered promiscuous mode [ 120.763727][T10157] syzkaller0: entered allmulticast mode [ 120.769843][T10157] tipc: Started in network mode [ 120.769913][T10157] tipc: Node identity 8ef0dabf5faf, cluster identity 4711 [ 120.771779][T10157] tipc: Enabled bearer , priority 0 [ 120.848414][ T5088] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.076544][T10159] __nla_validate_parse: 37 callbacks suppressed [ 121.076661][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 121.092432][T10159] team1: entered promiscuous mode [ 121.092515][T10159] team1: entered allmulticast mode [ 121.092957][T10159] 8021q: adding VLAN 0 to HW filter on device team1 [ 121.240616][T10163] /dev/nullb0: Can't open blockdev [ 121.303917][T10165] gadgetfs: bound to dummy_udc driver [ 121.532265][T10155] tipc: Resetting bearer [ 121.548338][ T5817] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.553883][ C3] gadgetfs: connected [ 121.555736][ T5817] gadgetfs: disconnected [ 121.563811][T10155] tipc: Disabling bearer [ 121.658418][T10173] input: syz0 as /devices/virtual/input/input10 [ 121.702346][T10181] ip_tables: iptables: counters copy to user failed while replacing table [ 121.735121][T10183] netlink: 'syz.5.1479': attribute type 4 has an invalid length. [ 121.891196][ T5088] Bluetooth: hci5: command tx timeout [ 121.903877][T10196] netlink: 'syz.5.1485': attribute type 1 has an invalid length. [ 121.903930][T10196] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1485'. [ 122.034544][T10204] xt_socket: unknown flags 0x48 [ 122.091318][T10205] hugetlbfs: Bad value 'x' for mount option 'size' [ 122.091318][T10205] [ 122.667775][T10234] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 122.667815][T10234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.667986][T10234] vhci_hcd vhci_hcd.0: Device attached [ 122.684552][T10236] vhci_hcd: connection closed [ 122.690442][ T5783] vhci_hcd vhci_hcd.0: stop threads [ 122.690508][ T5783] vhci_hcd vhci_hcd.0: release socket [ 122.692484][ T5783] vhci_hcd vhci_hcd.0: disconnect device [ 123.033704][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1500'. [ 123.033788][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1500'. [ 123.037716][T10244] team0: Cannot enslave team device to itself [ 123.304780][T10252] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 123.317077][T10252] macvlan2: entered promiscuous mode [ 123.317145][T10252] macvlan2: entered allmulticast mode [ 123.481395][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 123.481701][ T43] audit: type=1400 audit(1788439096.593:773): avc: denied { mmap_zero } for pid=10253 comm="syz.0.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 123.792998][T10268] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 123.829044][T10268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.847599][T10268] bond1: (slave gretap1): making interface the new active one [ 123.852269][T10268] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 123.854126][T10268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10268 comm=syz.0.1510 [ 123.856137][T10268] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 123.856137][T10268] program syz.0.1510 not setting count and/or reply_len properly [ 123.916618][ T43] audit: type=1400 audit(1788439097.023:774): avc: denied { listen } for pid=10271 comm="syz.0.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.966536][T10276] gadgetfs: bound to dummy_udc driver [ 124.090629][T10282] gadgetfs: bound to dummy_udc driver [ 124.097090][T10283] ================================================================== [ 124.097122][T10283] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1d1/0x1bd0 [ 124.097169][T10283] Read of size 8 at addr ffff888034f88000 by task syz.4.1516/10283 [ 124.097184][T10283] [ 124.097198][T10283] CPU: 2 UID: 0 PID: 10283 Comm: syz.4.1516 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.097224][T10283] Tainted: [L]=SOFTLOCKUP [ 124.097232][T10283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.097244][T10283] Call Trace: [ 124.097252][T10283] [ 124.097261][T10283] dump_stack_lvl+0x100/0x190 [ 124.097290][T10283] print_report+0x13d/0x4b0 [ 124.097316][T10283] ? __virt_addr_valid+0x239/0x430 [ 124.097339][T10283] ? __mutex_lock+0x1d1/0x1bd0 [ 124.097361][T10283] kasan_report+0xdf/0x1c0 [ 124.097391][T10283] ? __mutex_lock+0x1d1/0x1bd0 [ 124.097416][T10283] kasan_check_range+0x10f/0x1e0 [ 124.097444][T10283] __mutex_lock+0x1d1/0x1bd0 [ 124.097467][T10283] ? ep_open+0x4c/0x2c0 [ 124.097498][T10283] ? ep_open+0x4c/0x2c0 [ 124.097527][T10283] ? __pfx_avc_has_perm+0x10/0x10 [ 124.097553][T10283] ? hook_file_open+0x248/0x8e0 [ 124.097582][T10283] ? __pfx___mutex_lock+0x10/0x10 [ 124.097609][T10283] ? __pfx_selinux_file_open+0x10/0x10 [ 124.097643][T10283] ? ep_open+0x4c/0x2c0 [ 124.097666][T10283] ep_open+0x4c/0x2c0 [ 124.097691][T10283] do_dentry_open+0x6ab/0x14d0 [ 124.097709][T10283] ? __pfx_ep_open+0x10/0x10 [ 124.097734][T10283] vfs_open+0x82/0x3f0 [ 124.097759][T10283] path_openat+0x19fa/0x2440 [ 124.097782][T10283] ? __pfx_path_openat+0x10/0x10 [ 124.097806][T10283] do_file_open+0x20e/0x430 [ 124.097830][T10283] ? __pfx_do_file_open+0x10/0x10 [ 124.097858][T10283] ? _raw_spin_unlock+0x28/0x50 [ 124.097894][T10283] ? alloc_fd+0x471/0x7a0 [ 124.097918][T10283] do_sys_openat2+0x10f/0x1e0 [ 124.097943][T10283] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.097973][T10283] __x64_sys_openat+0x12d/0x210 [ 124.097999][T10283] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.098032][T10283] do_syscall_64+0x123/0x790 [ 124.098055][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.098075][T10283] RIP: 0033:0x7f44fe79e159 [ 124.098093][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.098112][T10283] RSP: 002b:00007f44ff652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.098134][T10283] RAX: ffffffffffffffda RBX: 00007f44fea25fa0 RCX: 00007f44fe79e159 [ 124.098147][T10283] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 124.098178][T10283] RBP: 00007f44fe835024 R08: 0000000000000000 R09: 0000000000000000 [ 124.098192][T10283] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 124.098205][T10283] R13: 00007f44fea26038 R14: 00007f44fea25fa0 R15: 00007ffd80aa4298 [ 124.098225][T10283] [ 124.098258][T10283] [ 124.098263][T10283] Allocated by task 10282: [ 124.098273][T10283] kasan_save_stack+0x30/0x50 [ 124.098295][T10283] kasan_save_track+0x14/0x30 [ 124.098313][T10283] __kasan_kmalloc+0xaa/0xb0 [ 124.098332][T10283] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 124.098369][T10283] gadgetfs_bind+0x582/0x890 [ 124.098391][T10283] gadget_bind_driver+0x28c/0xbf0 [ 124.098416][T10283] really_probe+0x241/0xa60 [ 124.098430][T10283] __driver_probe_device+0x210/0x460 [ 124.098446][T10283] driver_probe_device+0x4a/0x140 [ 124.098462][T10283] __driver_attach+0x21f/0x5b0 [ 124.098479][T10283] bus_for_each_dev+0x13e/0x1d0 [ 124.098502][T10283] bus_add_driver+0x305/0x5b0 [ 124.098525][T10283] driver_register+0x1e2/0x360 [ 124.098545][T10283] usb_gadget_register_driver_owner+0x132/0x210 [ 124.098571][T10283] dev_config+0xdce/0x1610 [ 124.098593][T10283] vfs_write+0x2aa/0x1050 [ 124.098618][T10283] ksys_write+0x12a/0x250 [ 124.098632][T10283] do_syscall_64+0x123/0x790 [ 124.098655][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.098675][T10283] [ 124.098679][T10283] Freed by task 10282: [ 124.098688][T10283] kasan_save_stack+0x30/0x50 [ 124.098707][T10283] kasan_save_track+0x14/0x30 [ 124.098726][T10283] kasan_save_free_info+0x3b/0x70 [ 124.098752][T10283] __kasan_slab_free+0x5f/0x80 [ 124.098773][T10283] kfree+0x22b/0x6d0 [ 124.098795][T10283] put_ep+0x117/0x150 [ 124.098816][T10283] destroy_ep_files+0x163/0x420 [ 124.098840][T10283] gadgetfs_unbind+0x139/0x260 [ 124.098860][T10283] gadget_unbind_driver+0x20c/0x4f0 [ 124.098894][T10283] device_remove+0xcb/0x180 [ 124.098921][T10283] device_release_driver_internal+0x44e/0x620 [ 124.098941][T10283] driver_detach+0xd8/0x1b0 [ 124.098958][T10283] bus_remove_driver+0x13b/0x2e0 [ 124.098985][T10283] driver_unregister+0x76/0xb0 [ 124.099004][T10283] usb_gadget_unregister_driver+0x49/0x70 [ 124.099032][T10283] dev_release+0x132/0x1b0 [ 124.099054][T10283] __fput+0x3ff/0xb50 [ 124.099075][T10283] task_work_run+0x150/0x240 [ 124.099099][T10283] exit_to_user_mode_loop+0x1d8/0x700 [ 124.099120][T10283] do_syscall_64+0x661/0x790 [ 124.099138][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.099155][T10283] [ 124.099159][T10283] The buggy