last executing test programs: 9.510687994s ago: executing program 1 (id=162): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x286, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4}) pwrite64(r0, &(0x7f0000000000)="ebfacbae04e10be468771c1694d6264cd89545044c0c12d1d51ab54f971a63f13f8c59e2d5ab8e9eff2b41fc4bd30b52264423c828fbff34caf96f492f78e9ffd33272b7e300c19b86a3d09e6d992636e31ec87835e8135f221d97b6", 0x5c, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xa, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xa, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) 8.840715766s ago: executing program 1 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x4, 0xec, 0x401, 0x3, 0x4000000000007, 0x0, 0x6, 0x80000001, 0xdd, 0x200, 0xffffffff, 0x5, 0x6, 0x0, 0x8, 0xf], 0x0, 0x2a80}) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000002c0)="66b85919000000d80fb5c4c375693700f30fc7b000100000b93e020000b8e9d46fe356560b8ccf1d0f30a95db80000490fc75f01f3460fa7c00f01f866baf80cb80d34ef8def66bafc0cec", 0x4b}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) (rerun: 64) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x1) 8.297160484s ago: executing program 1 (id=169): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20041094}, 0x40890) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000a000200140003006e657464657673696d300000000000000a000100aaaaaaaaaabb00001800168014000180100006", @ANYRESHEX=r0, @ANYRES16=r0], 0x58}}, 0x40000) 8.295751058s ago: executing program 1 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000070400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800e001400bbbbbbbbbbbb0000"], 0x40}}, 0x0) 8.250448853s ago: executing program 1 (id=171): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xa}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='off\n', 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='off\n', 0x4) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f0000c18000/0x3000)=nil, &(0x7f00009e3000/0x3000)=nil, 0x401, &(0x7f0000000040), 0x0, 0x5, 0x11, 0x40, 0x2a}) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x448000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) 7.103405315s ago: executing program 1 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) listen(0xffffffffffffffff, 0x1ff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) socket(0x21, 0x3, 0x0) (async) r1 = socket(0x21, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x13, 0xa}, {0xe, 0x10}, {0xf, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x689}], 0x2}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x689}], 0x2}, 0x0) 5.680539783s ago: executing program 3 (id=188): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r0, r0, 0x0) setreuid(r0, 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@posixacl}], [{@measure}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, '$'}}, {@appraise}, {@uid_eq={'uid', 0x3d, r0}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, ')/'}}, {@appraise_type}]}}) 5.579524473s ago: executing program 3 (id=189): setresgid(0x0, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x120000000000}) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x73f0, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0x2, 0x2, 0x73e9}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r3, 0x8800000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis256-generic)\x00'}, 0x37) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendfile(r6, r3, 0x0, 0x1000009) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x8098) fcntl$lock(r2, 0x6, 0x0) read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) ioctl$XFS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000600)) 3.966711862s ago: executing program 3 (id=195): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newnexthop={0x58, 0x68, 0x10, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x11}, [@NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_GROUP={0x1c, 0x2, [{0x2, 0x6}, {0x2}, {0x1, 0xff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x8810) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) r3 = getuid() mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x6010, &(0x7f0000000340)={[], [{@smackfsdef={'smackfsdef', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@seclabel}, {@fsname={'fsname', 0x3d, ')+\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor}, {@fowner_lt={'fowner<', r3}}]}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa85ddf2e4f68ed09}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a0b1}, 0x15) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000081}, 0x4) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0x428, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1000) (async) chdir(&(0x7f0000000800)='./file0\x00') (async) mount$bind(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x1c0040, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000a40), 0x40200, 0x0) (async) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000a80), 0xa2502, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xad}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x30c}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x20000044) readv(r0, &(0x7f0000001100)=[{&(0x7f0000000c40)=""/230, 0xe6}, {&(0x7f0000000d40)=""/176, 0xb0}, {&(0x7f0000000e00)=""/227, 0xe3}, {&(0x7f0000000f00)=""/49, 0x31}, {&(0x7f0000000f40)=""/245, 0xf5}, {&(0x7f0000001040)=""/54, 0x36}, {&(0x7f0000001080)=""/12, 0xc}, {&(0x7f00000010c0)=""/4, 0x4}], 0x8) (async) r10 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 64) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001480)=0x0) (async, rerun: 64) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r13 = socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001640)={{0x1, 0x1, 0x18, r6, {r2, 0xee00}}, './file0\x00'}) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001bc0)=0x0) (async, rerun: 32) statx(r0, &(0x7f0000001c00)='./file0\x00', 0x4000, 0x1, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d40)={0x0}, &(0x7f0000001d80)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) (async) r19 = syz_clone(0x200, &(0x7f0000001e40)="78baf94012e63efb431f42c59b25278d56b759a771b9256f2d67cf9442fe94976c763aa541f235f5522ee9a681afcbc242267e7ec24a402065b012c370d3e4a8245839c7d5e559813660fb41f516904b7260c4c42060d5a18d2a16106c1f455ef11a7419a79cc0f595b207007cb2", 0x6e, &(0x7f0000001ec0), &(0x7f0000001f00), &(0x7f0000001f40)="965894693c768ec4bb4ecaa4838fddc1af1bc2f71e1b39ea4a6b3bd3ebd7cbf4c74044b3fa35994ad8b0b1c8a291e671977177fefa73ab753f24d35b6d20ab7298b50d080c45849a452ab70bdd198c0004d1a7258c780a300ea44215c2808e6d7d0ae3c19212588b664d5ecabb054bb0ce2d05142b77d0bf06684efb98dd2e0393b0f515f3dff5a204418f610ae65625d4adb06cd8b0bdb9f5e9a56beeb788a25f05fa48c8c665dbe4fd2c0aa98fc6e118672e8551ae75319b56e951b1fc26b70a9bc215b87dcdd791497ce4b46b60cba2d56d4fbfa14c5cd0bf") sendmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001180)="cc3d8416dc3a4577bdfb5cc124d189ea88902ae8fd277e1e4972baa70b52eeefec87b0db4b7f4a91da2c50c3bce2b34fb18e8dab66c658dfe4766949c6a802ba1f0cad9ab04c0db4cb78dd32cf826872ecd772586f445252e15c405a113276108610c950a611ca8d0c108c002a6e17125d6ede5477109a0f0e45c19c6f2e58da654ba24657028c73313099a6808e8af1c3ef0331c90c5daead9fa012f12ee7eb9c226049104b0f2d5459ef595454723599c93d0acc99ea3f67f687a77af6ef044488858fa5c93363d737506244d4487e", 0xd0}, {&(0x7f0000001280)="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", 0xfc}, {&(0x7f0000001380)="61f9b0f5261ee221d240e9374ae744fb7d4b32b781d8fd44dc4f23b69d5d26cac0c725833da11308f7ebb0c801424f5dc7109b10014a9f40812b358eb367173dce877529d324740c48184fd57921ed859fde23cf34061150069809cb407908343014b29f9df045a0ea98ae1beda20d85a591cd2ac3a4e22d71d7635aaeabea34513a27256bbaf0f985688e9e5dd2d8d23c1f089439bc1db737ea48944d4fe1ca1f3d5a292fc6b008f03c4922a8c03b280d2ddb27b81bd77bce817fafde", 0xbd}], 0x3, &(0x7f00000014c0)=[@rights={{0x2c, 0x1, 0x1, [r7, 0xffffffffffffffff, r6, r10, r7, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r11, r2, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r0, r12]}}, @rights={{0x34, 0x1, 0x1, [r0, r13, r6, r0, r7, 0xffffffffffffffff, r7, r0, r6]}}], 0xa0, 0x8010}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001580)="58daaadc3c2d9050a86464f7ad216fc8550bf3af74b54489b2528d41f2f4a5572048c0d34373bae03970ad0801e497fd1d74aa9bc27469026b405555245abc4c207c7b", 0x43}], 0x1, &(0x7f0000001680)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r14}}}], 0x20, 0x20000015}}, {{&(0x7f00000016c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001740)="b377d887a15ebb7ab78a898d9d3ebe4827c5faaacee72621ccb551967d6978c66fcb2e0558c5387f9954cd3489c80686ca20b5df796f3cb49167269ee84b2d76caeaed7af764ab70369d9d69beeaca7cbbe936872822b92912abf6851c06caf3b86423c32c12a6b23e2d04431a7d5675d9a5", 0x72}, {&(0x7f00000017c0)="3ff6be92e682a2f39191969cc13258815e605cedbf163ed52ca73cdf4ae581ff1c2314ec9f92907c49c6763d1a02e3c90623a2c5a81f2753239e0efa6aa8da4ff1b8b6fbcd036b504c6d0c9a2afa15a23ecf5d07c28bfe3d99c45011212c94ab92764ad356b552fcc2a094ded533b2849c7c0bba114edd336eb22715aacc8d3beea53d763ba6c097339cfb84eaa443fd11ff90dae214a55d6835adbf425ee079f783933f4fce7e9f6ef8e050c0bf245c0dac9069a7b90a92", 0xb8}, {&(0x7f0000001880)="14eb9381d4cced4656e181148d182e36fd6976835e85117634187bf6b21efdbe71cd4d39bb1a63477cc3053113443a33bde2d132aa4eb5b218af786bd7c593754f7dd4b0b1c3660001278416c8c849324e69fbca2b0eaa932469a94b92c848728c2b08ce03af45a13247e2f008084750f13c3d7987c118913ceb476f874a8d1e50e7f73e105a57cb072aa0cc49c3ebf319ee191c90947b6a08890ef55ff6a48e555afd3e885c1f08cdb5ca8de3d497e2c4bcbcee091494e18b29acd9acb90ec01059119b78548952eec25cdd41854c65", 0xd0}, {&(0x7f0000001980)="2af7a307a821a431c9fdde1dbf055d44c16a9ade980eab4486b292a3db0bd16d4077bf44fb0598b6a5d9000a0b67ca7a0819ab04419fa3896c66bea7ed499b86bac464556674eaae07ddc6f4b6f2d29e6f62a270eff5f48254b30c90b0354954ee9777941ad10651a270d28c61f8b88da019d06f81686a45f5d44f8b03417e832c75e943ff54cf5c0ddece4e14520449753a67c23cfb4a089296bf3f125d79a60033af1f7c3fcfb1a1dbd284033928c466", 0xb1}, {&(0x7f0000001a40)="2b3d33716476513d458373ab2350b70c95f90c6dba49a039c4992b7bd25b86530d518b2b0287f08d404f88b37e9ce9b90cc7e4f4a0b98a11772ca93dbc0b2c2881811dba2823732f4cdb133cdaa29cf64efb0eeab000df9346d040df011caf590376250f81166beab8e90072e70039f7e55a9aaa812076e2b5fc376619d3ed091852baeab3677994e8e09a7cfea496b7be52ed80bdda18e5bd981628c2a86aa1cca21aaa463a7ac178a097169b8162334ad20999e0bce8b94ff29429cee51b0ad469a085f01068b2dc21b7dce9aec661d8292174d8b0a71fa0efd40057f8633099e1d5e4e9260c044b7d", 0xea}], 0x5, &(0x7f0000002280)=[@cred={{0x1c, 0x1, 0x2, {r15, r3, r16}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r17, r3, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0xf0, 0x20000810}}], 0x3, 0x20004000) 3.544024362s ago: executing program 3 (id=197): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4603000702420000000000000003003e00f9ffffffd80100000000000040000000000000008b00000000000000330d000005003800020078000700090051e57464"], 0xb0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1123102, 0x0) r2 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000080)={0x0, 0x30b8, 0x8, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000001c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000002c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000300)={0x0, 0x1, 0x10, 0x1, 0x255}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd33, 0x200, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x7, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f00000006c0)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0x204, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000740)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000780)=0x1b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = memfd_create(&(0x7f00000007c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r11, 0x0, 0x1, 0x400001) fcntl$addseals(r11, 0x409, 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x1a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.419984129s ago: executing program 0 (id=198): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') read$FUSE(r3, 0x0, 0x0) read$eventfd(r2, 0x0, 0x0) socket(0x1a, 0x6, 0xfff) 2.305198625s ago: executing program 3 (id=200): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x40, 