last executing test programs: 1m22.820331994s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) syz_clone(0x1000000, &(0x7f0000000200)="86f8a414f6c5f0891d710ceb81d61921a24bbca649a1666ecdf125bb49656430310c364fe7002bdf0efc63093636300f30638a46b1e39330dc8f24c3cba8083d61e13677d8022548e04dadb29ceb3d9441150e7f904dff9a287f6bfe0fbbb05ba9e9f89d457b0a14bf3db95c2ade08e9b7ffa1ebf0bc687e6fa6f32033d4db274aba53f8640d9e00d4fe4c08000000000000007ec4e69dd6be8f0884c336f20f349ed465fac7097e2e2b68e359563fb69d9630764cb06d6f43014dd940be0d2cc1b988773a6dc5ff362e1f155b2a2d85da50edca62bdaac80ebd189b16870706b5", 0xe1, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="1410b74256bba0d513ca9acc8fbeeb38e00f7aa582c1f44b1638d2c6870803a9494c084b69b48df8a947c13301e3d530dadf734855ad4cb6a800bd88914fe27a71242c07a1401f70d7b08926b34c61914a9c0080859b0b30c73dc0d84b9bd7dc71330500") r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000680)={0x2d, &(0x7f0000000140)=[{0x3d, '\x00', @data=0x5, 0x2}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) mount(0x0, &(0x7f0000000640)='./proc/mtrr\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./proc/mtrr\x00', &(0x7f0000000180)={0x808c0, 0x3a}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0xfffffffffffffffd) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x3, 0x5004) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r7, 0x4}, 0x38) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x2c, 0x24, 0x4, 0x2070bd27, 0x4000000, {0x0, 0x0, 0x0, r9, {0x8, 0x4}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xeb59}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) openat(r3, &(0x7f00000005c0)='./proc/mtrr/file0\x00', 0x521000, 0x4c) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x200) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x80c0}, 0x4000001) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0xffffffffffffffc7, 0xffffffffffffffff, {0x81}}, './proc/mtrr\x00'}) r11 = open$dir(&(0x7f0000000440)='./proc\x00', 0x1, 0x108) move_mount(r11, &(0x7f0000000480)='./proc/mtrr\x00', r3, &(0x7f00000004c0)='./proc/mtrr\x00', 0x6) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) 1m22.562935549s ago: executing program 2 (id=15): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x100000000000000, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m21.503620542s ago: executing program 2 (id=33): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000e14010026bd7000fcdbdf2508003c0002000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = socket(0x2a, 0x2, 0x9) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, 0x0}, 0x40) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xffffff0e}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 1m21.430258058s ago: executing program 2 (id=35): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r0}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000001100), 0x80200, 0x0) ioctl$BLKCLOSEZONE(r2, 0x40101287, &(0x7f0000001140)={0xc000000000000000, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r3 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000780)="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", 0xff0}, {&(0x7f0000001780)="40f68b310a15dc6d31a73735425255a352", 0x11}], 0x2) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000140)=0xd9) 1m21.360403382s ago: executing program 2 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(&(0x7f0000001040)=@filename='none\x00', &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/filesystems\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/4096, 0x1000) syz_clone3(&(0x7f0000000080)={0xa790b080, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m21.248510703s ago: executing program 2 (id=37): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000001400010027bd7000fddbdf250278"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) r1 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m6.231461499s ago: executing program 32 (id=37): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000001400010027bd7000fddbdf250278"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) r1 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m3.16584628s ago: executing program 4 (id=183): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x40103, 0x0) poll(&(0x7f0000000140)=[{r0, 0x10}], 0x1, 0x128) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000006a00020027bd7000fcdbdf250a0000000000000004000b0084853d0408000a00020000000400090008000500", @ANYRES32=r2, @ANYBLOB="04000b00"], 0x38}}, 0x24008040) 1m2.820018114s ago: executing program 4 (id=213): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='4_dummy\x00\x00\x9e\xaf\x1c\xed\xa8`|U\xae\xd1\xfd\x87\xcf\xe3l\xaf\x88\xc0)\xd5\xbd\xe7c\xed\xfbu,\xcf\x828\xf0\xb0wJ\x99\xd2\xbb\xc8\x81)W\x05\x00\x00\x00\x80\a-\x1b\x83\xf1\x1fv\xd93\xb6&l\xbb\xe8\xebXh', &(0x7f0000000340)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000400, &(0x7f0000000c00)=ANY=[@ANYRES8=r0]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42c80, 0x8) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff000000000c0000000c0003800800020000000000180001801400020076657468385f746f5f626f6e64000000"], 0x38}, 0x1, 0x0, 0x0, 0x811}, 0x8880) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000000400), 0x0) userfaultfd(0x80001) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./dev/mtdblock0\x00', &(0x7f0000000180)='xfs\x00', 0x23000000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usbip_server_init(0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(r1, &(0x7f00000003c0)='./file1\x00', 0x440402, 0x18) write(r5, &(0x7f0000000640)='\"\"go=z', 0x6) 1m2.160601489s ago: executing program 4 (id=220): move_pages(0x0, 0x42, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x40, @local, @remote, [], "3b00123400000000"}}}}}}}, 0x0) 1m1.240594033s ago: executing program 4 (id=221): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r4, &(0x7f0000000600)='_', 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x76, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3bc99abf4325a53eba30c841e96f311a8804e899d75a4166a31e2105ff6dd481d3ca1e71894a4fadee8f43ee94b58551b2d50c8910b8142638fd968a5da6d1c701e3600cb1744e669e5f7441f789f3c5", @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m1.157079512s ago: executing program 33 (id=221): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r4, &(0x7f0000000600)='_', 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x76, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3bc99abf4325a53eba30c841e96f311a8804e899d75a4166a31e2105ff6dd481d3ca1e71894a4fadee8f43ee94b58551b2d50c8910b8142638fd968a5da6d1c701e3600cb1744e669e5f7441f789f3c5", @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4.319772577s ago: executing program 5 (id=1195): r0 = socket(0xa, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900000227bd7000000000002001000000000000000000000000000000000000000000000000ffff0a01010000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2300000000000000ae00000000000000ff0f000000000000ffffffffffffffff0004000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d43c0000000a000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20141, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x1f, 0x1000, 0x5691409, 0x8, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x40, 0xfffff}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x6, {0x0, 0x3022d6e144aa3ceb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet6(0xa, 0x2, 0x11) sendto$inet6(r4, 0x0, 0x0, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1, 0x0, 0x0, 0x4841}, 0x24000052) 3.469336418s ago: executing program 5 (id=1213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r3], 0x50}, 0x4, 0x700000000000000}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) semtimedop(0x0, &(0x7f0000003340)=[{0x4, 0x3d, 0x1000}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) 3.417318412s ago: executing program 5 (id=1215): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=unix']) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') (async) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x148, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xfffffffffffffd79, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x7, 0x81, 0x3}}, @TCA_GRED_STAB={0x104}]}}]}, 0xfffffffffffffd44}}, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000bc0)={0x0, &(0x7f0000000940)=[@nested_create_vm={0x12d, 0x18, 0x2}, @nested_load_syzos={0x136, 0x38, {0x3, 0x5, [@enable_nested={0x12c, 0x18}]}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x4a, 0x0, 0x3911826d, 0x2}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xedc, 0x7}}, @wr_crn={0x67, 0x20, {0x0, 0x532}}, @nested_vmlaunch={0x12f, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0x618f}}, @cpuid={0x64, 0x18, {0x3, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x45, 0x1}}, @out_dx={0x6a, 0x28, {0x8a5e, 0x4, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x2, 0x4}}, @wrmsr={0x65, 0x20, {0x96a, 0x8001}}, @cpuid={0x64, 0x18, {0x6, 0x6}}, @wr_crn={0x67, 0x20, {0x8, 0x7fff}}, @enable_nested={0x12c, 0x18}], 0x248}) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) (async) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e1d, @private=0xa010102}, 0x10) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r7, &(0x7f0000000580)=ANY=[], 0x8) 3.197797807s ago: executing program 5 (id=1218): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8002a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) close(0x3) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x40000, 0x0, {0x2, 0x0, 0x0, 0x8, 0xfd, 0x1, 0xfe, 0x1, 0x3400}, [@RTA_NH_ID={0x8, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000240)={0x18, 0x0, 0x2100, 0x280000000}) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x1, 0x3, 0xff, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x8, 0x4, 0xf, 0xa, 0x7, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) r6 = socket$netlink(0x10, 0x3, 0xa) (async) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f0000000300), 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x5}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x28000854) sendmsg$nl_xfrm(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {{@in=@remote, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x97, 0x2, 0x0, 0xa0, 0x16}, {@in=@remote, 0x4d6, 0xff}, @in6=@loopback, {0x4, 0x9, 0x0, 0x1, 0x4d7, 0x7ff, 0x2, 0x10001}, {0x7f, 0x4, 0x10001, 0x1}, {0xffff, 0x9, 0xf}, 0x70bd2b, 0x3504, 0x2, 0x4, 0x10}}, 0xf0}}, 0x4040) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="ab18cfe53bbcde1844211ce54fd9c3594609cd40c4b46f2320dfa5baf321365bca7c7601", @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES16=r1, @ANYRES32=r1, @ANYRES64=r2], 0x40}}, 0x80) (async) r8 = syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0x20001) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000200)=""/21) 2.940137999s ago: executing program 5 (id=1223): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setreuid(0x0, 0xee00) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x8, {{0xa, 0x4e20, 0x7, @private1, 0x200}}, {{0xa, 0x4e20, 0x401, @mcast2, 0x1}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9fffffff}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.936599767s ago: executing program 5 (id=1226): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0xded, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0x80000000, @private1, 0x9}}}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)) r9 = syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000580)={&(0x7f0000003000)={[{&(0x7f0000000480)="0b59e24dc2d89f097718172348160b6c037733288768a535fb5443ffca2fc9d28a6faaa5b2bb39ed50bce1402dfca4218369fce4415ec6a1917025979112ba22d0dca1a0f03b719d48ebdec13b2ed616b7e5bb33c7fc325302e910eebb2bee230ed0ff479d86ebf3a46fc7b07c1d3b61b133c1fa8004c2d6fd94131d5530036fc4a14079f37b150e6c7bb7fa05af60e30a76d57985bd4500e9efe3cac5447d05fdaf8462de4f69bfc95e92fa", 0xac}, {&(0x7f0000000540), 0x0, 0x1}]}, 0x2, 0x0, 0x3}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) splice(r4, 0x0, r6, 0x0, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 2.768713528s ago: executing program 1 (id=1228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x6, 0xffff1000, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.619230978s ago: executing program 1 (id=1232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f00000004c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x6, 0xce, 0x1}}, @wr_drn={0x68, 0x20, {0x1, 0x7}}, @wr_crn={0x67, 0x20, {0x8, 0x4}}, @code={0xa, 0x5d, {"b91f0a00000f32653ef0408043020066baf80cb8913de184ef66bafc0cec66b825010f00d866ba200066b80c0066efc4621997a100000000420f07c401bdf16c0399460f2281c402350059f7"}}, @nested_create_vm={0x12d, 0x18, 0x7}, @uexit={0x0, 0x18, 0x4}], 0xfd}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xfd, 0x9, 0x94, '\x00', 0x40000000000511c}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x9, 0x80000004400080, 0x1c00000, 0x6, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.499155879s ago: executing program 1 (id=1234): openat$cdrom(0xffffffffffffff9c, &(0x7f00000017c0), 0xc0040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@map=r1, r1, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r2}, 0x20) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) write$eventfd(r3, &(0x7f0000000040)=0xfffbfffffffffffd, 0x8) mkdirat(r3, &(0x7f0000000000)='./cgroup\x00', 0x100) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) chdir(&(0x7f00000001c0)='./cgroup\x00') fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1f, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x101, "a4ce0f2126a65971bc523d92f6128ca6470a54bd25defefe5de6d1e0fc952bee", 0x2, 0x3, 0x2, 0xf900, 0x2000004, 0x4}) 2.419711916s ago: executing program 3 (id=1236): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) rt_sigqueueinfo(r0, 0x33, &(0x7f0000000240)={0x37, 0x5, 0xe}) memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@enum={0x5, 0x0, 0x0, 0xf}, @datasec={0x7, 0x0, 0x0, 0xf, 0x0, [{0x3, 0x7, 0x3}, {0x4, 0xe, 0x7}, {0x4, 0x5d59, 0x3}], "1af9"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 2.419128026s ago: executing program 1 (id=1237): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'wg0\x00', @ifru_map={0x7, 0x8, 0xffff, 0x84, 0x9, 0x5}}) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)) 2.418696737s ago: executing program 3 (id=1238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xb) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d00090509"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048011) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000e40)}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='0x', 0x2) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000000c0)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r9, 0xc0b, 0x100, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4044) 2.359103957s ago: executing program 1 (id=1239): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0x3, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000070800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.199795327s ago: executing program 1 (id=1240): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="380000000000000029000000040000008903000000000000c9100000000000000000000000000000000101090000000000000000000000001800000000000000290000003b000000"], 0x50}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x608003) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004b40)='./binderfs/binder-control\x00', 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000100ecfff3ff00000000000014000000000000006260b3568f0000000000000000000000000000000000002b7da4ae09de0e46f175fa1875a71d0043fb46acb2", @ANYRES32=0x0, @ANYBLOB="10c0000000000000200012800b00010065727370616e00001000028008000400ff0f000004001200"], 0x40}}, 0x8000) 1.279280604s ago: executing program 0 (id=1246): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x407f, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='&\\{,[\'\\\x00', 0x40, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x5]}, {0x6f04, 0x7, 0x7, 0x8}}, 0x101, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1}) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) (async, rerun: 32) write(r3, &(0x7f0000000180)="240000001e005f0214f6fffffffffff8070000000018000000000300aa503a8455bfc475", 0x24) (async, rerun: 32) ioctl$DVB_DVR_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000000180)={0x958, 0x80000, r0}) write(r2, &(0x7f0000000200)="2e040000000007e4b40dee4ea98675329f67da4f0607a10cc151120f0a05000000000000005b2de436e679d2877d04da08b582a27229f5fe00468100f900078a151f7508005b73ebce3900050097300414289df278ee2acc19bf5f86c17297506f0749483a158c16fb9899e251beb7ca3ca3e3c44b70f2dc2b2cff5dfc78787f2f285fde110773d9c118cc774462a0ff39fa47a1d34edf97bd1a315548e769b6a712f2f5b6c738934ba5f22cbcbaae29a84861e8b7201f83daca0df5171f76218bcb42183453c5ad75e85d515ac1709f7dabfd6b4808b7598bdc6c734648b0d0ac2fd8f739858f1e469c09e3a65cd16c2ba0b5cf715e40", 0xf7) 1.210267681s ago: executing program 0 (id=1247): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @rand_addr=0x64010102}}, 0xffff, 0x4}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x184, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_LLC_SDP={0x128, 0x13, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x4}, {0x7, 0x1, ']/\x80'}, {0x5, 0x1, '\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x4}, {0x7, 0x1, '[-\xe9'}, {0x6, 0x1, '&:'}, {0x9, 0x1, '*/[[['}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '+'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x4}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0x4}, {0x6, 0x1, ',-'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '%[-'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '%'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x30, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x4}, {0xe, 0x1, '+&*(\\+%&\xd0('}, {0x5, 0x1, '\x00'}, {0x4}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008881}, 0x4) sendto$inet6(r0, &(0x7f0000000000)='V', 0x1, 0x40420f1, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x5}, 0x1c) 1.160389789s ago: executing program 0 (id=1248): syz_open_dev$video(&(0x7f0000000440), 0xfffffffffffffffb, 0x0) 1.159740561s ago: executing program 0 (id=1249): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0x3, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 959.936059ms ago: executing program 0 (id=1250): socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x2800) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x1b, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa92}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @generic={0x2, 0xd, 0x1, 0x9d, 0x1}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @tail_call]}, &(0x7f0000000980)='syzkaller\x00', 0xfff, 0xea, &(0x7f00000009c0)=""/234, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xf, 0x9b1, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000cc0)=[{0x4, 0x4, 0x5, 0x12}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = fsopen(&(0x7f0000000180)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)='c:::\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r5 = socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x1, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x39, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0x3, 0x926, 0xa, 0x1, 0x2, 0x407c, 0xea4, 0x0, 0x4, 0x4000022, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0x1, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fb, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000007, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0xffffffff, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x8, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x5, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xcad, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfff9, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0xfffffffffffffd01) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000694000/0x1000)=nil, 0x1000, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2043) write$FUSE_INIT(r8, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x2d, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80}}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 959.541712ms ago: executing program 3 (id=1251): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000024003507d23b806fac6394f90324fc60", 0x14}], 0x1}, 0x20000080) sendfile(r1, r0, 0x0, 0x7ffff003) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r3, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 819.964784ms ago: executing program 3 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'pim6reg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES64=r0, @ANYBLOB="0040000044400200280012800b00010067656e65766500001800028014000700fe8000000000000000000000000000aa", @ANYRES8=r0, @ANYRES16=r1], 0x48}}, 0x2000000) 687.556504ms ago: executing program 3 (id=1253): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000014c0)={0x9, {"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", 0x1000}}, 0x1006) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x4, 0x8a, [0x4, 0x2937, 0x1, 0x2, 0x1, 0x9c], 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=""/138}, &(0x7f0000000500)=0x78) (async) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x4, 0x8a, [0x4, 0x2937, 0x1, 0x2, 0x1, 0x9c], 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=""/138}, &(0x7f0000000500)=0x78) r2 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0xa8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file1\x00', 0x808c00, 0x43) (async) r3 = open(&(0x7f0000000040)='./file1\x00', 0x808c00, 0x43) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000002c0)={@remote, 0x3, 0x2, 0x3, 0x0, 0x77d, 0x4000}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000840)=[{&(0x7f0000000880)=""/88, 0x58}], 0x1, 0x1, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x6a, 0x2, 0x0, &(0x7f0000000300)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x6, 0x60000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r8, 0x0, 0x0, 0x800) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 529.866864ms ago: executing program 3 (id=1254): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir ./f', 0x7) r1 = syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0xcca7, 0x1, 0x2, 0x34a}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) mkdir(&(0x7f00000002c0)='./sys\x00', 0x20) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000240)={{r1}, 0x5, &(0x7f0000000040)=[0x6, 0x4, 0x1e, 0x7, 0x8], 0x1, 0xf}) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 0s ago: executing program 0 (id=1255): mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snddsp(r3, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) timer_delete(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10008, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@noextend}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@context={'context', 0x3d, 'root'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_user={'subj_user', 0x3d, '('}}]}}) open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) kernel console output (not intermixed with test programs): x190/0x400 [ 97.991344][ T7865] skb_clone+0x190/0x400 [ 97.991367][ T7865] netlink_deliver_tap+0xaed/0xcc0 [ 97.991392][ T7865] netlink_unicast+0x62b/0x850 [ 97.991416][ T7865] ? __pfx_netlink_unicast+0x10/0x10 [ 97.991434][ T7865] ? __pfx_sock_has_perm+0x10/0x10 [ 97.991468][ T7865] netlink_sendmsg+0x8b0/0xda0 [ 97.991492][ T7865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.991514][ T7865] ? selinux_socket_sendmsg+0x198/0x2f0 [ 97.991544][ T7865] ____sys_sendmsg+0xa4d/0xbe0 [ 97.991570][ T7865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.991592][ T7865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.991630][ T7865] ___sys_sendmsg+0x190/0x1e0 [ 97.991650][ T7865] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.991665][ T7865] ? __lock_acquire+0x49f/0x1a40 [ 97.991688][ T7865] ? get_pid_task+0x106/0x250 [ 97.991733][ T7865] __sys_sendmsg+0x160/0x210 [ 97.991757][ T7865] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.991794][ T7865] do_syscall_64+0x115/0x870 [ 97.991816][ T7865] ? clear_bhb_loop+0x70/0xc0 [ 97.991839][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.991857][ T7865] RIP: 0033:0x7f5a51d9e0d9 [ 97.991872][ T7865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.991889][ T7865] RSP: 002b:00007f5a52be9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.991907][ T7865] RAX: ffffffffffffffda RBX: 00007f5a52025fa0 RCX: 00007f5a51d9e0d9 [ 97.991918][ T7865] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 97.991928][ T7865] RBP: 00007f5a52be9090 R08: 0000000000000000 R09: 0000000000000000 [ 97.991939][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.991949][ T7865] R13: 00007f5a52026038 R14: 00007f5a52025fa0 R15: 00007ffc43c63648 [ 97.991974][ T7865] [ 98.019250][ T5875] usb 8-1: USB disconnect, device number 10 [ 98.128155][ T5875] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 98.165906][ T5875] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 98.184946][ T5875] ti_usb_3410_5052 8-1:2.0: device disconnected [ 98.230813][ T7881] Failed to initialize the IGMP autojoin socket (err -2) [ 98.540018][ T7905] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 98.547626][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.556'. [ 99.335111][ T7922] FAULT_INJECTION: forcing a failure. [ 99.335111][ T7922] name failslab, interval 1, probability 0, space 0, times 0 [ 99.340846][ T7922] CPU: 2 UID: 0 PID: 7922 Comm: syz.5.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.340867][ T7922] Tainted: [L]=SOFTLOCKUP [ 99.340872][ T7922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.340879][ T7922] Call Trace: [ 99.340884][ T7922] [ 99.340890][ T7922] dump_stack_lvl+0x100/0x190 [ 99.340912][ T7922] should_fail_ex.cold+0x5/0xa [ 99.340927][ T7922] ? __skb_get_hash_net+0x153/0x560 [ 99.340941][ T7922] should_failslab+0xc2/0x120 [ 99.340959][ T7922] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.340973][ T7922] ? lock_acquire+0x1b9/0x370 [ 99.340989][ T7922] ? skb_clone+0x190/0x400 [ 99.341007][ T7922] skb_clone+0x190/0x400 [ 99.341023][ T7922] dev_queue_xmit_nit+0x255/0xa60 [ 99.341044][ T7922] dev_hard_start_xmit+0x2f5/0x760 [ 99.341060][ T7922] __dev_queue_xmit+0x1bbf/0x4970 [ 99.341078][ T7922] ? __pfx___dev_queue_xmit+0x10/0x10 [ 99.341097][ T7922] ? rcu_is_watching+0x12/0xc0 [ 99.341132][ T7922] ? trace_kmem_cache_alloc+0xdd/0x100 [ 99.341148][ T7922] ? __kasan_slab_alloc+0x89/0x90 [ 99.341164][ T7922] ? __asan_memcpy+0x3c/0x60 [ 99.341176][ T7922] ? __asan_memcpy+0x3c/0x60 [ 99.341187][ T7922] ? __skb_clone+0x570/0x760 [ 99.341203][ T7922] netlink_deliver_tap+0xa4d/0xcc0 [ 99.341219][ T7922] netlink_unicast+0x62b/0x850 [ 99.341234][ T7922] ? __pfx_netlink_unicast+0x10/0x10 [ 99.341246][ T7922] ? __pfx_sock_has_perm+0x10/0x10 [ 99.341266][ T7922] netlink_sendmsg+0x8b0/0xda0 [ 99.341280][ T7922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.341294][ T7922] ? selinux_socket_sendmsg+0x198/0x2f0 [ 99.341312][ T7922] ____sys_sendmsg+0xa4d/0xbe0 [ 99.341330][ T7922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.341342][ T7922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.341367][ T7922] ___sys_sendmsg+0x190/0x1e0 [ 99.341379][ T7922] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.341389][ T7922] ? __lock_acquire+0x49f/0x1a40 [ 99.341403][ T7922] ? get_pid_task+0x106/0x250 [ 99.341434][ T7922] __sys_sendmsg+0x160/0x210 [ 99.341450][ T7922] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.341472][ T7922] do_syscall_64+0x115/0x870 [ 99.341489][ T7922] ? clear_bhb_loop+0x70/0xc0 [ 99.341503][ T7922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.341515][ T7922] RIP: 0033:0x7f3869f9e0d9 [ 99.341526][ T7922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.341537][ T7922] RSP: 002b:00007f386af1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.341549][ T7922] RAX: ffffffffffffffda RBX: 00007f386a225fa0 RCX: 00007f3869f9e0d9 [ 99.341556][ T7922] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 99.341563][ T7922] RBP: 00007f386af1f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.341569][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.341576][ T7922] R13: 00007f386a226038 R14: 00007f386a225fa0 R15: 00007ffc9e8409b8 [ 99.341590][ T7922] [ 99.709094][ T7949] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.713333][ T7949] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 99.718973][ T7949] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.722230][ T7949] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 99.815633][ T7946] netlink: 36 bytes leftover after parsing attributes in process `syz.5.570'. [ 99.843540][ T7957] FAULT_INJECTION: forcing a failure. [ 99.843540][ T7957] name failslab, interval 1, probability 0, space 0, times 0 [ 99.843583][ T848] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 99.847778][ T7957] CPU: 3 UID: 0 PID: 7957 Comm: syz.0.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.847798][ T7957] Tainted: [L]=SOFTLOCKUP [ 99.847803][ T7957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.847810][ T7957] Call Trace: [ 99.847815][ T7957] [ 99.847820][ T7957] dump_stack_lvl+0x100/0x190 [ 99.847843][ T7957] should_fail_ex.cold+0x5/0xa [ 99.847859][ T7957] should_failslab+0xc2/0x120 [ 99.847877][ T7957] __kmalloc_noprof+0xfc/0x820 [ 99.847891][ T7957] ? ethnl_default_set_doit+0x178/0x1050 [ 99.847908][ T7957] ethnl_default_set_doit+0x178/0x1050 [ 99.847923][ T7957] genl_family_rcv_msg_doit+0x214/0x300 [ 99.847939][ T7957] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 99.847958][ T7957] ? bpf_lsm_capable+0x9/0x10 [ 99.847971][ T7957] ? security_capable+0x80/0x260 [ 99.847988][ T7957] ? ns_capable+0xd2/0xf0 [ 99.848005][ T7957] genl_rcv_msg+0x560/0x800 [ 99.848020][ T7957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.848035][ T7957] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 99.848052][ T7957] netlink_rcv_skb+0x159/0x420 [ 99.848064][ T7957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.848078][ T7957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.848096][ T7957] ? netlink_deliver_tap+0x1ae/0xcc0 [ 99.848110][ T7957] genl_rcv+0x28/0x40 [ 99.848122][ T7957] netlink_unicast+0x585/0x850 [ 99.848136][ T7957] ? __pfx_netlink_unicast+0x10/0x10 [ 99.848147][ T7957] ? __pfx_sock_has_perm+0x10/0x10 [ 99.848167][ T7957] netlink_sendmsg+0x8b0/0xda0 [ 99.848182][ T7957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.848195][ T7957] ? selinux_socket_sendmsg+0x198/0x2f0 [ 99.848214][ T7957] ____sys_sendmsg+0xa4d/0xbe0 [ 99.848232][ T7957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.848246][ T7957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.848270][ T7957] ___sys_sendmsg+0x190/0x1e0 [ 99.848283][ T7957] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.848293][ T7957] ? __lock_acquire+0x49f/0x1a40 [ 99.848308][ T7957] ? get_pid_task+0x106/0x250 [ 99.848335][ T7957] __sys_sendmsg+0x160/0x210 [ 99.848351][ T7957] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.848374][ T7957] do_syscall_64+0x115/0x870 [ 99.848390][ T7957] ? clear_bhb_loop+0x70/0xc0 [ 99.848404][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.848416][ T7957] RIP: 0033:0x7f5a51d9e0d9 [ 99.848426][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.848437][ T7957] RSP: 002b:00007f5a52be9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.848449][ T7957] RAX: ffffffffffffffda RBX: 00007f5a52025fa0 RCX: 00007f5a51d9e0d9 [ 99.848456][ T7957] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 99.848463][ T7957] RBP: 00007f5a52be9090 R08: 0000000000000000 R09: 0000000000000000 [ 99.848469][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.848475][ T7957] R13: 00007f5a52026038 R14: 00007f5a52025fa0 R15: 00007ffc43c63648 [ 99.848491][ T7957] [ 100.115712][ T848] usb 6-1: Invalid ep0 maxpacket: 16 [ 100.243549][ T848] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 100.320280][ T7982] FAULT_INJECTION: forcing a failure. [ 100.320280][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 100.328985][ T7982] CPU: 3 UID: 0 PID: 7982 Comm: syz.5.583 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.329012][ T7982] Tainted: [L]=SOFTLOCKUP [ 100.329017][ T7982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.329026][ T7982] Call Trace: [ 100.329031][ T7982] [ 100.329038][ T7982] dump_stack_lvl+0x100/0x190 [ 100.329066][ T7982] should_fail_ex.cold+0x5/0xa [ 100.329087][ T7982] should_failslab+0xc2/0x120 [ 100.329110][ T7982] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 100.329132][ T7982] ? ethnl_default_set_doit+0x473/0x1050 [ 100.329153][ T7982] kmemdup_noprof+0x29/0x60 [ 100.329185][ T7982] ethnl_default_set_doit+0x473/0x1050 [ 100.329206][ T7982] genl_family_rcv_msg_doit+0x214/0x300 [ 100.329227][ T7982] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 100.329251][ T7982] ? bpf_lsm_capable+0x9/0x10 [ 100.329266][ T7982] ? security_capable+0x80/0x260 [ 100.329286][ T7982] ? ns_capable+0xd2/0xf0 [ 100.329308][ T7982] genl_rcv_msg+0x560/0x800 [ 100.329328][ T7982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.329346][ T7982] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 100.329369][ T7982] netlink_rcv_skb+0x159/0x420 [ 100.329384][ T7982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.329403][ T7982] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.329427][ T7982] ? netlink_deliver_tap+0x1ae/0xcc0 [ 100.329445][ T7982] genl_rcv+0x28/0x40 [ 100.329460][ T7982] netlink_unicast+0x585/0x850 [ 100.329478][ T7982] ? __pfx_netlink_unicast+0x10/0x10 [ 100.329514][ T7982] ? __pfx_sock_has_perm+0x10/0x10 [ 100.329540][ T7982] netlink_sendmsg+0x8b0/0xda0 [ 100.329559][ T7982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.329576][ T7982] ? selinux_socket_sendmsg+0x198/0x2f0 [ 100.329600][ T7982] ____sys_sendmsg+0xa4d/0xbe0 [ 100.329623][ T7982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.329640][ T7982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.329672][ T7982] ___sys_sendmsg+0x190/0x1e0 [ 100.329687][ T7982] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.329700][ T7982] ? __lock_acquire+0x49f/0x1a40 [ 100.329720][ T7982] ? get_pid_task+0x106/0x250 [ 100.329756][ T7982] __sys_sendmsg+0x160/0x210 [ 100.329776][ T7982] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.329806][ T7982] do_syscall_64+0x115/0x870 [ 100.329825][ T7982] ? clear_bhb_loop+0x70/0xc0 [ 100.329843][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.329858][ T7982] RIP: 0033:0x7f3869f9e0d9 [ 100.329872][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.329887][ T7982] RSP: 002b:00007f386af1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.329902][ T7982] RAX: ffffffffffffffda RBX: 00007f386a225fa0 RCX: 00007f3869f9e0d9 [ 100.329911][ T7982] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 100.329920][ T7982] RBP: 00007f386af1f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.329928][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.329936][ T7982] R13: 00007f386a226038 R14: 00007f386a225fa0 R15: 00007ffc9e8409b8 [ 100.329962][ T7982] [ 100.403649][ T848] usb 6-1: Invalid ep0 maxpacket: 16 [ 100.437081][ T848] usb usb6-port1: attempt power cycle [ 100.697475][ T8020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9695 sclass=netlink_route_socket pid=8020 comm=syz.3.598 [ 100.725779][ T8022] FAULT_INJECTION: forcing a failure. [ 100.725779][ T8022] name failslab, interval 1, probability 0, space 0, times 0 [ 100.732243][ T8022] CPU: 3 UID: 0 PID: 8022 Comm: syz.5.599 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.732262][ T8022] Tainted: [L]=SOFTLOCKUP [ 100.732266][ T8022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.732273][ T8022] Call Trace: [ 100.732279][ T8022] [ 100.732283][ T8022] dump_stack_lvl+0x100/0x190 [ 100.732309][ T8022] should_fail_ex.cold+0x5/0xa [ 100.732325][ T8022] should_failslab+0xc2/0x120 [ 100.732343][ T8022] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 100.732360][ T8022] ? ethnl_default_set_doit+0x473/0x1050 [ 100.732376][ T8022] kmemdup_noprof+0x29/0x60 [ 100.732391][ T8022] ethnl_default_set_doit+0x473/0x1050 [ 100.732406][ T8022] genl_family_rcv_msg_doit+0x214/0x300 [ 100.732422][ T8022] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 100.732442][ T8022] ? bpf_lsm_capable+0x9/0x10 [ 100.732454][ T8022] ? security_capable+0x80/0x260 [ 100.732471][ T8022] ? ns_capable+0xd2/0xf0 [ 100.732489][ T8022] genl_rcv_msg+0x560/0x800 [ 100.732509][ T8022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.732523][ T8022] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 100.732541][ T8022] netlink_rcv_skb+0x159/0x420 [ 100.732553][ T8022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.732568][ T8022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.732586][ T8022] ? netlink_deliver_tap+0x1ae/0xcc0 [ 100.732600][ T8022] genl_rcv+0x28/0x40 [ 100.732611][ T8022] netlink_unicast+0x585/0x850 [ 100.732626][ T8022] ? __pfx_netlink_unicast+0x10/0x10 [ 100.732638][ T8022] ? __pfx_sock_has_perm+0x10/0x10 [ 100.732657][ T8022] netlink_sendmsg+0x8b0/0xda0 [ 100.732671][ T8022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.732711][ T8022] ? selinux_socket_sendmsg+0x198/0x2f0 [ 100.732740][ T8022] ____sys_sendmsg+0xa4d/0xbe0 [ 100.732760][ T8022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.732774][ T8022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.732798][ T8022] ___sys_sendmsg+0x190/0x1e0 [ 100.732811][ T8022] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.732821][ T8022] ? __lock_acquire+0x49f/0x1a40 [ 100.732837][ T8022] ? get_pid_task+0x106/0x250 [ 100.732865][ T8022] __sys_sendmsg+0x160/0x210 [ 100.732880][ T8022] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.732903][ T8022] do_syscall_64+0x115/0x870 [ 100.732920][ T8022] ? clear_bhb_loop+0x70/0xc0 [ 100.732935][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.732947][ T8022] RIP: 0033:0x7f3869f9e0d9 [ 100.732957][ T8022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.732968][ T8022] RSP: 002b:00007f386af1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.732980][ T8022] RAX: ffffffffffffffda RBX: 00007f386a225fa0 RCX: 00007f3869f9e0d9 [ 100.732987][ T8022] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 100.732994][ T8022] RBP: 00007f386af1f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.733000][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.733007][ T8022] R13: 00007f386a226038 R14: 00007f386a225fa0 R15: 00007ffc9e8409b8 [ 100.733022][ T8022] [ 100.793301][ T8020] kvm: kvm [8019]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 100.839816][ T848] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 100.840413][ T8020] kvm: kvm [8019]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 100.859264][ T8020] kvm: kvm [8019]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 100.864319][ T848] usb 6-1: Invalid ep0 maxpacket: 16 [ 100.882188][ T8020] kvm: kvm [8019]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 100.886435][ T8020] kvm: kvm [8019]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 100.999457][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 100.999470][ T42] audit: type=1400 audit(1786627584.838:853): avc: denied { create } for pid=8037 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.999896][ T42] audit: type=1400 audit(1786627584.838:854): avc: denied { listen } for pid=8037 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.003170][ T42] audit: type=1400 audit(1786627584.838:855): avc: denied { connect } for pid=8037 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.003642][ T848] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 101.040894][ T848] usb 6-1: Invalid ep0 maxpacket: 16 [ 101.045864][ T848] usb usb6-port1: unable to enumerate USB device [ 101.076248][ T42] audit: type=1400 audit(1786627584.918:856): avc: denied { append } for pid=8040 comm="syz.5.605" name="hidraw0" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.140605][ T42] audit: type=1400 audit(1786627584.978:857): avc: denied { map } for pid=8040 comm="syz.5.605" path="socket:[27887]" dev="sockfs" ino=27887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.151013][ T42] audit: type=1400 audit(1786627584.978:858): avc: denied { accept } for pid=8040 comm="syz.5.605" path="socket:[27887]" dev="sockfs" ino=27887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.223232][ T8048] CIFS mount error: No usable UNC path provided in device string! [ 101.223232][ T8048] [ 101.226221][ T8048] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.267656][ T8052] FAULT_INJECTION: forcing a failure. [ 101.267656][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.274806][ T8052] CPU: 1 UID: 0 PID: 8052 Comm: syz.3.610 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.274835][ T8052] Tainted: [L]=SOFTLOCKUP [ 101.274841][ T8052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.274852][ T8052] Call Trace: [ 101.274872][ T8052] [ 101.274880][ T8052] dump_stack_lvl+0x100/0x190 [ 101.274957][ T8052] should_fail_ex.cold+0x5/0xa [ 101.274990][ T8052] _copy_from_user+0x2e/0xd0 [ 101.275025][ T8052] kstrtouint_from_user+0xd6/0x1d0 [ 101.275042][ T8052] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 101.275060][ T8052] ? __lock_acquire+0x49f/0x1a40 [ 101.275106][ T8052] proc_fail_nth_write+0x83/0x220 [ 101.275136][ T8052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 101.275162][ T8052] vfs_write+0x2aa/0x1050 [ 101.275195][ T8052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 101.275216][ T8052] ? __pfx_vfs_write+0x10/0x10 [ 101.275231][ T8052] ? __fget_files+0x215/0x3d0 [ 101.275258][ T8052] ? __fget_files+0x21f/0x3d0 [ 101.275284][ T8052] ksys_write+0x12a/0x250 [ 101.275301][ T8052] ? __pfx_ksys_write+0x10/0x10 [ 101.275326][ T8052] do_syscall_64+0x115/0x870 [ 101.275372][ T8052] ? clear_bhb_loop+0x70/0xc0 [ 101.275393][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.275411][ T8052] RIP: 0033:0x7f055595e90e [ 101.275427][ T8052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.275443][ T8052] RSP: 002b:00007f05568e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.275468][ T8052] RAX: ffffffffffffffda RBX: 00007f05568e36c0 RCX: 00007f055595e90e [ 101.275480][ T8052] RDX: 0000000000000001 RSI: 00007f05568e30a0 RDI: 0000000000000011 [ 101.275491][ T8052] RBP: 00007f05568e3090 R08: 0000000000000000 R09: 0000000000000000 [ 101.275500][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.275510][ T8052] R13: 00007f0555c26038 R14: 00007f0555c25fa0 R15: 00007ffda069fbe8 [ 101.275536][ T8052] [ 101.703649][ T5828] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 101.803619][ T5729] Bluetooth: hci3: command tx timeout [ 101.837512][ T42] audit: type=1400 audit(1786627585.678:859): avc: denied { write } for pid=8063 comm="syz.3.615" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.837848][ T8064] random: crng reseeded on system resumption [ 101.844815][ T42] audit: type=1400 audit(1786627585.678:860): avc: denied { open } for pid=8063 comm="syz.3.615" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.855662][ T5828] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 101.865979][ T5828] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 101.869623][ T5828] usb 10-1: Product: syz [ 101.871311][ T5828] usb 10-1: Manufacturer: syz [ 101.871373][ T42] audit: type=1400 audit(1786627585.708:861): avc: denied { ioctl } for pid=8063 comm="syz.3.615" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.876665][ T5828] usb 10-1: SerialNumber: syz [ 101.882256][ T8064] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 101.884375][ T42] audit: type=1400 audit(1786627585.718:862): avc: denied { read } for pid=8065 comm="syz.0.616" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 101.892928][ T5828] usb 10-1: config 0 descriptor?? [ 101.949337][ T8073] netlink: 120 bytes leftover after parsing attributes in process `syz.3.617'. [ 102.018339][ T8078] netlink: 'syz.3.619': attribute type 3 has an invalid length. [ 102.021529][ T8078] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 102.024072][ T8078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.619'. [ 102.026917][ T8078] NCSI netlink: No device for ifindex 0 [ 102.117805][ T5828] IPVS: starting estimator thread 0... [ 102.122484][ T29] usb 10-1: USB disconnect, device number 3 [ 102.208089][ T8081] IPVS: using max 42 ests per chain, 100800 per kthread [ 102.568255][ T8103] input: syz1 as /devices/virtual/input/input9 [ 102.603785][ T5729] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.606243][ T5724] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.660231][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.5.629'. [ 102.691991][ T8114] netlink: 'syz.5.631': attribute type 1 has an invalid length. [ 102.797198][ T8125] netlink: 'syz.5.636': attribute type 1 has an invalid length. [ 102.800582][ T8125] netlink: 'syz.5.636': attribute type 1 has an invalid length. [ 102.821506][ T8129] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 102.975513][ T8143] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 102.989258][ T8146] overlay: ./file0 is not a directory [ 102.999186][ T8146] overlay: Unknown parameter '' [ 103.002666][ T8146] overlay: Unknown parameter '' [ 103.006022][ T8146] overlay: Unknown parameter '' [ 103.008529][ T8146] overlay: Unknown parameter '' [ 103.014578][ T8146] overlay: Unknown parameter '' [ 103.017545][ T8146] overlay: Unknown parameter '' [ 103.020734][ T8146] overlay: Unknown parameter '' [ 103.023311][ T8146] overlay: Unknown parameter '' [ 103.028720][ T8146] overlay: Unknown parameter '' [ 103.036375][ T8146] overlay: Unknown parameter '' [ 103.040798][ T8146] overlay: Unknown parameter '' [ 103.043590][ T8146] overlay: Unknown parameter '' [ 103.043704][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 103.051307][ T8146] overlay: Unknown parameter '' [ 103.053776][ T8146] overlay: Unknown parameter '' [ 103.056272][ T8146] overlay: Unknown parameter '' [ 103.061715][ T8146] overlay: Unknown parameter '' [ 103.064878][ T8146] overlay: Unknown parameter '' [ 103.067382][ T8146] overlay: Unknown parameter '' [ 103.069703][ T8146] overlay: Unknown parameter '' [ 103.072630][ T8146] overlay: Unknown parameter '' [ 103.077783][ T8146] overlay: Unknown parameter '' [ 103.080238][ T8146] overlay: Unknown parameter '' [ 103.091467][ T8146] overlay: Unknown parameter '' [ 103.095548][ T8146] overlay: Unknown parameter '' [ 103.103071][ T8146] overlay: Unknown parameter '' [ 103.105023][ T8141] db_root: cannot open: IMIX 'CD' 00000000000000000000 [ 103.109792][ T8146] overlay: Unknown parameter '' [ 103.112208][ T8146] overlay: Unknown parameter '' [ 103.115481][ T8146] overlay: Unknown parameter '' [ 103.118395][ T8146] overlay: Unknown parameter '' [ 103.120670][ T8146] overlay: Unknown parameter '' [ 103.123198][ T8146] overlay: Unknown parameter '' [ 103.128715][ T8146] overlay: Unknown parameter '' [ 103.131261][ T8146] overlay: Unknown parameter '' [ 103.134957][ T8146] overlay: Unknown parameter '' [ 103.138274][ T8146] overlay: Unknown parameter '' [ 103.141245][ T8146] overlay: Unknown parameter '' [ 103.144974][ T8146] overlay: Unknown parameter '' [ 103.150201][ T8146] overlay: Unknown parameter '' [ 103.152656][ T8146] overlay: Unknown parameter '' [ 103.157252][ T8146] overlay: Unknown parameter '' [ 103.160310][ T8146] overlay: Unknown parameter '' [ 103.163268][ T8146] overlay: Unknown parameter '' [ 103.168722][ T8146] overlay: Unknown parameter '' [ 103.175991][ T8146] overlay: Unknown parameter '' [ 103.184031][ T8146] overlay: Unknown parameter '' [ 103.186992][ T8146] overlay: Unknown parameter '' [ 103.191293][ T8146] overlay: Unknown parameter '' [ 103.194147][ T8146] overlay: Unknown parameter '' [ 103.199996][ T8146] overlay: Unknown parameter '' [ 103.202809][ T8146] overlay: Unknown parameter '' [ 103.205769][ T8146] overlay: Unknown parameter '' [ 103.208327][ T8146] overlay: Unknown parameter '' [ 103.210249][ T8146] overlay: Unknown parameter '' [ 103.212485][ T8146] overlay: Unknown parameter '' [ 103.214312][ T29] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 103.218555][ T8146] overlay: Unknown parameter '' [ 103.219274][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 103.224724][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 103.224989][ T8146] overlay: Unknown parameter '' [ 103.228594][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 103.235919][ T8146] overlay: Unknown parameter '' [ 103.237429][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 103.241274][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 103.241753][ T8146] overlay: Unknown parameter '' [ 103.244904][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 103.250907][ T8146] overlay: Unknown parameter '' [ 103.253521][ T8146] overlay: Unknown parameter '' [ 103.255907][ T8146] overlay: Unknown parameter '' [ 103.257059][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.261094][ T8146] overlay: Unknown parameter '' [ 103.268416][ T8146] overlay: Unknown parameter '' [ 103.270074][ T29] usb 6-1: Product: syz [ 103.274335][ T29] usb 6-1: Manufacturer: syz [ 103.277422][ T8146] overlay: Unknown parameter '' [ 103.290065][ T8155] netlink: 56 bytes leftover after parsing attributes in process `syz.0.648'. [ 103.299226][ T8148] Process accounting resumed [ 103.306423][ T8127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.311178][ T8127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.314317][ T8127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.317273][ T8127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.320221][ T8127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.324655][ T8127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.332218][ T29] usb 6-1: USB2VGA dongle found at address 8 [ 103.343999][ T29] usb 6-1: Allocated 8 output buffers [ 103.351638][ T29] usb 6-1: Failed to early initialize device [ 103.389494][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 103.393693][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 103.435533][ T8166] netlink: 'syz.3.652': attribute type 7 has an invalid length. [ 103.444793][ T8167] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 103.447327][ T8167] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.652'. [ 103.450291][ T8170] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 103.453174][ T8170] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.652'. [ 103.543957][ T848] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 103.558518][ T8127] usb 6-1: Failed to initialize device [ 103.568823][ T29] usb 6-1: USB disconnect, device number 8 [ 103.574729][ T8182] netlink: 280 bytes leftover after parsing attributes in process `syz.3.658'. [ 103.704381][ T848] usb 5-1: New USB device found, idVendor=0c52, idProduct=2223, bcdDevice=84.b4 [ 103.713669][ T848] usb 5-1: config 9 has an invalid interface number: 192 but max is 2 [ 103.717349][ T848] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 103.720778][ T848] usb 5-1: config 9 has an invalid interface number: 17 but max is 2 [ 103.723407][ T848] usb 5-1: config 9 has an invalid interface number: 34 but max is 2 [ 103.728038][ T848] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 103.731420][ T848] usb 5-1: config 9 has an invalid interface number: 162 but max is 2 [ 103.734734][ T848] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 103.737487][ T848] usb 5-1: config 9 has 4 interfaces, different from the descriptor's value: 3 [ 103.740209][ T848] usb 5-1: config 9 has no interface number 0 [ 103.742581][ T848] usb 5-1: config 9 has no interface number 1 [ 103.745544][ T848] usb 5-1: config 9 has no interface number 2 [ 103.747989][ T848] usb 5-1: config 9 has no interface number 3 [ 103.750423][ T848] usb 5-1: config 9 interface 192 altsetting 9 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 103.755445][ T848] usb 5-1: config 9 interface 192 altsetting 9 endpoint 0x8E has invalid maxpacket 512, setting to 8 [ 103.759718][ T848] usb 5-1: config 9 interface 192 altsetting 9 endpoint 0xA has invalid maxpacket 16, setting to 8 [ 103.763423][ T848] usb 5-1: config 9 interface 192 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 103.769081][ T848] usb 5-1: too many endpoints for config 9 interface 17 altsetting 60: 134, using maximum allowed: 30 [ 103.773004][ T848] usb 5-1: config 9 interface 17 altsetting 60 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 103.777556][ T848] usb 5-1: config 9 interface 17 altsetting 60 endpoint 0x8 has invalid maxpacket 1023, setting to 0 [ 103.783007][ T848] usb 5-1: config 9 interface 17 altsetting 60 has an invalid descriptor for endpoint zero, skipping [ 103.787950][ T848] usb 5-1: config 9 interface 17 altsetting 60 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 103.791679][ T848] usb 5-1: config 9 interface 17 altsetting 60 endpoint 0x3 has invalid maxpacket 16, setting to 8 [ 103.796121][ T848] usb 5-1: config 9 interface 17 altsetting 60 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 103.800433][ T848] usb 5-1: config 9 interface 17 altsetting 60 has 6 endpoint descriptors, different from the interface descriptor's value: 134 [ 103.809230][ T848] usb 5-1: config 9 interface 34 altsetting 254 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 103.813696][ T848] usb 5-1: config 9 interface 34 altsetting 254 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 103.817620][ T848] usb 5-1: config 9 interface 34 altsetting 254 has a duplicate endpoint with address 0xA, skipping [ 103.821862][ T848] usb 5-1: config 9 interface 34 altsetting 254 has a duplicate endpoint with address 0x3, skipping [ 103.825901][ T848] usb 5-1: config 9 interface 34 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 103.830111][ T848] usb 5-1: config 9 interface 34 altsetting 254 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 103.834166][ T848] usb 5-1: config 9 interface 162 altsetting 104 endpoint 0x6 has invalid maxpacket 16, setting to 8 [ 103.838154][ T848] usb 5-1: config 9 interface 162 altsetting 104 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 103.841911][ T848] usb 5-1: config 9 interface 162 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 103.846063][ T848] usb 5-1: config 9 interface 162 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 103.849841][ T848] usb 5-1: config 9 interface 162 altsetting 104 endpoint 0x7 has invalid maxpacket 1024, setting to 8 [ 103.854311][ T848] usb 5-1: config 9 interface 162 altsetting 104 has a duplicate endpoint with address 0x9, skipping [ 103.858009][ T848] usb 5-1: config 9 interface 162 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 103.862197][ T848] usb 5-1: config 9 interface 162 altsetting 104 has a duplicate endpoint with address 0x6, skipping [ 103.866051][ T848] usb 5-1: config 9 interface 162 altsetting 104 has a duplicate endpoint with address 0x3, skipping [ 103.869974][ T848] usb 5-1: config 9 interface 162 altsetting 104 has a duplicate endpoint with address 0x5, skipping [ 103.873998][ T848] usb 5-1: config 9 interface 162 altsetting 104 has a duplicate endpoint with address 0x5, skipping [ 103.877615][ T848] usb 5-1: config 9 interface 192 has no altsetting 0 [ 103.880277][ T848] usb 5-1: config 9 interface 17 has no altsetting 0 [ 103.882703][ T848] usb 5-1: config 9 interface 34 has no altsetting 0 [ 103.885098][ T848] usb 5-1: config 9 interface 162 has no altsetting 0 [ 103.889877][ T848] usb 5-1: Dual-Role OTG device on HNP port [ 103.892379][ T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.895640][ T848] usb 5-1: Product: 뺘ࠏ糏竎冟燐 [ 103.897669][ T848] usb 5-1: Manufacturer: 緥僶⤫愾䟹䂤ዚ꼳灕잱焥ꗵ늙툍꭭䈐磭㞺 [ 103.901371][ T848] usb 5-1: SerialNumber: ࠇ [ 104.095113][ T8202] openvswitch: netlink: IP tunnel dst address not specified [ 104.132855][ T8207] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 104.133400][ T848] ftdi_sio 5-1:9.192: FTDI USB Serial Device converter detected [ 104.140510][ T848] ftdi_sio ttyUSB0: unknown device type: 0x84b4 [ 104.166516][ T848] ftdi_sio 5-1:9.17: FTDI USB Serial Device converter detected [ 104.177179][ T848] ftdi_sio ttyUSB1: unknown device type: 0x84b4 [ 104.182890][ T848] ftdi_sio 5-1:9.34: FTDI USB Serial Device converter detected [ 104.190074][ T848] ftdi_sio ttyUSB2: unknown device type: 0x84b4 [ 104.210243][ T848] ftdi_sio 5-1:9.162: FTDI USB Serial Device converter detected [ 104.215577][ T848] ftdi_sio ttyUSB3: unknown device type: 0x84b4 [ 104.224469][ T848] usb 5-1: USB disconnect, device number 6 [ 104.230833][ T848] ftdi_sio 5-1:9.192: device disconnected [ 104.242785][ T848] ftdi_sio 5-1:9.17: device disconnected [ 104.259494][ T848] ftdi_sio 5-1:9.34: device disconnected [ 104.265473][ T848] ftdi_sio 5-1:9.162: device disconnected [ 104.385242][ T8223] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.542336][ T8231] No source specified [ 104.543878][ T8231] No source specified [ 104.545324][ T8231] No source specified [ 104.546710][ T8231] No source specified [ 104.548177][ T8231] No source specified [ 104.548444][ T8230] comedi comedi1: comedi_config --init_data is deprecated [ 104.549632][ T8231] No source specified [ 104.619661][ T8237] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 104.695358][ T8237] netlink: 56 bytes leftover after parsing attributes in process `syz.1.677'. [ 104.908929][ T8260] kAFS: Can only specify source 'none' with -o dyn [ 104.980155][ T8265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8265 comm=syz.0.686 [ 104.990029][ T8265] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 105.045605][ T8275] IPv6: sit2: Disabled Multicast RS [ 105.198102][ T8288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.463640][ T1037] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 105.624299][ T1037] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 105.629291][ T1037] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 105.632867][ T1037] usb 5-1: config 0 has no interface number 0 [ 105.635556][ T1037] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.640090][ T1037] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 105.644723][ T1037] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 105.649508][ T1037] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 105.654454][ T1037] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.659881][ T1037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.669658][ T1037] usb 5-1: config 0 descriptor?? [ 105.673294][ T8288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.676489][ T8288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.690842][ T1037] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 105.723574][ T848] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 105.884286][ T848] usb 6-1: Using ep0 maxpacket: 32 [ 105.886662][ T848] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 105.893117][ T848] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 105.898249][ T848] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 105.904207][ T848] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 105.904908][ T8288] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 105.911599][ T848] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 105.914357][ T29] usb 5-1: USB disconnect, device number 7 [ 105.916512][ T848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 105.921819][ T848] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 105.924771][ T848] usb 6-1: Product: syz [ 105.926111][ T848] usb 6-1: Manufacturer: syz [ 105.926826][ T29] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 105.927631][ T848] usb 6-1: SerialNumber: syz [ 105.944132][ T848] usb 6-1: config 0 descriptor?? [ 105.950027][ T848] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 105.965552][ T848] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 105.984452][ T5770] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 106.031317][ T42] kauditd_printk_skb: 163 callbacks suppressed [ 106.031337][ T42] audit: type=1400 audit(1786627589.868:1026): avc: denied { create } for pid=8315 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.041374][ T42] audit: type=1400 audit(1786627589.878:1027): avc: denied { prog_run } for pid=8315 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.047657][ T42] audit: type=1400 audit(1786627589.888:1028): avc: denied { mounton } for pid=8315 comm="syz.5.702" path="/116/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 106.054988][ T42] audit: type=1400 audit(1786627589.888:1029): avc: denied { mount } for pid=8315 comm="syz.5.702" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.063612][ T42] audit: type=1400 audit(1786627589.898:1030): avc: denied { unmount } for pid=6651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.074402][ T42] audit: type=1400 audit(1786627589.918:1031): avc: denied { read write } for pid=6651 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.082290][ T42] audit: type=1400 audit(1786627589.918:1032): avc: denied { open } for pid=6651 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.091420][ T42] audit: type=1400 audit(1786627589.918:1033): avc: denied { ioctl } for pid=6651 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.099519][ T42] audit: type=1400 audit(1786627589.928:1034): avc: denied { read } for pid=8317 comm="syz.5.703" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 106.104320][ T5770] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 106.106569][ T42] audit: type=1400 audit(1786627589.928:1035): avc: denied { open } for pid=8317 comm="syz.5.703" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 106.153105][ T5828] usb 6-1: USB disconnect, device number 9 [ 106.153164][ C3] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 106.163153][ T5828] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 106.340943][ T8331] program syz.5.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.483294][ T8337] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 106.580224][ T8345] [U] V3Fپ"S/4:XTZWTLW= [ 106.583992][ T8344] [U] J"E:" [ 106.671521][ T8350] overlayfs: maximum fs stacking depth exceeded [ 106.680027][ T8350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.684456][ T8352] team0 (unregistering): Port device team_slave_0 removed [ 106.691533][ T8352] team0 (unregistering): Port device team_slave_1 removed [ 107.067765][ T8366] validate_nla: 1 callbacks suppressed [ 107.067804][ T8366] netlink: 'syz.3.720': attribute type 4 has an invalid length. [ 107.130590][ T8375] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 107.146733][ T8375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.150562][ T8375] __nla_validate_parse: 3 callbacks suppressed [ 107.150574][ T8375] netlink: 44 bytes leftover after parsing attributes in process `syz.1.722'. [ 107.151795][ T8376] netlink: 44 bytes leftover after parsing attributes in process `syz.1.722'. [ 107.162971][ T8375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.722'. [ 107.201182][ T8383] netlink: 48 bytes leftover after parsing attributes in process `syz.3.724'. [ 107.204824][ T8383] netlink: 48 bytes leftover after parsing attributes in process `syz.3.724'. [ 107.324759][ T8392] netlink: 'syz.3.729': attribute type 2 has an invalid length. [ 107.335794][ T8392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8392 comm=syz.3.729 [ 107.903193][ T8450] netlink: 'syz.3.749': attribute type 11 has an invalid length. [ 107.904141][ T8445] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 107.947356][ T8453] syzkaller1: entered promiscuous mode [ 107.949693][ T8453] syzkaller1: entered allmulticast mode [ 108.069800][ T8459] evm: overlay not supported [ 108.070653][ T8459] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 108.086714][ T8459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.098975][ T8459] bond3: (slave geneve2): Opening slave failed [ 108.473185][ T8492] FAULT_INJECTION: forcing a failure. [ 108.473185][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 108.473276][ T8492] CPU: 3 UID: 0 PID: 8492 Comm: syz.1.759 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.473301][ T8492] Tainted: [L]=SOFTLOCKUP [ 108.473307][ T8492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.473324][ T8492] Call Trace: [ 108.473356][ T8492] [ 108.473363][ T8492] dump_stack_lvl+0x100/0x190 [ 108.473521][ T8492] should_fail_ex.cold+0x5/0xa [ 108.473575][ T8492] should_failslab+0xc2/0x120 [ 108.473633][ T8492] __kmalloc_noprof+0xfc/0x820 [ 108.473652][ T8492] ? rcu_is_watching+0x12/0xc0 [ 108.473700][ T8492] ? tomoyo_realpath_from_path+0xb6/0x690 [ 108.473759][ T8492] tomoyo_realpath_from_path+0xb6/0x690 [ 108.473780][ T8492] tomoyo_path_number_perm+0x23c/0x580 [ 108.473802][ T8492] ? tomoyo_path_number_perm+0x22e/0x580 [ 108.473826][ T8492] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.473874][ T8492] ? find_held_lock+0x2b/0x80 [ 108.473898][ T8492] ? __fget_files+0x215/0x3d0 [ 108.473922][ T8492] ? hook_file_ioctl_common+0x140/0x440 [ 108.473940][ T8492] ? __fget_files+0x215/0x3d0 [ 108.473966][ T8492] ? __fget_files+0x21f/0x3d0 [ 108.473988][ T8492] security_file_ioctl+0xd3/0x230 [ 108.474028][ T8492] __x64_sys_ioctl+0xb7/0x210 [ 108.474055][ T8492] do_syscall_64+0x115/0x870 [ 108.474106][ T8492] ? clear_bhb_loop+0x70/0xc0 [ 108.474127][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.474145][ T8492] RIP: 0033:0x7f36c0d9e0d9 [ 108.474159][ T8492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.474174][ T8492] RSP: 002b:00007f36c1d07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.474205][ T8492] RAX: ffffffffffffffda RBX: 00007f36c1025fa0 RCX: 00007f36c0d9e0d9 [ 108.474216][ T8492] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000003 [ 108.474226][ T8492] RBP: 00007f36c1d07090 R08: 0000000000000000 R09: 0000000000000000 [ 108.474235][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.474244][ T8492] R13: 00007f36c1026038 R14: 00007f36c1025fa0 R15: 00007ffd51168748 [ 108.474269][ T8492] [ 108.475168][ T8492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.529667][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.761'. [ 108.541863][ T8495] MTD: Couldn't look up '/dev/sg0': -15 [ 108.610419][ T8495] /dev/sg0: Can't lookup blockdev [ 108.620932][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.700569][ T8507] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 108.705575][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 108.719893][ T8507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 108.731646][ T8507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.763'. [ 108.749916][ T8512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.836815][ T8512] Illegal XDP return value 2187188308 on prog (id 58) dev N/A, expect packet loss! [ 108.953938][ T3258] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 109.089131][ T8529] FAULT_INJECTION: forcing a failure. [ 109.089131][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 109.096200][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.0.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.096219][ T8529] Tainted: [L]=SOFTLOCKUP [ 109.096224][ T8529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.096238][ T8529] Call Trace: [ 109.096256][ T8529] [ 109.096261][ T8529] dump_stack_lvl+0x100/0x190 [ 109.096339][ T8529] should_fail_ex.cold+0x5/0xa [ 109.096373][ T8529] should_failslab+0xc2/0x120 [ 109.096417][ T8529] __kmalloc_noprof+0xfc/0x820 [ 109.096432][ T8529] ? tomoyo_encode2+0xfb/0x3c0 [ 109.096468][ T8529] tomoyo_encode2+0xfb/0x3c0 [ 109.096480][ T8529] tomoyo_encode+0x29/0x50 [ 109.096490][ T8529] tomoyo_realpath_from_path+0x18c/0x690 [ 109.096505][ T8529] tomoyo_path_number_perm+0x23c/0x580 [ 109.096520][ T8529] ? tomoyo_path_number_perm+0x22e/0x580 [ 109.096538][ T8529] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.096569][ T8529] ? find_held_lock+0x2b/0x80 [ 109.096593][ T8529] ? __fget_files+0x215/0x3d0 [ 109.096612][ T8529] ? hook_file_ioctl_common+0x140/0x440 [ 109.096625][ T8529] ? __fget_files+0x215/0x3d0 [ 109.096639][ T8529] ? __fget_files+0x21f/0x3d0 [ 109.096677][ T8529] security_file_ioctl+0xd3/0x230 [ 109.096709][ T8529] __x64_sys_ioctl+0xb7/0x210 [ 109.096730][ T8529] do_syscall_64+0x115/0x870 [ 109.096753][ T8529] ? clear_bhb_loop+0x70/0xc0 [ 109.096769][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.096781][ T8529] RIP: 0033:0x7f5a51d9e0d9 [ 109.096791][ T8529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.096802][ T8529] RSP: 002b:00007f5a52be9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.096821][ T8529] RAX: ffffffffffffffda RBX: 00007f5a52025fa0 RCX: 00007f5a51d9e0d9 [ 109.096828][ T8529] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000003 [ 109.096835][ T8529] RBP: 00007f5a52be9090 R08: 0000000000000000 R09: 0000000000000000 [ 109.096842][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.096848][ T8529] R13: 00007f5a52026038 R14: 00007f5a52025fa0 R15: 00007ffc43c63648 [ 109.096864][ T8529] [ 109.096876][ T8529] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.133739][ T3258] usb 8-1: Using ep0 maxpacket: 32 [ 109.180613][ T3258] usb 8-1: unable to get BOS descriptor or descriptor too short [ 109.183310][ T3258] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 109.189403][ T3258] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.197270][ T3258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.200739][ T3258] usb 8-1: Product: syz [ 109.202300][ T3258] usb 8-1: Manufacturer: syz [ 109.204151][ T3258] usb 8-1: SerialNumber: syz [ 109.425369][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 109.487275][ T8544] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.519471][ T3258] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.522568][ T3258] usb 8-1: MIDIStreaming interface descriptor not found [ 109.574657][ T3258] usb 8-1: USB disconnect, device number 11 [ 109.648692][ T8555] Failed to initialize the IGMP autojoin socket (err -2) [ 109.707513][ T8544] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.724602][ T8560] FAULT_INJECTION: forcing a failure. [ 109.724602][ T8560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.728963][ T8560] CPU: 0 UID: 0 PID: 8560 Comm: syz.5.780 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.728988][ T8560] Tainted: [L]=SOFTLOCKUP [ 109.728994][ T8560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.729004][ T8560] Call Trace: [ 109.729011][ T8560] [ 109.729022][ T8560] dump_stack_lvl+0x100/0x190 [ 109.729048][ T8560] should_fail_ex.cold+0x5/0xa [ 109.729068][ T8560] _copy_from_user+0x2e/0xd0 [ 109.729103][ T8560] set_selection_user+0x88/0x140 [ 109.729160][ T8560] ? __pfx_set_selection_user+0x10/0x10 [ 109.729177][ T8560] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.729207][ T8560] tioclinux+0x1b0/0x640 [ 109.729226][ T8560] vt_ioctl+0x145d/0x3150 [ 109.729250][ T8560] ? __pfx_vt_ioctl+0x10/0x10 [ 109.729273][ T8560] ? find_held_lock+0x2b/0x80 [ 109.729293][ T8560] ? tomoyo_path_number_perm+0x188/0x580 [ 109.729319][ T8560] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.729339][ T8560] ? __pfx_vt_ioctl+0x10/0x10 [ 109.729360][ T8560] tty_ioctl+0x26a/0x1640 [ 109.729379][ T8560] ? __pfx_tty_ioctl+0x10/0x10 [ 109.729397][ T8560] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 109.729425][ T8560] ? __fget_files+0x215/0x3d0 [ 109.729440][ T8560] ? hook_file_ioctl_common+0x140/0x440 [ 109.729461][ T8560] ? selinux_file_ioctl+0x13b/0x290 [ 109.729482][ T8560] ? selinux_file_ioctl+0xb6/0x290 [ 109.729503][ T8560] ? __pfx_tty_ioctl+0x10/0x10 [ 109.729521][ T8560] __x64_sys_ioctl+0x18e/0x210 [ 109.729544][ T8560] do_syscall_64+0x115/0x870 [ 109.729565][ T8560] ? clear_bhb_loop+0x70/0xc0 [ 109.729583][ T8560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.729598][ T8560] RIP: 0033:0x7f3869f9e0d9 [ 109.729611][ T8560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.729625][ T8560] RSP: 002b:00007f386af1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.729639][ T8560] RAX: ffffffffffffffda RBX: 00007f386a225fa0 RCX: 00007f3869f9e0d9 [ 109.729658][ T8560] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000003 [ 109.729666][ T8560] RBP: 00007f386af1f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.729675][ T8560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.729683][ T8560] R13: 00007f386a226038 R14: 00007f386a225fa0 R15: 00007ffc9e8409b8 [ 109.729702][ T8560] [ 109.887184][ T8544] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.000719][ T8544] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.219904][ T8590] selection: kmalloc() failed [ 110.264399][ T8593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.792'. [ 110.268839][ T8593] Falling back ldisc for ttyS3. [ 110.273858][ T5821] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.281056][ T5821] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.286974][ T5821] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.292060][ T5821] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.366034][ T8601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.563647][ T8612] FAULT_INJECTION: forcing a failure. [ 110.563647][ T8612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.569887][ T8612] CPU: 0 UID: 0 PID: 8612 Comm: syz.3.800 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.569908][ T8612] Tainted: [L]=SOFTLOCKUP [ 110.569913][ T8612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.569920][ T8612] Call Trace: [ 110.569935][ T8612] [ 110.569942][ T8612] dump_stack_lvl+0x100/0x190 [ 110.569999][ T8612] should_fail_ex.cold+0x5/0xa [ 110.570021][ T8612] _copy_to_user+0x32/0xd0 [ 110.570049][ T8612] simple_read_from_buffer+0xcb/0x170 [ 110.570069][ T8612] proc_fail_nth_read+0x1af/0x230 [ 110.570098][ T8612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.570118][ T8612] ? rw_verify_area+0xce/0x6d0 [ 110.570135][ T8612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.570154][ T8612] vfs_read+0x1e4/0xb40 [ 110.570174][ T8612] ? __pfx_vfs_read+0x10/0x10 [ 110.570191][ T8612] ? __fget_files+0x215/0x3d0 [ 110.570207][ T8612] ? __fget_files+0x21f/0x3d0 [ 110.570223][ T8612] ksys_read+0x12a/0x250 [ 110.570233][ T8612] ? __pfx_ksys_read+0x10/0x10 [ 110.570247][ T8612] do_syscall_64+0x115/0x870 [ 110.570283][ T8612] ? clear_bhb_loop+0x70/0xc0 [ 110.570297][ T8612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.570310][ T8612] RIP: 0033:0x7f055595e90e [ 110.570320][ T8612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.570331][ T8612] RSP: 002b:00007f05568e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.570348][ T8612] RAX: ffffffffffffffda RBX: 00007f05568e36c0 RCX: 00007f055595e90e [ 110.570355][ T8612] RDX: 000000000000000f RSI: 00007f05568e30a0 RDI: 0000000000000005 [ 110.570362][ T8612] RBP: 00007f05568e3090 R08: 0000000000000000 R09: 0000000000000000 [ 110.570368][ T8612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.570375][ T8612] R13: 00007f0555c26038 R14: 00007f0555c25fa0 R15: 00007ffda069fbe8 [ 110.570390][ T8612] [ 110.640201][ T5875] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 110.658602][ T8614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.813600][ T8626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8626 comm=syz.3.805 [ 110.825172][ T5875] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.40 [ 110.831705][ T5875] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 110.836942][ T5875] usb 5-1: config 1 interface 0 altsetting 16 has an endpoint descriptor with address 0x95, changing to 0x85 [ 110.841828][ T5875] usb 5-1: config 1 interface 0 altsetting 16 endpoint 0x85 has an invalid bInterval 216, changing to 4 [ 110.847951][ T5875] usb 5-1: config 1 interface 0 altsetting 16 endpoint 0x85 has invalid maxpacket 3580, setting to 1023 [ 110.852636][ T5875] usb 5-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.858361][ T5875] usb 5-1: config 1 interface 0 has no altsetting 0 [ 110.863339][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.867601][ T5875] usb 5-1: Product: ࠐ [ 110.869448][ T5875] usb 5-1: Manufacturer: 䚒⭍䉘㲚펿꣟뮦妰럑쐶෽㞚졠햲梍鳹㎧⨏ꨝ䯽⇌㬴텢䇇⠠꬀砡齉쨖⧯⚲채ૺ㴒쁣ⴠꖯ㛀꯯뀆椐曺䅚넓䦵ᎊ핚넔ᄑ軏珸⻵緵㽄ꮡﻔ俍ౡ醋쏉䵸㎣藦休월鸑悱⥝墨ᦡ︯垩ゼ쾭蘢쎳⡎샚兖ꄦ黬솄챨祖ὄ워仔穆⥢᱃礴ꡏꃻ䦽䝣嵚A [ 110.894392][ T5875] usb 5-1: SerialNumber: ည [ 110.973912][ T3258] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 111.100581][ T42] kauditd_printk_skb: 321 callbacks suppressed [ 111.100665][ T42] audit: type=1400 audit(1786627594.938:1357): avc: denied { create } for pid=8632 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.105139][ T8633] xfrm0 speed is unknown, defaulting to 1000 [ 111.112563][ T42] audit: type=1400 audit(1786627594.938:1358): avc: denied { write } for pid=8632 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.115535][ T5875] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 111.121081][ T8633] xfrm0 speed is unknown, defaulting to 1000 [ 111.137236][ T5875] usb 5-1: USB disconnect, device number 8 [ 111.139720][ T42] audit: type=1400 audit(1786627594.978:1359): avc: denied { create } for pid=8634 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.150609][ T3258] usb 10-1: unable to get BOS descriptor or descriptor too short [ 111.153296][ T3258] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 111.158154][ T3258] usb 10-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.169695][ T8633] xfrm0 speed is unknown, defaulting to 1000 [ 111.169986][ T3258] usb 10-1: string descriptor 0 read error: -22 [ 111.173351][ T42] audit: type=1400 audit(1786627595.008:1360): avc: denied { create } for pid=8632 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.175140][ T3258] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.184146][ T8633] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 111.193136][ T8633] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 111.200610][ T8633] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 111.213953][ T8633] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.219145][ T8633] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 111.247376][ T8633] xfrm0 speed is unknown, defaulting to 1000 [ 111.251036][ T8633] xfrm0 speed is unknown, defaulting to 1000 [ 111.254574][ T8633] xfrm0 speed is unknown, defaulting to 1000 [ 111.257895][ T8633] xfrm0 speed is unknown, defaulting to 1000 [ 111.284583][ T42] audit: type=1400 audit(1786627595.128:1361): avc: denied { unmount } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 111.317784][ T42] audit: type=1400 audit(1786627595.158:1362): avc: denied { create } for pid=8637 comm="syz.1.811" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.330977][ T42] audit: type=1400 audit(1786627595.158:1363): avc: denied { ioctl } for pid=8637 comm="syz.1.811" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34089 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.331096][ T8640] binder: 8638:8640 ioctl c0306201 200000000100 returned -14 [ 111.341844][ T42] audit: type=1400 audit(1786627595.158:1364): avc: denied { read } for pid=8638 comm="syz.3.810" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 111.353068][ T8640] binder: 8638:8640 ioctl 1269 200000000300 returned -22 [ 111.354391][ T42] audit: type=1400 audit(1786627595.158:1365): avc: denied { open } for pid=8638 comm="syz.3.810" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 111.364235][ T42] audit: type=1400 audit(1786627595.158:1366): avc: denied { read } for pid=8638 comm="syz.3.810" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 112.583292][ T8669] JFS: discard option not supported on device [ 112.588468][ T8669] Mount JFS Failure: -5 [ 112.590001][ T8669] jfs_mount failed w/return code = -5 [ 112.718568][ T8688] netlink: 'syz.0.823': attribute type 1 has an invalid length. [ 112.731973][ T8688] bond5: entered promiscuous mode [ 112.734632][ T8688] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.751098][ T8688] bond5: (slave bridge1): making interface the new active one [ 112.753766][ T8688] bridge1: entered promiscuous mode [ 112.756879][ T8688] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 113.073728][ T8701] devpts: Unknown parameter 'wlan0' [ 113.158521][ T8706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.186228][ T8706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.267440][ T8715] comedi comedi0: unsupported base address 0xa1 [ 113.473834][ T8727] __nla_validate_parse: 1 callbacks suppressed [ 113.473852][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.839'. [ 113.654610][ T8742] fuse: Bad value for 'user_id' [ 113.656489][ T8742] fuse: Bad value for 'user_id' [ 113.782778][ T8756] netlink: 'syz.3.847': attribute type 5 has an invalid length. [ 113.788809][ T8756] ip6erspan0: entered promiscuous mode [ 113.949882][ T8772] jffs2: notice: (8772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 114.065661][ T8784] netlink: Conntrack attr has 8 unknown bytes [ 114.067703][ T8784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.137432][ T8796] binder: BINDER_SET_CONTEXT_MGR already set [ 114.142353][ T8796] binder: 8795:8796 ioctl 4018620d 2000000002c0 returned -16 [ 114.403680][ T848] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.431248][ T8817] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.565561][ T848] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 114.570279][ T848] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 114.577564][ T848] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12608, setting to 1024 [ 114.582625][ T848] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 114.586961][ T848] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.593945][ T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 114.597148][ T848] usb 5-1: Product: syz [ 114.598898][ T848] usb 5-1: Manufacturer: syz [ 114.605380][ T8798] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.609549][ T848] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 114.625559][ T848] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 114.803611][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 114.815632][ T5875] usb 5-1: USB disconnect, device number 9 [ 114.825341][ T5875] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 114.829213][ T5875] garmin_gps 5-1:1.0: device disconnected [ 114.953580][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 114.957964][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.962563][ T24] usb 6-1: config 1 interface 0 altsetting 201 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 114.966409][ T24] usb 6-1: config 1 interface 0 altsetting 201 bulk endpoint 0x82 has invalid maxpacket 16 [ 114.969992][ T24] usb 6-1: config 1 interface 0 altsetting 201 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.974916][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 114.978960][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.982132][ T24] usb 6-1: Product: 稕訠ᑺઃ牕זּ鎊酀㱦迁졣た땞⛶቏蘆뵌仏楔帜뛰鸛๩賤ⳛ⒉饌쫎쩙砢炿‬ꗫ쨭яⲳ๢粵뷮継顨ᙤ從᥆乄ຑ꙾料쉜籒㌟糴쐭ࢽ勞る䩛Ä議삐ϕ馠䷽儙讶々傒с뫟錟㜨か⇑孻蟜ഺ銨焧櫋꣊픾᪐춏州퇡 [ 114.992234][ T24] usb 6-1: Manufacturer: 耋傌⁽闈뵕섃뻾Ԣ䍿怬頋Ҏẹ䬃㎒濥ဓ᷾끐톜姳푝粀Ỳꏅ马䱐蔱϶磀㗴뭌鿶䇕欫싉ꥷ챫蔸ಇ断␐튷ꋴ붶妣부勞Ε鍆ྒྷ峭ᇚ࿪峧䪶㯴僭ﾙ쪃釙岃࠘橰疪탯荰ꆖ뷽ჯ⛒⬠䮕 [ 115.001541][ T24] usb 6-1: SerialNumber: 㐊 [ 115.009790][ T8823] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 115.013283][ T8823] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 115.225800][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 115.241902][ T24] usb 6-1: USB disconnect, device number 10 [ 115.348512][ T8838] x_tables: ip6_tables: CHECKSUM target: only valid in mangle table, not syz1 [ 115.525360][ T8865] bpf: Bad value for 'uid' [ 115.655683][ T8869] tmpfs: Unknown parameter '' [ 115.843846][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 115.993570][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 116.000505][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 116.007483][ T9] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 116.009776][ T8887] f2fs: Unknown parameter 'usrquotar' [ 116.011895][ T9] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 116.019545][ T9] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.024523][ T9] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 116.033628][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.036198][ T9] usb 8-1: Product: syz [ 116.037526][ T9] usb 8-1: Manufacturer: syz [ 116.039050][ T9] usb 8-1: SerialNumber: syz [ 116.052246][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 116.066340][ T8892] netlink: 'syz.0.885': attribute type 2 has an invalid length. [ 116.067819][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input11 [ 116.068992][ T8892] netlink: 224 bytes leftover after parsing attributes in process `syz.0.885'. [ 116.108075][ T8892] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.111087][ T8892] overlayfs: failed to set xattr on upper [ 116.113413][ T8892] overlayfs: ...falling back to redirect_dir=nofollow. [ 116.116404][ T8892] overlayfs: ...falling back to metacopy=off. [ 116.120827][ T8892] overlayfs: ...falling back to index=off. [ 116.123180][ T8892] overlayfs: ...falling back to uuid=null. [ 116.128392][ T42] kauditd_printk_skb: 303 callbacks suppressed [ 116.128454][ T42] audit: type=1400 audit(1786627599.968:1670): avc: denied { mount } for pid=8891 comm="syz.0.885" name="/" dev="overlay" ino=34766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.179975][ T42] audit: type=1400 audit(1786627600.018:1671): avc: denied { create } for pid=8896 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.226134][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.888'. [ 116.238904][ T42] audit: type=1400 audit(1786627600.078:1672): avc: denied { nlmsg_read } for pid=8900 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 116.247769][ T42] audit: type=1400 audit(1786627600.088:1673): avc: denied { ioctl } for pid=8866 comm="syz.3.877" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.265940][ T9] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 116.271237][ T9] (id 0x00) [ 116.278373][ T42] audit: type=1400 audit(1786627600.118:1674): avc: denied { watch watch_reads } for pid=8903 comm="syz.0.889" path="/247" dev="tmpfs" ino=1375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.285609][ T42] audit: type=1400 audit(1786627600.118:1675): avc: denied { read write } for pid=8903 comm="syz.0.889" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.296724][ T42] audit: type=1400 audit(1786627600.118:1676): avc: denied { watch } for pid=8903 comm="syz.0.889" path="/247/bus" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.306096][ T42] audit: type=1400 audit(1786627600.118:1677): avc: denied { watch_sb watch_reads } for pid=8903 comm="syz.0.889" path="/247/bus" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.313996][ T42] audit: type=1400 audit(1786627600.118:1678): avc: denied { open } for pid=8903 comm="syz.0.889" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.333620][ T9] rc_core: IR keymap rc-imon-pad not found [ 116.335618][ T9] Registered IR keymap rc-empty [ 116.337550][ T9] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 116.340831][ T9] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 116.478961][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 116.484269][ T42] audit: type=1400 audit(1786627600.328:1679): avc: denied { create } for pid=8908 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.485064][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input12 [ 116.489660][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 116.504563][ T9] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:12> initialized [ 116.515717][ T5828] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.674735][ T5828] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.680231][ T5828] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.684595][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.689174][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.693204][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.700747][ T5828] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.704128][ T5828] usb 5-1: Manufacturer: syz [ 116.709383][ T5828] usb 5-1: config 0 descriptor?? [ 116.798413][ T8915] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 116.987647][ T8919] netlink: 'syz.1.894': attribute type 7 has an invalid length. [ 116.991578][ T8919] netlink: 'syz.1.894': attribute type 5 has an invalid length. [ 116.995311][ T8919] netlink: 17 bytes leftover after parsing attributes in process `syz.1.894'. [ 117.095923][ T8620] usb 10-1: 1:1: usb_set_interface failed (-110) [ 117.108901][ T5799] usb 10-1: USB disconnect, device number 4 [ 117.147296][ T5828] usbhid 5-1:0.0: can't add hid device: -71 [ 117.153688][ T5828] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 117.161221][ T5828] usb 5-1: USB disconnect, device number 10 [ 117.299928][ T8939] ata1.00: invalid cdb length 6 [ 117.386871][ T8945] block nbd0: NBD_DISCONNECT [ 117.393920][ T8946] block nbd0: Disconnected due to user request. [ 117.397149][ T8946] block nbd0: shutting down sockets [ 117.586020][ T8966] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.671353][ T8971] 9pnet_virtio: no channels available for device 127.0.0.1 [ 117.698247][ T8975] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.707286][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.910'. [ 117.712373][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.910'. [ 117.715645][ T8975] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 118.556678][ T9] usb 8-1: USB disconnect, device number 12 [ 118.690441][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 118.692704][ T9031] loop4: detected capacity change from 0 to 7 [ 118.693365][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 118.705131][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 118.707557][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 118.716700][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.720727][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.727029][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.731180][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.734073][ T5875] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 118.737615][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.741900][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.747605][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.751297][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.754398][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.757506][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.761087][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.764421][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.804692][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 118.807577][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 118.810500][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 118.881892][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.931'. [ 118.894694][ T5875] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.899597][ T5875] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 118.904448][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.908926][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.912886][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.918862][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.926448][ T5875] usb 5-1: config 0 descriptor?? [ 118.989049][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 118.991852][ T9043] netlink: 'syz.5.931': attribute type 10 has an invalid length. [ 118.995824][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 119.006298][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 119.009866][ T9043] geneve2: entered promiscuous mode [ 119.011719][ T9043] geneve2: entered allmulticast mode [ 119.143548][ T9] usb 8-1: device descriptor read/64, error -71 [ 119.336707][ T5875] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 119.360418][ T5875] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.384398][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 119.405328][ T9070] pim6reg1: entered promiscuous mode [ 119.407135][ T9070] pim6reg1: entered allmulticast mode [ 119.524301][ T9] usb 8-1: device descriptor read/64, error -71 [ 119.536582][ T5799] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.547849][ T5799] hid-generic 