address belongs to the object at ffff888034f88000 [ 124.099159][T10283] which belongs to the cache kmalloc-512 of size 512 [ 124.099174][T10283] The buggy address is located 0 bytes inside of [ 124.099174][T10283] freed 512-byte region [ffff888034f88000, ffff888034f88200) [ 124.099192][T10283] [ 124.099196][T10283] The buggy address belongs to the physical page: [ 124.099205][T10283] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34f88 [ 124.099220][T10283] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 124.099234][T10283] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 124.099255][T10283] page_type: f5(slab) [ 124.099270][T10283] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 124.099288][T10283] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 124.099307][T10283] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 124.099324][T10283] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 124.099343][T10283] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 124.099362][T10283] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 124.099373][T10283] page dumped because: kasan: bad access detected [ 124.099381][T10283] page_owner tracks the page as allocated [ 124.099388][T10283] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9760, tgid 9759 (syz.5.1358), ts 111844168200 [ 124.099421][T10283] post_alloc_hook+0xfd/0x120 [ 124.099444][T10283] get_page_from_freelist+0x110d/0x35d0 [ 124.099469][T10283] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 124.099496][T10283] new_slab+0xa9/0x6e0 [ 124.099519][T10283] refill_objects+0xe3/0x410 [ 124.099543][T10283] __pcs_replace_empty_main+0x35e/0x650 [ 124.099567][T10283] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 124.099592][T10283] inetdev_init+0x66/0x570 [ 124.099610][T10283] inetdev_event+0x827/0x17f0 [ 124.099632][T10283] notifier_call_chain+0x99/0x3f0 [ 124.099654][T10283] call_netdevice_notifiers_info+0xbe/0x110 [ 124.099676][T10283] register_netdevice+0x1998/0x25a0 [ 124.099694][T10283] register_netdev+0x34/0x50 [ 124.099711][T10283] sit_init_net+0x2c0/0x5e0 [ 124.099728][T10283] ops_init+0x1e2/0x5f0 [ 124.099744][T10283] setup_net+0x118/0x3a0 [ 124.099761][T10283] page last free pid 8132 tgid 8132 ts 84692484928 stack trace: [ 124.099772][T10283] __free_frozen_pages+0x79f/0x10f0 [ 124.099794][T10283] qlist_free_all+0x47/0xf0 [ 124.099810][T10283] kasan_quarantine_reduce+0x1a0/0x1f0 [ 124.099827][T10283] __kasan_slab_alloc+0x69/0x90 [ 124.099843][T10283] kmem_cache_alloc_noprof+0x269/0x6a0 [ 124.099859][T10283] jbd2__journal_start+0x194/0x6b0 [ 124.099897][T10283] __ext4_journal_start_sb+0x314/0x610 [ 124.099920][T10283] ext4_dirty_inode+0xa1/0x130 [ 124.099946][T10283] __mark_inode_dirty+0x1f3/0x16e0 [ 124.099975][T10283] file_update_time_flags+0x49c/0x520 [ 124.100001][T10283] ext4_page_mkwrite+0x324/0x1860 [ 124.100024][T10283] do_page_mkwrite+0x17a/0x440 [ 124.100039][T10283] do_fault+0x659/0x1830 [ 124.100057][T10283] __handle_mm_fault+0x150b/0x2f60 [ 124.100080][T10283] handle_mm_fault+0x363/0xa20 [ 124.100102][T10283] do_user_addr_fault+0x59c/0x12f0 [ 124.100124][T10283] [ 124.100131][T10283] Memory state around the buggy address: [ 124.100140][T10283] ffff888034f87f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 124.100153][T10283] ffff888034f87f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 124.100165][T10283] >ffff888034f88000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.100175][T10283] ^ [ 124.100184][T10283] ffff888034f88080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.100196][T10283] ffff888034f88100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.100207][T10283] ================================================================== [ 124.100307][T10283] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 124.512602][T10283] CPU: 2 UID: 0 PID: 10283 Comm: syz.4.1516 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.517496][T10283] Tainted: [L]=SOFTLOCKUP [ 124.519408][T10283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.524202][T10283] Call Trace: [ 124.525955][T10283] [ 124.527436][T10283] dump_stack_lvl+0x100/0x190 [ 124.529537][T10283] vpanic+0x553/0x970 [ 124.531334][T10283] ? __pfx_vpanic+0x10/0x10 [ 124.533340][T10283] ? mark_held_locks+0x40/0x70 [ 124.535520][T10283] ? irqentry_exit+0x24d/0xa10 [ 124.537918][T10283] ? __mutex_lock+0x1d1/0x1bd0 [ 124.540194][T10283] panic+0xd1/0xe0 [ 124.542067][T10283] ? __pfx_panic+0x10/0x10 [ 124.544342][T10283] check_panic_on_warn.cold+0x19/0x34 [ 124.546952][T10283] end_report.part.0+0x3a/0x90 [ 124.549089][T10283] kasan_report.cold+0xe/0x18 [ 124.551164][T10283] ? __mutex_lock+0x1d1/0x1bd0 [ 124.553289][T10283] kasan_check_range+0x10f/0x1e0 [ 124.555556][T10283] __mutex_lock+0x1d1/0x1bd0 [ 124.557686][T10283] ? ep_open+0x4c/0x2c0 [ 124.559610][T10283] ? ep_open+0x4c/0x2c0 [ 124.561545][T10283] ? __pfx_avc_has_perm+0x10/0x10 [ 124.564021][T10283] ? hook_file_open+0x248/0x8e0 [ 124.566334][T10283] ? __pfx___mutex_lock+0x10/0x10 [ 124.568529][T10283] ? __pfx_selinux_file_open+0x10/0x10 [ 124.571111][T10283] ? ep_open+0x4c/0x2c0 [ 124.573195][T10283] ep_open+0x4c/0x2c0 [ 124.575325][T10283] do_dentry_open+0x6ab/0x14d0 [ 124.577687][T10283] ? __pfx_ep_open+0x10/0x10 [ 124.579840][T10283] vfs_open+0x82/0x3f0 [ 124.581646][T10283] path_openat+0x19fa/0x2440 [ 124.583800][T10283] ? __pfx_path_openat+0x10/0x10 [ 124.586140][T10283] do_file_open+0x20e/0x430 [ 124.588664][T10283] ? __pfx_do_file_open+0x10/0x10 [ 124.590988][T10283] ? _raw_spin_unlock+0x28/0x50 [ 124.593178][T10283] ? alloc_fd+0x471/0x7a0 [ 124.595080][T10283] do_sys_openat2+0x10f/0x1e0 [ 124.597127][T10283] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.599508][T10283] __x64_sys_openat+0x12d/0x210 [ 124.602017][T10283] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.604954][T10283] do_syscall_64+0x123/0x790 [ 124.607158][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.609773][T10283] RIP: 0033:0x7f44fe79e159 [ 124.611748][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.620206][T10283] RSP: 002b:00007f44ff652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.624028][T10283] RAX: ffffffffffffffda RBX: 00007f44fea25fa0 RCX: 00007f44fe79e159 [ 124.627677][T10283] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 124.631246][T10283] RBP: 00007f44fe835024 R08: 0000000000000000 R09: 0000000000000000 [ 124.634738][T10283] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 124.638251][T10283] R13: 00007f44fea26038 R14: 00007f44fea25fa0 R15: 00007ffd80aa4298 [ 124.642025][T10283] [ 124.644630][T10283] Kernel Offset: disabled [ 124.646513][T10283] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:38:17 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff91f8a3ee RBX=ffffffff916924e4 RCX=dffffc0000000000 RDX=ffffffff829415c8 RSI=0000000000000000 RDI=ffffffff916924d8 RBP=ffffffff916924d8 RSP=ffffc900057378e0 R8 =ffffffff91f8a41e R9 =0000000000000007 R10=0000000000000200 R11=0000000000019415 R12=ffffffff916924e0 R13=ffffffff82941597 R14=ffffffff916924d8 R15=ffffffff916924d8 RIP=ffffffff81b98a29 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8227d92c80 ffffffff 00c01300 GS =0000 ffff8880d5b61000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f59ee9eb840 CR3=0000000029716000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffff Opmask01=00000000fff82400 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555b34b39600 0000555b34b39600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1a70f2f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a6461 7379000a31000a30 3032383631343438 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3739206469677420 2c30363739206469 70202c29434f4c4c 414d454d4f4e5f50 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46475f5f7c504d4f 435f5046475f5f7c 59525445524f4e5f 5046475f5f7c4e52 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 41574f4e5f504647 5f5f7c53465f5046 475f5f7c4f495f50 46475f5f28306330 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff888051b73130 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000000 RDI=ffffffff8edec060 RBP=0000000000000007 RSP=ffffc900063a7818 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888051b72580 R13=0000000000000002 R14=0000000000000000 R15=ffffffff8edec060 RIP=ffffffff81e7050d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe6e21d4880 ffffffff 00c00000 GS =0000 ffff8880d5c61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fde4100b558 