0x5, 0xc, 0x6, 0xa00, 0x81}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\\\x00', 0x180, &(0x7f0000000100)={@_ha_fsid={[0x9, 0xffff644c]}, {0x50f, 0x7, 0x1, 0x81}}, 0x6, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x6}) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0xe, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0xfb, 0xde, 0x1, 0x0, "512cecaa54d1eb51d68025951ac033c5", "c044b703453446fe1af46071bb1a0154f160e367a488b5e1d3798b9344727fca47bbe222e561c777e9c6f9923dab4b7024de53536615b689b5f8b0b4f63c13e6e64519e70ce97e06822ef4cb842a7bd3066a2c8d721e3f18f223fcc8dcb309e210f8129560fede50f1e30670ecba938566a78aec753e429cdbe5968e1421db9d88c390d324715f67c80e0c33ce6a2c23952bb9a808dd5962dc69de58f2da753a138501c70bddd4dcc026c409217dbfd0039f589c16212b86bd4394777f03ca84508debb47f053aa340"}, 0xde, 0x3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000440)=0xbf, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x20c00, 0x0) write(r2, &(0x7f00000006c0)="d6626e7dfab8ef6f1ebd18bdbdc32b53dda46cf3d5f241efd96e8bd0f766404db43652c2b4b8e07e5ca1aa1f9417f402e059d2eb4a2de05eeab4121eb939d42692089757bb0ac58f3491fba1571c794fc7e968764c1081be05dbac83ca68952a40cde6c06963b41709fd833206da7d3e2b7bb2a9e3ca4f034225b1386b5d0a5ccfc87249ef69c73db013bbbe713ecc7eda752889bce0e018c2db543d0beca486cbd2df0d8a457f606b0edb96d8794cf4525e1e7af235254d4ed6119f149e32098282fc59", 0xc4) r3 = openat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x40000, 0x18, 0x20}, 0x18) getdents64(r1, &(0x7f0000000840)=""/188, 0xbc) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000900)={0x7, 0x6, 0x7, 0x1, 0x7, 0x0, 0xf}) r4 = accept4$x25(r1, &(0x7f0000000980), &(0x7f00000009c0)=0x12, 0x80800) connect$x25(r4, &(0x7f0000000a00), 0x12) fstat(r0, &(0x7f0000000a40)) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x341002, 0x0) getdents64(r5, &(0x7f0000000b00)=""/112, 0x70) r6 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000000b80)={0x1, 0x0, 0x3, 0x6, r6}) getdents64(r1, &(0x7f0000000bc0)=""/168, 0xa8) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000c80)=0x474) fgetxattr(r1, &(0x7f0000000cc0)=@random={'osx.', '/proc/thread-self\x00'}, &(0x7f0000000d00)=""/53, 0x35) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000d40), 0x10000, 0x0) ioctl$KVM_GET_PIT2(r7, 0x8070ae9f, &(0x7f0000000d80)) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000e00)={0xdf, 0x0, 0x98000}) faccessat(r1, &(0x7f0000000e80)='./file0\x00', 0x49) 2.105470123s ago: executing program 2 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bf) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) (async) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000240), &(0x7f0000000280)={'U+', 0x51d1}, 0x16, 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055b87b0, 0x48a21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0xd1}, 0x2400c000) write(r1, &(0x7f00000003c0)="736573736e616d653d7330206465766963655f70213d2f6465762f72616d3020706174683d6994b176ba1b190ef950fde49e05fa811aeba0f97c64ee3379f1fef4d64bcb4a050b8c17ad8dd90000000000000000fa07aee1821847260e719124e97583068b3530", 0x67) 2.010717147s ago: executing program 3 (id=202): openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x4000, 0x110) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x4000, 0x110) mkdirat(r0, &(0x7f0000000100)='./dev\x00', 0x0) (async) mkdirat(r0, &(0x7f0000000100)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202"], 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x800) (async) accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000340)=0xa, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000340)=0xa, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000440)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$cgroup(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000280), 0x2008000, &(0x7f00000002c0)={[{@none}, {}]}) (async) mount$cgroup(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000280), 0x2008000, &(0x7f00000002c0)={[{@none}, {}]}) r4 = syz_open_dev$admmidi(&(0x7f0000000040), 0x20, 0x0) read$midi(r4, 0x0, 0x3b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4180, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x102, 0x0) 1.860816889s ago: executing program 2 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./dev\x00', &(0x7f0000000c00)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="70000000300001060000000000000000000000005c000180580001800f00010074756e6e656c5f6b65790000440002801c000200000000000000000000000000000000000700000001000000080003007f000001080004007f00000114000b80040000000c0002800800190000000000", 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./mnt\x00', 0x1ff) mount(&(0x7f0000000dc0)=@filename='./dev/sda1\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000000e80)='ext4\x00', 0x8410, 0x0) symlink(&(0x7f0000000ec0)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000fc0)='./mnt/file0\x00') unlink(&(0x7f0000001000)='./mnt/file0\x00') 1.679331638s ago: executing program 2 (id=204): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000700)='P', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000084000000f9ffffffa83f2e2bdf26b7d2bddefb4b28c693f961f93ba52d8f1e984420e495a2cea1c24f3e9979a16ea8d00a703bc959e39e3072a58370729133c4e6aa12c264f285738b7732e5e474719e70319899b255a8de68f81a"], 0x10}}], 0x1, 0x0) 1.400480031s ago: executing program 2 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x9) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x1, 0x96, "471ddc18cdb9299df06e621e824c7dd109946c600fb60089728822ca4763e2201f85b26e7f0524428b35c419feb54f5792a5bfbafc99940526c0443f3388bcd03771f487d2c806f44c2205705a30a71ecd53782c0a91c17db03a20da15f1471b186a62a758862b0dfd270d9cbe1a6bf98851ae1c95ed3c036b177abee2a8beb34570f192ff5e86b5d6e30162bd84a1f7fd360a1c06fe"}, &(0x7f0000000180)=0x9e) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x8001}}}, 0x84) getsockopt(r2, 0x6, 0x8, 0x0, &(0x7f0000000080)) ioctl$SIOCX25GDTEFACILITIES(r1, 0x5411, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.276489993s ago: executing program 0 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x49ba, &(0x7f0000000140)={0x0, 0x5de4, 0x10000, 0x7, 0x40000094}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r4 = epoll_create1(0x0) r5 = userfaultfd(0x80801) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x40, 0x0, r4, r5, &(0x7f0000000340)={0x2000}, 0x1, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) io_uring_enter(r0, 0x1ffc, 0xfffffffc, 0xc3, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/trace_marker\x00', 0x1, 0x102) write(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 903.955828ms ago: executing program 2 (id=207): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210}, 0x94) 903.591258ms ago: executing program 0 (id=208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2800}, 0x2204804c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x8090) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x81, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000004c0)) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 748.781494ms ago: executing program 0 (id=209): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 745.837904ms ago: executing program 2 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) (async) mount(&(0x7f0000000540)=@filename='mtd0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='jffs2\x00', 0x800000, 0x0) lsetxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0) (async) open$dir(&(0x7f0000000140)='./file1\x00', 0x2, 0x12) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x109043, 0x10) fallocate(r1, 0x0, 0x0, 0x8ffff) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x1e9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r2, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000700)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) fcntl$setstatus(r5, 0x4, 0x40800) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r6, &(0x7f0000000900)='4', 0x1) (async, rerun: 64) connect$inet(r5, &(0x7f0000000740)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (rerun: 64) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000780)='sit0\x00', 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) (async) sendfile(r5, r7, 0x0, 0x7ffff004) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000004000a0002"], 0x28}}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) r8 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="ae67441fdddbdca324fec1524d25a8af351d00786706ea7f0265c2a75bca3b43e2c9d0a83c7f0f80e84920eb2c9f331cc365da370ec02de7fff54c4ac41b93f05a4056f8f7cf0a694b1b51f0fa9b1652d2d9b551e24163942e434fb866995b9b713badc4ee48f5f808e85bccab7f9b5b4f59480bda94f6b2b57478478a71a4d371d4da28c513d159dcfa286a12902e0ba139d778ff639847177da443248f735bbd4e84942481a9ca0c504e39a72a241422dc0bf0422fd81d477e975f1ab09d", 0xbf, r8) (async) cachestat(r1, &(0x7f00000000c0)={0x5, 0x7}, &(0x7f0000000100), 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffffffff4c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 199.621573ms ago: executing program 0 (id=211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000280)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x103040, 0x16) fanotify_init(0x4, 0x80001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x22f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000380)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251f0000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004801}, 0x90) 0s ago: executing program 0 (id=212): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1c) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f00000007c0)='8', 0x1) socket$kcm(0x29, 0xb8404f205d39e9b0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000680)='attr/keycreate\x00') close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv4_newnexthop={0x17, 0x68, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x255, &(0x7f0000004980)={0x0, 0xae16, 0x8, 0x2, 0x31a}, &(0x7f0000000200), &(0x7f0000004a40), &(0x7f0000004a80)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x27, 0x0, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): [ 37.969437][ T44] audit: type=1400 audit(1792236350.629:120): avc: denied { write } for pid=5651 comm="sh" path="pipe:[5826]" dev="pipefs" ino=5826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:26784' (ED25519) to the list of known hosts. [ 42.413959][ T44] kauditd_printk_skb: 20 callbacks suppressed [ 42.413973][ T44] audit: type=1400 audit(1792236355.069:141): avc: denied { mounton } for pid=5707 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.416121][ T44] audit: type=1400 audit(1792236355.069:142): avc: denied { mount } for pid=5707 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.421143][ T5707] cgroup: Unknown subsys name 'net' [ 42.422857][ T44] audit: type=1400 audit(1792236355.079:143): avc: denied { unmount } for pid=5707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.589523][ T5707] cgroup: Unknown subsys name 'cpuset' [ 42.592009][ T5707] cgroup: Unknown subsys name 'rlimit' [ 42.728306][ T44] audit: type=1400 audit(1792236355.389:144): avc: denied { setattr } for pid=5707 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.728341][ T44] audit: type=1400 audit(1792236355.389:145): avc: denied { create } for pid=5707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.728360][ T44] audit: type=1400 audit(1792236355.389:146): avc: denied { write } for pid=5707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.728380][ T44] audit: type=1400 audit(1792236355.389:147): avc: denied { read } for pid=5707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.739421][ T44] audit: type=1400 audit(1792236355.399:148): avc: denied { mounton } for pid=5707 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.739809][ T44] audit: type=1400 audit(1792236355.399:149): avc: denied { mount } for pid=5707 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.785284][ T5717] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.786628][ T44] audit: type=1400 audit(1792236355.439:150): avc: denied { relabelto } for pid=5717 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.611255][ T5707] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.616818][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 