0000:0000:0000.0003: hidraw2: HID v0.00 Device [syz1] on syz0 [ 119.576849][ T9073] fido_id[9073]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 119.633870][ T9] usb usb8-port1: attempt power cycle [ 119.778706][ T9020] gadgetfs: bound to dummy_udc driver [ 119.875670][ T5799] usb 5-1: USB disconnect, device number 11 [ 119.977028][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 119.999098][ T9093] Failed to initialize the IGMP autojoin socket (err -2) [ 120.005001][ T9] usb 8-1: device descriptor read/8, error -71 [ 120.011756][ T9097] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 120.150846][ T9113] netlink: 'syz.5.954': attribute type 4 has an invalid length. [ 120.154397][ T9113] netlink: 'syz.5.954': attribute type 8 has an invalid length. [ 120.157664][ T9113] netlink: 212 bytes leftover after parsing attributes in process `syz.5.954'. [ 120.243861][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 120.261232][ T9122] tmpfs: Bad value for 'mpol' [ 120.267529][ T9122] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 120.270813][ T9122] iwpm_hello_cb: Unable to parse nlmsg [ 120.270961][ T9] usb 8-1: device descriptor read/8, error -71 [ 120.384118][ T9] usb usb8-port1: unable to enumerate USB device [ 121.134350][ T42] kauditd_printk_skb: 287 callbacks suppressed [ 121.134368][ T42] audit: type=1400 audit(1786627860.979:1967): avc: denied { write } for pid=9137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.171004][ T9141] macvtap1: entered allmulticast mode [ 121.173418][ T9141] bond0: entered allmulticast mode [ 121.176168][ T9141] bond_slave_0: entered allmulticast mode [ 121.178972][ T9141] bond_slave_1: entered allmulticast mode [ 121.182108][ T9141] bond_slave_0: entered promiscuous mode [ 121.187248][ T9141] bond_slave_1: entered promiscuous mode [ 121.195745][ T9141] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 121.206687][ T9141] bond0: left allmulticast mode [ 121.211199][ T9141] bond_slave_0: left allmulticast mode [ 121.213225][ T42] audit: type=1400 audit(1786627861.049:1968): avc: denied { read } for pid=9144 comm="syz.5.962" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.216469][ T9141] bond_slave_1: left allmulticast mode [ 121.224546][ T9145] binder: BINDER_SET_CONTEXT_MGR already set [ 121.228805][ T42] audit: type=1400 audit(1786627861.049:1969): avc: denied { open } for pid=9144 comm="syz.5.962" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.236911][ T9145] binder: 9144:9145 ioctl 4018620d 200000000280 returned -16 [ 121.239855][ T9145] binder: 9144:9145 ioctl c0306201 200000000240 returned -11 [ 121.245241][ T42] audit: type=1400 audit(1786627861.059:1970): avc: denied { write } for pid=9142 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.247439][ T9147] netlink: 'syz.1.960': attribute type 30 has an invalid length. [ 121.262674][ T42] audit: type=1400 audit(1786627861.059:1971): avc: denied { ioctl } for pid=9144 comm="syz.5.962" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.273591][ T42] audit: type=1400 audit(1786627861.059:1972): avc: denied { set_context_mgr } for pid=9144 comm="syz.5.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 121.280197][ T42] audit: type=1400 audit(1786627861.059:1973): avc: denied { map } for pid=9144 comm="syz.5.962" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.288082][ T42] audit: type=1400 audit(1786627861.069:1974): avc: denied { prog_load } for pid=9143 comm="syz.0.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.293550][ T42] audit: type=1400 audit(1786627861.069:1975): avc: denied { bpf } for pid=9143 comm="syz.0.961" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.300375][ T42] audit: type=1400 audit(1786627861.069:1976): avc: denied { perfmon } for pid=9143 comm="syz.0.961" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.301013][ T9154] netlink: 'syz.1.960': attribute type 30 has an invalid length. [ 121.305670][ T9153] netlink: 'syz.0.961': attribute type 2 has an invalid length. [ 121.320504][ T5875] bond_slave_0: left promiscuous mode [ 121.323505][ T5875] bond_slave_1: left promiscuous mode [ 121.623868][ T9187] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 121.694016][ T55] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 121.729522][ T9195] netlink: 'syz.1.972': attribute type 2 has an invalid length. [ 121.833395][ T9212] uhci_hcd 0000:00:1d.0: remove, state 4 [ 121.836330][ T9212] usb usb2: USB disconnect, device number 1 [ 121.845990][ T55] usb 10-1: Using ep0 maxpacket: 16 [ 121.852478][ T55] usb 10-1: New USB device found, idVendor=0b05, idProduct=1b4c, bcdDevice= 0.40 [ 121.860108][ T55] usb 10-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 121.863860][ T55] usb 10-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.868104][ T55] usb 10-1: config 1 interface 0 has no altsetting 0 [ 121.874610][ T9212] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 121.879035][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.882685][ T55] usb 10-1: Product: І [ 121.884341][ T55] usb 10-1: Manufacturer: ᠉ [ 121.886233][ T55] usb 10-1: SerialNumber: ꁳ梠㧝޲듘☨铉㾞牮ꄅ熀੗⻳㵋ᴾಏ栧짇ﺨ袭⃝눣㎾痌⤘ौ字쏘౱킍橵ꖺ઱߽령Ο蒲≮좒㘜氻镲驩㠦⨵宦狗ꎬ䷴ߟ㏇᭠졻ځ [ 121.902232][ T55] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 121.906826][ T55] usb 10-1: no configuration chosen from 1 choice [ 121.971361][ T9220] syzkaller0: entered promiscuous mode [ 121.973214][ T9220] syzkaller0: entered allmulticast mode [ 121.991426][ T9219] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 122.000195][ T9219] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 122.016505][ T9219] pci 0000:00:1d.0: Adding to iommu group 7 [ 122.027422][ T9219] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 122.079521][ T9219] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 47488 usecs [ 122.090576][ T9222] binder: BINDER_SET_CONTEXT_MGR already set [ 122.093144][ T9222] binder: 9221:9222 ioctl 4018620d 200000000080 returned -16 [ 122.114569][ T9219] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 122.124541][ T9219] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 122.128143][ T9219] uhci_hcd 0000:00:1d.0: detected 2 ports [ 122.134850][ T9219] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 122.140522][ T9219] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 122.144935][ T9219] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 122.148769][ T9219] usb usb2: Product: UHCI Host Controller [ 122.150630][ T9219] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 122.152696][ T9219] usb usb2: SerialNumber: 0000:00:1d.0 [ 122.177002][ T9219] hub 2-0:1.0: USB hub found [ 122.182500][ T9219] hub 2-0:1.0: 2 ports detected [ 122.373612][ T5729] Bluetooth: hci3: command 0x0405 tx timeout [ 122.565082][ T5821] bond2: (slave syz_tun): link status up again after 0 ms [ 122.569770][ T5821] bond2: (slave syz_tun): failed to get link speed/duplex [ 122.684484][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 122.761334][ T9265] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input14 [ 122.803583][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 122.913629][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 123.023650][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 123.133636][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 123.244135][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 123.353628][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 123.463704][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 123.968805][ T9330] ntfs3(sr0): Primary boot signature is not NTFS. [ 123.972087][ T9330] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 124.124786][ T9345] input: syz0 as /devices/virtual/input/input15 [ 124.135287][ T9345] libceph: resolve '4' (ret=-3): failed [ 124.152678][ T7237] udevd[7237]: setting mode of /dev/input/event2 to 020660 failed: No such file or directory [ 124.157119][ T7237] udevd[7237]: setting owner of /dev/input/event2 to uid=0, gid=104 failed: No such file or directory [ 124.193587][ T9355] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 124.195851][ T9355] __nla_validate_parse: 8 callbacks suppressed [ 124.195873][ T9355] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1025'. [ 124.234905][ T9358] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 124.241460][ T9358] exFAT-fs (nullb0): invalid boot record signature [ 124.243854][ T9358] exFAT-fs (nullb0): failed to read boot sector [ 124.246103][ T9358] exFAT-fs (nullb0): failed to recognize exfat type [ 124.299976][ T9360] wireguard: wg2: Could not create IPv4 socket [ 124.448127][ T9353] jffs2: notice: (9353) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 124.449651][ T9372] netlink: 'syz.3.1033': attribute type 11 has an invalid length. [ 124.460670][ T5799] usb 10-1: USB disconnect, device number 5 [ 124.475094][ T9372] Failed to initialize the IGMP autojoin socket (err -2) [ 124.542526][ T9376] IPVS: Error during creation of socket; terminating [ 124.583175][ T9379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.609118][ T9382] trusted_key: encrypted_key: hex blob is missing [ 124.646308][ T9384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.655662][ T9379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.664778][ T9379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.876389][ T9408] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 124.886877][ T9406] SELinux: ebitmap start bit (8390656) is beyond the end of the bitmap (1088) [ 124.893648][ T9406] SELinux: invalid class [ 124.897461][ T9408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.897689][ T9406] SELinux: failed to load policy [ 125.077749][ T9421] cgroup: none used incorrectly [ 125.109325][ T9426] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1050'. [ 125.205580][ T9441] binder: 9436:9441 ioctl c018620c 200000000040 returned -1 [ 125.233951][ T5830] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 125.395546][ T5830] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.400127][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 198, changing to 11 [ 125.408169][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26471, setting to 1024 [ 125.418608][ T5830] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.424761][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.437186][ T5830] usb 6-1: config 0 descriptor?? [ 125.440337][ T9419] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.538827][ T9460] Failed to initialize the IGMP autojoin socket (err -2) [ 125.708224][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 125.711922][ T9474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1065'. [ 125.729655][ T9474] geneve2: entered promiscuous mode [ 125.731693][ T9474] geneve2: entered allmulticast mode [ 125.856437][ T5830] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 125.874601][ T5830] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 126.014264][ T3258] e1000 0000:00:06.0 eth0: Reset adapter [ 126.133040][ T1037] usb 6-1: USB disconnect, device number 11 [ 126.143591][ T42] kauditd_printk_skb: 402 callbacks suppressed [ 126.143606][ T42] audit: type=1400 audit(1786627865.979:2379): avc: denied { connect } for pid=9501 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.161147][ T42] audit: type=1400 audit(1786627865.989:2380): avc: denied { accept } for pid=9501 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.169377][ T42] audit: type=1400 audit(1786627865.989:2381): avc: denied { write } for pid=9501 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.169488][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 126.175846][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880372ba400: rx timeout, send abort [ 126.183952][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880372ba400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.200154][ T3258] e1000 0000:00:06.0 eth0: Reset adapter [ 126.215734][ T42] audit: type=1400 audit(1786627866.009:2382): avc: denied { write } for pid=9506 comm="syz.3.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.223088][ T42] audit: type=1400 audit(1786627866.019:2383): avc: denied { read } for pid=5114 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 126.232442][ T42] audit: type=1400 audit(1786627866.019:2384): avc: denied { search } for pid=5114 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.241998][ T42] audit: type=1400 audit(1786627866.019:2385): avc: denied { write search } for pid=5114 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.249957][ T42] audit: type=1400 audit(1786627866.019:2386): avc: denied { add_name } for pid=5114 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.258346][ T42] audit: type=1400 audit(1786627866.019:2387): avc: denied { create } for pid=5114 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.273866][ T42] audit: type=1400 audit(1786627866.019:2388): avc: denied { append open } for pid=5114 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.573677][ T5770] net_ratelimit: 36 callbacks suppressed [ 127.573695][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 127.683648][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 127.803963][ T12] bond2: (slave syz_tun): failed to get link speed/duplex [ 127.913735][ T12] bond2: (slave syz_tun): failed to get link speed/duplex [ 128.023569][ T12] bond2: (slave syz_tun): failed to get link speed/duplex [ 128.133798][ T12] bond2: (slave syz_tun): failed to get link speed/duplex [ 128.253969][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 128.364047][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 128.365077][ T40] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 128.473698][ T12] bond2: (slave syz_tun): failed to get link speed/duplex [ 128.583750][ T12] bond2: (slave syz_tun): failed to get link speed/duplex [ 129.188391][ T9541] rdma_rxe: Failed to create IPv4 UDP tunnel [ 129.280292][ T9548] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1078'. [ 129.386588][ T9559] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1082'. [ 129.391481][ T9560] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1082'. [ 129.427938][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 129.462930][ T9565] tipc: Enabling of bearer rejected, failed to enable media [ 129.563845][ T9578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9578 comm=syz.5.1087 [ 129.606587][ T9582] jffs2: notice: (9582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 129.621550][ T9582] program syz.0.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.917856][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1094'. [ 130.044849][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.119704][ T9611] tmpfs: Bad value for 'mpol' [ 130.184429][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1098'. [ 130.204460][ T9] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 130.208351][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 130.211760][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 130.217707][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.220471][ T9] usb 5-1: Product: syz [ 130.222104][ T9] usb 5-1: Manufacturer: syz [ 130.223920][ T9] usb 5-1: SerialNumber: syz [ 130.228195][ T9601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.230534][ T9601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.234824][ T9] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 130.238632][ T9] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 130.242314][ T9] usbserial_generic 5-1:1.0: generic converter detected [ 130.260296][ T9] usb 5-1: generic converter now attached to ttyUSB0 [ 130.371040][ T9630] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1103'. [ 130.371097][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.376366][ T9630] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1103'. [ 130.381868][ T9630] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1103'. [ 130.386070][ T9630] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1103'. [ 130.433930][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.436971][ T5875] usb 5-1: USB disconnect, device number 12 [ 130.443849][ T5875] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 130.448689][ T5875] usbserial_generic 5-1:1.0: device disconnected [ 130.466998][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.492330][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.506048][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.532348][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.540968][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.549471][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.576326][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.581186][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.588898][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.595352][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.606607][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.615112][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.630432][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.641860][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.649463][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.661134][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.675824][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.686569][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.695264][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.709952][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.730545][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.741636][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.757218][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.762389][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.776140][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.786383][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.791537][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.798229][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.803725][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.808287][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.817689][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.825912][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.836683][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.842671][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.850970][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.865960][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.870663][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.877657][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.884987][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.888618][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 130.896083][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.907565][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.914933][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.934364][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.939841][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.950020][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.955317][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.959281][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.971022][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.976463][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.988468][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.001253][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.011432][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.020148][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.031998][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.037449][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.048638][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.054597][ T9] usb 8-1: Product: syz [ 131.056005][ T9] usb 8-1: Manufacturer: syz [ 131.059588][ T9] usb 8-1: SerialNumber: syz [ 131.066697][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.098064][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.106197][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.117675][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.123076][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.125858][ T1037] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.140670][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.149851][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.160450][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.165493][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.221303][ T5729] Bluetooth: hci3: unexpected cc 0x200b length: 2 > 1 [ 131.221468][ T42] kauditd_printk_skb: 197 callbacks suppressed [ 131.221487][ T42] audit: type=1400 audit(1786627871.059:2586): avc: denied { ioctl } for pid=9664 comm="syz.5.1112" path="socket:[40791]" dev="sockfs" ino=40791 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.224923][ T5729] Bluetooth: hci3: unexpected event for opcode 0x200b [ 131.228074][ T42] audit: type=1400 audit(1786627871.059:2587): avc: denied { accept } for pid=9664 comm="syz.5.