CR3=000000003d144000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000e7800600 Opmask01=0000000000000fff Opmask02=00000000ff3fefff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005654868f0390 00005654868ef390 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005654868ef390 00005654868ef390 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005654867fee10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6e1bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff00ff00000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2fbe 2f2f2f2f2f2f2f0f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f792f445c464b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7973656c69662074 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444e5851545b1d49 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003138313731 0000000000000021 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005654867ea090 00005654867ea070 00005654867e6810 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000565486802ea0 ffffa9ab79815f6c 000029b267d55d1a 000029a8ceb2c608 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6e7ffaff3 ffffbbbbffffffff 00007ff6effffffb fffffffffffffffc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005654867e1b20 0000565400302c30 0000000000000021 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d5400302c30 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afe815 RDI=ffffffff9bc63ca0 RBP=ffffffff9bc63c60 RSP=ffffc900031b6fd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=0000000000000073 R14=0000000000000007 R15=ffffc900031b72f0 RIP=ffffffff85afe83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f44ff6526c0 ffffffff 00c00000 GS =0000 ffff8880d5d61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a612c CR3=00000000240ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80aa4786 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80aa4786 00007ffd80aa478c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44fe835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44fe835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44fe8357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44fe835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44fe9f25f8 00007f44fe9f25c8 00007f44fe9f2600 00007f44fe9f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff888032afcb00 RSI=ffffffff826221e8 RDI=ffff888032afcb00 RBP=1ffff920002c9e83 RSP=ffffc9000164f410 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000004a7b8 R13=ffff88803c96f680 R14=00007ff297d17000 R15=000800000004a7b8 RIP=ffffffff820bf050 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff2987a0300 ffffffff 00c00000 GS =0000 ffff8880d5e61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faa5e357e20 CR3=000000002a0f3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=bbc4766b975c42c0 02084d7582d821cf bbc4766b975c42c0 02084d7582d821cf bbc4766b975c42c0 02084d7582d821cf bbc4766b975c42c0 02084d7582d821cf ZMM18=1ef38730d64399b1 7fb32d0d8000f50c 1ef38730d64399b1 7fb32d0d8000f50c 1ef38730d64399b1 7fb32d0d8000f50c 1ef38730d64399b1 7fb32d0d8000f50c ZMM19=3f0a000000000000 0000000000000004 3f0a000000000000 0000000000000003 3f0a000000000000 0000000000000002 3f0a000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000060005 000600060300ffff fffa03000000ffff ffe603000000ffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffde03000000ffff ffd6000003e60000 0008000400000008 00080000000c0000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0018000000240000 00300000003c0000 004c0000005c0000 0007000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03000000ffffffde 03000000ffffffd6 000003e600000008 0004000000080008 ZMM25=7fb32d0d7fb32d0d 7fb32d0d7fb32d0d 7fb32d0d7fb32d0d 7fb32d0d7fb32d0d 7fb32d0d7fb32d0d 7fb32d0d7fb32d0d 7fb32d0d7fb32d0d 7fb32d0d7fb32d0d ZMM26=d64399b1d64399b1 d64399b1d64399b1 d64399b1d64399b1 d64399b1d64399b1 d64399b1d64399b1 d64399b1d64399b1 d64399b1d64399b1 d64399b1d64399b1 ZMM27=1ef387301ef38730 1ef387301ef38730 1ef387301ef38730 1ef387301ef38730 1ef387301ef38730 1ef387301ef38730 1ef387301ef38730 1ef387301ef38730 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3c0a00003c0a0000 3c0a00003c0a0000 3c0a00003c0a0000 3c0a00003c0a0000 3c0a00003c0a0000 3c0a00003c0a0000 3c0a00003c0a0000 3c0a00003c0a0000