47.616834][ T44] audit: type=1400 audit(1792236360.279:155): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.621681][ T44] audit: type=1400 audit(1792236360.279:156): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.621724][ T44] audit: type=1400 audit(1792236360.279:157): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.635877][ T44] audit: type=1400 audit(1792236360.289:158): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[1583]" dev="sockfs" ino=1583 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.649808][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.654297][ T5733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.655018][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.655392][ T5733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.657336][ T5733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.657911][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.658004][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.658666][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.659698][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.660091][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.661112][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.661619][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.667406][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.669527][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.673391][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.673540][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.673841][ T44] audit: type=1400 audit(1792236360.329:159): avc: denied { read } for pid=5725 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.673927][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.674242][ T44] audit: type=1400 audit(1792236360.329:160): avc: denied { open } for pid=5725 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.675280][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.675522][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.675722][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.682649][ T44] audit: type=1400 audit(1792236360.349:161): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.699050][ T44] audit: type=1400 audit(1792236360.359:162): avc: denied { module_request } for pid=5730 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.703361][ T44] audit: type=1400 audit(1792236360.359:163): avc: denied { module_request } for pid=5723 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.727819][ T44] audit: type=1400 audit(1792236360.399:164): avc: denied { sys_module } for pid=5730 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.936826][ T5730] rdma_rxe: Failed to create IPv4 UDP tunnel [ 47.941842][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.942319][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.945470][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.953231][ T5725] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.009593][ T5727] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.090371][ T5723] infiniband rxe0: set active [ 48.093109][ T5723] infiniband rxe0: added rxe_eth0 [ 48.095674][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.107471][ T5723] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 48.107504][ T5723] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 48.107537][ T5723] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.130705][ T5723] RDS/IB: rxe0: added [ 48.130929][ T5723] smc: adding ib device rxe0 with port count 1 [ 48.130994][ T5723] smc: ib device rxe0 port 1 has no pnetid [ 48.163379][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.191003][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.353870][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.353916][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.354005][ T5725] bridge_slave_0: entered allmulticast mode [ 48.354897][ T5725] bridge_slave_0: entered promiscuous mode [ 48.365325][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.381921][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.382386][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.382557][ T5725] bridge_slave_1: entered allmulticast mode [ 48.384178][ T5725] bridge_slave_1: entered promiscuous mode [ 48.429361][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.429436][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.429533][ T5727] bridge_slave_0: entered allmulticast mode [ 48.430895][ T5727] bridge_slave_0: entered promiscuous mode [ 48.442377][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.444653][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.456787][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.457071][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.457234][ T5727] bridge_slave_1: entered allmulticast mode [ 48.457981][ T5727] bridge_slave_1: entered promiscuous mode [ 48.458929][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.458992][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.459044][ T5730] bridge_slave_0: entered allmulticast mode [ 48.459797][ T5730] bridge_slave_0: entered promiscuous mode [ 48.460977][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.478249][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.478293][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.478351][ T5730] bridge_slave_1: entered allmulticast mode [ 48.479191][ T5730] bridge_slave_1: entered promiscuous mode [ 48.510674][ T5725] team0: Port device team_slave_0 added [ 48.511891][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.512798][ T5725] team0: Port device team_slave_1 added [ 48.514208][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.515275][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.524251][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.567473][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.567485][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.567497][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.568815][ T5727] team0: Port device team_slave_0 added [ 48.569154][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.569162][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.569174][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.570131][ T5727] team0: Port device team_slave_1 added [ 48.587109][ T5730] team0: Port device team_slave_0 added [ 48.613951][ T5730] team0: Port device team_slave_1 added [ 48.620967][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.624108][ T5725] hsr_slave_0: entered promiscuous mode [ 48.624815][ T5725] hsr_slave_1: entered promiscuous mode [ 48.635139][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.635148][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.635160][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.646902][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.646916][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.646935][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.647917][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.647929][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.647949][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.665114][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.665124][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.665136][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.739238][ T5727] hsr_slave_0: entered promiscuous mode [ 48.739653][ T5727] hsr_slave_1: entered promiscuous mode [ 48.739956][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 48.740019][ T5727] Cannot create hsr debugfs directory [ 48.752194][ T5730] hsr_slave_0: entered promiscuous mode [ 48.752611][ T5730] hsr_slave_1: entered promiscuous mode [ 48.752904][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 48.752915][ T5730] Cannot create hsr debugfs directory [ 49.033829][ T5725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.040464][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.040865][ T5725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.043207][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.043640][ T5725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.049138][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.050102][ T5725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.053362][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.144272][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.144361][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.144416][ T5723] bridge_slave_0: entered allmulticast mode [ 49.145180][ T5723] bridge_slave_0: entered promiscuous mode [ 49.152590][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.152676][ T5725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.152872][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.152915][ T5725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.154895][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.154970][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.155280][ T5723] bridge_slave_1: entered allmulticast mode [ 49.156891][ T5723] bridge_slave_1: entered promiscuous mode [ 49.186894][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.190672][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.191473][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.194520][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.196606][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.196712][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.202158][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.204059][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.206912][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.208783][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.243540][ T5723] team0: Port device team_slave_0 added [ 49.256982][ T5723] team0: Port device team_slave_1 added [ 49.293388][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.294452][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.313555][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.313566][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.313578][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.314485][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.314497][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.314517][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.335817][ T5730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.342452][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.343136][ T5730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.350908][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.352198][ T5730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.356735][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.377661][ T5723] hsr_slave_0: entered promiscuous mode [ 49.378144][ T5723] hsr_slave_1: entered promiscuous mode [ 49.378449][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 49.378460][ T5723] Cannot create hsr debugfs directory [ 49.379343][ T5730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.382412][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.491027][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.538133][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.540218][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.550455][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.555811][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.557077][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.560382][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.562626][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.562673][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.568085][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.572356][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.573186][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.576629][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.579568][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.579611][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.583936][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.603232][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.603305][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.620763][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.620871][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.633458][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.666763][ T5726] Bluetooth: hci1: command tx timeout [ 49.684728][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.700102][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.700154][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.711535][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.711582][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.746624][ T5726] Bluetooth: hci2: command tx timeout [ 49.746925][ T5729] Bluetooth: hci0: command tx timeout [ 49.747226][ T5086] Bluetooth: hci3: command tx timeout [ 49.753681][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.780258][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.801398][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.801444][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.803495][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.803540][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.014267][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.036292][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.064063][ T5725] veth0_vlan: entered promiscuous mode [ 50.073616][ T5725] veth1_vlan: entered promiscuous mode [ 50.082062][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.135929][ T5730] veth0_vlan: entered promiscuous mode [ 50.145740][ T5725] veth0_macvtap: entered promiscuous mode [ 50.148847][ T5727] veth0_vlan: entered promiscuous mode [ 50.151487][ T5730] veth1_vlan: entered promiscuous mode [ 50.154020][ T5725] veth1_macvtap: entered promiscuous mode [ 50.160819][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.169375][ T5727] veth1_vlan: entered promiscuous mode [ 50.192591][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.194760][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.210324][ T5730] veth0_macvtap: entered promiscuous mode [ 50.216772][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.217062][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.217200][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.217311][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.227587][ T5730] veth1_macvtap: entered promiscuous mode [ 50.267710][ T5727] veth0_macvtap: entered promiscuous mode [ 50.268454][ T5723] veth0_vlan: entered promiscuous mode [ 50.270043][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.276417][ T5727] veth1_macvtap: entered promiscuous mode [ 50.280108][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.303964][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.303984][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.322583][ T5723] veth1_vlan: entered promiscuous mode [ 50.347252][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.352683][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.352703][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.355459][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.401247][ T5723] veth0_macvtap: entered promiscuous mode [ 50.410929][ T5725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.419257][ T5723] veth1_macvtap: entered promiscuous mode [ 50.470577][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.470589][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.471575][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.498769][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.508971][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.508989][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.541823][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.541844][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.548929][ T5880] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 50.556366][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.556436][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.556500][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.556581][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.556768][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.557331][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.557440][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.557582][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.558105][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.558122][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.586795][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.586967][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.606343][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.606369][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.657400][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.657423][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.696889][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.696911][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.745028][ T5885] raw_sendmsg: syz.3.4 forgot to set AF_INET. Fix it! [ 50.753165][ T5885] IPv6: addrconf: prefix option has invalid lifetime [ 50.805920][ T5887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.854846][ T5893] usb 1-1: USB disconnect, device number 2 [ 50.993116][ T5900] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.9' sets config #0 [ 51.076490][ T5815] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 51.221974][ T5925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.238524][ T5815] usb 8-1: unable to get BOS descriptor or descriptor too short [ 51.238567][ T5815] usb 8-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 51.242432][ T5815] usb 8-1: config 8 has an invalid interface number: 198 but max is 0 [ 51.242455][ T5815] usb 8-1: config 8 has no interface number 0 [ 51.242488][ T5815] usb 8-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 51.245424][ T5815] usb 8-1: string descriptor 0 read error: -22 [ 51.245527][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.250982][ T5890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 51.269155][ T5928] Bluetooth: MGMT ver 1.23 [ 51.283985][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.463829][ T5829] usb 8-1: USB disconnect, device number 2 [ 51.509551][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.611198][ T5941] SELinux: ebitmap: empty map [ 51.611342][ T5941] SELinux: failed to load policy [ 51.633953][ T5944] netlink: 56 bytes leftover after parsing attributes in process `syz.0.23'. [ 51.659850][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 51.746231][ T5086] Bluetooth: hci1: command tx timeout [ 51.836216][ T5086] Bluetooth: hci3: command tx timeout [ 51.836248][ T5086] Bluetooth: hci0: command tx timeout [ 51.909354][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.909646][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.946875][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.013164][ T5966] netlink: 'syz.3.28': attribute type 18 has an invalid length. [ 52.013179][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 52.027705][ T5966] netlink: 'syz.3.28': attribute type 18 has an invalid length. [ 52.027719][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 52.027789][ T5966] Zero length message leads to an empty skb [ 52.046359][ T5779] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.046398][ T5779] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.046427][ T5779] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.046455][ T5779] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.205522][ T5971] ip_tables: iptables: counters copy to user failed while replacing table [ 52.226160][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.386810][ T43] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 52.387781][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.387815][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.397227][ T43] metro_usb 6-1:1.0: Metrologic USB to Serial converter detected [ 52.415613][ T43] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 52.556854][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.595581][ T50] usb 6-1: USB disconnect, device number 2 [ 52.610448][ T50] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 52.610949][ T50] metro_usb 6-1:1.0: device disconnected [ 52.680196][ T44] kauditd_printk_skb: 137 callbacks suppressed [ 52.680213][ T44] audit: type=1400 audit(1792236365.339:302): avc: denied { read } for pid=5979 comm="syz.0.34" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.680845][ T44] audit: type=1400 audit(1792236365.339:303): avc: denied { bind } for pid=5979 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.681313][ T44] audit: type=1400 audit(1792236365.339:304): avc: denied { name_bind } for pid=5979 comm="syz.0.34" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.681391][ T44] audit: type=1400 audit(1792236365.339:305): avc: denied { node_bind } for pid=5979 comm="syz.0.34" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 52.682229][ T44] audit: type=1400 audit(1792236365.339:306): avc: denied { write } for pid=5979 comm="syz.0.34" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.682391][ T44] audit: type=1400 audit(1792236365.339:307): avc: denied { name_connect } for pid=5979 comm="syz.0.34" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.682536][ T44] audit: type=1400 audit(1792236365.339:308): avc: denied { ioctl } for pid=5979 comm="syz.0.34" path="socket:[11300]" dev="sockfs" ino=11300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.688069][ T44] audit: type=1400 audit(1792236365.349:309): avc: denied { ioctl } for pid=5979 comm="syz.0.34" path="socket:[9154]" dev="sockfs" ino=9154 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.729695][ T44] audit: type=1400 audit(1792236365.389:310): avc: denied { create } for pid=5984 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.730493][ T44] audit: type=1400 audit(1792236365.389:311): avc: denied { bind } for pid=5984 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.228718][ T6003] si4713 0-0006: IRQ not configured. Using timeouts. [ 53.228844][ T6003] si4713 0-0006: Error while sending command 0x01 [ 53.228852][ T6003] si4713 0-0006: Failed to probe device information. [ 53.229831][ T6003] si4713 0-0006: probe with driver si4713 failed with error -95 [ 53.230385][ T6003] i2c i2c-0: new_device: Instantiated device si4713 at 0x06 [ 53.315309][ T6011] FAULT_INJECTION: forcing a failure. [ 53.315309][ T6011] name failslab, interval 1, probability 0, space 0, times 0 [ 53.315338][ T6011] CPU: 0 UID: 0 PID: 6011 Comm: syz.3.43 Not tainted syzkaller #0 PREEMPT(full) [ 53.315359][ T6011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.315369][ T6011] Call Trace: [ 53.315375][ T6011] [ 53.315383][ T6011] dump_stack_lvl+0x100/0x190 [ 53.315413][ T6011] should_fail_ex.cold+0x5/0xa [ 53.315439][ T6011] should_failslab+0xc2/0x120 [ 53.315467][ T6011] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.315487][ T6011] ? inode_doinit_with_dentry+0x70b/0x1340 [ 53.315514][ T6011] ? inode_doinit_with_dentry+0x7b1/0x1340 [ 53.315545][ T6011] inode_doinit_with_dentry+0x7b1/0x1340 [ 53.315574][ T6011] ? inode_set_ctime_current+0x283/0x850 [ 53.315593][ T6011] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 53.315619][ T6011] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 53.315636][ T6011] ? new_inode+0x15a/0x1c0 [ 53.315661][ T6011] selinux_d_instantiate+0x26/0x40 [ 53.315685][ T6011] security_d_instantiate+0x14c/0x1b0 [ 53.315706][ T6011] d_make_persistent+0x64/0x180 [ 53.315726][ T6011] debugfs_create_dir+0x195/0x440 [ 53.315750][ T6011] drm_debugfs_clients_add+0x6f/0x210 [ 53.315771][ T6011] drm_file_alloc+0x5c6/0xb40 [ 53.315796][ T6011] drm_open_helper+0x1fc/0x540 [ 53.315821][ T6011] drm_open+0x1a0/0x3e0 [ 53.315841][ T6011] ? __pfx_drm_open+0x10/0x10 [ 53.315862][ T6011] drm_stub_open+0x20f/0x380 [ 53.315884][ T6011] ? __pfx_drm_stub_open+0x10/0x10 [ 53.315906][ T6011] chrdev_open+0x234/0x6a0 [ 53.315950][ T6011] ? __pfx_chrdev_open+0x10/0x10 [ 53.315979][ T6011] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 53.316006][ T6011] do_dentry_open+0x6ab/0x14d0 [ 53.316030][ T6011] ? __pfx_chrdev_open+0x10/0x10 [ 53.316061][ T6011] vfs_open+0x82/0x3f0 [ 53.316092][ T6011] path_openat+0x1a23/0x2450 [ 53.316123][ T6011] ? __pfx_path_openat+0x10/0x10 [ 53.316158][ T6011] do_file_open+0x20e/0x430 [ 53.316214][ T6011] ? __pfx_do_file_open+0x10/0x10 [ 53.316259][ T6011] ? _raw_spin_unlock+0x28/0x50 [ 53.316288][ T6011] ? alloc_fd+0x471/0x7a0 [ 53.316322][ T6011] do_sys_openat2+0x10f/0x1e0 [ 53.316341][ T6011] ? __pfx_do_sys_openat2+0x10/0x10 [ 53.316369][ T6011] __x64_sys_openat+0x12d/0x210 [ 53.316387][ T6011] ? __pfx___x64_sys_openat+0x10/0x10 [ 53.316415][ T6011] do_syscall_64+0x123/0x790 [ 53.316443][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.316461][ T6011] RIP: 0033:0x7f78a1b5ed8e [ 53.316477][ T6011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.316492][ T6011] RSP: 002b:00007f78a2a82b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.316510][ T6011] RAX: ffffffffffffffda RBX: 00007f78a2a836c0 RCX: 00007f78a1b5ed8e [ 53.316523][ T6011] RDX: 0000000000000000 RSI: 00007f78a2a82c00 RDI: ffffffffffffff9c [ 53.316534][ T6011] RBP: 00007f78a2a82c00 R08: 0000000000000000 R09: 0000000000000000 [ 53.316545][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 53.316556][ T6011] R13: 00007f78a1e26038 R14: 00007f78a1e25fa0 R15: 00007ffe0f10fb48 [ 53.316582][ T6011] [ 53.372715][ T6015] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 53.438416][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.449417][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 53.666120][ T5729] Bluetooth: hci2: command tx timeout [ 53.729805][ T6022] cgroup: fork rejected by pids controller in /syz1 [ 53.836169][ T5729] Bluetooth: hci1: command tx timeout [ 53.907657][ T5729] Bluetooth: hci0: command tx timeout [ 53.907674][ T5086] Bluetooth: hci3: command tx timeout [ 54.224718][ T6073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.340066][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.52'. [ 54.553064][ T6091] evm: overlay not supported [ 54.568364][ T6084] FAULT_INJECTION: forcing a failure. [ 54.568364][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 54.568393][ T6084] CPU: 3 UID: 0 PID: 6084 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 54.568413][ T6084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.568424][ T6084] Call Trace: [ 54.568430][ T6084] [ 54.568438][ T6084] dump_stack_lvl+0x100/0x190 [ 54.568467][ T6084] should_fail_ex.cold+0x5/0xa [ 54.568493][ T6084] should_failslab+0xc2/0x120 [ 54.568519][ T6084] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.568657][ T6084] ? do_getname+0x35/0x390 [ 54.568679][ T6084] do_getname+0x35/0x390 [ 54.568699][ T6084] do_sys_openat2+0xc7/0x1e0 [ 54.568717][ T6084] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.568743][ T6084] __x64_sys_openat+0x12d/0x210 [ 54.568761][ T6084] ? __pfx___x64_sys_openat+0x10/0x10 [ 54.568777][ T6084] ? selinux_file_ioctl+0xb6/0x290 [ 54.568809][ T6084] do_syscall_64+0x123/0x790 [ 54.568838][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.568856][ T6084] RIP: 0033:0x7fc295d5ed8e [ 54.568871][ T6084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.568887][ T6084] RSP: 002b:00007fc296b8b3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.568904][ T6084] RAX: ffffffffffffffda RBX: 00007fc296b8d6c0 RCX: 00007fc295d5ed8e [ 54.568914][ T6084] RDX: 0000000000000002 RSI: 00007fc295e34e66 RDI: ffffffffffffff9c [ 54.568926][ T6084] RBP: 0000200000017000 R08: 0000000000000000 R09: 0000000000000000 [ 54.568936][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000017800 [ 54.568947][ T6084] R13: 00007fc296b8bbd0 R14: 000000000000006b R15: 00000000000000c0 [ 54.568972][ T6084] [ 54.613379][ T6100] cifs: Unknown parameter 'unc' [ 54.680301][ T6102] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 55.092420][ T6122] batman_adv: batadv0: Adding interface: veth0 [ 55.092437][ T6122] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.092491][ T6122] batman_adv: batadv0: Interface activated: veth0 [ 55.154986][ T6128] syz.2.61 uses obsolete (PF_INET,SOCK_PACKET) [ 55.296093][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.451061][ T6145] ======================================================= [ 55.451061][ T6145] WARNING: The mand mount option has been deprecated and [ 55.451061][ T6145] and is ignored by this kernel. Remove the mand [ 55.451061][ T6145] option from the mount to silence this warning. [ 55.451061][ T6145] ======================================================= [ 55.476604][ T42] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 55.477632][ T42] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.479592][ T42] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.481514][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.481533][ T42] usb 5-1: Product: syz [ 55.481545][ T42] usb 5-1: Manufacturer: syz [ 55.481557][ T42] usb 5-1: SerialNumber: syz [ 55.513890][ T42] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 55.530753][ T42] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 55.545495][ T42] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 55.610594][ T6147] capability: warning: `syz.1.70' uses deprecated v2 capabilities in a way that may be insecure [ 55.688789][ T1166] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.688968][ T63] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.756059][ C0] net_ratelimit: 32691 callbacks suppressed [ 55.756077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.756865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.757547][ T5729] Bluetooth: hci2: command tx timeout [ 55.767443][ T6159] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 55.767504][ T6159] syzkaller0: linktype set to 270 [ 55.916286][ T5729] Bluetooth: hci1: command tx timeout [ 55.986708][ T5729] Bluetooth: hci0: command tx timeout [ 56.006109][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.166023][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 56.167462][ T30] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 56.169245][ T30] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 56.171499][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.171518][ T30] usb 6-1: Product: syz [ 56.171530][ T30] usb 6-1: Manufacturer: syz [ 56.171542][ T30] usb 6-1: SerialNumber: syz [ 56.173979][ T30] usb 6-1: config 0 descriptor?? [ 56.174869][ T6175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.197568][ T30] hub 6-1:0.0: bad descriptor, ignoring hub [ 56.197590][ T30] hub 6-1:0.0: probe with driver hub failed with error -5 [ 56.204306][ T30] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 56.237121][ T6183] dummy0 speed is unknown, defaulting to 1000 [ 56.237989][ T6183] dummy0 speed is unknown, defaulting to 1000 [ 56.239374][ T6183] dummy0 speed is unknown, defaulting to 1000 [ 56.315868][ T6186] tipc: Enabling of bearer rejected, failed to enable media [ 56.394526][ T6175] No control pipe specified [ 56.468658][ T939] usb 6-1: USB disconnect, device number 3 [ 56.468780][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 56.473385][ T6183] infiniband syz0: set active [ 56.473431][ T35] dummy0 speed is unknown, defaulting to 1000 [ 56.473478][ T6183] infiniband syz0: added dummy0 [ 56.490495][ T6183] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 56.490530][ T6183] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 56.490620][ T6183] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 56.511876][ T6183] RDS/IB: syz0: added [ 56.512101][ T6183] smc: adding ib device syz0 with port count 1 [ 56.512120][ T6183] smc: ib device syz0 port 1 has no pnetid [ 56.512177][ T35] dummy0 speed is unknown, defaulting to 1000 [ 56.518260][ T6183] dummy0 speed is unknown, defaulting to 1000 [ 56.642691][ T6183] dummy0 speed is unknown, defaulting to 1000 [ 56.727735][ T6183] dummy0 speed is unknown, defaulting to 1000 [ 56.797191][ T6118] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 56.817522][ T6183] dummy0 speed is unknown, defaulting to 1000 [ 57.044784][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 57.115684][ T6213] random: crng reseeded on system resumption [ 57.446106][ T5831] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.596035][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 57.596589][ T5831] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.600131][ T5831] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 57.600155][ T5831] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.600167][ T5831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.600178][ T5831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 57.600189][ T5831] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.600213][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.747159][ T5729] Bluetooth: hci4: command 0x1003 tx timeout [ 57.747728][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.803940][ T5831] usb 6-1: usb_control_msg returned -32 [ 57.803964][ T5831] usbtmc 6-1:16.0: can't read capabilities [ 57.825665][ T5831] usb 6-1: USB disconnect, device number 4 [ 57.907227][ T6229] FAULT_INJECTION: forcing a failure. [ 57.907227][ T6229] name failslab, interval 1, probability 0, space 0, times 0 [ 57.907248][ T6229] CPU: 2 UID: 0 PID: 6229 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT(full) [ 57.907261][ T6229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.907267][ T6229] Call Trace: [ 57.907272][ T6229] [ 57.907276][ T6229] dump_stack_lvl+0x100/0x190 [ 57.907298][ T6229] should_fail_ex.cold+0x5/0xa [ 57.907331][ T6229] should_failslab+0xc2/0x120 [ 57.907349][ T6229] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.907365][ T6229] ? do_getname+0x35/0x390 [ 57.907381][ T6229] do_getname+0x35/0x390 [ 57.907395][ T6229] do_sys_openat2+0xc7/0x1e0 [ 57.907407][ T6229] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.907418][ T6229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.907440][ T6229] __x64_sys_openat+0x12d/0x210 [ 57.907451][ T6229] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.907469][ T6229] do_syscall_64+0x123/0x790 [ 57.907487][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.907498][ T6229] RIP: 0033:0x7fc295d9e559 [ 57.907508][ T6229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.907519][ T6229] RSP: 002b:00007fc296bcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.907531][ T6229] RAX: ffffffffffffffda RBX: 00007fc296025fa0 RCX: 00007fc295d9e559 [ 57.907539][ T6229] RDX: 0000000000020000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 57.907546][ T6229] RBP: 00007fc295e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 57.907553][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.907560][ T6229] R13: 00007fc296026038 R14: 00007fc296025fa0 R15: 00007ffc6858fcb8 [ 57.907576][ T6229] [ 57.909454][ T6229] xt_recent: Need "+ip", "-ip" or "/" [ 57.910636][ T6229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6229 comm=syz.2.82 [ 57.990156][ T44] kauditd_printk_skb: 73 callbacks suppressed [ 57.990167][ T44] audit: type=1400 audit(1792236370.649:385): avc: denied { setopt } for pid=6234 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.990309][ T44] audit: type=1400 audit(1792236370.649:386): avc: denied { write } for pid=6234 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.064978][ T50] usb 5-1: USB disconnect, device number 2 [ 58.092423][ T44] audit: type=1400 audit(1792236370.749:387): avc: denied { create } for pid=6246 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.093560][ T44] audit: type=1400 audit(1792236370.749:388): avc: denied { bind } for pid=6246 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.093839][ T44] audit: type=1400 audit(1792236370.749:389): avc: denied { connect } for pid=6246 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.097998][ T50] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 58.100586][ T44] audit: type=1400 audit(1792236370.759:390): avc: denied { write } for pid=6246 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.105067][ T50] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 58.106761][ T50] ti_usb_3410_5052 5-1:2.0: device disconnected [ 58.146989][ T44] audit: type=1400 audit(1792236370.809:391): avc: denied { getopt } for pid=6254 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.150930][ T6257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.90'. [ 58.153406][ T6257] netlink: 'syz.2.90': attribute type 3 has an invalid length. [ 