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.284802][ T9668] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 131.288214][ T42] audit: type=1400 audit(1786627871.129:2588): avc: denied { append } for pid=9673 comm="syz.0.1114" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 131.288572][ T42] audit: type=1400 audit(1786627871.129:2589): avc: denied { create } for pid=9671 comm="syz.5.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.305547][ T42] audit: type=1400 audit(1786627871.129:2590): avc: denied { write } for pid=9671 comm="syz.5.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.312177][ T42] audit: type=1400 audit(1786627871.129:2591): avc: denied { create } for pid=9673 comm="syz.0.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 131.313870][ T9668] bond5 (unregistering): Released all slaves [ 131.318886][ T42] audit: type=1400 audit(1786627871.139:2592): avc: denied { module_request } for pid=9673 comm="syz.0.1114" kmod="net-pf-16-proto-14" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 131.330583][ T42] audit: type=1400 audit(1786627871.149:2593): avc: denied { map_create } for pid=9671 comm="syz.5.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.332916][ T5875] usb 8-1: USB disconnect, device number 17 [ 131.339104][ T42] audit: type=1400 audit(1786627871.149:2594): avc: denied { write } for pid=9671 comm="syz.5.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.349272][ T42] audit: type=1400 audit(1786627871.149:2595): avc: denied { read } for pid=9671 comm="syz.5.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.372222][ T9672] program syz.5.1115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.546117][ T9639] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 131.550059][ T9639] syzkaller1: linktype set to 776 [ 131.627608][ T9699] ata1.00: invalid cdb length 6 [ 131.847318][ T9704] FAT-fs (nullb0): bogus number of reserved sectors [ 131.854215][ T9704] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 131.875191][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b1e15a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 131.881212][ C0] Call Trace: [ 131.882663][ C0] [ 131.883902][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 131.886714][ C0] ? sched_clock_cpu+0x6c/0x570 [ 131.888809][ C0] ? lockdep_softirqs_on+0xad/0x120 [ 131.890976][ C0] ? handle_softirqs+0x835/0x9b0 [ 131.893064][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 131.895298][ C0] mce_cpu_restart+0xd5/0x1f0 [ 131.897305][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 131.899808][ C0] __sysvec_call_function+0x81/0x420 [ 131.902057][ C0] sysvec_call_function+0x9e/0xc0 [ 131.904180][ C0] [ 131.905438][ C0] [ 131.906699][ C0] asm_sysvec_call_function+0x1a/0x20 [ 131.908800][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 131.911127][ C0] Code: 55 8c 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 cf 10 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 131.918740][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202 [ 131.921237][ C0] RAX: 0000000000145945 RBX: ffffffff8e891480 RCX: ffffffff8bbad335 [ 131.924230][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a9419 RDI: ffffffff8c400480 [ 131.927304][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d [ 131.930452][ C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000 [ 131.933716][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 131.936933][ C0] ? ct_kernel_exit+0x125/0x180 [ 131.938842][ C0] default_idle+0x9/0x10 [ 131.940635][ C0] default_idle_call+0x6c/0xb0 [ 131.942646][ C0] do_idle+0x3a7/0x5b0 [ 131.944360][ C0] ? __pfx_do_idle+0x10/0x10 [ 131.946335][ C0] cpu_startup_entry+0x4f/0x60 [ 131.948464][ C0] rest_init+0x251/0x260 [ 131.950061][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 131.952394][ C0] start_kernel+0x48e/0x490 [ 131.954347][ C0] x86_64_start_reservations+0x24/0x30 [ 131.956639][ C0] x86_64_start_kernel+0x12b/0x130 [ 131.958814][ C0] common_startup_64+0x13e/0x158 [ 131.960932][ C0] [ 132.089939][ T9718] overlayfs: failed to resolve 'subj_type=}': -2 [ 132.214063][ T1037] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 132.240150][ T1037] ath9k_htc: Failed to initialize the device [ 132.255188][ T5875] usb 8-1: ath9k_htc: USB layer deinitialized [ 132.296419][ T65] block nbd3: Receive control failed (result -32) [ 132.385273][ T7237] block nbd3: shutting down sockets [ 132.516582][ T9725] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.521879][ T9725] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.642209][ T9735] netlink: 'syz.1.1132': attribute type 2 has an invalid length. [ 132.656483][ T5770] net_ratelimit: 34 callbacks suppressed [ 132.656501][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 132.698504][ T9725] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.702786][ T9725] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.742327][ T9737] netlink: 'syz.0.1133': attribute type 9 has an invalid length. [ 132.819389][ T9725] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.828762][ T9725] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.853880][ T5821] bond2: (slave syz_tun): failed to get link speed/duplex [ 132.958024][ T9725] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.962380][ T9725] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.998043][ T9762] netlink: 'syz.1.1132': attribute type 39 has an invalid length. [ 133.017632][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.019894][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.022841][ T9762] hsr_slave_0 (unregistering): left promiscuous mode [ 133.063699][ T5821] bond2: (slave syz_tun): failed to get link speed/duplex [ 133.159398][ T5821] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.163125][ T5821] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.204886][ T5821] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.207684][ T5821] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.213538][ T5821] bond2: (slave syz_tun): failed to get link speed/duplex [ 133.239323][ T5821] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.242756][ T5821] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.263857][ T5821] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.273530][ T5821] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.325898][ T5821] bond2: (slave syz_tun): failed to get link speed/duplex [ 133.433600][ T5821] bond2: (slave syz_tun): failed to get link speed/duplex [ 133.514766][ T9784] overlay: ./file0 is not a directory [ 133.553618][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 133.663702][ T5821] bond2: (slave syz_tun): failed to get link speed/duplex [ 133.776441][ T9806] openvswitch: netlink: IP tunnel dst address not specified [ 133.783730][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 133.939360][ T9814] gretap0: entered promiscuous mode [ 134.105606][ T40] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 134.183315][ T9855] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 134.254425][ T40] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 134.258108][ T40] usb 5-1: Dual-Role OTG device on HNP port [ 134.260197][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.281524][ T40] gspca_main: spca501-2.14.0 probing 0000:0000 [ 134.290148][ T40] gspca_spca501: reg write: error -32 [ 134.292312][ T40] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 134.294917][ T40] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 134.295089][ T9851] kvm: pic: level sensitive irq not supported [ 134.295623][ T9868] __nla_validate_parse: 64 callbacks suppressed [ 134.295638][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'. [ 134.368971][ T9855] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 134.385645][ T9868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.396216][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 134.498221][ T9879] program syz.3.1176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.613334][ T9891] device-mapper: ioctl: Unable to rename non-existent device, to B [ 134.670038][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1183'. [ 134.791331][ T9907] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 134.830407][ T9907] 8021q: adding VLAN 0 to HW filter on device bond6 [ 134.868574][ T9907] bond6: (slave dummy0): making interface the new active one [ 134.871951][ T9907] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 134.884502][ T9907] netlink: 'syz.0.1186': attribute type 10 has an invalid length. [ 134.888825][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1186'. [ 134.895318][ T9907] dummy0: entered promiscuous mode [ 134.899243][ T9907] bond6: (slave dummy0): Releasing active interface [ 135.180241][ T9945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=922 sclass=netlink_route_socket pid=9945 comm=syz.0.1198 [ 135.227950][ T9950] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 135.230374][ T9950] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1200'. [ 135.401498][ T9965] random: crng reseeded on system resumption [ 135.479403][ T9968] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 135.482769][ T9968] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 135.486804][ T9968] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 135.489879][ T9968] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 135.818175][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 135.821871][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1210'. [ 135.825860][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 135.829514][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1210'. [ 135.875154][ T9983] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 135.891613][ T9983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.910755][ T9983] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 135.918396][ T9983] Invalid argument reading file caps for ./file0 [ 135.969155][ T9988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1213'. [ 136.045165][ T9993] 9pnet_fd: p9_fd_create_unix (9993): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.052590][ T9993] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 136.086966][ T9993] CIFS mount error: No usable UNC path provided in device string! [ 136.086966][ T9993] [ 136.090994][ T9993] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 136.223850][ T42] kauditd_printk_skb: 369 callbacks suppressed [ 136.223877][ T42] audit: type=1400 audit(1786627876.069:2965): avc: denied { read } for pid=10004 comm="syz.5.1218" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.246598][ T42] audit: type=1400 audit(1786627876.069:2966): avc: denied { open } for pid=10004 comm="syz.5.1218" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.259810][ T42] audit: type=1400 audit(1786627876.079:2967): avc: denied { ioctl } for pid=10004 comm="syz.5.1218" path="/dev/comedi2" dev="devtmpfs" ino=1301 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.284627][ T42] audit: type=1400 audit(1786627876.079:2968): avc: denied { bind } for pid=10004 comm="syz.5.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.291582][ T42] audit: type=1400 audit(1786627876.109:2969): avc: denied { create } for pid=10004 comm="syz.5.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 136.317929][ T42] audit: type=1400 audit(1786627876.159:2970): avc: denied { read write } for pid=10014 comm="syz.3.1220" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.340483][ T42] audit: type=1400 audit(1786627876.159:2971): avc: denied { open } for pid=10014 comm="syz.3.1220" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.356579][ T42] audit: type=1400 audit(1786627876.159:2972): avc: denied { getopt } for pid=10014 comm="syz.3.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.383763][ T42] audit: type=1400 audit(1786627876.189:2973): avc: denied { mmap_zero } for pid=10019 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 136.394134][ T42] audit: type=1400 audit(1786627876.199:2974): avc: denied { setopt } for pid=10019 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.908257][T10061] tmpfs: Unknown parameter ': ls~ *_z|iءW[f׳ƿ[TY' [ 136.912824][T10059] loop5: detected capacity change from 0 to 7 [ 136.920031][T10059] Dev loop5: unable to read RDB block 7 [ 136.921910][T10059] loop5: AHDI p2 [ 136.923222][T10059] loop5: partition table partially beyond EOD, truncated [ 136.975793][T10065] tmpfs: Bad value for 'mpol' [ 137.279962][T10080] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.438105][T10086] loop5: detected capacity change from 0 to 7 [ 137.451494][T10086] loop5: p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 137.451627][T10086] loop5: partition table partially beyond EOD, truncated [ 137.506773][ T5799] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 137.654226][ T5799] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.662432][ T5799] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.666359][ T5799] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.669653][ T5799] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.676785][ T5799] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.679922][ T5799] usb 8-1: Product: syz [ 137.681593][ T5799] usb 8-1: Manufacturer: syz [ 137.683572][ T5799] usb 8-1: SerialNumber: syz [ 137.693345][ T5799] usb 8-1: config 0 descriptor?? [ 137.753737][ T13] net_ratelimit: 36 callbacks suppressed [ 137.753754][ T13] bond2: (slave syz_tun): failed to get link speed/duplex [ 137.864028][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 137.910975][T10072] i2c i2c-0: delete_device: Extra parameters [ 137.933926][T10072] netlink: 'syz.3.1238': attribute type 12 has an invalid length. [ 137.965713][ T5799] usb 8-1: USB disconnect, device number 18 [ 137.986368][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 138.094171][ T13] bond2: (slave syz_tun): failed to get link speed/duplex [ 138.203656][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 138.314323][ T13] bond2: (slave syz_tun): failed to get link speed/duplex [ 138.423757][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 138.533723][ T5770] bond2: (slave syz_tun): failed to get link speed/duplex [ 138.643912][ T13] bond2: (slave syz_tun): failed to get link speed/duplex [ 138.753622][ T5798] bond2: (slave syz_tun): failed to get link speed/duplex [ 138.754671][T10113] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 138.812204][ T8554] udevd[8554]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 138.812791][ T6494] udevd[6494]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 138.815622][ T5722] udevd[5722]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 138.820203][ T7237] udevd[7237]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 138.825237][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop5p8, 10) failed: No such file or directory [ 138.829209][ T5727] udevd[5727]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 138.874819][T10117] udevd[10117]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 138.891575][T10118] udevd[10118]: inotify_add_watch(7, /dev/loop5p10, 10) failed: No such file or directory [ 138.903764][T10121] udevd[10121]: inotify_add_watch(7, /dev/loop5p12, 10) failed: No such file or directory [ 138.928069][T10119] udevd[10119]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory [ 139.145346][ T3258] usb 5-1: USB disconnect, device number 13 [ 139.519929][ T3258] ================================================================== [ 139.522892][ T3258] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 [ 139.526155][ T3258] Write of size 8 at addr ffff888061d70350 by task kworker/1:2/3258 [ 139.531276][ T3258] [ 139.532916][ T3258] CPU: 1 UID: 0 PID: 3258 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.532934][ T3258] Tainted: [L]=SOFTLOCKUP [ 139.532938][ T3258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.532957][ T3258] Workqueue: usb_hub_wq hub_event [ 139.532997][ T3258] Call Trace: [ 139.533008][ T3258] [ 139.533013][ T3258] dump_stack_lvl+0x100/0x190 [ 139.533062][ T3258] print_report+0x13d/0x4b0 [ 139.533092][ T3258] ? __virt_addr_valid+0x239/0x430 [ 139.533115][ T3258] ? snd_usb_midi_v2_free+0x52d/0x670 [ 139.533128][ T3258] kasan_report+0xdf/0x1c0 [ 139.533163][ T3258] ? snd_usb_midi_v2_free+0x52d/0x670 [ 139.533177][ T3258] snd_usb_midi_v2_free+0x52d/0x670 [ 139.533189][ T3258] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 139.533214][ T3258] snd_usb_midi_v2_free_all+0x85/0xe0 [ 139.533232][ T3258] snd_usb_audio_free+0x4e/0x120 [ 139.533250][ T3258] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 139.533265][ T3258] release_card_device+0xb2/0x1a0 [ 139.533275][ T3258] ? __pfx_release_card_device+0x10/0x10 [ 139.533286][ T3258] device_release+0xd2/0x270 [ 139.533321][ T3258] kobject_put+0x1f7/0x640 [ 139.533364][ T3258] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 139.533376][ T3258] put_device+0x1f/0x30 [ 139.533386][ T3258] snd_card_free_when_closed+0x2b/0x40 [ 139.533397][ T3258] usb_audio_disconnect+0x210/0x680 [ 139.533414][ T3258] usb_unbind_interface+0x1dd/0x9e0 [ 139.533432][ T3258] ? __pfx_usb_unbind_interface+0x10/0x10 [ 139.533448][ T3258] device_remove+0x12a/0x180 [ 139.533462][ T3258] device_release_driver_internal+0x44e/0x620 [ 139.533479][ T3258] bus_remove_device+0x2bc/0x560 [ 139.533492][ T3258] ? __pfx_bus_remove_device+0x10/0x10 [ 139.533504][ T3258] ? __pfx_device_remove_attrs+0x10/0x10 [ 139.533518][ T3258] device_del+0x376/0x9b0 [ 139.533532][ T3258] ? __pfx_device_del+0x10/0x10 [ 139.533545][ T3258] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 139.533562][ T3258] usb_disable_device+0x367/0x810 [ 139.533575][ T3258] ? mark_held_locks+0x40/0x70 [ 139.533592][ T3258] usb_disconnect+0x2e2/0x9a0 [ 139.533607][ T3258] hub_event+0x1bb1/0x4420 [ 139.533626][ T3258] ? __lock_acquire+0x49f/0x1a40 [ 139.533639][ T3258] ? do_raw_spin_unlock+0x145/0x1e0 [ 139.533656][ T3258] ? __pfx_hub_event+0x10/0x10 [ 139.533669][ T3258] ? debug_object_deactivate+0x2e4/0x3b0 [ 139.533715][ T3258] ? rcu_is_watching+0x12/0xc0 [ 139.533741][ T3258] process_one_work+0xa23/0x1940 [ 139.533764][ T3258] ? __pfx_process_one_work+0x10/0x10 [ 139.533778][ T3258] ? __pfx_hub_event+0x10/0x10 [ 139.533792][ T3258] worker_thread+0x5ef/0xe50 [ 139.533806][ T3258] ? __pfx_worker_thread+0x10/0x10 [ 139.533819][ T3258] ? kthread+0x13a/0x450 [ 139.533830][ T3258] ? __pfx_worker_thread+0x10/0x10 [ 139.533856][ T3258] kthread+0x370/0x450 [ 139.533866][ T3258] ? __pfx_kthread+0x10/0x10 [ 139.533877][ T3258] ret_from_fork+0x72b/0xd50 [ 139.533900][ T3258] ? __pfx_ret_from_fork+0x10/0x10 [ 139.533916][ T3258] ? __switch_to+0x800/0x10f0 [ 139.533928][ T3258] ? __pfx_kthread+0x10/0x10 [ 139.533939][ T3258] ret_from_fork_asm+0x1a/0x30 [ 139.533960][ T3258] [ 139.533964][ T3258] [ 139.647687][ T3258] Allocated by task 40: [ 139.649385][ T3258] kasan_save_stack+0x30/0x50 [ 139.651297][ T3258] kasan_save_track+0x14/0x30 [ 139.652916][ T3258] __kasan_kmalloc+0xaa/0xb0 [ 139.654397][ T3258] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 139.656486][ T3258] snd_ump_endpoint_new+0x93/0x470 [ 139.658574][ T3258] create_midi2_ump+0x2dd/0x920 [ 139.660565][ T3258] snd_usb_midi_v2_create+0x11fa/0x4070 [ 139.662565][ T3258] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 139.664843][ T3258] usb_audio_probe+0xf05/0x3b10 [ 139.666380][ T3258] usb_probe_interface+0x303/0x8f0 [ 139.668275][ T3258] really_probe+0x241/0xa60 [ 139.670109][ T3258] __driver_probe_device+0x20e/0x450 [ 139.671796][ T3258] driver_probe_device+0x4a/0x140 [ 139.673544][ T3258] __device_attach_driver+0x1df/0x320 [ 139.675671][ T3258] bus_for_each_drv+0x159/0x1e0 [ 139.677278][ T3258] __device_attach+0x1e4/0x4d0 [ 139.678849][ T3258] device_initial_probe+0xaf/0xd0 [ 139.680890][ T3258] bus_probe_device+0x64/0x160 [ 139.682676][ T3258] device_add+0x121d/0x1970 [ 139.684106][ T3258] usb_set_configuration+0xd97/0x1c60 [ 139.686022][ T3258] usb_generic_driver_probe+0xa1/0xe0 [ 139.688164][ T3258] usb_probe_device+0xef/0x400 [ 139.689783][ T3258] really_probe+0x241/0xa60 [ 139.691228][ T3258] __driver_probe_device+0x20e/0x450 [ 139.693300][ T3258] driver_probe_device+0x4a/0x140 [ 139.695305][ T3258] __device_attach_driver+0x1df/0x320 [ 139.697125][ T3258] bus_for_each_drv+0x159/0x1e0 [ 139.698694][ T3258] __device_attach+0x1e4/0x4d0 [ 139.700642][ T3258] device_initial_probe+0xaf/0xd0 [ 139.702584][ T3258] bus_probe_device+0x64/0x160 [ 139.704097][ T3258] device_add+0x121d/0x1970 [ 139.705734][ T3258] usb_new_device.part.0+0xcc2/0x1686 [ 139.707882][ T3258] hub_event.cold+0x1e3/0xe90 [ 139.709567][ T3258] process_one_work+0xa23/0x1940 [ 139.711134][ T3258] worker_thread+0x5ef/0xe50 [ 139.712912][ T3258] kthread+0x370/0x450 [ 139.714541][ T3258] ret_from_fork+0x72b/0xd50 [ 139.716255][ T3258] ret_from_fork_asm+0x1a/0x30 [ 139.717761][ T3258] [ 139.718623][ T3258] Freed by task 3258: [ 139.720213][ T3258] kasan_save_stack+0x30/0x50 [ 139.722102][ T3258] kasan_save_track+0x14/0x30 [ 139.723621][ T3258] kasan_save_free_info+0x3b/0x70 [ 139.725846][ T3258] __kasan_slab_free+0x5f/0x80 [ 139.727759][ T3258] kfree+0x22b/0x6c0 [ 139.729330][ T3258] snd_rawmidi_dev_free+0x3e/0x60 [ 139.730920][ T3258] __snd_device_free+0x1a3/0x300 [ 139.732637][ T3258] snd_device_free_all+0xf3/0x220 [ 139.734647][ T3258] release_card_device+0x77/0x1a0 [ 139.736418][ T3258] device_release+0xd2/0x270 [ 139.737884][ T3258] kobject_put+0x1f7/0x640 [ 139.739666][ T3258] put_device+0x1f/0x30 [ 139.741261][ T3258] snd_card_free_when_closed+0x2b/0x40 [ 139.742924][ T3258] usb_audio_disconnect+0x210/0x680 [ 139.744807][ T3258] usb_unbind_interface+0x1dd/0x9e0 [ 139.746688][ T3258] device_remove+0x12a/0x180 [ 139.748525][ T3258] device_release_driver_internal+0x44e/0x620 [ 139.750469][ T3258] bus_remove_device+0x2bc/0x560 [ 139.752413][ T3258] device_del+0x376/0x9b0 [ 139.754143][ T3258] usb_disable_device+0x367/0x810 [ 139.755933][ T3258] usb_disconnect+0x2e2/0x9a0 [ 139.757369][ T3258] hub_event+0x1bb1/0x4420 [ 139.758975][ T3258] process_one_work+0xa23/0x1940 [ 139.760962][ T3258] worker_thread+0x5ef/0xe50 [ 139.762511][ T3258] kthread+0x370/0x450 [ 139.763786][ T3258] ret_from_fork+0x72b/0xd50 [ 139.765546][ T3258] ret_from_fork_asm+0x1a/0x30 [ 139.767450][ T3258] [ 139.768334][ T3258] The buggy address belongs to the object at ffff888061d70000 [ 139.768334][ T3258] which belongs to the cache kmalloc-4k of size 4096 [ 139.773178][ T3258] The buggy address is located 848 bytes inside of [ 139.773178][ T3258] freed 4096-byte region [ffff888061d70000, ffff888061d71000) [ 139.777767][ T3258] [ 139.778768][ T3258] The buggy address belongs to the physical page: [ 139.780973][ T3258] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61d70 [ 139.784007][ T3258] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 139.787071][ T3258] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 139.790287][ T3258] page_type: f5(slab) [ 139.791897][ T3258] raw: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 139.794723][ T3258] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 139.797938][ T3258] head: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 139.800888][ T3258] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 139.803988][ T3258] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 139.807197][ T3258] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 139.810061][ T3258] page dumped because: kasan: bad access detected [ 139.812588][ T3258] page_owner tracks the page as allocated [ 139.814682][ T3258] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5727, tgid 5727 (udevd), ts 59001278517, free_ts 58998755298 [ 139.821861][ T3258] post_alloc_hook+0xfd/0x120 [ 139.823696][ T3258] get_page_from_freelist+0xf48/0x3530 [ 139.825867][ T3258] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 139.828231][ T3258] new_slab+0xa2/0x640 [ 139.829889][ T3258] refill_objects+0xe3/0x410 [ 139.831741][ T3258] __pcs_replace_empty_main+0x376/0x680 [ 139.833954][ T3258] __kmalloc_noprof+0x66d/0x820 [ 139.835872][ T3258] tomoyo_realpath_from_path+0xb6/0x690 [ 139.837700][ T3258] tomoyo_check_open_permission+0x2af/0x3c0 [ 139.839712][ T3258] tomoyo_file_open+0x6b/0x90 [ 139.841611][ T3258] security_file_open+0xb5/0x1e0 [ 139.843593][ T3258] do_dentry_open+0x588/0x14d0 [ 139.845243][ T3258] vfs_open+0x82/0x3f0 [ 139.846525][ T3258] path_openat+0x2873/0x4280 [ 139.848394][ T3258] do_file_open+0x20e/0x430 [ 139.850228][ T3258] do_sys_openat2+0x10f/0x1e0 [ 139.851968][ T3258] page last free pid 5727 tgid 5727 stack trace: [ 139.854733][ T3258] __free_frozen_pages+0x79f/0x1090 [ 139.856863][ T3258] qlist_free_all+0x47/0xf0 [ 139.858700][ T3258] kasan_quarantine_reduce+0x1a0/0x1f0 [ 139.860394][ T3258] __kasan_slab_alloc+0x69/0x90 [ 139.862257][ T3258] __kmalloc_noprof+0x2bf/0x820 [ 139.864204][ T3258] inotify_handle_inode_event+0x1a5/0x6a0 [ 139.866503][ T3258] inotify_ignored_and_remove_idr+0x28/0x70 [ 139.868928][ T3258] fsnotify_free_mark+0xec/0x150 [ 139.870966][ T3258] __x64_sys_inotify_rm_watch+0x112/0x1a0 [ 139.873217][ T3258] do_syscall_64+0x115/0x870 [ 139.874953][ T3258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.877309][ T3258] [ 139.878338][ T3258] Memory state around the buggy address: [ 139.880567][ T3258] ffff888061d70200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.883729][ T3258] ffff888061d70280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.886570][ T3258] >ffff888061d70300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.889635][ T3258] ^ [ 139.892300][ T3258] ffff888061d70380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.895500][ T3258] ffff888061d70400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.898667][ T3258] ================================================================== [ 139.953650][ T3258] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.956224][ T3258] CPU: 1 UID: 0 PID: 3258 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.960416][ T3258] Tainted: [L]=SOFTLOCKUP [ 139.962174][ T3258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.966276][ T3258] Workqueue: usb_hub_wq hub_event [ 139.968319][ T3258] Call Trace: [ 139.969675][ T3258] [ 139.970808][ T3258] dump_stack_lvl+0x100/0x190 [ 139.972317][ T3258] vpanic+0x552/0x970 [ 139.973652][ T3258] ? __pfx_vpanic+0x10/0x10 [ 139.975089][ T3258] ? mark_held_locks+0x40/0x70 [ 139.976601][ T3258] ? snd_usb_midi_v2_free+0x52d/0x670 [ 139.978304][ T3258] panic+0xd1/0xe0 [ 139.979524][ T3258] ? __pfx_panic+0x10/0x10 [ 139.980954][ T3258] ? snd_usb_midi_v2_free+0x52d/0x670 [ 139.982633][ T3258] ? preempt_schedule_common+0x42/0xc0 [ 139.984335][ T3258] ? check_panic_on_warn+0x1f/0x90 [ 139.986052][ T3258] check_panic_on_warn.cold+0x19/0x34 [ 139.987725][ T3258] end_report.part.0+0x3a/0x90 [ 139.989384][ T3258] kasan_report.cold+0xe/0x18 [ 139.990878][ T3258] ? snd_usb_midi_v2_free+0x52d/0x670 [ 139.992585][ T3258] snd_usb_midi_v2_free+0x52d/0x670 [ 139.994231][ T3258] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 139.996046][ T3258] snd_usb_midi_v2_free_all+0x85/0xe0 [ 139.997782][ T3258] snd_usb_audio_free+0x4e/0x120 [ 139.999458][ T3258] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 140.001212][ T3258] release_card_device+0xb2/0x1a0 [ 140.002783][ T3258] ? __pfx_release_card_device+0x10/0x10 [ 140.004538][ T3258] device_release+0xd2/0x270 [ 140.005990][ T3258] kobject_put+0x1f7/0x640 [ 140.007404][ T3258] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 140.009277][ T3258] put_device+0x1f/0x30 [ 140.010593][ T3258] snd_card_free_when_closed+0x2b/0x40 [ 140.012288][ T3258] usb_audio_disconnect+0x210/0x680 [ 140.013942][ T3258] usb_unbind_interface+0x1dd/0x9e0 [ 140.015579][ T3258] ? __pfx_usb_unbind_interface+0x10/0x10 [ 140.017383][ T3258] device_remove+0x12a/0x180 [ 140.018861][ T3258] device_release_driver_internal+0x44e/0x620 [ 140.020776][ T3258] bus_remove_device+0x2bc/0x560 [ 140.022369][ T3258] ? __pfx_bus_remove_device+0x10/0x10 [ 140.024039][ T3258] ? __pfx_device_remove_attrs+0x10/0x10 [ 140.025802][ T3258] device_del+0x376/0x9b0 [ 140.027146][ T3258] ? __pfx_device_del+0x10/0x10 [ 140.028706][ T3258] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 140.030492][ T3258] usb_disable_device+0x367/0x810 [ 140.032076][ T3258] ? mark_held_locks+0x40/0x70 [ 140.033567][ T3258] usb_disconnect+0x2e2/0x9a0 [ 140.035042][ T3258] hub_event+0x1bb1/0x4420 [ 140.036468][ T3258] ? __lock_acquire+0x49f/0x1a40 [ 140.038049][ T3258] ? do_raw_spin_unlock+0x145/0x1e0 [ 140.039716][ T3258] ? __pfx_hub_event+0x10/0x10 [ 140.041229][ T3258] ? debug_object_deactivate+0x2e4/0x3b0 [ 140.042983][ T3258] ? rcu_is_watching+0x12/0xc0 [ 140.044536][ T3258] process_one_work+0xa23/0x1940 [ 140.046097][ T3258] ? __pfx_process_one_work+0x10/0x10 [ 140.047766][ T3258] ? __pfx_hub_event+0x10/0x10 [ 140.049314][ T3258] worker_thread+0x5ef/0xe50 [ 140.050780][ T3258] ? __pfx_worker_thread+0x10/0x10 [ 140.052279][ T3258] ? kthread+0x13a/0x450 [ 140.053631][ T3258] ? __pfx_worker_thread+0x10/0x10 [ 140.055242][ T3258] kthread+0x370/0x450 [ 140.056542][ T3258] ? __pfx_kthread+0x10/0x10 [ 140.058012][ T3258] ret_from_fork+0x72b/0xd50 [ 140.059501][ T3258] ? __pfx_ret_from_fork+0x10/0x10 [ 140.061121][ T3258] ? __switch_to+0x800/0x10f0 [ 140.062635][ T3258] ? __pfx_kthread+0x10/0x10 [ 140.064097][ T3258] ret_from_fork_asm+0x1a/0x30 [ 140.065631][ T3258] [ 140.067391][ T3258] Kernel Offset: disabled [ 140.068928][ T3258] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:27:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=0000000000000001 RCX=ffffffff81cc009d RDX=0000000000000001 RSI=0000000000000000 RDI=ffff888031fda540 RBP=1ffff92004099fb9 RSP=ffffc900204cfc90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc900204cff48 R13=ffffc900204cfde8 R14=dffffc0000000000 R15=ffff888031fda540 RIP=ffffffff820a6c6a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f36c1d076c0 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37948c CR3=000000003bdd8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd51168c36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd51168c36 00007ffd51168c3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c0e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c0e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c0e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c0e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c0ff25f8 00007f36c0ff25c8 00007f36c0ff2600 00007f36c0ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a35005 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc90025746f30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666657 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b6ea230 R15=ffffffff85a34fa0 RIP=ffffffff85a3502f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3bedc89490 CR3=00000000451b5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000007f607e0 Opmask01=00000000000000ff Opmask02=000000003ffbfeff Opmask03=0000000000004104 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe17e34190 00007ffe17e34190 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe17e340e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005625637e3f10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005625637e8578 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bed5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffff00 ffffff0000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 73732556100d2dc3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c489e2c6813 73730c489e2c6813 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bedbdd6e8 726e2e6d76006c74 c9a6103821d57e00 35706f6f6c2f2e2e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005625637e9e80 00005625637e2fa0 00005625637e6c80 00005625637e05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58455f485449575f 4e57575f44497b76 6e65242d6e77772f 64692d79622f6b73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34302d66262c3b33 2f3c2d2637644b43 41010ac46eb4b35b 79661d7962794b72 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 77ff7f7f6f7f7b73 7f7fff7f777f7f7f 6d5f7fdf7ff7ff5f 7b7f7f7f7f7f7f7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696400644e2d4953 2f4554584500484f 49534e4554574544 485449575f242d57 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888035b2a540 RCX=1ffff11005ab3c23 RDX=ffff888035b2a540 RSI=0000000000000000 RDI=ffff888035b2a540 RBP=0000000000000000 RSP=ffffc9000f2879d8 R8 =0000000000000005 R9 =000000000000001e R10=0000000000000020 R11=0000000000000000 R12=0000000000000020 R13=0000000000000020 R14=0000000000000021 R15=0000000000000020 RIP=ffffffff81cb0390 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556ddeb500 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562563aa0d68 CR3=000000011bd70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063234423436d63 702f646e732f7665 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc43c63b36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc43c63b36 00007ffc43c63b3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51ff2600 00007f5a51ff25e0 00007f5a51ff25e8 00007f5a51ff2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51ff25f8 00007f5a51ff25c8 00007f5a51ff2600 00007f5a51ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff8e80f280 RBX=0000000000000003 RCX=0000000000000001 RDX=1ffff1100bd6d4b2 RSI=ffffffff8e1835cb RDI=ffff88805eb6a590 RBP=0000000000000008 RSP=ffffc900006f8be8 R8 =ffff88803d6d0014 R9 =fffffbfff224327a R10=ffffffff912193d7 R11=0000000000000000 R12=0000000000000008 R13=0000000000000001 R14=ffff88805eb6a540 R15=00000000ffffc08a RIP=ffffffff81d9d1e0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f05568e36c0 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562563aa3908 CR3=000000003bf84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda06a00d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda06a00d6 00007ffda06a00dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0555a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0555a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0555a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0555a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00646e69626e752f 6364755f796d6d75 642f737265766972 642f6d726f667461 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0555bf25f8 00007f0555bf25c8 00007f0555bf2600 00007f0555bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000