58.154754][ T6258] netlink: 'syz.0.87': attribute type 8 has an invalid length. [ 58.166723][ T6257] ip6gretap0: entered promiscuous mode [ 58.175773][ T44] audit: type=1400 audit(1792236370.829:392): avc: denied { create } for pid=6247 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.178604][ T44] audit: type=1400 audit(1792236370.839:393): avc: denied { connect } for pid=6247 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.194800][ T44] audit: type=1400 audit(1792236370.849:394): avc: denied { read write } for pid=6263 comm="syz.0.91" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.215693][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 58.215872][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 58.215881][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 58.215894][ T6264] netlink: 'syz.0.91': attribute type 6 has an invalid length. [ 58.215900][ T6264] netlink: 'syz.0.91': attribute type 7 has an invalid length. [ 58.265425][ T6274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.283200][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 58.299381][ T6278] veth1_macvtap: left promiscuous mode [ 58.493567][ T6291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.99'. [ 58.494916][ T6291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.99'. [ 59.076660][ T6304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 59.136657][ T6313] SELinux: DCCP has been removed, pid=6313 comm=syz.1.107 [ 59.136896][ T6313] netlink: 'syz.1.107': attribute type 12 has an invalid length. [ 59.136906][ T6313] netlink: 'syz.1.107': attribute type 29 has an invalid length. [ 59.136912][ T6313] netlink: 148 bytes leftover after parsing attributes in process `syz.1.107'. [ 59.136921][ T6313] netlink: 'syz.1.107': attribute type 2 has an invalid length. [ 59.191475][ T5831] hsr0: entered promiscuous mode [ 59.192534][ T6314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6314 comm=syz.3.106 [ 59.268307][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.268847][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.268874][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.268891][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.323477][ T6329] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43559 sclass=netlink_xfrm_socket pid=6329 comm=syz.2.111 [ 59.382161][ T50] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.970599][ T6361] netlink: 'syz.3.124': attribute type 2 has an invalid length. [ 59.978215][ T6363] x_tables: duplicate underflow at hook 2 [ 59.981603][ T6361] : entered promiscuous mode [ 60.006135][ T6356] bond0: entered promiscuous mode [ 60.006150][ T6356] bond_slave_0: entered promiscuous mode [ 60.006255][ T6356] bond_slave_1: entered promiscuous mode [ 60.061532][ T6370] ./mnt: Can't lookup blockdev [ 60.061832][ T6369] ./mnt: Can't lookup blockdev [ 60.155244][ T6380] vivid-000: disconnect [ 60.161101][ T6380] xt_socket: unknown flags 0x48 [ 60.170315][ T6379] vivid-000: reconnect [ 60.185180][ T6383] ublk_ctrl_add_dev: dev id not match 4294967295 4 [ 60.197186][ T6382] FAULT_INJECTION: forcing a failure. [ 60.197186][ T6382] name fail_futex, interval 1, probability 0, space 0, times 1 [ 60.197215][ T6382] CPU: 2 UID: 0 PID: 6382 Comm: syz.0.132 Not tainted syzkaller #0 PREEMPT(full) [ 60.197238][ T6382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.197249][ T6382] Call Trace: [ 60.197256][ T6382] [ 60.197264][ T6382] dump_stack_lvl+0x100/0x190 [ 60.197311][ T6382] should_fail_ex.cold+0x5/0xa [ 60.197338][ T6382] get_futex_key+0x1d0/0x14f0 [ 60.197369][ T6382] ? __pfx_get_futex_key+0x10/0x10 [ 60.197406][ T6382] futex_wait_setup+0x91/0x540 [ 60.197434][ T6382] __futex_wait+0x19f/0x300 [ 60.197457][ T6382] ? __pfx___futex_wait+0x10/0x10 [ 60.197476][ T6382] ? __pfx_try_to_wake_up+0x10/0x10 [ 60.197499][ T6382] ? futex_hash+0x311/0x400 [ 60.197528][ T6382] ? __pfx_futex_wake_mark+0x10/0x10 [ 60.197553][ T6382] ? find_held_lock+0x2b/0x80 [ 60.197581][ T6382] ? futex_wake+0x4ea/0x5e0 [ 60.197609][ T6382] futex_wait+0xe6/0x370 [ 60.197631][ T6382] ? __pfx_futex_wait+0x10/0x10 [ 60.197659][ T6382] ? putname+0xb1/0x110 [ 60.197689][ T6382] do_futex+0x265/0x440 [ 60.197719][ T6382] ? __pfx_do_futex+0x10/0x10 [ 60.197756][ T6382] __x64_sys_futex+0x34f/0x4d0 [ 60.197792][ T6382] ? fdget_pos+0x2c0/0x380 [ 60.197810][ T6382] ? __pfx___x64_sys_futex+0x10/0x10 [ 60.197838][ T6382] ? ksys_write+0x1ac/0x250 [ 60.197862][ T6382] ? __pfx_ksys_write+0x10/0x10 [ 60.197893][ T6382] do_syscall_64+0x123/0x790 [ 60.197929][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.197950][ T6382] RIP: 0033:0x7f04b8d9e559 [ 60.197966][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.197984][ T6382] RSP: 002b:00007f04b9bfb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 60.198003][ T6382] RAX: ffffffffffffffda RBX: 00007f04b9025fa8 RCX: 00007f04b8d9e559 [ 60.198016][ T6382] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04b9025fa8 [ 60.198027][ T6382] RBP: 00007f04b9025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 60.198039][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.198048][ T6382] R13: 00007f04b9026038 R14: 00007ffe7cfa0c30 R15: 00007ffe7cfa0d18 [ 60.198074][ T6382] [ 60.235024][ T6386] overlayfs: upper fs does not support tmpfile. [ 60.304500][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.333720][ T6396] Format for deleting device is "id" (uint). [ 60.366032][ T5831] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.385689][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.416505][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.416533][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.416550][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.416567][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.506167][ T5831] usb 7-1: device descriptor read/64, error -71 [ 60.747145][ T5831] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.766051][ C3] net_ratelimit: 86764 callbacks suppressed [ 60.766070][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766162][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766246][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766331][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766404][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766498][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766591][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766684][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766778][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.766870][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.817055][ T6439] netlink: 'syz.1.149': attribute type 39 has an invalid length. [ 60.817969][ T6440] netlink: 'syz.1.149': attribute type 39 has an invalid length. [ 60.886151][ T5831] usb 7-1: device descriptor read/64, error -71 [ 61.008517][ T5831] usb usb7-port1: attempt power cycle [ 61.251770][ T9] dummy0 speed is unknown, defaulting to 1000 [ 61.260014][ T6457] Bluetooth: MGMT ver 1.23 [ 61.290183][ T9] hid-sensor-hub 0003:1234:5678.0002: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 61.356075][ T5831] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 61.376965][ T5831] usb 7-1: device descriptor read/8, error -71 [ 61.383728][ T6464] fido_id[6464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.626337][ T5831] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 61.646569][ T5831] usb 7-1: device descriptor read/8, error -71 [ 61.647640][ T6491] xt_NETMAP: bad MAP_IPS. [ 61.666712][ T6493] syzkaller1: entered promiscuous mode [ 61.666725][ T6493] syzkaller1: entered allmulticast mode [ 61.757176][ T5831] usb usb7-port1: unable to enumerate USB device [ 61.855353][ T30] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 62.206242][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.284407][ T6505] __nla_validate_parse: 15 callbacks suppressed [ 62.284420][ T6505] netlink: 56 bytes leftover after parsing attributes in process `syz.3.164'. [ 62.356755][ T30] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 62.357869][ T30] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 62.357907][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.359166][ T30] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 62.359186][ T30] usb 5-1: Manufacturer: syz [ 62.370918][ T6508] input: syz0 as /devices/virtual/input/input9 [ 62.372109][ T30] usb 5-1: config 0 descriptor?? [ 62.386845][ T5086] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 62.386879][ T5086] Bluetooth: hci2: Injecting HCI hardware error event [ 62.388358][ T5086] Bluetooth: hci2: hardware error 0x00 [ 62.506444][ T30] rc_core: IR keymap rc-hauppauge not found [ 62.506461][ T30] Registered IR keymap rc-empty [ 62.514021][ T30] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 62.515799][ T30] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 62.582024][ T30] usb 5-1: USB disconnect, device number 3 [ 62.920474][ T6522] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.000460][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 63.028784][ T6522] dummy0 speed is unknown, defaulting to 1000 [ 63.092688][ T6529] smpboot: CPU 1 is now offline [ 63.197339][ T6532] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 63.211263][ T6532] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 63.218103][ T44] kauditd_printk_skb: 74 callbacks suppressed [ 63.218114][ T44] audit: type=1400 audit(1792236375.869:469): avc: denied { ioctl } for pid=6531 comm="syz.2.172" path="socket:[12738]" dev="sockfs" ino=12738 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.314845][ T6529] smpboot: CPU 3 is now offline [ 63.331590][ T6540] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.333545][ T6540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.333553][ T6540] IPv6: NLM_F_CREATE should be set when creating new route [ 63.333571][ T6540] IPv6: NLM_F_CREATE should be set when creating new route [ 63.333581][ T6540] IPv6: NLM_F_CREATE should be set when creating new route [ 63.600686][ T44] audit: type=1400 audit(1792236376.259:470): avc: denied { create } for pid=6544 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.640797][ T6545] FAULT_INJECTION: forcing a failure. [ 63.640797][ T6545] name fail_futex, interval 1, probability 0, space 0, times 0 [ 63.640817][ T6545] CPU: 2 UID: 0 PID: 6545 Comm: syz.2.174 Not tainted syzkaller #0 PREEMPT(full) [ 63.640830][ T6545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.640837][ T6545] Call Trace: [ 63.640840][ T6545] [ 63.640846][ T6545] dump_stack_lvl+0x100/0x190 [ 63.640875][ T6545] should_fail_ex.cold+0x5/0xa [ 63.640892][ T6545] get_futex_key+0x1d0/0x14f0 [ 63.640912][ T6545] ? __pfx_get_futex_key+0x10/0x10 [ 63.640928][ T6545] ? trace_kmem_cache_alloc+0xdd/0x100 [ 63.640947][ T6545] ? __kasan_slab_alloc+0x89/0x90 [ 63.640964][ T6545] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 63.640981][ T6545] futex_wake+0xf4/0x5e0 [ 63.640995][ T6545] ? __pfx_futex_wake+0x10/0x10 [ 63.641009][ T6545] ? alloc_file_pseudo+0x1ee/0x290 [ 63.641024][ T6545] do_futex+0x2b2/0x440 [ 63.641041][ T6545] ? __pfx_do_futex+0x10/0x10 [ 63.641061][ T6545] __x64_sys_futex+0x34f/0x4d0 [ 63.641080][ T6545] ? __pfx___x64_sys_futex+0x10/0x10 [ 63.641095][ T6545] ? ksys_write+0x1ac/0x250 [ 63.641109][ T6545] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 63.641128][ T6545] do_syscall_64+0x123/0x790 [ 63.641150][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.641161][ T6545] RIP: 0033:0x7fc295d9e559 [ 63.641171][ T6545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.641182][ T6545] RSP: 002b:00007fc296bcf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 63.641193][ T6545] RAX: ffffffffffffffda RBX: 00007fc296025fa8 RCX: 00007fc295d9e559 [ 63.641201][ T6545] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc296025fac [ 63.641208][ T6545] RBP: 00007fc296025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 63.641215][ T6545] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 63.641222][ T6545] R13: 00007fc296026038 R14: 00007ffc6858fbd0 R15: 00007ffc6858fcb8 [ 63.641238][ T6545] [ 63.696072][ T44] audit: type=1400 audit(1792236376.349:471): avc: denied { name_bind } for pid=6544 comm="syz.2.174" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.696145][ T44] audit: type=1400 audit(1792236376.349:472): avc: denied { node_bind } for pid=6544 comm="syz.2.174" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 63.696166][ T44] audit: type=1400 audit(1792236376.349:473): avc: denied { name_connect } for pid=6544 comm="syz.2.174" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.705687][ T44] audit: type=1400 audit(1792236376.359:474): avc: denied { accept } for pid=6544 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.901383][ T44] audit: type=1400 audit(1792236376.559:475): avc: denied { read write } for pid=6546 comm="syz.3.175" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 63.901412][ T44] audit: type=1400 audit(1792236376.559:476): avc: denied { open } for pid=6546 comm="syz.3.175" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 63.927577][ T6554] netlink: 'syz.0.177': attribute type 2 has an invalid length. [ 63.963912][ T44] audit: type=1400 audit(1792236376.619:477): avc: denied { create } for pid=6553 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.143472][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 64.277274][ T44] audit: type=1400 audit(1792236376.939:478): avc: denied { getopt } for pid=6564 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.556706][ T5086] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 64.575731][ T6569] overlayfs: missing 'workdir' [ 65.180410][ T6586] loop4: detected capacity change from 0 to 7 [ 65.213246][ T6586] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 65.213263][ T6586] loop4: partition table partially beyond EOD, truncated [ 65.229874][ T6586] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 65.462282][ T5741] udevd[5741]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 65.776042][ C0] net_ratelimit: 64127 callbacks suppressed [ 65.776063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.776212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.776358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.776503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.776654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.776801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.776938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.777077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.777220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.777369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.086422][ T6607] FAULT_INJECTION: forcing a failure. [ 66.086422][ T6607] name failslab, interval 1, probability 0, space 0, times 0 [ 66.086441][ T6607] CPU: 2 UID: 0 PID: 6607 Comm: syz.0.190 Not tainted syzkaller #0 PREEMPT(full) [ 66.086454][ T6607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.086460][ T6607] Call Trace: [ 66.086464][ T6607] [ 66.086470][ T6607] dump_stack_lvl+0x100/0x190 [ 66.086490][ T6607] should_fail_ex.cold+0x5/0xa [ 66.086507][ T6607] should_failslab+0xc2/0x120 [ 66.086526][ T6607] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 66.086542][ T6607] ? sidtab_sid2str_get+0x84/0x670 [ 66.086554][ T6607] ? sidtab_sid2str_get+0x17a/0x670 [ 66.086568][ T6607] kmemdup_noprof+0x29/0x60 [ 66.086582][ T6607] sidtab_sid2str_get+0x17a/0x670 [ 66.086595][ T6607] security_sid_to_context_core+0x373/0x700 [ 66.086615][ T6607] avc_audit_post_callback+0x109/0x910 [ 66.086628][ T6607] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 66.086645][ T6607] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 66.086656][ T6607] ? skb_put+0x138/0x180 [ 66.086679][ T6607] ? audit_log_n_string+0x2a3/0x5a0 [ 66.086697][ T6607] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 66.086709][ T6607] common_lsm_audit+0x23f/0x2b0 [ 66.086732][ T6607] ? __pfx_common_lsm_audit+0x10/0x10 [ 66.086749][ T6607] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.086766][ T6607] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.086785][ T6607] slow_avc_audit+0x186/0x210 [ 66.086798][ T6607] ? __pfx_slow_avc_audit+0x10/0x10 [ 66.086813][ T6607] ? avc_denied+0x14a/0x190 [ 66.086827][ T6607] ? avc_has_perm_noaudit+0x3a2/0x470 [ 66.086843][ T6607] avc_has_perm+0x1a6/0x1e0 [ 66.086856][ T6607] ? __pfx_avc_has_perm+0x10/0x10 [ 66.086871][ T6607] ? futex_wait+0x11e/0x370 [ 66.086886][ T6607] sock_has_perm+0x253/0x2f0 [ 66.086900][ T6607] ? __pfx_sock_has_perm+0x10/0x10 [ 66.086915][ T6607] ? errseq_sample+0x51/0x70 [ 66.086934][ T6607] ? __fget_files+0x34/0x3d0 [ 66.086950][ T6607] ? find_held_lock+0x2b/0x80 [ 66.086967][ T6607] ? __fget_files+0x215/0x3d0 [ 66.086985][ T6607] selinux_socket_setsockopt+0x41/0x80 [ 66.087001][ T6607] security_socket_setsockopt+0x9b/0x230 [ 66.087017][ T6607] do_sock_setsockopt+0x53/0x1d0 [ 66.087056][ T6607] __sys_setsockopt+0x195/0x220 [ 66.087074][ T6607] __x64_sys_setsockopt+0xbd/0x160 [ 66.087085][ T6607] ? do_syscall_64+0xae/0x790 [ 66.087102][ T6607] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.087119][ T6607] do_syscall_64+0x123/0x790 [ 66.087137][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.087150][ T6607] RIP: 0033:0x7f04b8d9e559 [ 66.087160][ T6607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.087171][ T6607] RSP: 002b:00007f04b9bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.087183][ T6607] RAX: ffffffffffffffda RBX: 00007f04b9025fa0 RCX: 00007f04b8d9e559 [ 66.087190][ T6607] RDX: 000000000000003f RSI: 0000000000000114 RDI: 0000000000000004 [ 66.087196][ T6607] RBP: 00007f04b8e35ab8 R08: 0000000000000004 R09: 0000000000000000 [ 66.087202][ T6607] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 66.087209][ T6607] R13: 00007f04b9026038 R14: 00007f04b9025fa0 R15: 00007ffe7cfa0d18 [ 66.087224][ T6607] [ 66.742231][ T6615] netlink: 'syz.0.191': attribute type 4 has an invalid length. [ 67.853438][ T6642] overlay: filesystem on ./file0 not supported as upperdir [ 67.990992][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.991049][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.143881][ T6639] process 'syz.3.197' launched './file0' with NULL argv: empty string added [ 68.266226][ T1511] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.349498][ T6639] Invalid argument reading file caps for ./file0 [ 68.416024][ T1511] usb 5-1: Using ep0 maxpacket: 8 [ 68.420695][ T1511] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.425582][ T1511] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 68.425605][ T1511] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 68.425618][ T1511] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 68.425629][ T1511] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 68.425641][ T1511] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 68.425653][ T1511] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.425671][ T1511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.705208][ T1511] usb 5-1: GET_CAPABILITIES returned 0 [ 68.705231][ T1511] usbtmc 5-1:16.0: can't read capabilities [ 68.937560][ T6648] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 68.944954][ T44] kauditd_printk_skb: 15 callbacks suppressed [ 68.944969][ T44] audit: type=1400 audit(1792236381.599:494): avc: denied { create } for pid=6647 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.962227][ T5829] usb 5-1: USB disconnect, device number 4 [ 69.376048][ T6659] rnbd_client L202: map_device: Unknown parameter or missing value 'device_p!=/dev/ram0' [ 69.599975][ T5829] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.747438][ T5829] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 69.748385][ T5829] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 69.748419][ T5829] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 69.748436][ T5829] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 69.748453][ T5829] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 69.749499][ T5829] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 69.749532][ T5829] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 69.749548][ T5829] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 69.749564][ T5829] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 69.796908][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.796931][ T5829] usb 8-1: Product: syz [ 69.796942][ T5829] usb 8-1: Manufacturer: syz [ 69.796953][ T5829] usb 8-1: SerialNumber: syz [ 69.828840][ T5829] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 69.841968][ T5829] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 69.856568][ T5829] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 70.051176][ T44] audit: type=1400 audit(1792236382.709:495): avc: denied { bind } for pid=6656 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.065597][ T44] audit: type=1400 audit(1792236382.719:496): avc: denied { listen } for pid=6656 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.077710][ T44] audit: type=1400 audit(1792236382.739:497): avc: denied { accept } for pid=6656 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.119457][ T44] audit: type=1400 audit(1792236382.779:498): avc: denied { setopt } for pid=6656 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.144035][ T44] audit: type=1400 audit(1792236382.809:499): avc: denied { create } for pid=6667 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 70.169039][ T44] audit: type=1400 audit(1792236382.829:500): avc: denied { connect } for pid=6656 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.172104][ T44] audit: type=1400 audit(1792236382.829:501): avc: denied { getopt } for pid=6667 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 70.225036][ T6668] geneve2: entered promiscuous mode [ 70.246588][ T42] usb 8-1: USB disconnect, device number 4 [ 70.281864][ T6673] cgroup: none used incorrectly [ 70.282205][ T6671] cgroup: none used incorrectly [ 70.354389][ T42] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 70.389839][ T42] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 70.431217][ T42] ti_usb_3410_5052 8-1:2.0: device disconnected [ 70.570218][ T6683] jffs2: notice: (6683) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 70.623978][ T44] audit: type=1400 audit(1792236383.269:502): avc: denied { setattr } for pid=6680 comm="syz.2.210" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.786025][ C2] net_ratelimit: 67244 callbacks suppressed [ 70.786041][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786118][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786184][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786260][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786324][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786400][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786464][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786550][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786614][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.786701][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.192593][ T6692] kernel read not supported for file /file1 (pid: 6692 comm: syz.0.211) [ 71.193397][ T44] audit: type=1800 audit(1792236383.849:503): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.211" name="file1" dev="mqueue" ino=16455 res=0 errno=0 [ 71.351680][ T6694] FAULT_INJECTION: forcing a failure. [ 71.351680][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 71.351701][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(full) [ 71.351715][ T6694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.351721][ T6694] Call Trace: [ 71.351726][ T6694] [ 71.351731][ T6694] dump_stack_lvl+0x100/0x190 [ 71.351764][ T6694] should_fail_ex.cold+0x5/0xa [ 71.351782][ T6694] should_failslab+0xc2/0x120 [ 71.351803][ T6694] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.351818][ T6694] ? d_instantiate+0x8a/0xb0 [ 71.351829][ T6694] ? alloc_empty_file+0x5b/0x1c0 [ 71.351843][ T6694] alloc_empty_file+0x5b/0x1c0 [ 71.351855][ T6694] alloc_file_pseudo+0x183/0x290 [ 71.351867][ T6694] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 71.351879][ T6694] ? mas_preallocate+0x528/0xee0 [ 71.351903][ T6694] __shmem_file_setup+0x205/0x460 [ 71.351920][ T6694] ? __pfx___shmem_file_setup+0x10/0x10 [ 71.351938][ T6694] ? vm_area_alloc+0x1f/0x160 [ 71.351957][ T6694] shmem_zero_setup+0x96/0x1b0 [ 71.351970][ T6694] __mmap_region+0x26b6/0x32e0 [ 71.351987][ T6694] ? __pfx___mmap_region+0x10/0x10 [ 71.352008][ T6694] ? __lock_acquire+0x5c0/0x1f40 [ 71.352037][ T6694] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.352103][ T6694] ? avc_has_perm_noaudit+0x145/0x470 [ 71.352124][ T6694] mmap_region+0x3db/0x6d0 [ 71.352138][ T6694] ? rcu_is_watching+0x13/0xc0 [ 71.352155][ T6694] ? __pfx_mmap_region+0x10/0x10 [ 71.352171][ T6694] ? selinux_mmap_addr+0xe2/0x110 [ 71.352186][ T6694] ? bpf_lsm_mmap_addr+0x9/0x30 [ 71.352202][ T6694] ? security_mmap_addr+0x71/0x1e0 [ 71.352219][ T6694] ? __get_unmapped_area+0x255/0x3e0 [ 71.352236][ T6694] do_mmap+0x12c7/0x1c30 [ 71.352255][ T6694] ? lock_acquire+0x1d1/0x380 [ 71.352267][ T6694] ? __pfx_do_mmap+0x10/0x10 [ 71.352289][ T6694] ? __pfx_down_write_killable+0x10/0x10 [ 71.352304][ T6694] vm_mmap_pgoff+0x28d/0x470 [ 71.352321][ T6694] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 71.352338][ T6694] ? __pfx_do_futex+0x10/0x10 [ 71.352358][ T6694] ksys_mmap_pgoff+0xe4/0x610 [ 71.352373][ T6694] ? __x64_sys_futex+0x358/0x4d0 [ 71.352390][ T6694] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 71.352405][ T6694] ? xfd_validate_state+0x129/0x190 [ 71.352421][ T6694] __x64_sys_mmap+0x125/0x190 [ 71.352436][ T6694] do_syscall_64+0x123/0x790 [ 71.352454][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.352466][ T6694] RIP: 0033:0x7f04b8d9e559 [ 71.352476][ T6694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.352487][ T6694] RSP: 002b:00007f04b9bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 71.352498][ T6694] RAX: ffffffffffffffda RBX: 00007f04b9025fa0 RCX: 00007f04b8d9e559 [ 71.352505][ T6694] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 71.352511][ T6694] RBP: 00007f04b8e35ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 71.352518][ T6694] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 71.352524][ T6694] R13: 00007f04b9026038 R14: 00007f04b9025fa0 R15: 00007ffe7cfa0d18 [ 71.352540][ T6694] [ 71.640211][ T6694] futex_wake_op: syz.0.212 tries to shift op by 144; fix this program [ 71.672373][ T5727] ------------[ cut here ]------------ [ 71.672382][ T5727] kernel BUG at fs/jffs2/nodelist.c:462! [ 71.672396][ T5727] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 71.678123][ T5727] CPU: 0 UID: 0 PID: 5727 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 71.682845][ T5727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.685989][ T5727] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 71.687843][ T5727] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 22 43 80 fe 90 <0f> 0b e8 9a 84 f4 fe e9 5b fe ff ff e8 60 84 f4 fe e9 59 ff ff ff [ 71.693756][ T5727] RSP: 0018:ffffc90003bb7ab8 EFLAGS: 00010293 [ 71.695580][ T5727] RAX: 0000000000000000 RBX: ffff888036ab4000 RCX: 0000000000000000 [ 71.697982][ T5727] RDX: ffff88802bb6cb00 RSI: ffffffff838c144e RDI: ffff8880308beee0 [ 71.700420][ T5727] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1006d5686c [ 71.702855][ T5727] R10: ffff888036ab4363 R11: 0000000000000000 R12: ffff88805a2fbc80 [ 71.705264][ T5727] R13: dffffc0000000000 R14: ffff8880308beec0 R15: ffff88805a2fbd30 [ 71.707637][ T5727] FS: 000055558bda9500(0000) GS:ffff8880d4946000(0000) knlGS:0000000000000000 [ 71.710330][ T5727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.712357][ T5727] CR2: 000055558bdcca68 CR3: 0000000052ba0000 CR4: 0000000000352ef0 [ 71.714749][ T5727] Call Trace: [ 71.715870][ T5727] [ 71.717027][ T5727] jffs2_do_clear_inode+0x3ca/0x470 [ 71.718878][ T5727] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 71.720579][ T5727] evict+0x3c2/0xad0 [ 71.722111][ T5727] ? list_lru_del+0xba/0x2f0 [ 71.723838][ T5727] ? list_lru_del+0xba/0x2f0 [ 71.725209][ T5727] ? __pfx_evict+0x10/0x10 [ 71.726629][ T5727] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.728658][ T5727] ? find_held_lock+0x2b/0x80 [ 71.730135][ T5727] ? find_held_lock+0x2b/0x80 [ 71.731581][ T5727] dispose_list+0x117/0x1e0 [ 71.733363][ T5727] evict_inodes+0x473/0x710 [ 71.734978][ T5727] ? __pfx_evict_inodes+0x10/0x10 [ 71.736485][ T5727] ? sync_blockdev+0x51/0x70 [ 71.738090][ T5727] generic_shutdown_super+0xc8/0x360 [ 71.740099][ T5727] kill_mtd_super+0x1d/0x80 [ 71.741462][ T5727] jffs2_kill_sb+0x7c/0xb0 [ 71.742877][ T5727] deactivate_locked_super+0xbd/0x130 [ 71.744935][ T5727] deactivate_super+0xea/0x110 [ 71.746616][ T5727] cleanup_mnt+0xb7/0x160 [ 71.747922][ T5727] task_work_run+0x150/0x240 [ 71.749476][ T5727] ? __pfx_task_work_run+0x10/0x10 [ 71.751462][ T5727] exit_to_user_mode_loop+0x1d8/0x700 [ 71.753119][ T5727] ? rcu_is_watching+0x13/0xc0 [ 71.754682][ T5727] do_syscall_64+0x661/0x790 [ 71.756470][ T5727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.758535][ T5727] RIP: 0033:0x7fc295d9f797 [ 71.759884][ T5727] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 71.766355][ T5727] RSP: 002b:00007ffc6858ef28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 71.769385][ T5727] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc295d9f797 [ 71.771860][ T5727] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6858efe0 [ 71.774719][ T5727] RBP: 00007ffc6858efe0 R08: 00007ffc6858ffe0 R09: 00000000ffffffff [ 71.777217][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc68590070 [ 71.780007][ T5727] R13: 00007fc295e34efb R14: 000000000001167d R15: 00007ffc685900b0 [ 71.782426][ T5727] [ 71.783638][ T5727] Modules linked in: [ 71.786187][ T5727] ---[ end trace 0000000000000000 ]--- [ 71.946214][ T5727] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 71.946237][ T5727] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 22 43 80 fe 90 <0f> 0b e8 9a 84 f4 fe e9 5b fe ff ff e8 60 84 f4 fe e9 59 ff ff ff [ 71.946248][ T5727] RSP: 0018:ffffc90003bb7ab8 EFLAGS: 00010293 [ 71.946257][ T5727] RAX: 0000000000000000 RBX: ffff888036ab4000 RCX: 0000000000000000 [ 71.946264][ T5727] RDX: ffff88802bb6cb00 RSI: ffffffff838c144e RDI: ffff8880308beee0 [ 71.946270][ T5727] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1006d5686c [ 71.946276][ T5727] R10: ffff888036ab4363 R11: 0000000000000000 R12: ffff88805a2fbc80 [ 71.946283][ T5727] R13: dffffc0000000000 R14: ffff8880308beec0 R15: ffff88805a2fbd30 [ 71.946289][ T5727] FS: 000055558bda9500(0000) GS:ffff8880d4946000(0000) knlGS:0000000000000000 [ 71.946312][ T5727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.946321][ T5727] CR2: 00007f04b8ff32f8 CR3: 0000000052ba0000 CR4: 0000000000352ef0 [ 71.946329][ T5727] Kernel panic - not syncing: Fatal exception [ 71.978581][ T5727] Kernel Offset: disabled [ 71.979981][ T5727] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:26:24 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85b2ced0 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc90003bb72c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=1ffff92000776e62 R14=000000000000006a R15=0000000000000000 RIP=ffffffff85b2cef7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055558bda9500 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558bdcca68 CR3=0000000052ba0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b7a85a139d24793 d256aee195663d99 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0e7dbc9642ffbf3 7e31fb53b37977d7 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 db23180b38a749a4 d18c5bcd65e98ed2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d95b6bd8b762fb1 89c0db1030cbbe13 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000107da2ca730ba 0d000000de000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c929e0a00031c96 2caca56200000507 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00017e01bc000000 4b00000094000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59000000d6000000 2cab90b368000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f367e5ca7fe7419d 12033c0bbab39209 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73f7bd6e1cc43daf 51d3c1cbe10d7b42 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a1df6600 00007f78a1df65e0 00007f78a1df65e8 00007f78a1df6618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a1df65f8 00007f78a1df65c8 00007f78a1df6600 00007f78a1df65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff8880202d4b00 RSI=ffffffff81b6de9e RDI=ffff8880202d4b00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b6de9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32a05ff8 CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 72656c6c616b7a79 7301ffffffffffff ffffdf0801800300 10000fffffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff040fffffffffff ff04010800080116 07fe080001080004 0143d20004000008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0009800401c71000 08004fce006e7574 2f74656e2f766564 2f01ffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffe50809800334 0000068400000000 00000000000000b3 0000001000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b3 0000001000000000 0000000000000000 0000000000000014 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f74656e2f766564 2f01ffffffffffff ffffe50809800334 0000068400000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001001000 0c80040100000a08 0606016d80000800 0ce0030010000cd0 ZMM25=99648c8e99648c8e 99648c8e99648c8e 99648c8e99648c8e 99648c8e99648c8e 99648c8e99648c8e 99648c8e99648c8e 99648c8e99648c8e 99648c8e99648c8e ZMM26=b88baf6fb88baf6f b88baf6fb88baf6f b88baf6fb88baf6f b88baf6fb88baf6f b88baf6fb88baf6f b88baf6fb88baf6f b88baf6fb88baf6f b88baf6fb88baf6f ZMM27=20ea830820ea8308 20ea830820ea8308 20ea830820ea8308 20ea830820ea8308 20ea830820ea8308 20ea830820ea8308 20ea830820ea8308 20ea830820ea8308 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2402000024020000 2402000024020000 2402000024020000 2402000024020000 2402000024020000 2402000024020000 2402000024020000 2402000024020000 info registers vcpu 2 CPU#2 RAX=0000000000000005 RBX=ffff88803dc1fe00 RCX=ffff888027058494 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880270584a4 RBP=0000000000000050 RSP=ffffc90000658540 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000000000763b R12=ffffc90000658678 R13=ffff8880274aaa00 R14=0000000000001200 R15=ffff888027058b00 RIP=ffffffff89f9b314 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2f6a0c CR3=0000000036177000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04b9b5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7cfa1206 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7cfa1206 00007ffe7cfa120c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04b8e360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04b8e3611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04b8e36280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04b8e3610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04b8ff6600 00007f04b8ff65e0 00007f04b8ff65e8 00007f04b8ff6618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04b9b5d020 00007f04b8ff65c0 00007f04b8ff65d0 00007f04b8ff6610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04b8ff65f8 00007f04b8ff65c8 00007f04b8ff6600 00007f04b8ff65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff8880202d0000 RSI=ffffffff81b6de9e RDI=ffff8880202d0000 RBP=0000000000000003 RSP=ffffc900001a7df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=0000000000000000 RIP=ffffffff81b6de9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78a2a82ff8 CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2430e3ec76fd984 d18e9b5f26abd62d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7fb030ce0d333504 800c86d8ec3d1b9d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f403bf494867a28 bd4c3c0f10718635 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 15777da9b819aefe cf3462a0e6869811 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 68b3cffa688f3625 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb783cb000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e9cafd7f1009f8d 393635342179aff3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002eda4cba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a29189cef7186e2 8e939507aa90ecd0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 22995dd726d5af35 79524b54c4087b61 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f8aff65f8 00007f6f8aff65c8 00007f6f8aff6600 00007f6f8aff65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000